MikroTik

*) l2tp - fixed ~no buffer space available~ problem;
*) ipsec - support IPv4 over IPv6 and vice versa;
*) pppoe - report correctly number of active links;
*) updated timezone information;
*) many fixes for CRS managed switch functionality -
particularly improved VLAN support, port isolation, defaults;
*) added trunk support for CRS switches;
*) added policing support for CRS switches;
*) www - added support for HTTP byte ranges;
*) lte - provide signal strength using snmp and make 'info once' work in console;

Ticket#2014031766000331
6.10 BUG: user-manager profile limitation can not add profile limitation on command line when default admin customer are renamed, because missing "owner=" parameter.

This bug is still present on last official 6.11.

Still exist on 6.12rc1 2014-04-02
I try the other 2 bug I have discovered later

Still exist on 6.12rc1 (2014-Apr-07 09:04):

*) updated timezone information;

[admin@TestPlace] > /system clock print 
            time: 15:37:53
            date: apr/15/2014
  time-zone-name: Etc/GMT-3
      gmt-offset: +03:00

ros code

[admin@auto] /system clock> set time-zone-name=Europe/Minsk
[admin@auto] /system clock> print
            time: 15:56:32
            date: apr/15/2014
  time-zone-name: Europe/Minsk
      gmt-offset: +03:00

*) www - added support for HTTP byte ranges;

*) www - added support for HTTP byte ranges;

That sounds interesting. Can someone give me a link to the doc's on that?

*) www - added support for HTTP byte ranges;

That sounds interesting. Can someone give me a link to the doc's on that?

Sorry, had missed this before. Did you submit a ticket? I wonder how we missed this.

Chupaka, why don't you just use your city? That one works always

l2tp - fixed ~no buffer space available~ problem;

just had to restart the device 4 hours ago because of "no buffer space avail".

l2tp - fixed ~no buffer space available~ problem;

no buffer problem still seems to persist in 6.12.
but this time it's not related to l2tp. i have a box with GRE over IPSec tunnels
(~80 tunnels) and run BGP over them.
just had to restart the device 4 hours ago because of "no buffer space avail".

just had to restart the device 4 hours ago because of "no buffer space avail".

Hm... 6.12 was officially announced less then 4 hours ago...

*) lte - provide signal strength using snmp and make 'info once' work in console;

rextended, please do NOT re-post all the fixed issues here. Post only NOT fixed issues if you find any. Thanks!

Anyone tried DHCP server on VLAN with this ? Is all fine now ?

6.12 completely broke my ipsec/l2tp tunnels. Not sure what the problem is at this point, but i'll be moving back to 6.11 until i figure it out..

6.12 completely broke my ipsec/l2tp tunnels. Not sure what the problem is at this point, but i'll be moving back to 6.11 until i figure it out..

Interesting. Mine are working just fine.

Try yourself and post the result.

Try yourself and post the result.

Sorry, unable to comply. Every version since 6.5 has been a huge disappointment so far resulting major outages. Cannot risk that production environment device. To be honest this "try yourself and post result" attitude got me thinking, that maybe I should fix it myself, too. Or simply not use DHCP maybe ?

CRS test unit on 6.12 runs sweet as.

6.12 broke my CRS's, had to go into serial console to reset configuration and build the config as new, system just hangs after updating.

Another CRS hangs even after the reset-configuration, im trying to reproduce it so i can get an supout (if that works at least, since the switch disables ALL ports when it hangs).

/interface print

6.12 broke my CRS's, had to go into serial console to reset configuration and build the config as new, system just hangs after updating.

Another CRS hangs even after the reset-configuration, im trying to reproduce it so i can get an supout (if that works at least, since the switch disables ALL ports when it hangs).

I too am working on a reproducible config that breaks the CCR. I hope to be able to post something soon.

/interface ethernet
set [ find default-name=ether2 ] master-port=ether1
set [ find default-name=ether3 ] master-port=ether1
set [ find default-name=ether4 ] master-port=ether1
set [ find default-name=ether5 ] master-port=ether1
set [ find default-name=ether6 ] master-port=ether1
set [ find default-name=ether7 ] master-port=ether1
set [ find default-name=ether8 ] master-port=ether1
set [ find default-name=ether9 ] master-port=ether1
set [ find default-name=ether10 ] master-port=ether1
set [ find default-name=ether11 ] master-port=ether1
set [ find default-name=ether12 ] master-port=ether1
set [ find default-name=ether13 ] master-port=ether1
set [ find default-name=ether14 ] master-port=ether1
set [ find default-name=ether15 ] master-port=ether1
set [ find default-name=ether16 ] master-port=ether1
set [ find default-name=ether17 ] master-port=ether1
set [ find default-name=ether18 ] master-port=ether1
set [ find default-name=ether19 ] master-port=ether1
set [ find default-name=ether20 ] master-port=ether1
set [ find default-name=ether21 ] master-port=ether1
set [ find default-name=ether22 ] master-port=ether1
set [ find default-name=ether23 ] master-port=ether1
set [ find default-name=ether24 ] master-port=ether1
set [ find default-name=sfp1 ] master-port=ether1
/interface vlan
add interface=ether1 vlan-id=1
add interface=ether1 vlan-id=1000
/interface ethernet switch
set forward-unknown-vlan=no
/interface ethernet switch vlan
add ports=ether1,ether2,switch1-cpu vlan-id=1
add ports=ether23,ether24 vlan-id=1000

/interface ethernet switch ingress-vlan-translation
add new-customer-vid=1 ports=ether1,ether2
add new-customer-vid=1000 ports=ether23,ether24

NTP Client seems to still have an issue(as of 6.11, v6.10 had no issues) on MT Metals 2SHPn's(WILL NOT SET System clock time).
My RB951G(v5.26) on the same subnet with the same NTP config has no issue with setting the system time.
Think it might be Supout.rif time... !

CRS test unit on 6.12 runs sweet as.

You did not have to reset the configuration ?

6.12 broke my CRS's, had to go into serial console to reset configuration and build the config as new, system just hangs after updating.
Another CRS hangs even after the reset-configuration, im trying to reproduce it so i can get an supout (if that works at least, since the switch disables ALL ports when it hangs).

I was running a 6.12rc and it was working fine. Upgraded to 6.12 release and it hung on reboot, and comes up with all ports disabled. I can login at the serial console but commands like

Code: Select all

/interface print

just hang. Reset-configuration works (eventually) but putting my config back breaks it after a reboot.

I too am working on a reproducible config that breaks the CCR. I hope to be able to post something soon.

Anyone tried DHCP server on VLAN with this ? Is all fine now ?

Is the DHCP server problem for vlans fixed?

@bawolek
http://wiki.mikrotik.com/wiki/Manual:CR ... s#Trunking

ros code

/ip address
add address=172.16.16.8/24 interface=ether24 network=172.16.16.0
/interface ethernet
set [ find default-name=sfp1 ] master-port=ether24
set [ find default-name=ether1 ] master-port=ether24
set [ find default-name=ether2 ] master-port=ether24
set [ find default-name=ether3 ] master-port=ether24
set [ find default-name=ether4 ] master-port=ether24
set [ find default-name=ether5 ] master-port=ether24
set [ find default-name=ether6 ] master-port=ether24
set [ find default-name=ether7 ] master-port=ether24
set [ find default-name=ether8 ] master-port=ether24
set [ find default-name=ether9 ] master-port=ether24
set [ find default-name=ether10 ] master-port=ether24
set [ find default-name=ether11 ] master-port=ether24
set [ find default-name=ether12 ] master-port=ether24
set [ find default-name=ether13 ] master-port=ether24
set [ find default-name=ether14 ] master-port=ether24
set [ find default-name=ether15 ] master-port=ether24
set [ find default-name=ether16 ] master-port=ether24
set [ find default-name=ether17 ] master-port=ether24
set [ find default-name=ether18 ] master-port=ether24
set [ find default-name=ether19 ] master-port=ether24
set [ find default-name=ether20 ] master-port=ether24
set [ find default-name=ether21 ] master-port=ether24
set [ find default-name=ether22 ] master-port=ether24
set [ find default-name=ether23 ] master-port=ether24

/interface ethernet switch
set drop-if-invalid-or-src-port-not-member-of-vlan-on-ports="ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8,ether9,ether10,\
    ether11,ether12,ether13,ether14,ether15,ether16,ether17,ether18,ether19,ether20,ether21,ether22,ether23,ether24" \
    forward-unknown-vlan=no
/interface ethernet switch egress-vlan-tag
add tagged-ports=ether24 vlan-id=59
/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=59 ports=ether1 sa-learning=yes
/interface ethernet switch vlan
add ports=ether1,ether24 vlan-id=59

Anyone tried DHCP server on VLAN with this ? Is all fine now ?

Is the DHCP server problem for vlans fixed?

what was the problem? I have a CCR with DHCP Servers on VLANs, it worked fine on v6.7 and it works now on v6.12

New export code of the above if put into 6.12:

Code: Select all

/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=701 ports=ether2 sa-learning=yes
/interface ethernet switch egress-vlan-translation
add customer-vid=701 new-customer-vid="(unknown)" ports=ether2

If more than one entry is in the egress field with "(unknown)" the router will freeze on bootup during the "Starting services" display output on the LCD.

Old VLAN code working on 6.11:

Code: Select all

/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=701 ports=ether2 sa-learning=yes
/interface ethernet switch egress-vlan-translation
add customer-vid=701 new-customer-vid=0 ports=ether2

This correctly exports on a CRS still running 6.11.

New export code of the above if put into 6.12:

Code: Select all

/interface ethernet switch ingress-vlan-translation
add customer-vid=0 new-customer-vid=701 ports=ether2 sa-learning=yes
/interface ethernet switch egress-vlan-translation
add customer-vid=701 new-customer-vid="(unknown)" ports=ether2

If more than one entry is in the egress field with "(unknown)" the router will freeze on bootup during the "Starting services" display output on the LCD.

ros code

/interface ethernet switch egress-vlan-translation
add customer-vid=701 new-customer-vid="(unknown)" ports=ether2

after upgrade from 6.11 to 6.12 the IPSEC tunnels not working any more. I have downgraded back to 6.11 and now i am able to make connections to my IPSEC VPN tunnels.
I have defined the the configuration of the IPSEC VPN tunnels since version 5. So since then i have never change anything in the configuration.

Good job devs team now with the latest update the usb power is much more stable I have almost 1 day uptime of a usb 3g modem where on <=6.11 it was a nightmare no more than 2hours of uptime

I had to reset to defaults and reconfigure, then no more crashing.

RB2011UAS stops responding some hours after upgrade from 6.11 to 6.12.
The System is used as a l2tp/ipsec dialin Router with Radius.

The System is placed in a Colocation Center, I'm actually waiting for some Info or a powercycle from the Centers Support Staff.

The Router was pretty stable up to RouterOS 6.7, after that it becomes a nightmare.

I had to reset to defaults and reconfigure, then no more crashing.

That is the secret to fixing many user level issues. The parsing engine is really to blame for most troubles.

Anyone tried DHCP server on VLAN with this ? Is all fine now ?

Is the DHCP server problem for vlans fixed?

what was the problem? I have a CCR with DHCP Servers on VLANs, it worked fine on v6.7 and it works now on v6.12

SSTP problems still persist:

We have SSTP server-client interconnections between 6 MT routers, all of which share *exactly* the same settings. After upgrading them to v6.12, some pairs would connect without problems, others however would disconnect after roughly one minute, mostly returning a "negotiation timeout" on the server side. There was no obvious pattern, some pairings would work, others simply wouldn't. PPP profile encryption is set to "no", but "yes" failed just as well. Changing keepalive timeouts on both sides had no visible effect, nor had disabling certificate verification.

We are now back to v6.6, having already tried most in between versions...

...
22:45:09 sstp,ppp,info sstp-out1: connected 
22:47:08 sstp,ppp,info sstp-out1: terminating... - conn timeout 
22:47:08 sstp,ppp,info sstp-out1: disconnected 
22:47:08 sstp,ppp,info sstp-out1: initializing... 
22:47:08 sstp,ppp,info sstp-out1: connecting... 
22:47:09 sstp,ppp,info sstp-out1: authenticated 
22:47:10 sstp,ppp,info sstp-out1: connected 
22:49:09 sstp,ppp,info sstp-out1: terminating... - conn timeout 
22:49:09 sstp,ppp,info sstp-out1: disconnected 
22:49:09 sstp,ppp,info sstp-out1: initializing... 
22:49:09 sstp,ppp,info sstp-out1: connecting... 
22:49:10 sstp,ppp,info sstp-out1: authenticated 
22:49:11 sstp,ppp,info sstp-out1: connected
...

OpenVPN server doesn't work! The same TLS failed error in log as it was in 6.11. Downgrade to 6.10

What about CAPsMAN (wireless-fp package): is it still beta or production-stable?

What's new in CAPsMAN 6.12?

What about CAPsMAN (wireless-fp package): is it still beta or production-stable?

Wireless test package which includes the new CAPsMAN feature (Controlled AP system manager).

Anyone from Mikrotik support can give just a word about CAPsMAN ?

http://forum.mikrotik.com/viewtopic.php?f=7&t=82032
http://wiki.mikrotik.com/wiki/Manual:CAPs_Manager

I was running a 6.12rc and it was working fine. Upgraded to 6.12 release and it hung on reboot, and comes up with all ports disabled. I can login at the serial console but commands like

Code: Select all

/interface print

just hang. Reset-configuration works (eventually) but putting my config back breaks it after a reboot.

I too am working on a reproducible config that breaks the CCR. I hope to be able to post something soon.

I am experiencing the very same problem. The switch seems to run fine with the default config, but as soon as I add some vlan features (ingress vlan translation and egress vlan translation) works for a few minutes and then hangs. It also keeps hanging at the boot, responds to the console but it doesn't execute "/print interface ethernet".

I'm working to generate a supout.rif.

I already send support.rif to support, waiting to anwser...

There is still a bug in RouterOS 6.12 that was introduced in RouterOS 6.11 regarding bridge filter rules. I've found if you create bridge filter rules specifying an interface, the interface shown will go into hidden/minimized state in Winbox. The interface is still there and bridge filter is working but there is this hidden effect that is happening.

Create the bridge filter rule with bridge/interface specified. Double click on that same rule you had just created. There is a drop down arrow (menu field collapse/expand arrow) specifying the interface it will show as minimized, vs having that drop down arrow always maximized showing you what is applied on that rule.

RouterOS 6.x don`t have "/interface ethernet poe" command?
My RB from MUM Italy still looks like that

ros code

[admin@MATRIX] /system package> print
Flags: X - disabled 
 #   NAME                     VERSION                    SCHEDULED              
 0   routeros-mipsbe          6.12                                              
 1   system                   6.12                                              
 2 X ipv6                     6.12                                              
 3   wireless                 6.12                                              
 4   hotspot                  6.12                                              
 5   dhcp                     6.12                                              
 6 X mpls                     6.12                                              
 7 X routing                  6.12                                              
 8   ppp                      6.12                                              
 9   security                 6.12                                              
10   advanced-tools           6.12                                              
11   user-manager             6.12                                              
12   ntp                      6.12
[admin@MATRIX] /system routerboard> print
       routerboard: yes
             model: RB951Ui-2HnD
     serial-number: [...]
  current-firmware: 3.14
  upgrade-firmware: 3.14
[admin@MATRIX] /interface ethernet poe> print
            ;;; PPPoE client
          name: ether5
       poe-out: auto-on
  poe-priority: 10

I've tried this a few times today with 6.12 and it's not just print in the interface section that will cause it to lock up, exporting config also causes the device to hard lock up.
Should add I started with a clean configuration and then applied the config bit by bit, the entire config was accepted without error but lockups occurred when printing out to confirm it had been interpreted.

DHCP on VLAN was also working on 6.11.. I am using it right now without problems. I reported that back in 6.11 released topic..

There is still a bug in RouterOS 6.12 that was introduced in RouterOS 6.11 regarding bridge filter rules. I've found if you create bridge filter rules specifying an interface, the interface shown will go into hidden/minimized state in Winbox. The interface is still there and bridge filter is working but there is this hidden effect that is happening.

Create the bridge filter rule with bridge/interface specified. Double click on that same rule you had just created. There is a drop down arrow (menu field collapse/expand arrow) specifying the interface it will show as minimized, vs having that drop down arrow always maximized showing you what is applied on that rule.

+1

regards
Ros

SSTP problems still persist:

We have SSTP server-client interconnections between 6 MT routers, all of which share *exactly* the same settings. After upgrading them to v6.12, some pairs would connect without problems, others however would disconnect after roughly one minute, mostly returning a "negotiation timeout" on the server side. There was no obvious pattern, some pairings would work, others simply wouldn't. PPP profile encryption is set to "no", but "yes" failed just as well. Changing keepalive timeouts on both sides had no visible effect, nor had disabling certificate verification.

We are now back to v6.6, having already tried most in between versions...

Any issues with CCR reported on 6.12?

RouterOS 6.x don`t have "/interface ethernet poe" command?
My RB from MUM Italy still looks like that

Elmer, devi andate in interface / ethernet / ether10 / PoE

ros code

[admin@MATRIX] /system package> print
Flags: X - disabled 
 #   NAME                     VERSION                    SCHEDULED              
 0   routeros-mipsbe          6.12                                              
 1   system                   6.12                                              
 2 X ipv6                     6.12                                              
 3   wireless                 6.12                                              
 4   hotspot                  6.12                                              
 5   dhcp                     6.12                                              
 6 X mpls                     6.12                                              
 7 X routing                  6.12                                              
 8   ppp                      6.12                                              
 9   security                 6.12                                              
10   advanced-tools           6.12                                              
11   user-manager             6.12                                              
12   ntp                      6.12
[admin@MATRIX] /system routerboard> print
       routerboard: yes
             model: RB951Ui-2HnD
     serial-number: [...]
  current-firmware: 3.14
  upgrade-firmware: 3.14
[admin@MATRIX] /interface ethernet poe> print
            ;;; PPPoE client
          name: ether5
       poe-out: auto-on
  poe-priority: 10

How about poe firmware upgrade, still showing 0.0 version...

Normis, you need another list of bugs, should we name a few?

Why mikrotik cannot keep official buglist on their webpage with report date and expected solution version? Also the improvement list and expected delivery version would be good. It should be centalized so everyone could know what is going on so we can plan our own actions.

Of course. Therefore it should be only in your hands. But actualized for us to let us know.

RB2011UAS issues after upgrade to v6.12:
- Ports are flapping. There is a very short outage every few minutes. SNMP monitoring agents on servers sends tons of alerts. There is no RX/TX errors, but there are packet lost even on LAN.

Ticket#2014042266000552

I have a very basic configuration involving VRFs:

Code: Select all

/ip address
add address=192.168.1.1/24 interface=ether2 network=192.168.1.0
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid disabled=no \
    interface=ether1
/ip route
add distance=1 gateway=192.168.1.1 scope=10
/ip route vrf
add interfaces=ether2 routing-mark=VRF

The interface with DHCP client receives an address in the 192.168.1.0/24 network which is perfectly legal.

If, however, it gets such an address major issues arise:

Packets that whould be going to the default route (in the main table) are dropped as if the default is missing.

Code: Select all

[admin@BACO] > ping 8.8.8.8
HOST                             SIZE TTL TIME  STATUS
                                                no route to host
                                                no route to host
    sent=2 received=0 packet-loss=100%

[admin@BACO] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADC  192.168.1.0/24     192.168.1.1     ether2                    0
 1 ADC  192.168.1.0/24     192.168.1.143   ether1                    0

Adding an explicit /32 to 8.8.8.8 does not help.

add a dst=0.0.0.0/0 to Your route add?

You are missing default GW, and cannot Reach anyting else than Your 192 net.

[admin@BACO] > /ip route print
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0  DC  192.168.1.0/24     192.168.1.1     ether2                  255
 1 ADS  0.0.0.0/0                          192.168.1.1               0
 2 ADC  192.168.1.0/24     192.168.1.143   ether1                    0

[admin@BACO] > ping 8.8.8.8   
HOST                                     SIZE TTL TIME  STATUS                 
                                                        no route to host       
                                                        no route to host     

add a dst=0.0.0.0/0 to Your route add?

You are missing default GW, and cannot Reach anyting else than Your 192 net.

No, I'm not missing it, I forgot to re-enable the DHCP client default route after trying to add a static default route. The issue remains.

Code: Select all

[admin@BACO] > /ip route print
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0  DC  192.168.1.0/24     192.168.1.1     ether2                  255
 1 ADS  0.0.0.0/0                          192.168.1.1               0
 2 ADC  192.168.1.0/24     192.168.1.143   ether1                    0

[admin@BACO] > ping 8.8.8.8   
HOST                                     SIZE TTL TIME  STATUS                 
                                                        no route to host       
                                                        no route to host     

SSTP problems still persist:

We have SSTP server-client interconnections between 6 MT routers, all of which share *exactly* the same settings. After upgrading them to v6.12, some pairs would connect without problems, others however would disconnect after roughly one minute, mostly returning a "negotiation timeout" on the server side. [...]

does yor default Routing table or Your vrf tabel have the Gateway?

I scheduled a script I /system reboot at dawn to uninstall a package that is not used "wireless" in the morning just gone all pppoe-outs, vpls and bridges and all interfaces again be named as factories ether1 ... ether13 was using version 6.12 on a RB1100AH​​, then went back to version 5.26 that this seemingly more stable...

b) now I noticed when setting the "keepalive-timeout" on the client to same value the connection starts reconnecting every "keepalive-timeout" x 2, so setting the keepalive timeout to 10 for example it starts to reconnect every 20 seconds

I scheduled a script I /system reboot at dawn to uninstall a package that is not used "wireless" in the morning just gone all pppoe-outs, vpls and bridges and all interfaces again be named as factories ether1 ... ether13 was using version 6.12 on a RB1100AH​​, then went back to version 5.26 that this seemingly more stable...

do you use IGMP proxy or PIM?

does yor default Routing table or Your vrf tabel have the Gateway?

The defaul route is installed in the main table by the DHCP client. A static route does the same, however.

The VRF is pretty empty, just an interface with a single static IP address.


BTW, if I disable the interface in the VRF and release the DHCP acquired address it, sometimes, start working. If I boot with the interface in the VRF altready disable and enable it afterwise it works.

It's clearly a bug.

In 6.12 ver. is not stable work NSTREME from new wireless+capsman package.

After downgrade to 6.9 links work fine again.

Any issues with CCR reported on 6.12?

Ticket#2014041966000282

pppoe client present into the list of eoip interface, and some new eoip interface disappear.
Seems a problem of mismatch interface id. Very weird bahavior.

regards
Ros

In 6.12 ver. is not stable work NSTREME from new wireless+capsman package.

After downgrade to 6.9 links work fine again.

On my home router (RB951G) v6.12 is crashing every few days, since installed.
I cannot recommend to use it in production.

There is still a bug in RouterOS 6.12 that was introduced in RouterOS 6.11 regarding bridge filter rules. I've found if you create bridge filter rules specifying an interface, the interface shown will go into hidden/minimized state in Winbox. The interface is still there and bridge filter is working but there is this hidden effect that is happening.

Create the bridge filter rule with bridge/interface specified. Double click on that same rule you had just created. There is a drop down arrow (menu field collapse/expand arrow) specifying the interface it will show as minimized, vs having that drop down arrow always maximized showing you what is applied on that rule.

There is still a bug in RouterOS 6.12 that was introduced in RouterOS 6.11 regarding bridge filter rules. I've found if you create bridge filter rules specifying an interface, the interface shown will go into hidden/minimized state in Winbox. The interface is still there and bridge filter is working but there is this hidden effect that is happening.

Create the bridge filter rule with bridge/interface specified. Double click on that same rule you had just created. There is a drop down arrow (menu field collapse/expand arrow) specifying the interface it will show as minimized, vs having that drop down arrow always maximized showing you what is applied on that rule.

+1

RB2011UAS issues after upgrade to v6.12:

- Dynamic routing protocols registered routes wrongly after first start. A simple reboot resolves this issue.
- Ports are flapping. There is a very short outage every few minutes. SNMP monitoring agents on servers sends tons of alerts. There is no RX/TX errors, but there are packet lost even on LAN.
- Inconsistent / bad auto negotiation. Router side see 1Gbps or 10Mbps Half, server runs on 100Mbps FD. After disabling/enabling ports change advertised rates, then restore to default (select all) it looks normally on both side. - (1Gbps FD)

BUG: Enable ipv6 on rb751u-2hnd, reboot, then suddenly wlan interface disabled and all wireless configuration reset to default itself.

BUG: Enable ipv6 on rb751u-2hnd, reboot, then suddenly wlan interface disabled and all wireless configuration reset to default itself.

BUG: Enable ipv6 on rb751u-2hnd, reboot, then suddenly wlan interface disabled and all wireless configuration reset to default itself.

do you use tunnel broker?
same case with me, process suddenly rise to 100%, then some interface (usually bridge,mesh,vlan) missing, disable IPv6 package solve this problem

Primary BUG: Webfig created script or schedule do not have ftp, winbox, api rights and are impossible to set that rights on Webfig.

Mac addresses were always saved in backups, with v5.x, too.

i cannot upgrade to 6.x, i tried dragging the lastest packages and also netinstall too but no use,

any idea why it shows only 5.26 as latest version?

and any solution to update to ver 6x?

jan/02/1970 00:00:15 interface,info ether2 link up (speed 100M, full duplex)
jan/02/1970 00:00:16 interface,info ether1 link up (speed 10M, half duplex)
jan/02/1970 00:00:19 interface,info ether2 link down
jan/02/1970 00:00:20 interface,info ether1 link down
jan/02/1970 00:00:24 interface,info ether2 link up (speed 100M, full duplex)
jan/02/1970 00:00:25 interface,info ether1 link up (speed 10M, half duplex)
jan/02/1970 00:00:29 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:33 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:34 interface,info ether4 link down
jan/02/1970 00:00:37 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:38 interface,info ether4 link down
jan/02/1970 00:00:41 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:44 interface,info ether4 link down
jan/02/1970 00:00:45 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:00:45 interface,info ether8 link down
jan/02/1970 00:00:46 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:47 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:47 interface,info ether8 link down
jan/02/1970 00:00:49 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:52 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:00:53 interface,info ether10 link down
jan/02/1970 00:00:56 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:00:57 interface,info ether10 link down
jan/02/1970 00:00:57 interface,info ether12 link up (speed 100M, full duplex)
jan/02/1970 00:00:59 interface,info ether4 link down
jan/02/1970 00:00:59 interface,info ether5 link down
jan/02/1970 00:01:00 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:01:01 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:01 interface,info ether10 link down
jan/02/1970 00:01:02 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:01:03 interface,info ether5 link down
jan/02/1970 00:01:04 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:01:07 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:10 interface,info ether5 link down
jan/02/1970 00:01:13 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:46 interface,info ether5 link down
jan/02/1970 00:01:49 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:59 interface,info ether5 link down
jan/02/1970 00:02:02 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:03 interface,info ether5 link down
jan/02/1970 00:02:06 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:26 interface,info ether5 link down
jan/02/1970 00:02:28 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:34 interface,info ether5 link down
jan/02/1970 00:02:39 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:40 interface,info ether5 link down
jan/02/1970 00:02:43 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:44 interface,info ether5 link down
jan/02/1970 00:02:50 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:06:05 interface,info ether5 link down
jan/02/1970 00:06:08 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:10:45 interface,info ether5 link down
jan/02/1970 00:10:48 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:17:34 interface,info ether5 link down
jan/02/1970 00:17:37 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:19:35 interface,info ether10 link down
jan/02/1970 00:19:37 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:19:45 interface,info ether10 link down
jan/02/1970 00:19:47 interface,info ether10 link up (speed 1G, full duplex)

Were saved and restored always.

Sorry marcus, apparently those routers are different in some way, because I also can verify that they are saved and restored in v5 also.

This is one of the reasons to use "export" file instead of backup

CRS125-24G-1S

Massive port flapping on CRS125 on latest 6.12 and 6.13rc7. Email sent with supout to support.

jan/02/1970 00:00:15 interface,info ether2 link up (speed 100M, full duplex)
jan/02/1970 00:00:16 interface,info ether1 link up (speed 10M, half duplex)
jan/02/1970 00:00:19 interface,info ether2 link down
jan/02/1970 00:00:20 interface,info ether1 link down
jan/02/1970 00:00:24 interface,info ether2 link up (speed 100M, full duplex)
jan/02/1970 00:00:25 interface,info ether1 link up (speed 10M, half duplex)
jan/02/1970 00:00:29 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:33 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:34 interface,info ether4 link down
jan/02/1970 00:00:37 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:38 interface,info ether4 link down
jan/02/1970 00:00:41 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:44 interface,info ether4 link down
jan/02/1970 00:00:45 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:00:45 interface,info ether8 link down
jan/02/1970 00:00:46 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:47 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:47 interface,info ether8 link down
jan/02/1970 00:00:49 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:52 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:00:53 interface,info ether10 link down
jan/02/1970 00:00:56 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:00:57 interface,info ether10 link down
jan/02/1970 00:00:57 interface,info ether12 link up (speed 100M, full duplex)
jan/02/1970 00:00:59 interface,info ether4 link down
jan/02/1970 00:00:59 interface,info ether5 link down
jan/02/1970 00:01:00 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:01:01 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:01 interface,info ether10 link down
jan/02/1970 00:01:02 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:01:03 interface,info ether5 link down
jan/02/1970 00:01:04 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:01:07 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:10 interface,info ether5 link down
jan/02/1970 00:01:13 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:46 interface,info ether5 link down
jan/02/1970 00:01:49 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:59 interface,info ether5 link down
jan/02/1970 00:02:02 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:03 interface,info ether5 link down
jan/02/1970 00:02:06 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:26 interface,info ether5 link down
jan/02/1970 00:02:28 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:34 interface,info ether5 link down
jan/02/1970 00:02:39 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:40 interface,info ether5 link down
jan/02/1970 00:02:43 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:44 interface,info ether5 link down
jan/02/1970 00:02:50 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:06:05 interface,info ether5 link down
jan/02/1970 00:06:08 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:10:45 interface,info ether5 link down
jan/02/1970 00:10:48 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:17:34 interface,info ether5 link down
jan/02/1970 00:17:37 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:19:35 interface,info ether10 link down
jan/02/1970 00:19:37 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:19:45 interface,info ether10 link down
jan/02/1970 00:19:47 interface,info ether10 link up (speed 1G, full duplex)

Hello,
this VLAN Bug known?

Hello,
this VLAN Bug known?

I encountered a similar problem. I'm helped :
1. Backup configuration
2. Reset to defaults
3. Restore configuration

Hello,
this VLAN Bug known?

I encountered a similar problem. I'm helped :
1. Backup configuration
2. Reset to defaults
3. Restore configuration

You use mikrotik x86?

I've bug with eoip interface disappear with some pppoe registrations. Is impossible to add new eoip tunnel with pppoe server on it.

When release 6.13 ?
or where I can download RC?

thans in advance.
IM

Hello,
this VLAN Bug known?
I encountered a similar problem. I'm helped :
1. Backup configuration
2. Reset to defaults
3. Restore configuration


You use mikrotik x86?

I'm use 1100AHx2 . After upgrade (fw 2.6 => 3.10, os 6.10 => 6.12) i'm detect several problems
1. Several ip adress link <unknown> interface
2. One ipip tunnel down after connect pptp client to router
3. /int ipip shows one pptp client - Bug?

After full reset configuration and restore - router worked!

CCR1016-12G
Strange vlan issue.
Added vlan 1286 on ether12 via winbox.
Close winbox, reopen, vlan now missing.
Under vlans tab in interfaces setup, there is a ppp-XXXX dynamic user listed??
Seems like the vlan interface name / index however mikrotik does it gets corrupted.

Resetted board to defaults, restored config from rsc export. Same result.
Downgraded to 6.7 and all seems well again.

Could not create supout.rif, as this unit was in production at the time and clients was going crazy.
Will try and recreate again and log ticket.

As a reference I have had issues with 6.12 and using the SSTP VPN.

After upgrading clients can connect but it will not pass VPN traffic (No changes to the configuration at all).

I have since rolled back to 6.10 and it is working again perfectly.

If anyone wants me to send logs feel free to send a message.

I'm not found in 6.12 /certificate sign-ca . How do I get sign-ca ?

Please read description of "sign" command
http://wiki.mikrotik.com/wiki/Manual:Sy ... neral_Menu

CA certificates are created if key-usage=key-cert-sign set in the template.

can someone confirm this bug on x86 ??

Hi,

I can see the same here for 3 sstp links, always a reconnect after 2 minutes saying "terminating... - conn timeout" in the logs of the client.

A link from Windows to the router using sstp seems not to be reset after 2 minutes.

Question I need to put on windows 8.1 ROS.
Unfortunately can not see network interfaces with Hyper-V.
Is ROS in general 6.x adapters work with Hyper-V?

CRS125-24G-1S

Massive port flapping on CRS125 on latest 6.12 and 6.13rc7. Email sent with supout to support.

jan/02/1970 00:00:15 interface,info ether2 link up (speed 100M, full duplex)
jan/02/1970 00:00:16 interface,info ether1 link up (speed 10M, half duplex)
jan/02/1970 00:00:19 interface,info ether2 link down
jan/02/1970 00:00:20 interface,info ether1 link down
jan/02/1970 00:00:24 interface,info ether2 link up (speed 100M, full duplex)
jan/02/1970 00:00:25 interface,info ether1 link up (speed 10M, half duplex)
jan/02/1970 00:00:29 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:33 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:34 interface,info ether4 link down
jan/02/1970 00:00:37 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:38 interface,info ether4 link down
jan/02/1970 00:00:41 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:44 interface,info ether4 link down
jan/02/1970 00:00:45 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:00:45 interface,info ether8 link down
jan/02/1970 00:00:46 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:47 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:00:47 interface,info ether8 link down
jan/02/1970 00:00:49 interface,info ether8 link up (speed 100M, full duplex)
jan/02/1970 00:00:52 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:00:53 interface,info ether10 link down
jan/02/1970 00:00:56 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:00:57 interface,info ether10 link down
jan/02/1970 00:00:57 interface,info ether12 link up (speed 100M, full duplex)
jan/02/1970 00:00:59 interface,info ether4 link down
jan/02/1970 00:00:59 interface,info ether5 link down
jan/02/1970 00:01:00 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:01:01 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:01 interface,info ether10 link down
jan/02/1970 00:01:02 interface,info ether4 link up (speed 1G, full duplex)
jan/02/1970 00:01:03 interface,info ether5 link down
jan/02/1970 00:01:04 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:01:07 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:10 interface,info ether5 link down
jan/02/1970 00:01:13 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:46 interface,info ether5 link down
jan/02/1970 00:01:49 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:01:59 interface,info ether5 link down
jan/02/1970 00:02:02 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:03 interface,info ether5 link down
jan/02/1970 00:02:06 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:26 interface,info ether5 link down
jan/02/1970 00:02:28 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:34 interface,info ether5 link down
jan/02/1970 00:02:39 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:40 interface,info ether5 link down
jan/02/1970 00:02:43 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:02:44 interface,info ether5 link down
jan/02/1970 00:02:50 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:06:05 interface,info ether5 link down
jan/02/1970 00:06:08 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:10:45 interface,info ether5 link down
jan/02/1970 00:10:48 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:17:34 interface,info ether5 link down
jan/02/1970 00:17:37 interface,info ether5 link up (speed 1G, full duplex)
jan/02/1970 00:19:35 interface,info ether10 link down
jan/02/1970 00:19:37 interface,info ether10 link up (speed 1G, full duplex)
jan/02/1970 00:19:45 interface,info ether10 link down
jan/02/1970 00:19:47 interface,info ether10 link up (speed 1G, full duplex)

Just checked our two CRS125-24G-1S, with ros 6.12, have the same issue

CRS125-24G-1S




Same problem stands also for me and for the very same device.

Did an upgrade of 2 ccr1036 to 6.12 from 6.10

went well, i had held of because of other reports.

All seems well.

I have lost my netflow info... strange still works on my x86 VM's not on my on ccr....

It looks like wireless "tx-power-mode=card-rates" is not supported anymore... however, the command still exists.
Does anyone know why?

P.S. Not sure if it's from v6.12 or before, since I upgraded from v6.0...

It looks like wireless "tx-power-mode=card-rates" is not supported anymore... however, the command still exists.
Does anyone know why?

P.S. Not sure if it's from v6.12 or before, since I upgraded from v6.0...

Same here.. isn't Card Rates better than All rates Fixed mode? i don't think it was intended to be disabled..

Hi,

I can see the same here for 3 sstp links, always a reconnect after 2 minutes saying "terminating... - conn timeout" in the logs of the client.

A link from Windows to the router using sstp seems not to be reset after 2 minutes.



SSTP driving me crazy... why is it so unreliable. We have have x86 concentrator sitting in a datacenter, and about 50 sites connecting back to it, for sending netflow data, and for weeks some sstp clients work, then one day when they reconnect, they timeout after 2 minutes over and over again... and some other site starts working again normally.

Did an upgrade of 2 ccr1036 to 6.12 from 6.10

went well, i had held of because of other reports.

All seems well.

I have lost my netflow info... strange still works on my x86 VM's not on my on ccr....

Have you tried going into netflow and disabling the netflow then click ok.

Then go back in and turn it back on and see if you get your netflow data back.

I found my Netflow data playing up but it has seemed to come back after I tried this.

Regards
Alexander

Strange bug on CCR1036-12G-4S with ROS 6.12:
After 8 new vlan added, some vlan disappeared after a short time. IPv4 addresses and other features on these vlan show as "unknown" interface.
I try to add them again but getting error "this interface already exist".

Anyone else got similar problems?

Question I need to put on windows 8.1 ROS.
Unfortunately can not see network interfaces with Hyper-V.
Is ROS in general 6.x adapters work with Hyper-V?

Mikrotik support told me to ground the switch, did that and the port still flapping.

ROS 6.12 RB2011. no buffer space available... Network doesn't work. After reboot everything ok. I tried to update the firmware but does not help.

Hi guys.
Can confirm that RIP seems to be behaving erratic when propagating connected routes between version 5.26 and 6.12.

I would like to tender my resignation to the Mikrotik Beta testing program. V6 Sucks. Period.
Please do me a favor and PM me when version 6 is useable.

Please do me a favor and PM me when version 6 is useable.

ROS 6.12 RB2011. no buffer space available... Network doesn't work. After reboot everything ok. I tried to update the firmware but does not help.

Same problem here as well after uptime of 4 weeks....

09:51:01 l2tp,info first L2TP UDP packet received from xxx.xxx.xxx.xxx
09:51:01 l2tp,ppp,info,account coaxial logged in, 172.16.12.186
09:51:02 l2tp,ppp,info <l2tp-coaxial>: authenticated
09:51:02 l2tp,ppp,info <l2tp-coaxial>: connected
10:16:41 l2tp,ppp,info <l2tp-coaxial>: terminating... - disconnected
10:16:41 l2tp,ppp,info,account coaxial logged out, 1540 2978822 33503749 30339 31998
10:16:41 l2tp,ppp,info <l2tp-coaxial>: disconnected
10:18:16 system,info,account user xxx logged in via local

[xxx@rt-office.xxxxxxxx.net] > /ping 8.8.8.8
HOST SIZE TTL TIME STATUS
132 (No buffer space available)
132 (No buffer space available)
sent=2 received=0 packet-loss=100%

[xxx@rt-office.xxxxxxxx.net] > /sys reboot
Reboot, yes? [y/N]:
y
system will reboot shortly

ROS 6.12 RB2011. no buffer space available... Network doesn't work. After reboot everything ok. I tried to update the firmware but does not help.

Same problem here as well after uptime of 4 weeks....

Same here, seems to be tied to L2TP/IPSec since I started experiencing this when I set up L2TP/IPSec access and started using it. Happened to me on 6.10 and 6.12.

BEFORE EXIT 6.13 PLEASE FIX THIS BUG (present also on the last 6.13rc23):

BUG: THE PACKAGE CAN NOT BE DISABLED OR UNINSTALLED AFTER FIRST INSTALL WITH NETINSTALL.


EDIT: FIXED!!!

Code: Select all

What's new in 6.13 (2014-May-15 16:03)::
*) console - comments are now accepted where new command can start, that is,
    where '/' or ':' characters can be used to start new command, e.g.
	/interface { # comment until the end of the line
	    print
	}
*) backup - backups by default are encrypted now (with user password).
   To use backup on older versions, you should disable encryption with dont-encrypt
   flag when creating it;
*) files with '.sensitive.' in the filename require 'sensitive'
    permission to manipulate;
*) lcd - reduce CPU usage when displaying static screens;
*) l2tp - fixed occasional server lockup;
*) pptp - fixed memory leak;
*) sstp - fixed crashes;

Issues so far on CCR-1009. Switch menu still missing from Winbox, its available on cli.
Upgrading from 6.13rc* to 6.13 failed, instant CCR crash, had to Netinstall to get it installed.