Page 1 of 1

v6.33rc release candidate (final testing)

Posted: Thu Sep 03, 2015 2:26 pm
by strods
What's new in 6.33rc1 (2015-Sep-02 15:45):

*) ipsec - fix sockaddress buffer size on id generation for ipv6 address;
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) rb493G - fixed reboot loop (introduced in 6.32);
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
*) defconf - fix default configuration for routers without wireless package;
*) mesh - fix router lock-up when interface is added/removed;
*) RB911/912 - fixed lock-up (introduced in 6.32).

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 3:09 pm
by onnoossendrijver
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
Sounds nice!

Will 6.32 return in a fixed form or do we have to wait for 6.33 to become stable?

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 3:14 pm
by normis
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
Sounds nice!

Will 6.32 return in a fixed form or do we have to wait for 6.33 to become stable?
we will have a fixed one return as well, yes

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 3:17 pm
by bajodel
I can confirm that my lab RB912UAG-2HPnD (broken by 6.32rc6 & 6.32 final) now has booted correctly on 6.33rc2 and I can winbox in it

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 4:47 pm
by n21roadie
What's new in 6.33rc1 (2015-Sep-02 15:45):

*) ipsec - fix sockaddress buffer size on id generation for ipv6 address;
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) rb493G - fixed reboot loop (introduced in 6.32);
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
*) defconf - fix default configuration for routers without wireless package;
*) mesh - fix router lock-up when interface is added/removed;
*) RB911/912 - fixed lock-up (introduced in 6.32).
Can I ask as a general rule what (basic) tests are done before releasing a RC ?
I mean a RC having reboot loop and lock-up ?
or are new issues like above just added to release checklist before releasing the RC.

v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 5:04 pm
by jarda
I am repetitively asking for publishing quality assurance policies that mikrotik works according to, but I haven't got any answer to it. I wonder if you will get info how they test the rc...

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 5:23 pm
by n21roadie
I am repetitively asking for publishing quality assurance policies that mikrotik works according to, but I haven't got any answer to it. I wonder if you will get info how they test the rc...
If we got a general checklist to what is tested before release, then we can decide how much we want to deploy into
our test network and a short time later maybe a section of the live network (?) and how much more testing maybe required before full deployment, in short we are trying to conduct a risk assessment to updates.

Posted: Thu Sep 03, 2015 5:59 pm
by jarda
Actually you should not deploy any new version until it is publicly proved and you have made all your necessary tests.

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 6:13 pm
by ste
What's new in 6.33rc1 (2015-Sep-02 15:45):
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
Very good. Does this help with mixed environment .ac AP and .n CPEs ?
Can you share some background information what is happening (packet reordering ? ack aggregation effect ?).

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 6:29 pm
by Lupin
What's new in 6.33rc1 (2015-Sep-02 15:45):
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
Very good. Does this help with mixed environment .ac AP and .n CPEs ?
Can you share some background information what is happening (packet reordering ? ack aggregation effect ?).
Is this an improves also using NV2 protocol?
Any details about percentage of improvment?

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 7:36 pm
by patrick7
Usually in software development, there are 3 (or even more) different types of versions:

Beta -> Unstable. New features are added in this phase
RC -> Release Candidate. In this phase, no new features will be added. If testing is OK, it will be released
Stable -> Released version

Most of the past releases, I would describe as "Beta".

I have no idea how MikroTik can publish new RCs every day.

https://en.wikipedia.org/wiki/Software_ ... life_cycle

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 9:22 pm
by vortex
Maybe this would make people happy:

Call rc Beta
Call Current RC
Call Bugfix Stable

Posted: Thu Sep 03, 2015 9:39 pm
by jarda
It is not about how we understand the naming. It is about our approach to the mikrotik software development life cycle. I would like to see newly released version that none will download and try just because none will want to risk the consequences.

Re: v6.33rc1 release candidate

Posted: Thu Sep 03, 2015 9:46 pm
by vortex
Maybe this would make people happy:

Call rc Beta
Call Current RC
Call Bugfix Stable
And call RouterOS Beta RouterOS Alpha

Re: v6.33rc1 release candidate

Posted: Fri Sep 04, 2015 1:46 am
by marrold
Maybe this would make people happy:

Call rc Beta
Call Current RC
Call Bugfix Stable
Surely if you want to use the word 'beta' then 'RC' should be 'alpha'?

Personally I think people should stop b*tching about the new release schedule, be greatful on the fact it's better than the old system, and give it a few versions to bed in before they complain.

Re: v6.33rc1 release candidate

Posted: Fri Sep 04, 2015 9:15 am
by strods
We have managed to reproduce issue with mangle rules disappearing. It will be fixed in upcoming 6.33rc versions.

As for rc version testing - Release Candidate is more likely to a nightly build. We will not do intensive testing before publishing these, only quick check if upgrade can be done and if most features work fine.

You are not forced to upgrade your router to rc version. Versions are released for those who has some problems on router and fix or possible fix is included in these packages. Basically rc is released for those who actually need it and for those who wants to do some testing and give us feedback.

Re: v6.33rc1 release candidate

Posted: Fri Sep 04, 2015 12:32 pm
by strods
6.33rc3 is released.

New fixes:
*) RB532/RB564 - fixed no link after ethernet disable/enable;
*) firewall - do not lose firewall mangle rules on start-up (introduced in 6.32);
*) tile - fixed occasional deadlock on module unload;

Re: v6.33rc1 release candidate

Posted: Fri Sep 04, 2015 12:44 pm
by juanvi
6.33rc3 is released.

New fixes:
*) tile - fixed occasional deadlock on module unload;
Is this related to [Ticket#2015073166000411] Lost capsman confing when upgrading ?

Re: v6.33rc1 release candidate

Posted: Fri Sep 04, 2015 1:58 pm
by strods
juanvi - No, it is not related. This fix is for SFP module unload.

Re: v6.33rc1 release candidate

Posted: Sun Sep 06, 2015 12:37 am
by 105547111
Strods,

What will happen to 6.32 The fixed version that's planned, now will the mangle rules being dropped in 6.32 will this be fixed in 6.32 fixed?

Dropping mangle rules on a reboot is pretty serious issue to leave unresolved to 6.33 unless its planned to fasttrack 6.33

Re: v6.33rc1 release candidate

Posted: Sun Sep 06, 2015 7:11 pm
by IntrusDave
I have a CCR1009 still getting kernel crashes with GCM encryption. (6.33rc3)

Re: v6.33rc1 release candidate

Posted: Mon Sep 07, 2015 3:54 pm
by strods
105547111 - Sorry, but I did not understand your question. Mangle rules are fixed in 6.33rc version. It means that fix will be included in 6.33 full version.

Re: v6.33rc1 release candidate

Posted: Mon Sep 07, 2015 5:10 pm
by 105547111
105547111 - Sorry, but I did not understand your question. Mangle rules are fixed in 6.33rc version. It means that fix will be included in 6.33 full version.
Hi Strods,

I meant what about version 6.32 is the dropping of mangle rules going to be fixed in the re-release of 6.32 or is a faster track to 6.33 going to happen?

I've got devices on 6.32 I don't want to touch until either a 6.32 re-release with fixed mangle rules, or a 6.33 final. I couldn't imagine a 6.32 would be re-released with the mangle dropping issue still left, but I'm asking to be sure...

Re: v6.33rc1 release candidate

Posted: Tue Sep 08, 2015 5:30 am
by ochyst
6.33rc3 seems to be stable version...

Re: v6.33rc1 release candidate

Posted: Tue Sep 08, 2015 7:58 am
by strods
Mangle rules fix is included in v6.32.1, released today

Re: v6.33rc1 release candidate

Posted: Wed Sep 09, 2015 1:00 pm
by igor88
i am on 6.33rc1 now

looks like all is ok

Re: v6.33rc1 release candidate

Posted: Wed Sep 09, 2015 1:55 pm
by strods
6.33rc4 is released.

New fixes:

*) ppp - fixed ppp interface stuck in not running state;
*) ipsec - fixed kernel failure when packets were not ordered on first call;
*) upnp - randomize action urls to fix "filet-o-firewall" vulnerability;

Re: v6.33rc1 release candidate

Posted: Wed Sep 09, 2015 2:02 pm
by JB172
6.3rc4 is released.
6.33rc4

Re: v6.33rc1 release candidate

Posted: Wed Sep 09, 2015 2:11 pm
by strods
6.3rc4 is released.
6.33rc4
Thank you. Fixed that.

Re: v6.33rc1 release candidate

Posted: Thu Sep 10, 2015 1:52 pm
by okoun
I would very much like to see the re-added feature to download the upgrade package manager, and so by default withdrew only stable version of the RC version but as it is now.
In an earlier Verich it was quite good and I do not understand why this is so changed, for us it's a problem, because we have a lot of scripts that we have to change too.

For example, this is totally dysfunctional in the latest version:
/system package update check-for-updates; /system package update upgrade;

Re: v6.33rc1 release candidate

Posted: Thu Sep 10, 2015 2:07 pm
by strods
okoun - All you have to do is change "/system package update upgrade" to "/system package update install".

If you did set channel to current, then upgrade process for you will go same as always.

Re: v6.33rc1 release candidate

Posted: Thu Sep 10, 2015 3:25 pm
by hapi
[admin@mikrotik] > /system package update install 
          channel: current
  current-version: 6.32.1
   latest-version: 6.32.1
           status: Downloaded 87% (13.8MiB)
and install again, again and again... same version

Re: v6.33rc1 release candidate

Posted: Thu Sep 10, 2015 3:29 pm
by hapi
[admin@admin] > /system package update install 
          channel: release-candidate
  current-version: 6.33rc4
   latest-version: 6.33rc4
           status: Downloaded 71% (11.2MiB)
and last rc version... again downloading and installing same version.

Re: v6.33rc1 release candidate

Posted: Thu Sep 10, 2015 3:35 pm
by hapi
/system package update check-for-updates;
/system package update install;
This script in scheduler will update again and again the same version.

During the same version will remain on disk packages and the next update with a different version take full disc.

Why do not you give the option manually selecting your own server. I do not want your last version. On own DNS server changes the DNS record (upgrade.mikrotik.com) on your own web server.

Add the option to enter your own url and show all the system directories on the web server. Each can then choose which version locally will be used depending on what you recorded on your own web server.

Re: v6.33rc1 release candidate

Posted: Thu Sep 10, 2015 7:40 pm
by OmniSurf
Issue: IPv4 - router locks up and must be power cycled when adding or removing an IPv4 address.

Notes: We are not changing the IP we are using to connect to the router. Occurs over WinBox and SSH. Works fine on 5.26.

Affected Versions: v6.33rc4, v6.30.4, v6.32.1, v6.32
Hardware: hEX Lite


Next step on our side: Test above on RB750, x86 hardware. Test on versions between 5.26 and 6.29.

Re: v6.33rc1 release candidate

Posted: Fri Sep 11, 2015 2:11 pm
by strods
6.33rc5 will be released today!

New fixes:

*) CAPsMAN - fix 100% CPU usage when trying to upgrade RouterOS on CAP;
*) ethernet - added support for new ASIX USB Ethernet dongles.

Re: v6.33rc1 release candidate

Posted: Fri Sep 11, 2015 2:32 pm
by okoun
fixed:
*) update again and again the same version ??

wake up :shock:

Re: v6.33rc1 release candidate

Posted: Fri Sep 11, 2015 4:09 pm
by hapi
6.33rc5 will be released today!

New fixes:

*) ethernet - added support for new ASIX USB Ethernet dongles.
USB Ethernet add, but support for new Intel chips do not add? OMG!!

Re: v6.33rc release candidate

Posted: Fri Sep 11, 2015 4:12 pm
by normis
It is easy to add USB devices and modems. Not so easy to add new Kernel.

Re: v6.33rc1 release candidate

Posted: Fri Sep 11, 2015 7:16 pm
by w0lt
6.33rc5 will be released today!

New fixes:

*) ethernet - added support for new ASIX USB Ethernet dongles.
USB Ethernet add, but support for new Intel chips do not add? OMG!!
Same issue as before, "ether1 excessive broadcast/multicast".
See attached image below.
Using a CRS112-8G-4S Firmware v3.23
Has this issue been looked at yet? :?
Back to v6.30.4 yet again.. :(

Re: v6.33rc1 release candidate

Posted: Sat Sep 12, 2015 12:53 am
by G2Dolphin
*) ethernet - added support for new ASIX USB Ethernet dongles.
Which ones? AX88179 USB3.0 Gigabit adapter isn't working.

Re: v6.33rc release candidate

Posted: Mon Sep 14, 2015 11:41 am
by strods
Upgrade loop was not caused by RouterOS. Now it is fixed.

Re: v6.33rc release candidate

Posted: Mon Sep 14, 2015 11:42 am
by strods
6.33rc7 is released!

Changes since 6.33rc5:
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) pptp - improved encryption;
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - added 'history clear' to allow flushing undo history, which may
take up significant amount of memory for huge databases whith hundreds of users;

Re: v6.33rc release candidate

Posted: Mon Sep 14, 2015 12:28 pm
by ufm
6.33rc7 is released!

Changes since 6.33rc5:
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
OMFG! Hardly wait! Thnx!

Re: v6.33rc release candidate

Posted: Mon Sep 14, 2015 12:35 pm
by marekm
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
One of the PPPoE server features (already supported by accel-ppp) I asked for some time ago - thanks!
How about the other two:
- Delegated-IPv6-Prefix RADIUS attribute (supported by accel-ppp)
- RFC4638 negotiation (supported by rp-pppoe)

Re: v6.33rc release candidate

Posted: Mon Sep 14, 2015 12:47 pm
by 5nik
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
Any details? Please update documentation or post some explanation.

Re: v6.33rc release candidate

Posted: Mon Sep 14, 2015 12:51 pm
by hapi
Upgrade loop was not caused by RouterOS. Now it is fixed.
excellent

Re: v6.33rc release candidate

Posted: Mon Sep 14, 2015 3:00 pm
by nz_monkey
6.33rc7 is released!

Changes since 6.33rc5:
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) pptp - improved encryption;
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - added 'history clear' to allow flushing undo history, which may
take up significant amount of memory for huge databases whith hundreds of users;
Great news on the CoA !

Re: v6.33rc release candidate

Posted: Tue Sep 15, 2015 12:36 am
by dadoremix
after 6.33 rc5 upgrade to 6.33 rc7 get these errors

RB 493AH
RB435G

Re: v6.33rc release candidate

Posted: Tue Sep 15, 2015 10:04 am
by okoun
Hello, can you please add the SNMP OID for reading CCQ with wireless? I know it's going to do using the API, but it seems quite complicated to it that it is quite a substantial figure. thank you

Re: v6.33rc release candidate

Posted: Tue Sep 15, 2015 3:30 pm
by bajodel
*) ethernet - added support for new ASIX USB Ethernet dongles;

Mine is not working..

Re: v6.33rc release candidate

Posted: Tue Sep 15, 2015 3:56 pm
by macgaiver
Supout.rif file and to support@mikrotik.com, there is no point posting it here

Re: v6.33rc release candidate

Posted: Tue Sep 15, 2015 5:10 pm
by jarda
Hello, can you please add the SNMP OID for reading CCQ with wireless? I know it's going to do using the API, but it seems quite complicated to it that it is quite a substantial figure. thank you
I have no problems to read the ccq via snmp. You just need to select the interface number in the oid correctly as each device has different interfaces...

Re: v6.33rc release candidate

Posted: Tue Sep 15, 2015 5:39 pm
by strods
6.33rc10 is released!

Changes since 6.33rc7:
*) mipsle - fixed missing second level menu in CLI;
*) sstp - avoid routing loops on client when adding default route;
*) sstp - fixed problem where sometimes sstp ip addresses were invalid;
*) switch - fixed bogus log messages about excessive broadcasts/multicasts on master-port;
*) tftp - fix request file name reading from packet
*) cerm - also accept downloaded CRLs in PEM format;
*) cerm - show crl nextupdate time.

Re: v6.33rc release candidate

Posted: Tue Sep 15, 2015 5:55 pm
by okoun
Hello, can you please add the SNMP OID for reading CCQ with wireless? I know it's going to do using the API, but it seems quite complicated to it that it is quite a substantial figure. thank you
I have no problems to read the ccq via snmp. You just need to select the interface number in the oid correctly as each device has different interfaces...
I found some OID: .1.3.6.1.4.1.14988.1.1.1.3.1.10.2 however no value at all it does not, on the AP or to the side of the station.
I use mostly OID for Rx and Tx CCQ

Posted: Tue Sep 15, 2015 6:12 pm
by jarda
Each wlan interface provides its own tx ccq. Get the other side tx ccq from the second device directly.

Re: v6.33rc release candidate

Posted: Tue Sep 15, 2015 6:30 pm
by w0lt
6.33rc10 is released!

Changes since 6.33rc7:
*) switch - fixed bogus log messages about excessive broadcasts/multicasts on master-port;
.

ROS v6.33rc10 has in fact fixed the excessive broadcast/multicast messages with the exception of the "tile" versions which I am now seeing the message where I didn't before.
All in all, good show so far. 8)
Also, 6.33rc10 is not showing up as available in the "Package List" updates so I had to manually download it
.

CCR1009-8G-1S-1S+ (tile)

Re:

Posted: Wed Sep 16, 2015 10:10 am
by okoun
Each wlan interface provides its own tx ccq. Get the other side tx ccq from the second device directly.
I repeat once again that this OID .1.3.6.1.4.1.14988.1.1.1.3.1.10.2 not give any value from either side of the joint! Nor station nor on the bridge. Even in winbox box is completely empty on both sides.
Moreover, the approach that I Rx blame on one side and on the other Tx is unfortunate ..

Re: v6.33rc release candidate

Posted: Wed Sep 16, 2015 10:25 am
by becs
w0lt,

I have also tested v6.33rc10 on CCR1009-8G-1S-1S+ and have not found the unwanted log messages appearing anymore.
If you see them on a port which is not a master-port and there is a lot of traffic, then they might be real.
Send a supout file from your CCR1009-8G-1S-1S+ to MikroTik support if you want us to investigate it.

Re: v6.33rc release candidate

Posted: Wed Sep 16, 2015 4:30 pm
by w0lt
w0lt,

I have also tested v6.33rc10 on CCR1009-8G-1S-1S+ and have not found the unwanted log messages appearing anymore.
If you see them on a port which is not a master-port and there is a lot of traffic, then they might be real.
Send a supout file from your CCR1009-8G-1S-1S+ to MikroTik support if you want us to investigate it.
You are in fact correct ! :D
It appears that my upgrade from ROS 6.33rc7 to 6.33rc10 did not go through and I didn't notice it right away.
After reloading the upgrade and ensuring it had completed, I did not see anymore multicast/broadcast messages! :)

So far, so good.. Very Happy !

-tp

Re: v6.33rc release candidate

Posted: Thu Sep 17, 2015 11:07 am
by gradash
dadoremix, i have this errors spam in log on 6.27 :)

Re: v6.33rc release candidate

Posted: Thu Sep 17, 2015 3:21 pm
by strods
6.33rc11 version will be available today.

Changes since 6.33rc10:
*) upnp: automatically adjust mappings to new external ip change;;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) ppp - added ppp interface to upnp internals/externals if requested
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) certificate - also accept downloaded CRLs in PEM format.

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 1:08 am
by w0lt
6.33rc11 version will be available today.

Changes since 6.33rc10:
*) upnp: automatically adjust mappings to new external ip change;;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) ppp - added ppp interface to upnp internals/externals if requested
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) certificate - also accept downloaded CRLs in PEM format.

Installed ROS 6.33rc11 in quite a few different models today. For me, rock solid!! Keep it up! :D

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 2:15 pm
by ufm
If your developers work with ppp and radius attributes, may be chance Ticket#2015041166000124 ?

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 4:15 pm
by carrierlost
Tested and compared 6.33rc11 with 6.30.4 on SXT AC from wireless PTP performance point of view.

NV2 seems to have been improved. Clear difference between this and previous release is that single stream TCP speed link has been improved.
6.33rc11.png
As seen from graph TCP throughput seems now peaks much higher than before, but is not consistant (ramps up and down). This is not due to noise, (as can be seen from UDP graph to the left of it), but from something else. Nevetheless I'd say that the the throughput of NV2 is now better than 802.11 and nstream in TCP scenario and similar to 80211 in UDP. 80211 sometime peaks higher, but is not always consistent.

Test were done via iperf on separate PCs. CPU on SXT was not maxed out unlike before. Noticed that much of the CPU usage on station side of bridged link is now on something called "unclassified".

What bothers me little with NV2 now is that the latency even in no usage scenario is in 2-4ms range vs. 80211/nstream sub 1ms.

What I cannot make any sense of is how CCQ and Rx/Tx Rate behaves. CCQ in shown about 10% lower than in other modes. Also the CCQ is now displayed much more calmly.

Rx/Tx Rate in essence now stays stable once it ramps up (at around 650 for me) vs. constant fast fluctuations with 802.11. With 80211 it goes to 866, but doesn't stay there and pretty instantly drops to 6Mbps when link goes idle.

AP side for some reason does not display Overall Tx CCQ anymore.

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 5:34 pm
by uldis
carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 5:43 pm
by ibm
carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.
Hi Uldis, why do you choose to improve 802.11 rather than NV2? NV2 is more important for ISP due to PTMP implementations, please put this in the priority list.

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 6:23 pm
by vortex
Hardly any office/home users need NV2 themselves.

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 9:54 pm
by honzam
carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.
Hi Uldis, why do you choose to improve 802.11 rather than NV2? NV2 is more important for ISP due to PTMP implementations, please put this in the priority list.
yes.
+1

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 10:45 pm
by gradash
wason 6.27....now on 6.33rc11....same... ok i got working L2TP, but this error spam in log, wtf ? no vpn connections, just trivial internet usage...
Capture.PNG

Re: v6.33rc release candidate

Posted: Fri Sep 18, 2015 11:57 pm
by gradash
hehe...something new ! ^)
Capture.PNG

Re: v6.33rc release candidate

Posted: Sat Sep 19, 2015 6:03 pm
by rpingar
Uldis,
I think that the improvments on 802.11ac on single tcp stream definitely prduced a better results in NV2 too.

We did some extensive test and in all cases we had bettere NV2 performance also in non AC radio.
The only for the low signal (less than -75) clients we had the same performance than pre rc2, in all other cases we had great increments also in PtMP........

regards
Ros

Re: v6.33rc release candidate

Posted: Sat Sep 19, 2015 6:16 pm
by ibm
Uldis,
I think that the improvments on 802.11ac on single tcp stream definitely prduced a better results in NV2 too.

We did some extensive test and in all cases we had bettere NV2 performance also in non AC radio.
The only for the low signal (less than -75) clients we had the same performance than pre rc2, in all other cases we had great increments also in PtMP........

regards
Ros
Good news

Re: v6.33rc release candidate

Posted: Mon Sep 21, 2015 1:13 pm
by strods
6.33rc12 will be released today.

Changes since previous version:
*) winbox - refetch hotspot walled garden hit counter;
*) winbox - added client-connections & server-connections to web proxy status;
*) cerm - rebuild crl for local ca if crl file does not exist;
*) winbox - make directed broadcasts work for neighbor discovery.

Re: v6.33rc release candidate

Posted: Tue Sep 22, 2015 5:20 pm
by solaoxo
Why ROS recent version of the meter number is not accurate.
QQ截图20150922204808.png
QQ截图20150922204756.png
QQ截图20150922204740.png
QQ截图20150922210429.png

Re: v6.33rc release candidate

Posted: Wed Sep 23, 2015 10:22 am
by akschu
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
Any details? Please update documentation or post some explanation.
It allows some port information to be passed from pppoe through to radius. See my request here:

http://forum.mikrotik.com/viewtopic.php?t=95696

I can confirm this works, and I'm really happy with it:

Calling-Station-Id = "00:23:6A:A1:DB:6B"
Called-Station-Id = "pppoe_server"
NAS-Port-Id = "B6256-1-wsll atm 0/DSL2:0/35"
ADSL-Agent-Circuit-Id = "B6256-1-wsll atm 0/DSL2:0/35"
ADSL-Agent-Remote-Id = "B6256-1-wsll"

Now we can see what the actual DSLAM port is in our radius log database.

The biggest issue now is pppoe/cpu performance. It's not quite multi-threaded:
cpu.png
Thanks for doing this Mikrotik!

Re: v6.33rc release candidate

Posted: Wed Sep 23, 2015 12:07 pm
by strods
6.33rc14 will be released today.

Changes since 6.33rc12:
*) pptp,l2tp,sstp,pppoe: fixed bug #7586: do not send data packets before we have negotiated connection with other
side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) defconf - fix for boards that had bridge with only wlan ports;
*) pptp,l2tp,sstp - make it work when add-default-route & dial-on-demand both are enabled;
*) nv2 - fixed kernel failure with frame size accounting;
*)ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
*) cerm - use certificate file name for imported cert name;
*) ovpn client - fixed crash when ovpn didn't receive it's ip address;
*) lcd - fix slideshow for CCR1072, and possible sign issues for temperatures;
*) winbox - make console notice correct screen size;
*) fetch - fixed error message when error code 200 was received;
*) winbox - fixed context menu actions to apply to all selected items;
*) ssh - allow to specify pass as argument for private key import.

Re: v6.33rc release candidate

Posted: Wed Sep 23, 2015 3:10 pm
by scotv
I am unable to update it to v6.33rc version.

did someone else face the issue.

website says the current version is 6.32.2 that means 6.33 is still under testing?

Re: v6.33rc release candidate

Posted: Wed Sep 23, 2015 4:06 pm
by ufm
The biggest issue now is pppoe/cpu performance. It's not quite multi-threaded:

Thanks for doing this Mikrotik!
Still waiting for your discovery of the problem Ticket#2014122166000217 - when in system many interfaces, and you delete one of them - mikroik hangs on some time and loses packets. "Interface" - any type of interface, ppp - also interface. "Many" - depends on the CPU.

Re: v6.33rc release candidate

Posted: Wed Sep 23, 2015 5:47 pm
by rpingar
The biggest issue now is pppoe/cpu performance. It's not quite multi-threaded:

Thanks for doing this Mikrotik!
Still waiting for your discovery of the problem Ticket#2014122166000217 - when in system many interfaces, and you delete one of them - mikroik hangs on some time and loses packets. "Interface" - any type of interface, ppp - also interface. "Many" - depends on the CPU.
This is a well known limitation, discussed in many other posts, that has the current release, that MikroTik has never been able to mitigate or reproduce.

So we have only to hope that rel 7 with major multicore improvement is able to workaround.

regards
Ros

Re: v6.33rc release candidate

Posted: Wed Sep 23, 2015 6:51 pm
by ufm
Still waiting for your discovery of the problem Ticket#2014122166000217 - when in system many interfaces, and you delete one of them - mikroik hangs on some time and loses packets. "Interface" - any type of interface, ppp - also interface. "Many" - depends on the CPU.
This is a well known limitation, discussed in many other posts, that has the current release, that MikroTik has never been able to mitigate or reproduce.

So we have only to hope that rel 7 with major multicore improvement is able to workaround.

regards
Ros
In this Ticket MikroTik confirm this problem.
And says - will be fixed in 7.
About 7 says - first beta will be in this year. Remains three months.
We are waiting. :-/

Re: v6.33rc release candidate

Posted: Thu Sep 24, 2015 10:11 am
by okoun
Moderate packet loss which is already reflected in the low load on the CRS will also resolved to version 7? As until now no one corrects me and I really resent this.
Moderate packet loss I mean, it falls one packet of 100 pings. However, this is a professional network has become.

Re: v6.33rc release candidate

Posted: Thu Sep 24, 2015 10:56 am
by bclewl1ns
carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.
Hi Uldis, why do you choose to improve 802.11 rather than NV2? NV2 is more important for ISP due to PTMP implementations, please put this in the priority list.
yes.
+1

IF this is the case then mikrotik is going to lose all of my business. it seams to me that they are more interested in home users then the WISPS that actually use there products. We have post after post of complaints about NV2's TCP throughput. I even wrote into support on this and Received this Ticket#2015090466000165

"Hello,

Thanks for detailed explanation, we are aware of TCP issue and we have addressed
them in latest 6.33rc version we have included : improve single connection TCP
performance when ar9888 used in cm2 package you can test them and see what
improvements you can get in your specific case.

Regards,
Kristaps S."

IF this is only for 802.11 Mirkrotik has truly lost their way. BTW my case was titled speed discrepancy with NV2

New ticket to mikrotik support.

Kristaps.

I am highly disappointed. I wrote into support on this ticket in regards to the descrpntenies in tcp performance with NV2. You replied that you addressed this in the lasted 6.33 release candidate. Now going through the forums i see this.

uldis wrote:
carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.

Why would you respond to my ticket that you have address the problem when you did it on 802.11. Do you all realize most of your customer base are WISPS like myself. and your making changes to the 802.11 protocol and not doing ANYTHING on your own proprietary NV2. With BTW TCP through on it SUCKS.

I have been posting on this topic in the forums for over a year. Hoping you all would take notice. Countless users have submitted tickets. and you fix 802.11 Can i ask what your target market it now. As i need to find a company that still works to take care of their Carrier companies.

Thank you

Re: v6.33rc release candidate

Posted: Thu Sep 24, 2015 6:20 pm
by akschu
The biggest issue now is pppoe/cpu performance. It's not quite multi-threaded:

Thanks for doing this Mikrotik!
Still waiting for your discovery of the problem Ticket#2014122166000217 - when in system many interfaces, and you delete one of them - mikroik hangs on some time and loses packets. "Interface" - any type of interface, ppp - also interface. "Many" - depends on the CPU.

We haven't noticed that, but we don't have more than 1000 pppoe sessions per host, and our host is intel and fast.

What hardware are you running on? It seems the issue is that the router looses traffic when the cpu goes to 100% to re-generate the interface list, which would lead me to think that the current workaround would be making sure you have super fast hardware.

schu

Re: v6.33rc release candidate

Posted: Thu Sep 24, 2015 10:57 pm
by ochyst
When will be implemented the AC spectral-scan/history?

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 8:59 am
by napismizpravu
(6.33rc14) Proxy problem > not used USB Flash
created only in the directory disk1/web-proxy1 > files „version” „.type”
[admin@RB433UAH] > ip proxy pr
                 enabled: yes
             src-address: ::
                    port: 8080
               anonymous: no
            parent-proxy: ::
       parent-proxy-port: 0
     cache-administrator: xxx@yyy.zz
          max-cache-size: 1840960KiB
   max-cache-object-size: 92048KiB
           cache-on-disk: yes
  max-client-connections: 1600
  max-server-connections: 5000
          max-fresh-time: 4w2d
   serialize-connections: no
       always-from-cache: no
          cache-hit-dscp: 4
              cache-path: disk1/web-proxy1

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 9:35 am
by strods
6.33rc15 will be released today.

Changes since 6.33rc14:

*) sstp - fixed kernel crash when other party started to fragment ppp packets in the middle;
*) ippool6 - optimize same prefix acquisition;
*) winbox - Shift+Ins & Shift+Del did not work in multi entry fields;
*) winbox - allow to specify ipv6 address in traffic flow target;
*) winbox - allow to specify eap-radius-accounting in CAPsMAN;
*) winbox - allow to specify dns name in all the tunnels;
*) winbox - allow to enter dns name in email server;
*) pppoe - added support for MTU > 1492 on PPPoE;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) ups - fix console oid print;
*) ppp-client - added default channels for Alcatel OneTouch L100V;
*) tunnel - fix loopback keepalives on gre and ipip.

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 10:14 am
by ibm
6.33rc15 will be released today.

*) pppoe - added support for MTU > 1492 on PPPoE;
Hi Strods, can you explain this?
I always used PPPoE at 1500Byte.

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 10:27 am
by strods
PPPoE now will support RFC4638
https://tools.ietf.org/html/rfc4638

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 10:30 am
by MrYan
6.33rc15 will be released today.

*) pppoe - added support for MTU > 1492 on PPPoE;
Hi Strods, can you explain this?
I always used PPPoE at 1500Byte.
Hopefully they mean RFC4638 support.

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 11:02 am
by ibm
PPPoE now will support RFC4638
https://tools.ietf.org/html/rfc4638
Very good. Thanks.

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 12:57 pm
by strods
napismizpravu - Is your USB recognized as disk1? Maybe name has been changed and now it is called as disk2?

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 2:33 pm
by napismizpravu
napismizpravu - Is your USB recognized as disk1? Maybe name has been changed and now it is called as disk2?
disk1 the name is correct
To disk1 writing file log.txt (scheduler script), ftp access possible

(Google translator)

--------------------------------------------------------------------------------------------

edit:
proxy deaktivate - activate no works writing USB Flash cache
reboot -//-

deactivate proxy delete disk1 „web-proxy1" winbox .... enable proxy > works (numeric directory created)

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 3:35 pm
by kometchtech
It is not know what has occurred from which version a little, but in ROS6.33rc15, Enabling TCP Syncookies, problems that can not be successfully redirect a page that requires a part of the authentication has occurred.

How many people have similar problems have occurred?

Re: v6.33rc release candidate

Posted: Fri Sep 25, 2015 10:19 pm
by MAYAKNET
EN:

There is a problem in the CCR-1072
Several times in the last 2-3 days he noticed that two times more accurate rebooted CCR-1072

Attached 2 Scrin, in which case 2 reboot. Look here please.


======================================

RU:

Есть такая проблема, в CCR-1072
Уже несколько раз за последние 2-3 дня сам замечал что 2 раза ТОЧНО перезагружался CCR-1072

Во вложении 2 скрина, в которых 2 случая перезагрузки. Посмотрите пожалуйста.

Re: v6.33rc release candidate

Posted: Sat Sep 26, 2015 5:15 am
by normis
Есть такая проблема, в CCR-1072
Уже несколько раз за последние 2-3 дня сам замечал что 2 раза ТОЧНО перезагружался CCR-1072
1. somebody is trying to hack you by ssh. disable ssh access for unknown users with firewall
2. to see why you have this reboot, make supout.rif file and email to support. from screen we can't say, please send the file. thank you

Re: v6.33rc release candidate

Posted: Sat Sep 26, 2015 10:01 am
by MAYAKNET
Написал в support@mikrotik.com тема:
Re: [Ticket#2015020666000138] Проблема обновления

это предыдущие мои обращения были по этому тикету. Спасибо за оперативность!

Re: v6.33rc release candidate

Posted: Sat Sep 26, 2015 11:37 pm
by jondavy
in the Caps Manager on Access-List
the interface option does not work, the station continues connecting into any Radio

Re: v6.33rc release candidate

Posted: Sun Sep 27, 2015 1:22 am
by kometchtech
It is not know what has occurred from which version a little, but in ROS6.33rc15, Enabling TCP Syncookies, problems that can not be successfully redirect a page that requires a part of the authentication has occurred.

How many people have similar problems have occurred?
This, there has been a problem elsewhere.
Was self resolved.

Re: v6.33rc release candidate

Posted: Sun Sep 27, 2015 1:24 am
by dadoremix
i see that version rc15 cant downgrade
not with older pack, not with downgrade command in package list
only net install

Re: v6.33rc release candidate

Posted: Sun Sep 27, 2015 9:05 pm
by MAYAKNET
More add to his post, which lost access SNMP and rush hour traffic disappears. And more often again during peak hours (once or twice a minute) traffic falls by half. (CCR-1072-1G-8S+)


================RU



Ещё добавлю к своему посту, что пропадает доступ по SNMP и в час пик пропадает траффик. А чаще, опять таки в часы ПИК (раз-два в минуту) трафик падает на половину. (CCR-1072-1G-8S+)

Re: v6.33rc release candidate

Posted: Sun Sep 27, 2015 11:43 pm
by okoun
Hello, after upgrading to this latest RC version still errs switch CRS. Packet loss is small but still there is that is not normal. Packet loss occurs only when they begin to flow at around 50-60Mb on the uplink to the switch. If the switch runs under 50Mb can see that it is OK, it is, for example, at night.

Please can finally focus on this and fix it. Thus it is perhaps since version 6.10 !!!
I do not know what I have to do. They make me absolutely all these switchs that I have on the network. I have 3 of these devices.
I turned on all the switches in hardware mode switch mod thus as a master uplink port.

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 10:21 am
by strods
6.33rc16 will be released today.

Changes since 6.33rc15:
*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
*) quickset - create proper firewall rules when PPPoE is used for address acquisition;
*) ppp - added on-up & on-down scripts to ppp profile

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 10:38 am
by strods
MAYAKNET, okoun - Please write to support@mikrotik.com about your problem. Remember to generate supout file on your router after problem has appeared and attach this file to your message.

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 12:50 pm
by paoloaga
6.33rc16 will be released today.
*) ppp - added on-up & on-down scripts to ppp profile
Yeah!! Very useful!

It would be nice, handy and useful to have something similar for the wireless interface (at least in station mode).

Why not a trigger that tracks the "Running" status of any interfaces?

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 1:22 pm
by cREoz
PPPoE Client not working after update from 6.33rc14 to 6.33rc16 :(

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 1:43 pm
by strods
cREoz - Please send supout file from latest rc version (in which tunnel is not working) to support@mikrotik.com

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 4:04 pm
by andriys
*) ppp - added on-up & on-down scripts to ppp profile
Would be nice to have something similar for DHCP client.

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 6:14 pm
by MAYAKNET
MAYAKNET, okoun - Please write to support@mikrotik.com about your problem. Remember to generate supout file on your router after problem has appeared and attach this file to your message.

Ok. Already sent

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 6:35 pm
by LinFor
*) ppp - added on-up & on-down scripts to ppp profile
Would be nice to have something similar for DHCP client.
+100500

Re: v6.33rc release candidate

Posted: Mon Sep 28, 2015 10:41 pm
by JB172
"Reset All Counters" button is not working in Winbox in 6.33rc16

Re: v6.33rc release candidate

Posted: Tue Sep 29, 2015 12:26 pm
by macgaiver
"Reset All Counters" button is not working in Winbox in 6.33rc16
Works here? Where did you tried that exactly?.

Re: v6.33rc release candidate

Posted: Tue Sep 29, 2015 12:34 pm
by JB172
"Reset All Counters" button is not working in Winbox in 6.33rc16
Works here? Where did you tried that exactly?.
I have RouterOS X86
In IP-Firewall-Filter Rules and in IP-Firewall-NAT the button "Reset All Counters" is not working.

The button "Reset Counters" is working.

Re: v6.33rc release candidate

Posted: Tue Sep 29, 2015 1:41 pm
by macgaiver
maybe you have some wine problem - winbox v3.0rc16 on Win10Pro on x86 running RouterOS v6.33rc16 - reset all counters work just fine.

Re: v6.33rc release candidate

Posted: Tue Sep 29, 2015 2:05 pm
by JB172
maybe you have some wine problem - winbox v3.0rc16 on Win10Pro on x86 running RouterOS v6.33rc16 - reset all counters work just fine.
Winbox 2.2.18 in Win7Pro and on Win8.1Pro on X86 running RouterOS v6.33.rc16 - reset all counters not working

Re: v6.33rc release candidate

Posted: Tue Sep 29, 2015 2:17 pm
by macgaiver
So old winbox problem -solution use new winbox :)

Re: v6.33rc release candidate

Posted: Tue Sep 29, 2015 2:47 pm
by JB172
So old winbox problem -solution use new winbox :)
When I download winbox from webfig, the version is 2.2.18
I just use 3.0rc16 and is working. Thank you. :)

Re: v6.33rc release candidate

Posted: Wed Oct 07, 2015 3:29 pm
by normis
What's new in 6.33rc21 (2015-Oct-07 13:23):

*) certificate - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) certificate - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active user/session view when opened;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidently disabled since version 6.30;
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wireless - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) auto upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) fastpath - added per interface fastpath counters;

Re: v6.33rc release candidate

Posted: Wed Oct 07, 2015 4:15 pm
by ddejager
Why does the changelog for rc21 seem to include some but not all of the changes listed for prior 6.33rc releases?

Re: v6.33rc release candidate

Posted: Wed Oct 07, 2015 4:35 pm
by normis
Why does the changelog for rc21 seem to include some but not all of the changes listed for prior 6.33rc releases?
let me know what is missing. RC versions are daily builds, since we skipped some releases (publicaly), there might be some mixup in the changelog I posted.

Re: v6.33rc release candidate

Posted: Wed Oct 07, 2015 7:40 pm
by JB172
After installed v6.33rc21 in x86, the router reboots infinetely.
I tried to downgrade in v6.32.2 but with no success.
The supout.rif file it's created only 17% and then the router reboots.
What's the next step?

Re: v6.33rc release candidate

Posted: Wed Oct 07, 2015 8:07 pm
by pbr3000
After installed v6.33rc21 in x86, the router reboots infinetely.
I tried to downgrade in v6.32.2 but with no success.
The supout.rif file it's created only 17% and then the router reboots.
What's the next step?
Netinstall?

Re: v6.33rc release candidate

Posted: Wed Oct 07, 2015 8:45 pm
by JB172
After installed v6.33rc21 in x86, the router reboots infinetely.
I tried to downgrade in v6.32.2 but with no success.
The supout.rif file it's created only 17% and then the router reboots.
What's the next step?
Netinstall?
The RouterOS is installed in CF.
Are you sure that I don't lose my license ?

Re: v6.33rc release candidate

Posted: Wed Oct 07, 2015 9:00 pm
by pbr3000
You can retrieve your license through the site. Go to https://www.mikrotik.com/client and look for "For already created software keys"

Re: v6.33rc release candidate

Posted: Wed Oct 07, 2015 9:03 pm
by pbr3000
Just saw a typo on SFP detail:

Vendor Part Number: S-31DLC20D
Wavelenght: 131000 nm

Edit: corrected in rc21. Typo was from rc15.
Vendor Part Number: S-53LC20D
Wavelenght: 1550.00 nm

6.33rc21 error graf interfaces

Posted: Thu Oct 08, 2015 12:33 am
by napismizpravu
RB433UAH - 6.33rc21 no graf interface ether2 (LAN) ether3 (WAN) no traffic statistic > 0 B .... 6.33rc16 functional


bad version 6.33rc21 > downgrade 6.33rc16

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 1:10 am
by PtDragon
6.33.rc21 - on my router(CCR1036-12G-4S) bootloops(kernel crash) if bonding interface acts(if pull all cables from bonding it does not crash).
Tried several modes of bonding but it just crashes(reboots).
Please fix it :)

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 12:08 pm
by bajodel
let me know what is missing. RC versions are daily builds, since we skipped some releases (publicaly), there might be some mixup in the changelog I posted.
only following "some" mixup .. :lol:
What's new in 6.33rc16 (2015-Sep-28 08:52):

*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
*) quickset - create proper firewall rules when PPPoE is used for address acquisition;
*) ppp - added on-up & on-down scripts to ppp profile
*) sstp - fixed kernel crash when other party started to fragment ppp packets in the middle;
*) ippool6 - optimize same prefix acquisition;
*) winbox - Shift+Ins & Shift+Del did not work in multi entry fields;
*) winbox - allow to specify ipv6 address in traffic flow target;
*) winbox - allow to specify eap-radius-accounting in CAPsMAN;
*) winbox - allow to specify dns name in all the tunnels;
*) winbox - allow to enter dns name in email server;
*) pppoe - added support for MTU > 1492 on PPPoE;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) ups - fix console oid print;
*) ppp-client - added default channels for Alcatel OneTouch L100V;
*) tunnel - fix loopback keepalives on gre and ipip;
*) pptp,l2tp,sstp,pppoe: fixed bug #7586: do not sen*) email - allow server to be specified as fqdn which is resolved on each send;
*) certificate - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) certificate - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may
    take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active user/session view when opened;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect
   at startup and only reboot helped;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidently disabled since version 6.30; 
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wireless - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if
   both dns names were not provided (was broken since v6.30);
*) auto upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
d data packets before we have negotiated connection with other 
side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) defconf - fix for boards that had bridge with only wlan ports;
*) pptp,l2tp,sstp - make it work when add-default-route & dial-on-demand both are enabled;
*) nv2 - fixed kernel failure with frame size accounting;
*)ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
*) cerm - use certificate file name for imported cert name;
*) ovpn client - fixed crash when ovpn didn't receive it's ip address;
*) lcd - fix slideshow for CCR1072, and possible sign issues for temperatures;
*) winbox - make console notice correct screen size;
*) fetch - fixed error message when error code 200 was received;
*) winbox - fixed context menu actions to apply to all selected items;
*) ssh - allow to specify pass as argument for private key import 
*) winbox - refetch hotspot walled garden hit counter;
*) winbox - added client-connections & server-connections to web proxy status;
*) cerm - rebuild crl for local ca if crl file does not exist;
*) winbox - make directed broadcasts work for neighbor discovery;
*) upnp: automatically adjust mappings to new external ip change;;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) ppp - added ppp interface to upnp internals/externals if requested
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) cerm - also accept downloaded CRLs in PEM format;
*) cerm - show crl nextupdate time;
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - added 'history clear' to allow flushing undo history, which may
take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.
What's new in 6.33rc21 (2015-Oct-07 13:23):

*) certificate - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) certificate - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active user/session view when opened;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidently disabled since version 6.30; 
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wireless - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) auto upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) fastpath - added per interface fastpath counters;

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 12:10 pm
by normis
look at the changelog you posted. some lines are stuck together, and many lines are repeated. does not look correct to me

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 1:37 pm
by Nero
RB450G, 6.33rc21, Winbox 2.2.18.

Doesn't work:
1. Flush Cache in DNS
2. Reset All Counters in Firewall

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 1:45 pm
by bajodel
look at the changelog you posted. some lines are stuck together, and many lines are repeated. does not look correct to me
So far ..that where the changelogs provided with the two versions (taken from your official web site download page in the last days).
If something is mixed up, and it's clearly not my fault, I hope it's up to you to fix :lol:

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 1:56 pm
by normis
look at the changelog you posted. some lines are stuck together, and many lines are repeated. does not look correct to me
So far ..that where the changelogs provided with the two versions (taken from your official web site download page in the last days).
If something is mixed up, and it's clearly not my fault, I hope it's up to you to fix :lol:
Yes, that is what I meant. Our previous changelog was mixed up. This one is cleaned

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 2:03 pm
by 105547111
I've posted this in the winbox beta but can this please be fixed added to 6.33

IPv6 / firewall / address lists

There's no timeout field at all hidden otherwise. We use IPv4 and ipv6 address lists, be damn lovely if I knew how long an ip in there has left...

Thanks!

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 2:39 pm
by sergejs
Thank you very much for the report about bonding.
It is correct, bonding interface causes reboot on CCR1036, we are working on the fix!

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 3:04 pm
by bajodel
Yes, that is what I meant. Our previous changelog was mixed up. This one is cleaned
ah.. ok, thanks for the clarification

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 10:43 pm
by marekm
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

I see this in rc16 but not in rc21 changelog anymore, does this mean the improvement was reverted?

Re: v6.33rc release candidate

Posted: Thu Oct 08, 2015 10:51 pm
by bajodel
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

I see this in rc16 but not in rc21 changelog anymore, does this mean the improvement was reverted?
In fact, despite of claims of normis (sorry about that), ..I'm quite sure current changelog is messed up :D

Re: v6.33rc release candidate

Posted: Fri Oct 09, 2015 9:59 am
by normis
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

I see this in rc16 but not in rc21 changelog anymore, does this mean the improvement was reverted?
In fact, despite of claims of normis (sorry about that), ..I'm quite sure current changelog is messed up :D
check again please :) like I said, it has many duplicate lines

Re: v6.33rc release candidate

Posted: Fri Oct 09, 2015 10:41 am
by normis
rc22 released. we have fixed the latest few problems and are getting ready for v6.33 release.
*) certificate - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) certificate - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active user/session view when opened;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidently disabled since version 6.30;
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wireless - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) auto upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) fastpath - added per interface fastpath counters;
*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
*) quickset - create proper firewall rules when PPPoE is used for address acquisition;
*) ppp - added on-up & on-down scripts to ppp profile
*) sstp - fixed kernel crash when other party started to fragment ppp packets in the middle;
*) ippool6 - optimize same prefix acquisition;
*) winbox - Shift+Ins & Shift+Del did not work in multi entry fields;
*) winbox - allow to specify ipv6 address in traffic flow target;
*) winbox - allow to specify eap-radius-accounting in CAPsMAN;
*) winbox - allow to specify dns name in all the tunnels;
*) winbox - allow to enter dns name in email server;
*) pppoe - added support for MTU > 1492 on PPPoE;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) ups - fix console oid print;
*) ppp-client - added default channels for Alcatel OneTouch L100V;
*) tunnel - fix loopback keepalives on gre and ipip;
*) pptp,l2tp,sstp,pppoe: fixed bug #7586: do not send data packets before we have negotiated connection with other
side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) defconf - fix for boards that had bridge with only wlan ports;
*) pptp,l2tp,sstp - make it work when add-default-route & dial-on-demand both are enabled;
*) nv2 - fixed kernel failure with frame size accounting;
*) ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
*) cerm - use certificate file name for imported cert name;
*) ovpn client - fixed crash when ovpn didn't receive it's ip address;
*) lcd - fix slideshow for CCR1072, and possible sign issues for temperatures;
*) winbox - make console notice correct screen size;
*) fetch - fixed error message when error code 200 was received;
*) winbox - fixed context menu actions to apply to all selected items;
*) ssh - allow to specify pass as argument for private key import
*) winbox - refetch hotspot walled garden hit counter;
*) winbox - added client-connections & server-connections to web proxy status;
*) cerm - rebuild crl for local ca if crl file does not exist;
*) winbox - make directed broadcasts work for neighbor discovery;
*) upnp: automatically adjust mappings to new external ip change;;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) ppp - added ppp interface to upnp internals/externals if requested
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) cerm - also accept downloaded CRLs in PEM format;
*) cerm - show crl nextupdate time;
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit, Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package
*) fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting - allow-fast-path - ~no~ for existing tunnels, ~yes~ for new ones). Encapsulated tunnel packets will bypass firewall, connection tracking, simple queues, queue tree with parent=global, ip accounting, ipsec, hotspot universal client, vrf assignment. Note that allowing fast path for tunnel does not guarantee that all packets will go fastpath, so for slowpath packets regular processing happens as before;

Re: v6.33rc release candidate

Posted: Fri Oct 09, 2015 1:57 pm
by ufm
rc22 released. we have fixed the latest few problems and are getting ready for v6.33 release.
*) pptp,l2tp,sstp,pppoe: fixed bug #7586: do not sen*) email - allow server to be specified as fqdn which is resolved on each send;
Fix this, pls.

Re: v6.33rc release candidate

Posted: Fri Oct 09, 2015 1:58 pm
by normis
Fix this, pls.
fixed

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 09, 2015 2:00 pm
by rzirzi
[admin@MikroTik] > system package update check-for-updates
channel: current
current-version: 6.31
latest-version: 6.33rc22
status: New version is available

"Download & Install" button (at WInBox) also doesn't work :(

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 09, 2015 2:18 pm
by normis
[admin@MikroTik] > system package update check-for-updates
channel: current
current-version: 6.31
latest-version: 6.33rc22
status: New version is available

"Download & Install" button (at WInBox) also doesn't work :(
try once more. actually in Winbox you must select RC, not current

Re: v6.33rc release candidate

Posted: Fri Oct 09, 2015 2:59 pm
by KBV
rc22 released. we have fixed the latest few problems and are getting ready for v6.33 release.
You are crazy! 6.33rc21 and 6.33rc22 does not work on rb850gx2. Completely (reboots infinetely).
I thought that this is just a beta and nothing serious. But you're going to let release. When users update will be a disaster!

Posted: Fri Oct 09, 2015 3:11 pm
by jarda
Stay calm. Rc versions are for testing purposes so you should count with total malfunction when you install rc version. Therefore never use it on productive device when you haven't done your own tests before.

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 09, 2015 3:12 pm
by BartoszP
RB433 - update works OK.

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 09, 2015 6:01 pm
by revellion
6.33rc22 is broken on RB750G,RB450G and it boot loops. Had to downgrade to 6.33rc16

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 09, 2015 11:54 pm
by freemannnn
*) quickset - create proper firewall rules when PPPoE is used for address acquisition;

just tried that but it messed the order of the filter default rules in winbox window (forward chain rules went on top and input on bottom).

Re: v6.33rc release candidate (final testing)

Posted: Sat Oct 10, 2015 12:19 am
by visalink
[admin@MikroTik] > system package update check-for-updates
channel: current
current-version: 6.31
latest-version: 6.33rc22
status: New version is available

"Download & Install" button (at WInBox) also doesn't work :(
try once more. actually in Winbox you must select RC, not current
"Download & Install" button does not work in winbox v.2.2.18 only in winbox3

Re: v6.33rc release candidate (final testing)

Posted: Mon Oct 12, 2015 12:49 am
by artemlight
Bootloop on CCR1009-8G-1S

Re: v6.33rc release candidate (final testing)

Posted: Mon Oct 12, 2015 11:48 am
by tomaskir
Confirming reboot loop on CCR1036 and CCR1009.

Re: v6.33rc release candidate (final testing)

Posted: Mon Oct 12, 2015 11:49 am
by revellion
For those affected by the bootloop with 6.33rc22. A tip from my own experience on the RB450G and RB750G.

If the device is in such a state it can help if the device is isolated.
In my case i disconnected the WAN connection to my RB450G and 750s. And the device would atleast stay alive for the upload of 6.33rc16 and downgrade in System->Packages.

If i kept the WAN in it would crash as soon as it started to see traffic. Exactly what triggered the boot loop i'm not sure of. My devices managed to acquire link and get DHCP IP. And start to initialize some of my GRE/BGP tunnels and sessions before it looped.

Re: v6.33rc release candidate (final testing)

Posted: Mon Oct 12, 2015 4:31 pm
by okoun
Hello, my ticket: #2015092866000236 that is sent over a week no one responding. All CRS still show little packetloss a small load. :(

Re: v6.33rc release candidate (final testing)

Posted: Mon Oct 12, 2015 8:30 pm
by artemlight
Exactly, GRE tunnels caused bootloop on 6.33rc22.

Confirmed on CCR1009.

CRS125, RB951, RB941, RB2011 without GRE are running correctly.

Re: v6.33rc release candidate (final testing)

Posted: Tue Oct 13, 2015 11:54 am
by normis
If you downgrade to older RC, does the reboot loop stop? Can you make a supout.rif file then, so we can see the config?

Re: v6.33rc release candidate (final testing)

Posted: Tue Oct 13, 2015 12:17 pm
by juanvi
Can you Mikrotik check this before final release?

Using user-manager and hotspot in a CCR a user paid for a month of service and no account was created. Paypal payment completed succesfully.

Testing a Little more is shown that users created in sign-in portal are shown in user manager web if paypal is not completed, but can't access because "user<xxx>not found" is displayed in login captive portal page.

Under Winbox Radius tab i can see the rejects for the users created from web form. Added profiles manually but "user not found" anyway. Works well with direct created users in user-manager web.

Here is and similar old report: http://forum.mikrotik.com/viewtopic.php?f=10&t=97737

Ticket created and supout submitted: Ticket#2015101366000323

Re: v6.33rc release candidate (final testing)

Posted: Tue Oct 13, 2015 12:23 pm
by revellion
If you downgrade to older RC, does the reboot loop stop? Can you make a supout.rif file then, so we can see the config?
For me it stops looping with downgrade to 6.33rc16 on rb450g and rb750g

Re: v6.33rc release candidate (final testing)

Posted: Tue Oct 13, 2015 12:34 pm
by normis
If you downgrade to older RC, does the reboot loop stop? Can you make a supout.rif file then, so we can see the config?
For me it stops looping with downgrade to 6.33rc16 on rb450g and rb750g
please send the supout.rif file to support. we will replicate your config and try to see how to repeat the loop

Re: v6.33rc release candidate (final testing)

Posted: Tue Oct 13, 2015 12:45 pm
by paulsa
Normis - Is trafficflow fixed? We are implementing a CCR1072 at our core, and want to run the latest ROS - however we are still using 6.27 on our CCR1036 due to the trafficflow egress ingress issue in the later versions. Can you confirm this has been 100% fixed, I know it's listed in the changelogs as fixed.

Posted: Thu Oct 15, 2015 3:45 pm
by cdemers
With 6.33rc22 I am unable to see ipv6 addresses in winbox neighbor view, tested in winbox 2.2.18 and 3.0rc16

Anyone else seeing this behavior?


Sent from my Nexus 5 using Tapatalk

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 16, 2015 11:14 am
by juanvi
Routerboard upgrade does not work from winbox 2.2.18 on 2011UiAS-2HnD with rc22. The system must upgrade to v.3.24 and does nothing. From new terminal works with no problems.
When resetting config from same winbox with "Keep user config" checked all users config is lost.

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 16, 2015 2:43 pm
by kristaps
6.33rc24 will be released later today to web. With latest fixes and improvements.

@juanvi and @cdemers
please open ticket at support@mikrotik.com attaching screenshots with this issue.

Re:

Posted: Fri Oct 16, 2015 2:59 pm
by macgaiver
With 6.33rc22 I am unable to see ipv6 addresses in winbox neighbor view, tested in winbox 2.2.18 and 3.0rc16
Anyone else seeing this behavior?
Sent from my Nexus 5 using Tapatalk
I have 2 win10 PCs (one stationary other laptop) connected to the same network, i can see IPv6 entries on one winbox but can't on other, i'm assuming that is some kind of Win10 "feature", but so far i'm unable to find exact reason for this behavior.

and in ip neighbor all entries have corresponding IPv6 address values, so it looks like it works.

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 16, 2015 4:23 pm
by w0lt
6.33rc24 will be released later today to web. With latest fixes and improvements.

@juanvi and @cdemers
please open ticket at support@mikrotik.com attaching screenshots with this issue.
Has this release addressed the constant reboots when using GRE tunnels or has this not been identified yet.

-tp

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 16, 2015 5:40 pm
by hedele
I see that there has been fastpath support added for eoip, ipip and gre tunnels, which I think is an amazing improvement! Are there any figures available as to how much this speeds up tunnel forwarding performance?
Also, is there any hope of getting fastpath support for ppp-type interfaces (pptp, l2tp, sstp) as well?

By the way, what happens if the eoip tunnel itself allows fastpath, but the eoip packages are sent/received over an interface type that does NOT support fastpath, like a lte interface or an unsupported ethernet interface? Does fastpath also work when packet fragmentation/reassembly is needed?

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 16, 2015 6:29 pm
by w0lt
I have installed ROS 6.33rc24 in CRS1009, RB1100AHX2, QRT, RB433, CRS125, CRS210, CRS112...
So far, no reboots...looking GOOD !! 8)

Thanks boys !!

-tp

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 16, 2015 6:34 pm
by KBV
Has this release addressed the constant reboots when using GRE tunnels or has this not been identified yet.
At first glance the problem is solved.
I updated to RC24 without incident :D

Re: v6.33rc release candidate (final testing)

Posted: Sat Oct 17, 2015 12:10 am
by MAYAKNET
Instead, here 6-24 6-22

v6.33rc release candidate (final testing)

Posted: Sat Oct 17, 2015 2:35 am
by dadoremix
I have also udated to rc24
Working, 493/435g rb

Re: v6.33rc release candidate (final testing)

Posted: Sat Oct 17, 2015 5:39 pm
by tesme33
Hi
i had on a CCR1009 L2TP to my MAC OSX working.

Now it look like that 6.33rc24 breaks it.
17.10.15 16:24:56,433 racoon[871]: IPsec-SA established: ESP/Transport 10.213.213.164[4500]->95.142.x.x[4500] spi=53895329(0x33660a1)
17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 established
17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 established
17.10.15 16:24:56,433 racoon[871]: vpn control writing 20 bytes
17.10.15 16:24:56,433 racoon[871]: ===
17.10.15 16:25:16,435 racoon[871]: caught rtm:2, need update interface address list
17.10.15 16:25:16,438 racoon[871]: configuring default isakmp port.
17.10.15 16:25:16,438 racoon[871]: 16 addrs are configured successfully
17.10.15 16:25:16,438 racoon[871]: vpn_control socket closed by peer.
17.10.15 16:25:16,438 racoon[871]: received disconnect all command.
17.10.15 16:25:16,438 racoon[871]: IPSec disconnecting from server 95.142.x.x
17.10.15 16:25:16,438 racoon[871]: IPSec disconnecting from server 95.142.x.x
Can anybody confirm ?

Re: v6.33rc release candidate (final testing)

Posted: Sun Oct 18, 2015 4:04 am
by IntrusDave
Instead, here 6-24 6-22
same issue in WinBox. 24 is 404

Re: v6.33rc release candidate (final testing)

Posted: Mon Oct 19, 2015 4:53 am
by pbr3000
Hi
i had on a CCR1009 L2TP to my MAC OSX working.

Now it look like that 6.33rc24 breaks it.
17.10.15 16:24:56,433 racoon[871]: IPsec-SA established: ESP/Transport 10.213.213.164[4500]->95.142.x.x[4500] spi=53895329(0x33660a1)
17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 established
17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 established
17.10.15 16:24:56,433 racoon[871]: vpn control writing 20 bytes
17.10.15 16:24:56,433 racoon[871]: ===
17.10.15 16:25:16,435 racoon[871]: caught rtm:2, need update interface address list
17.10.15 16:25:16,438 racoon[871]: configuring default isakmp port.
17.10.15 16:25:16,438 racoon[871]: 16 addrs are configured successfully
17.10.15 16:25:16,438 racoon[871]: vpn_control socket closed by peer.
17.10.15 16:25:16,438 racoon[871]: received disconnect all command.
17.10.15 16:25:16,438 racoon[871]: IPSec disconnecting from server 95.142.x.x
17.10.15 16:25:16,438 racoon[871]: IPSec disconnecting from server 95.142.x.x
Can anybody confirm ?
It's working fine for me. OSX 10.11 and RB2011 with v6.33rc24.

Re: v6.33rc release candidate (final testing)

Posted: Mon Oct 19, 2015 6:54 pm
by w0lt
So far, ROS 6.33rc25 seems to be working just fine !! 8)

-tp

Re: v6.33rc release candidate (final testing)

Posted: Tue Oct 20, 2015 4:31 pm
by rmmccann
Are the fixes listed in this release included in the latest CURRENT 6.32.3 (ipsec replay window, for example)?

Re: v6.33rc release candidate (final testing)

Posted: Wed Oct 21, 2015 2:50 am
by timoid
*) ppp - when adding ipv6 default route use user provided distance;

this appears to be working:

if i have two IPv6 routes from two PPP sessions it will always use the route with the configured lower distance

A cosmetic issue is the route under /ipv6 route does not reflect the distance:

[admin@titan] /ipv6 route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable
# DST-ADDRESS GATEWAY DISTANCE
0 ADS ::/0 Internode-NBN 1
1 DS ::/0 Internode-FAB 1

[admin@titan] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 10.255.255.1 1
1 DS 0.0.0.0/0 10.255.255.2 2

Re: v6.33rc release candidate

Posted: Thu Oct 22, 2015 3:00 pm
by marekm
PPPoE now will support RFC4638
https://tools.ietf.org/html/rfc4638
Good to hear that. Is it supported for both PPPoE client and server?
Any chance for Delegated-IPv6-Prefix RADIUS attribute for PPPoE server, while you're at it?

Re: v6.33rc release candidate (final testing)

Posted: Mon Oct 26, 2015 3:03 pm
by strods
6.33rc33 version is now available at our download site:

Changes since 6.33rc30:
*) userman - fix report generation problem which could result in some users being skipped from it;
*) winbox - fix to allow cpu-port as mirror-target
*) proxy - error.html parsing enhancement to improve performance
*) CCR1072 - improve ether1 performance under heavy load
*) routerboard - indicate RouterBOOT type in /system routerboard print
*) mpls - properly use mpls mtu for routes
*) cerm - fix key decription for signed certificates
*) trafflow - report flow addresses in v1 and v5 without NAT awerness
*) dhcpv6 - small fixes for dhcp-pd client and ippool6

Re: v6.33rc release candidate (final testing)

Posted: Wed Oct 28, 2015 7:22 am
by MAYAKNET
Доброго времени суток.

В CCR1072 в BGP участвует только одно ядро, это исправят?

EN:

Good day.

In CCR1072 into BGP involved only one core, fix it?

Re: v6.33rc release candidate (final testing)

Posted: Wed Oct 28, 2015 9:00 am
by macgaiver
Доброго времени суток.
В CCR1072 в BGP участвует только одно ядро, это исправят?
EN:
Good day.
In CCR1072 into BGP involved only one core, fix it?
Short answer - improvements will be in RouterOS v7

Long answer - it is not BGP it is operations with routing table that is and will be limited to single core, but in RouterOS v7 all other things will be optimized so that routing table load is significanly reduced.
(slide 32 and 33):
http://tiktube.com/video/GJil3aqniCGJCI ... rClGoJGJo=

Re: v6.33rc release candidate (final testing)

Posted: Wed Oct 28, 2015 9:45 am
by MAYAKNET
А прогнозы есть какие нибудь? Когда ждать RoterOS v7. Мне чтобы спланировать к этому времени изменение структуры сети и возложенные операции на CCR1072
На сегодня он выполняет роль PPPoE сервера, и всё ((

EN:

And there are some projections? When will Routeros v7. I have to plan for this time of changing the structure of the network and assigned to the operation CCR1072
Today, he serves as a PPPoE server, and all ((

Re: v6.33rc release candidate (final testing)

Posted: Wed Oct 28, 2015 2:12 pm
by strods
Version 6.33rc36 is released.

Changes since 6.33rc33:
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
*) webfig - some of the setting were shifted to the right;
*) packages - allow to reinstall from bundle to separate packages & vice versa;
*) packages - prefer out of bundle packages when both of them are installed;
*) packages - fix a problem of upgrading bundle package to non bundled ones;
*) ipsec - force flow cache validation once in 1h;
*) dhcpv6-client - show current server address;
*) dhcpv6-client - split out IA ops;
*) winbox - make sure that all setting names get shown in full;
*) winbox - added poe power-cycle-ping settings to ethernet interfaces;
*) ppp - handle properly case were ppp client is given same address for local & remote end;
*) winbox - added vlan-mode & vlan-id to virtual-ap interface;
*) winbox - added timeout column to ipv6 address lists;
*) winbox - show SFP Tx/Rx Power properly;
*) winbox - added min-links to bonding interface;
*) winbox - do not show health menu on RB951Ui-2HnD;
*) winbox - added support for Login-Timeout & MAC-Auth-Mode in hotspot;
*) cerm - added option to disable crl download in '/certificate settings';
*) winbox - make user ssh key import work again;
*) webfig - make "Copy to Access List" work in CAPsMAN Registration Table;

Re: v6.33rc release candidate (final testing)

Posted: Wed Oct 28, 2015 6:07 pm
by chojrak11
Wow that's impressive list of changes/fixes for 6.33 :-)
Version 6.33rc36 is released.
*) winbox - added poe power-cycle-ping settings to ethernet interfaces;
Just small misspelligs here:
2015-10-28_16-44-12.png
*) routerboard - indicate RouterBOOT type in /system routerboard print;
I'm not sure it works here.
2015-10-28_16-49-46.png
*) fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path");
Not available in Winbox.

Re: v6.33rc release candidate (final testing)

Posted: Wed Oct 28, 2015 7:30 pm
by Anastasia
which version is best installed on the router (MikroTik RB951Ui-2HnD). I need a stable job, once set up and forget. It is the current version (6.33RC36) stable and reliable? or better put 6.32.3 :?: :)

Re: v6.33rc release candidate (final testing)

Posted: Wed Oct 28, 2015 7:38 pm
by PaulsMT
which version is best installed on the router (MikroTik RB951Ui-2HnD). I need a stable job, once set up and forget. It is the current version (6.33RC36) stable and reliable? or better put 6.32.3 :?: :)
Definitely the most reliable version is the bugfix version, it has all known bugs fixed.

Here is description for new RouterOS release system:
http://forum.mikrotik.com/viewtopic.php?f=21&t=98580

Re: v6.33rc release candidate (final testing)

Posted: Thu Oct 29, 2015 2:04 am
by pbr3000
Bugfix version is 6.30.4 for now.

Re: v6.33rc release candidate (final testing)

Posted: Thu Oct 29, 2015 3:12 am
by skuykend
Upgraded to 6.33rc36 on CCR1009.
IPv6 dhcp-client does not initially get bound on reboot. 'Error' shows in Status column, no info in log.

Do a disable and enable on the dhcp-client and it get's bound properly until next reboot.

Re: v6.33rc release candidate (final testing)

Posted: Thu Oct 29, 2015 12:21 pm
by KBV
*) fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path");
Not available in Winbox.
As a result you can not create tunnel (eg GRE) with IPSEC via Winbox
See attach
And you can not turn fastpath off /Not available in Winbox/

How to create a tunnel?

Re: v6.33rc release candidate (final testing)

Posted: Thu Oct 29, 2015 4:09 pm
by macgaiver
How to create a tunnel?
like real hackers - from CLI... :)

did anyone notice???
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
It is like one of the oldest, most wanted features on this forum ever. and no reaction... I'm disappointed.

Re: v6.33rc release candidate (final testing)

Posted: Thu Oct 29, 2015 5:13 pm
by hedele
I didn't get around to testing the LNS functionality yet, but according to a separate thread where this feature was requested, it seems to work perfectly.

Re: v6.33rc release candidate (final testing)

Posted: Thu Oct 29, 2015 9:27 pm
by doneware
did anyone notice???
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
It is like one of the oldest, most wanted features on this forum ever. and no reaction... I'm disappointed.
yes, i was totally stunned! this is pretty cool.
not sure however it has the same RADIUS support as other vendors... [rfc2868]
but if not, i hope it will have it soon.

Re: v6.33rc release candidate (final testing)

Posted: Thu Oct 29, 2015 9:29 pm
by timoid
How to create a tunnel?
like real hackers - from CLI... :)

did anyone notice???
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
It is like one of the oldest, most wanted features on this forum ever. and no reaction... I'm disappointed.
I don't think that is what you think it is.

I think RFC2341 will be the loudly celebrated implementation.

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 30, 2015 1:38 am
by timoid
Upgraded to 6.33rc36 on CCR1009.
IPv6 dhcp-client does not initially get bound on reboot. 'Error' shows in Status column, no info in log.

Do a disable and enable on the dhcp-client and it get's bound properly until next reboot.
+1 also on mipsbe.

also noticed if you have multiple ::1/64 from different ipv6 pools on one interface all but one disappears on reboot.

Re: v6.33rc release candidate (final testing)

Posted: Fri Oct 30, 2015 11:06 pm
by docmarius
Upgraded to 6.33rc36 on CCR1009.
IPv6 dhcp-client does not initially get bound on reboot. 'Error' shows in Status column, no info in log.

Do a disable and enable on the dhcp-client and it get's bound properly until next reboot.
I can confirm this behavior on RB1100AHx2, too.

Re: v6.33rc release candidate (final testing)

Posted: Mon Nov 02, 2015 9:53 am
by strods
6.33rc37 will be released today.

Changes since 6.33rc36:
*) net - fix possible never ending loop when bad CDP discovery packet is received;
*) log - make default disk file name to reside in flash dir if it exists;
*) romon - change port list to be unordered in export;
*) capsman - limit number of simultaneous DTLS handshakes;
*) capsman - fixed memory leak on CAP joining CAPsMAN when ssld is used;
*) DHCP-PD client - timer problem fixed;
*) winbox - added allow-fast-path to eoip, gre & ipip;
*) winbox - do not show power-cycle properties on non poe ports;

Re: v6.33rc release candidate (final testing)

Posted: Mon Nov 02, 2015 10:24 pm
by skuykend
Upgraded to 6.33rc36 on CCR1009.
IPv6 dhcp-client does not initially get bound on reboot. 'Error' shows in Status column, no info in log.

Do a disable and enable on the dhcp-client and it get's bound properly until next reboot.
IPv6 still not working properly.

rc37 now shows bound IPv6 on bootup/reboot, but still does not route IPv6 until I do a renew of the IPv6 address.

Re: v6.33rc release candidate (final testing)

Posted: Tue Nov 03, 2015 8:30 am
by strods
skuykend - Please send supout.rif file to support@mikrotik.com. Make sure that supout file is generated after you have experienced issue and fixed it with renew.
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
http://www.mikrotik.com/support.html

Re: v6.33rc release candidate (final testing)

Posted: Tue Nov 03, 2015 9:37 am
by skuykend
skuykend - Please send supout.rif file to support@mikrotik.com. Make sure that supout file is generated after you have experienced issue and fixed it with renew.
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
http://www.mikrotik.com/support.html
Sent. [Ticket#2015110366000181]

Re: v6.33rc release candidate (final testing)

Posted: Thu Nov 05, 2015 6:36 pm
by jondavy
the CAP should have a mandatory option: discovery-method =
and in it one of the required attributes:
By interface, by CAPsMAN-Address, or by CAPsMAN-Name,
because without any of these attributes the CAP is not adopted by CAPsMANAGER and does not work


anothers possible bug:

in CAPsMAN> Channel to tx-power option does not work (because it shows another value in CAP)
in CAPsMAN> datapath the Bridge option does not work
in CAPsMAN> Configuration SSID does not work
in CAPsMAN> Access-list Interface does not work



tested with RC37 with HAP lite (smips)

Re: v6.33rc release candidate (final testing)

Posted: Thu Nov 05, 2015 10:52 pm
by bradg
I updated a factory-fresh hEX PoE lite last night, going from 6.30.2 to 6.33rc37 and experienced an instant reboot loop. A netinstall down to 6.33rc36 resolved the issue. FYI. --Brad

Re: v6.33rc release candidate (final testing)

Posted: Fri Nov 13, 2015 9:15 pm
by Zorro
rc33 briked HEX of mine after i updatred bootloader, rebooted and disabled WAN interface on first port from winbox.
then its hang, disconnect and reboot w/o sound from buzzer for long, but emit weird scratchy noise over looong time.

Re: v6.33rc release candidate

Posted: Tue Jan 12, 2016 10:03 am
by adrcomms
6.33rc7 is released!

Changes since 6.33rc5:
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) pptp - improved encryption;
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - added 'history clear' to allow flushing undo history, which may
take up significant amount of memory for huge databases whith hundreds of users;

whats does this do? ) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id"

Re: v6.33rc release candidate (final testing)

Posted: Thu Feb 11, 2016 11:53 pm
by romihg
skuykend - Please send supout.rif file to support@mikrotik.com. Make sure that supout file is generated after you have experienced issue and fixed it with renew.
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
http://www.mikrotik.com/support.html
Sent. [Ticket#2015110366000181]
What is the status of your ticket? Beacuse i have same problem.

Re: v6.33rc release candidate (final testing)

Posted: Fri Feb 12, 2016 10:26 am
by skuykend
skuykend - Please send supout.rif file to support@mikrotik.com. Make sure that supout file is generated after you have experienced issue and fixed it with renew.
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
http://www.mikrotik.com/support.html
Sent. [Ticket#2015110366000181]
What is the status of your ticket? Beacuse i have same problem.
They had it working pretty quickly for me in further rc's and the final 6.33. It quickly got broken again when work started on the 6.34rc's as they seemed to do a major overhaul of their IPv6 DHCP support. I reverted to the current channel and has mostly been working fine. Believe I was having some dns problems (maybe just IPv6) with 6.34 until 6.34.1 came out.

If you've upgraded to 6.34.1 and are still having problems you should generate a support file and create a new ticket as it sometimes seems these are ISP compatibility issues.

Re: v6.33rc release candidate (final testing)

Posted: Fri Feb 12, 2016 10:49 am
by strods
If you experience problems with this version, then please test 6.35rc first:
http://forum.mikrotik.com/viewtopic.php?f=21&t=104326