sstp - supported only in windows.

4) Easy to configure. Not IPSec/L2TP, because installing strong/openswan and writing all configs... doh.

If you so strong against OpenVPN, please provide me with protocol that will be:

Yes, but IPSEC was not working well in 6.1 and 6.2. Were all issues with it fixed in 6.3?
Is it working?

Thanks,

T.P.

Yes, but IPSEC was not working well in 6.1 and 6.2. Were all issues with it fixed in 6.3?
Is it working?

The problem with both WinBox and WebFig misreporting the IPsec SA expiration time is not fixed yet in 6.3. The reported value is a) incorrect and b) counts up (but should count down). Everything is fine on console, the "/ip ipsec installed-sa print" command reports correct value.

Original report is here: http://forum.mikrotik.com/viewtopic.php ... 50#p381561

*) pptp, l2tp, sstp - allow to specify server via dns name;
Please add OpenVPN to that list. Seriously, that's just unfair for users.
pptp - insecure.
sstp - supported only in windows.
l2tp - requires ipsec+l2tp combo, hard to configure by user.

*) pptp, l2tp, sstp - allow to specify server via dns name;
Please add OpenVPN to that list. Seriously, that's just unfair for users.
pptp - insecure.
sstp - supported only in windows.
l2tp - requires ipsec+l2tp combo, hard to configure by user.

+1

> Ubuntu/Mint
NM in ubuntu lacks L2TP/IPsec support.

manager: command /tool user-manager user create-and-activate-profile not work with argument "user",and work only with argument "numbers". For example in script:

Code: Select all

 
   $addRequest = new Request('/tool user-manager user create-and-activate-profile');
    $addRequest->setArgument('customer','gsm');
//-->    $addRequest->setArgument('user',$from);
    $addRequest->setArgument('numbers',$userId);
    $addRequest->setArgument('profile',$profile);
    $client->sendSync($addRequest);

l2tp - hard to configure by user.

You mean OpenVPN is easier to configure by user? Personally, I strongly disagree.

*) ppp, hotspot - added ability to specify where to insert rate limiting queue,
it's parent and type;

IPsec is working in v6.1 and v6.2, what did you mean by this?

After upgrading from 6.0 to 6.2 all my INPUT firewall rules disappeared. Is this fixed in 6.3?

Mikrotik: Is there a layout of what services/features use what cpus?

Mikrotik: Is there a layout of what services/features use what cpus?

Tools / Profile

IPsec is working in v6.1 and v6.2, what did you mean by this?

In v6.1 the following IPSEC problem existed:
Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 stopped working.
L2TP was passing OK but when reached IPSEC portion it compains in logs about payload and triming.

Was this fixed?

Thanks,
the_prism

IPsec is working in v6.1 and v6.2, what did you mean by this?

In v6.1 the following IPSEC problem existed:
Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 stopped working.
L2TP was passing OK but when reached IPSEC portion it compains in logs about payload and triming.

Was this fixed?

Thanks,
the_prism

Normis, can you confirm that this was fixed and Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 works fine?

Thanks,

T.P.

I found a problem with the new traceroute tool. My backbone provider uses an MPLS network with private addresses and this means I can't 'see' the network from another router other than the border router. The new 'mtr' behaviour is stopping the tracing after 3 lost hops.

Thanks in advance!

Carlos Strauch

Normis, can you confirm that this was fixed and Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 works fine?

Thanks,

T.P.

Please tell me your Mikrotik Support ticket number, and I will check status.

Normis, can you confirm that this was fixed and Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 works fine?

Thanks,

T.P.

Please tell me your Mikrotik Support ticket number, and I will check status.

I don't have any ticket number.
I mentioned about this here http://forum.mikrotik.com/viewtopic.php ... 50#p373740 and here http://forum.mikrotik.com/viewtopic.php ... 50#p373772

Broken multiple Paste comands in v6.3 CCR (in v6.2 all works fine)
...
Paste in terminal and get the error.

Code: Select all

[admin@Mikrotik] > /interface vlan add arp=reply-only interface=ether3 name=TEST vlan-id=3000 
[admin@Mikrotik] > /ip address add address=10.250.255.1/24 interface=TEST
[admin@Mikrotik] > /ip pool add name=pool_TEST ranges=10.250.255.2-10.250.255.254
[admin@Mikrotik] > /ip dhcp-server add add-arp=yes address-pool=pool_TEST disabled=no interface=TEST lease-time=1h name=DHCP_TEST
input does not match any value of interface

...

Hi.
I upgrade 951G-2HnD to 6.3.
Function "Reset Configuration" is broken.
Default configuration not apply after reboot.

In 6.2 it work.

      /interface {
              set ether6 name=ether6-master-local;
              set ether7 name=ether7-slave-local;
              set ether8 name=ether8-slave-local;
              set ether9 name=ether9-slave-local;
              set ether10 name=ether10-slave-local;
      }
      /interface ethernet {
              set ether7-slave-local master-port=ether6-master-local;
              set ether8-slave-local master-port=ether6-master-local;
              set ether9-slave-local master-port=ether6-master-local;
              set ether10-slave-local master-port=ether6-master-local;
      }
input does not match any value of master-port

Finally upgraded my core CCR from RC13 to 6.3. Runs much smoother. Cpu seems to be better too.

I don't run BGP or IPSec, but use most other features.

Mikrotik: Is there a layout of what services/features use what cpus?

I don't have any ticket number.
I mentioned about this here http://forum.mikrotik.com/viewtopic.php ... 50#p373740 and here http://forum.mikrotik.com/viewtopic.php ... 50#p373772

This is a community forum. Community members can't and don't fix bugs. If you wish a problem to be addressed, you Must contact support. Posting here doesn't guarantee that a member of MikroTik support will read the post.

None of my scripts work anymore, it's almost as if MikroTik invented asynchronous command execution where the second command is executed before the result from the first one is commited.

None of my scripts work anymore, it's almost as if MikroTik invented asynchronous command execution where the second command is executed before the result from the first one is commited.

I've noticed something similar in API. (not sure if issue was on 5.25 as I never used so many commands on ROS5)
If I send to many API commands directly after the other, over same API connection, some commands are just dropped. E.g. making groups of 8 simple queues, with a parent, if I pump them to fast, then sometimes up to 3 of some of the group's 8 would be 'lost'/not there. If I put in a 40ms delay between commands, it runs reliably, but painfully slow for a few thousand entries.

Regards
Ekkas

Then again, this may make the app slower due to the multiple remote calls... so I guess if you simply "fragment" your receives - make it send,send,send,receive, then again send,send,send,receive, etc. you might get best results.

*) pptp, l2tp, sstp - allow to specify server via dns name;

This is very very important small feature for my region - lets say goodbye to some significant scripting