v6.33.5 [current] is released!

Chupaka · Fri Jan 15, 2016 4:06 pm

huh... so, there IS 64-bit version for PCs?..

ros_x86_64.gif

honzam · Fri Jan 15, 2016 4:28 pm

I completely understand that MT do not waste time to test newer releases on these old boards.

Yes I agree. But why Mikrotik not give any warning? Thus it seems that for mipsle everything is fine, which is not!
http://forum.mikrotik.com/viewtopic.php ... 14#p515831

lgkahn · Fri Jan 15, 2016 11:46 pm

this new release made y 1016g unuseable.. afer reboot couldn't even get in the router locally.. anyone have info how to flash back to the 6.33.3 packages assuming I can reset the box and get back in.

thanks

lgkahn · Sat Jan 16, 2016 1:16 am

this new release made y 1016g unuseable.. after reboot couldn't even get in the router locally.. anyone have info how to flash back to the 6.33.3 packages assuming I can reset the box and get back in.

thanks

The configuration had two ip addresses a static public ip ie 173.
and a private 192 ip..

both ips would not ping or reach the router after the upgrade and winbox showed nothing..

i was able to reset the router and netinstall the older 6.33.3 version and reload my save..
if someone in support wants a copy of my backup to try and debug what happened please let me know at
kahn@lgk.com or 603-490-7476 cell est usa.

It could also have been a firewall issue as i am using this in bridging mode with a firewall but not sure..

cheeze · Sat Jan 16, 2016 1:20 am

huh... so, there IS 64-bit version for PCs?..
ros_x86_64.gif

Holy crap...

Mikrotik peeps....is 6.33.5 the 64 bit release for x86?

Can I PLEASE PLEASE PLEEEEEEEASE ask for carefulness here....and if possible can this kind of change be done not on a bugfix but on a feature release?

If anything can an 64-bit build be put along side a 32-bit build? That way one can choose either?

If Mikrotik is choosing to just go straight up full 64-bit release....please give us the chance to have a 32-bit release and a 64-bit release. If that is no possible then please, make the 64-bit release only on a feature release.

Chupaka · Sat Jan 16, 2016 2:17 am

I downgraded to v6.32.x — it shows x86_64 too

It's old good virtual machine on ESXi host

texnet · Sun Jan 17, 2016 12:23 am

Please address when the issue "Hotspot doesn't work with VLAN use-ip-firewall-for-vlan=yes" will be fixed. I have been working on a whitelist using the Hotspot Walled-Garden and fought with it for several days before I found this post http://forum.mikrotik.com/viewtopic.php?t=102697 After setting use-ip-firewall-for-vlan to no the Hotspot started working although the Walled-Garden isn't working for https sites.

Please advise.

nedeleav · Sun Jan 17, 2016 2:00 am

Problem with open vpn clients.

jan/17/2016 01:39:40 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:39:57 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:40:11 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:40:17 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping

fantomvs · Sun Jan 17, 2016 5:21 pm

Hi,I don't understand where I can download The Dude,can someone help me?

G2Dolphin · Sun Jan 17, 2016 5:25 pm

Hi,I don't understand where I can download The Dude,can someone help me?

New version of Dude is a ROS package for x86, CHR and tile devices. Select "Release candidate" chain and a proper architecture, there will be "The Dude server/client" links.

Cha0s · Sun Jan 17, 2016 6:06 pm

If I login via SSH then logout, the connection stays in 'Active users' forever apparently.

Cha0s · Sun Jan 17, 2016 6:20 pm

huh... so, there IS 64-bit version for PCs?..

On my installation it shows x86 and the build is the same as yours.

andersonlich · Mon Jan 18, 2016 3:12 am

Screen Shot 2016-01-18 at 8.15.51 AM.png

does any body having problem using PPPoE client that, PPPoE client (mikrotik v6.33.5) using this version does'nt get automatic DNS from PPPoE Server Mikrotik CCR1036 v6.33.5.

Thank you.

Mon Jan 18, 2016 7:19 am

about x86_64 and RouterOS v6.x. I had this situation on one of my boxes

there was one version released with first CHR, that accidentally allowed to switch to 64bit Kernel (winbox option was not removed), problem was it was a mistake and many different features didn't work (especially drivers). Those who enabled that Kernel now have it permanently even through updates. You need to Netinstall the box to get it back to normal.

kubco2 · Mon Jan 18, 2016 10:29 am

We have released 6.33.5 version.
*) netwatch - make work with ping time-out more precise;

What was changed exactly?
I was waiting for fix with timeouts but I cant find difference in 6.33.3 and 6.33.5, both realeases timed out instantly(on check interval) in both netwatch config:

/tool netwatch print detail 
Flags: X - disabled 
 0   host=8.8.8.8 timeout=15s interval=5s since=jan/18/2016 09:27:50 status=down 
     up-script="" down-script="" 

 1   host=8.8.8.8 timeout=15s interval=50s since=jan/18/2016 09:28:20 status=down 
     up-script="" down-script=""

/ip firewall filter print 
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; test
      chain=output action=drop dst-address=8.8.8.8 log=no log-prefix=""

spippan · Mon Jan 18, 2016 10:56 am

Problem with open vpn clients.

jan/17/2016 01:39:40 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:39:57 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:40:11 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:40:17 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping

happend to show up on rOS v6.33.2 and 6.32 i guess, too. at least i saw and see those "infos" regularly, still OVPN working well

emils · Mon Jan 18, 2016 11:29 am

What was changed exactly?
I was waiting for fix with timeouts but I cant find difference in 6.33.3 and 6.33.5, both realeases timed out instantly(on check interval) in both netwatch config:
Code: Select all
/tool netwatch print detail 
Flags: X - disabled 
 0   host=8.8.8.8 timeout=15s interval=5s since=jan/18/2016 09:27:50 status=down 
     up-script="" down-script="" 

 1   host=8.8.8.8 timeout=15s interval=50s since=jan/18/2016 09:28:20 status=down 
     up-script="" down-script=""

/ip firewall filter print 
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; test
      chain=output action=drop dst-address=8.8.8.8 log=no log-prefix="" 

Timeout value is more precise now. E.g. if you have ping response of 12ms from 8.8.8.8, you can set Netwatch timeout to 13ms and the host will be "up". Previously you had to round the value up to tenth (20ms in this example) for host to be considered "up".

What fix exactly were you looking forward to?

steger · Mon Jan 18, 2016 2:37 pm

hey there,
i am playing a bit bith v6-pd.
as far as i have seen the routerboards gets the prefix but there is no "way" to build on base of the v6-pd an hostadress.

example:
i am receiving: 2001:68C:21F8:999::3:/64 and want to Setup an gw address 2001:68C:21F8:999::3:1/64.
as far as i have seen there is no way to do it automatically?

is this still a bug? or rather an featurerequest?

thank you!

christian

Mon Jan 18, 2016 3:43 pm

If you need gateway to the ISP enable add-default-route.

IF you mean to set up your router as gateway, then simply add address /ipv6 address add address=::1/64 from-pool=<your_pool_name>

steger · Mon Jan 18, 2016 3:52 pm

If you need gateway to the ISP enable add-default-route.

IF you mean to set up your router as gateway, then simply add address /ipv6 address add address=::1/64 from-pool=<your_pool_name>

great! this is something i was missing. - i am talking about the customer perspective.. the default-route is already installed.

thank you!

christian

nedeleav · Mon Jan 18, 2016 8:34 pm

Hello.

Please post your open vpn client config!

What router os are you using ?

Problem with open vpn clients.

jan/17/2016 01:39:40 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:39:57 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:40:11 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:40:17 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
happend to show up on rOS v6.33.2 and 6.32 i guess, too. at least i saw and see those "infos" regularly, still OVPN working well

scampbell · Mon Jan 18, 2016 11:07 pm

Oh and switch menu still missing on RB3011 Winbox Not in 6.34rc34 yet either FYI
6.34rc36 still missing Switch menu, Master Port on Interface General Tab & CPU Clock on System/Resources in WinBox. As well as not supporting Hardware Encryption yet!

I tried connecting to my RB3011 via Winbox 2.218 and the switch menu appears !! The ability to set master ports etc also seems to work.

Is this a bug with Winbox 3.0 or RoS - not sure ??

Tested with RoS 6.34RC36

dexlaine · Tue Jan 19, 2016 4:15 am

Sir,

Upon upgrade to 6.33.5

this comes out...

Cha0s · Tue Jan 19, 2016 4:55 am

I believe the 00:00:00:00:00:00 ARP entries are the incomplete ARP entries mentioned in the changelog.

*) arp - show incomplete ARP entries;

DaxStox · Tue Jan 19, 2016 10:25 am

HI,
THE CREATION OF SUPOUT.RIF FILE DOSNT WORK FINE. I TRIED SEVERAL TIMES BY USING THE COMMAND MENU "MAKE SUPOUT.RIF" AND THE EFFECT IS THE ROUTER DISCONNECT AND AFTER THE FILE IS NOT GENERATE COMPLETELY, JUST ONLY 24 KB.

DIsconnectionDuringCreateSupout.JPG

Tue Jan 19, 2016 10:35 am

Try the cli command. Could be finishing even when you disconnect. Also connecting via ip makes much stable connection than via mac.
By the way the last stable version is 6.32.3. If you don't have positive reason to, don't bother with 6.33.x so far.

Ansy · Tue Jan 19, 2016 2:12 pm

HI,
THE CREATION OF SUPOUT.RIF FILE DOSNT WORK FINE. I TRIED SEVERAL TIMES BY USING THE COMMAND MENU "MAKE SUPOUT.RIF" AND THE EFFECT IS THE ROUTER DISCONNECT AND AFTER THE FILE IS NOT GENERATE COMPLETELY, JUST ONLY 24 KB.

I wonder how much is CPU load just while supout.rif creating?
This can be the reason for disconnect, then reboot caused by watchdog timer stopped pinging some host...

spippan · Tue Jan 19, 2016 3:20 pm

EDIT: oh sry .. the CLIENT config ... client config at the bottom!

Hello.

Please post your open vpn client config!

What router os are you using ?

Problem with open vpn clients.

jan/17/2016 01:39:40 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:39:57 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:40:11 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
jan/17/2016 01:40:17 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,pptp duplicate packet, dropping
happend to show up on rOS v6.33.2 and 6.32 i guess, too. at least i saw and see those "infos" regularly, still OVPN working well

productively i'm using 6.33.5 on a RB2011
i also get some ovpn messages (below) but still works good and i have a quite stable (when not manually disconnecting it lasts 24h - until i get a new dyn. WAN IP from ISP) ovpn connection (depending on the underlying connection of course)

here the messages i get (but these were there even BEFORE 6.33.5):

jan/18/2016 17:58:22 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,warning packet with wrong keyID 1, expected 2, dropping
jan/18/2016 17:58:22 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,warning packet with wrong keyID 1, expected 2, dropping
jan/18/2016 20:05:46 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,warning duplicate packet, dropping
jan/18/2016 23:11:36 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,warning duplicate packet, dropping
jan/19/2016 13:17:41 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,warning packet with wrong keyID 1, expected 2, dropping
jan/19/2016 13:17:41 ovpn,debug,error,,,,,,,,,l2tp,info,,debug,,,critical,,,,,,,,,,,,,warning packet with wrong keyID 1, expected 2, dropping

today i also made a "lab setup" with GNS3 and rOS (CHR) 6.34.rc36 where i also successfully connected two virtual rOS router via OVPN (SHA1/AES256)

here the config of my RB2011 rOS 6.33.5:

/ppp profile
add bridge=LAN-bridge dns-server=8.8.8.8,8.8.4.4 local-address=10.20.30.1 name=VPN-sp only-one=no remote-address=vpn_pool use-encryption=yes use-upnp=no

/ppp secret
add name=spippan password=*** profile=VPN-sp remote-address=10.20.30.200 service=ovpn

/interface ovpn-server server
set auth=sha1 certificate=ovpn-sp-server.crt_0 cipher=aes256 default-profile=VPN-sp enabled=yes keepalive-timeout=30 require-client-certificate=yes

/ip firewall filter print where dst-port~"1194"
Flags: X - disabled, I - invalid, D - dynamic 
 0    chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=VPN_stage4 address-list=OVPN_blacklist address-list-timeout=1w dst-port=1194 log=yes 
      log-prefix="ovpn_blacklisting>" 

 1    chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=VPN_stage3 address-list=VPN_stage4 address-list-timeout=1m dst-port=1194 log=no 
      log-prefix="" 

 2    chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=VPN_stage2 address-list=VPN_stage3 address-list-timeout=1m dst-port=1194 log=no 
      log-prefix="" 

 3    chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=VPN_stage1 address-list=VPN_stage2 address-list-timeout=1m dst-port=1194 log=no 
      log-prefix="" 

 4    chain=input action=add-src-to-address-list connection-state=new protocol=tcp address-list=VPN_stage1 address-list-timeout=1m dst-port=1194 log=no log-prefix="" 

 5    ;;; ***allow OpenVPN port
      chain=input action=accept connection-state=new protocol=tcp dst-port=1194 src-address-list=!OVPN_blacklist log=no log-prefix=""

################# CLIENT config (Mac OS X Tunnelblick) #################
################# also working on iPhone6 and Windows 10 Pro ###########

client
dev tun
proto tcp-client
remote *OVPN SERVER*
tls-client
port 1194 

user nobody
group nogroup

# comp-lzo # Do not use compression. It doesn't work with RouterOS

# More reliable detection when a system loses its connection.
ping 15
ping-restart 45
ping-timer-rem
persist-tun
persist-key

# Silence  the output of replay warnings, which are a common false
# alarm on WiFi networks.  This option preserves the  security  of
# the replay protection code without the verbosity associated with
# warnings about duplicate packets.
mute-replay-warnings

# Verbosity level.
# 0 = quiet, 1 = mostly quiet, 3 = medium output, 9 = verbose
verb 9

cipher AES-256-CBC
auth SHA1
pull

auth-user-pass
route-nopull
route 192.168.1.0 255.255.255.0 10.20.30.1
route 10.20.30.0 255.255.255.0 10.20.30.1

# I rather like to use ONE file with everything in it

<ca>
-----BEGIN CERTIFICATE-----
***
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
***
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN RSA PRIVATE KEY-----
***
-----END RSA PRIVATE KEY-----
</key>

hngjared · Tue Jan 19, 2016 8:38 pm

Unable to downgrade firmware from 3.24 on powerpc OS on 1100ahx2. I've verified on 3 separate units.

I was however able to downgrade FW on rb850x2.

Regular OS downgrades fine.

Is there any work around or is this a known issue that will be fixed at some point?

Thank you!

kubco2 · Wed Jan 20, 2016 1:00 am

What fix exactly were you looking forward to?

Thank you for explanation. I was hoping in fixing longer timeouts. E.g. my previous example:

both realeases timed out instantly(on check interval) in both netwatch config:

/tool netwatch print detail 
Flags: X - disabled 
 0   host=8.8.8.8 timeout=15s interval=5s since=jan/18/2016 09:27:50 status=down 
     up-script="" down-script="" 

 1   host=8.8.8.8 timeout=15s interval=50s since=jan/18/2016 09:28:20 status=down 
     up-script="" down-script=""

/ip firewall filter print 
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; test
      chain=output action=drop dst-address=8.8.8.8 log=no log-prefix=""

I think correct should be to change state after timeout.

MTusewk · Wed Jan 20, 2016 8:57 pm

Wildcards are not supported in certificate CN.
Is this a change from previous versions? I use a wildcard certificate for SSTP on 6.30.
Not sure how ot worked for you but officially such feature was never implemented.

Meaning if I use a wildcard certificate for MikroTik SSTP server, SSTP will not work? If that's the case then can this feature be added please? Because having a certificate for each host inside of a domain name is very expensive?

paoloaga · Fri Jan 22, 2016 11:04 am

On SXT SA5 and SXT SA5 ac, 50% of the times the command:

/system reset-configuration no-defaults=yes keep-users=no run-after-reset=script.rsc

doesn't execute the script, and the SXT remains with the empty configuration.

spippan · Fri Jan 22, 2016 11:12 am

On SXT SA5 and SXT SA5 ac, 50% of the times the command:

/system reset-configuration no-defaults=yes keep-users=no run-after-reset=script.rsc

doesn't execute the script, and the SXT remains with the empty configuration.

that happens, when you have an error in your RSC
or let's say ... an entry which cannot be exec'd any longer

e.g. RSC worked in 6.33.2 but is no longer able to be exec'd in 6.33.5 because some "rOS layout changes" for some settings or config./parameter names....

paoloaga · Fri Jan 22, 2016 11:15 am

that happens, when you have an error in your RSC
or let's say ... an entry which cannot be exec'd any longer

e.g. RSC worked in 6.33.2 but is no longer able to be exec'd in 6.33.5 because some "rOS layout changes" for some settings or config./parameter names....

I already double-checked this, I am not a newbie...

and if I import it manually, it works straight on.

I noticed that log shows this:

00:00:25 system,error,critical router was rebooted without proper shutdown
00:00:27 interface,info ether1 link up (speed 1G, full duplex)

so I suppose it's something that crashes during reboot.

spippan · Fri Jan 22, 2016 11:42 am

that happens, when you have an error in your RSC
or let's say ... an entry which cannot be exec'd any longer

e.g. RSC worked in 6.33.2 but is no longer able to be exec'd in 6.33.5 because some "rOS layout changes" for some settings or config./parameter names....
I already double-checked this, I am not a newbie... and if I import it manually, it works straight on.

I noticed that log shows this:

00:00:25 system,error,critical router was rebooted without proper shutdown
00:00:27 interface,info ether1 link up (speed 1G, full duplex)

so I suppose it's something that crashes during reboot.

i was not assuming you're newbie

and even if it was so, just tried to help ; )

just thought about how often it happens to me, that i oversee some little things and because of "such little things" my whole workflow comes to stop.
but as you say, there might not be a problem with the .rsc then.

does this occur on other routerboards also, or did you test it on a different board?

EDIT: sorry i just saw you mentioned already TWO models....

paoloaga · Fri Jan 22, 2016 12:08 pm

just thought about how often it happens to me, that i oversee some little things and because of "such little things" my whole workflow comes to stop.
but as you say, there might not be a problem with the .rsc then.

does this occur on other routerboards also, or did you test it on a different board?

EDIT: sorry i just saw you mentioned already TWO models....

I apply the same procedure to several routerboards, including RB750, RB951_2n, hAP lite, various RB2011, Dynadish 5, SXT Lite 5, SXT Lite 5 AC, and the only ones that don't load the script (only 50% of the times) are the SXT SA5 and SXT SA5 ac.

ghostdog4ever · Fri Jan 22, 2016 12:11 pm

Greetings to everyone!

Sorry for my bad english, I hope you'll understand.

It would be the next problem. There is one RB951G-2HnD device. A day in the 6.33.5 firmware upgraded from what could only be done by wireless package uninstall. This was nothing wrong with the upgrade process is completed successfully. Then, I put the two new MikroTik wireless package. It also is successful, it was not a problem. Then, I could logging on with WinBox, then I logged out and then configure it later.
Since then WinBox can not connect. And this is not entirely true. WinBox was launched. When I connect to the device can see WinBox writes to loging, WinBox disappear and not come to the surface MikroTik setting. The Windows Task Manager under the Processes tab WinBox runs, but the application tab does not appear. If I make it pull out Ethernet cable then turn up again WinBox surface where the connection started. I tested two machines. Already deleted C: \ Users \ Username \ AppData \ Roaming \ Mikrotik \ directory plugins to take off again ( plugin download full or only partially do not know), but nothing. Someone have an idea of it. OS is Windows 7 64 bit Prof.

The device is work, can connect internet etc. , but can not configure.

Thank you in advance for your answers.

spippan · Fri Jan 22, 2016 1:19 pm

just thought about how often it happens to me, that i oversee some little things and because of "such little things" my whole workflow comes to stop.
but as you say, there might not be a problem with the .rsc then.

does this occur on other routerboards also, or did you test it on a different board?

EDIT: sorry i just saw you mentioned already TWO models....
I apply the same procedure to several routerboards, including RB750, RB951_2n, hAP lite, various RB2011, Dynadish 5, SXT Lite 5, SXT Lite 5 AC, and the only ones that don't load the script (only 50% of the times) are the SXT SA5 and SXT SA5 ac.

ok that is quite distinct then

hope you find a solution. best luck!

gabeselig · Fri Jan 22, 2016 11:15 pm

I was running a RB1100x2 with a pppoe client to my ISP and after upgrading from version 6.33.3 to 6.33.5, that pppoe session would never obtain an IP address and would bounce/reinitialize every few seconds. I had to down grade to the bug-fix version (6.32.3) to resolve.

paoloaga · Sat Jan 23, 2016 4:44 am

I was running a RB1100x2 with a pppoe client to my ISP and after upgrading from version 6.33.3 to 6.33.5, that pppoe session would never obtain an IP address and would bounce/reinitialize every few seconds. I had to down grade to the bug-fix version (6.32.3) to resolve.

Set a lower MTU (try 1492, 1480, 1440) on the PPPoE client or ask your ISP to upgrade his router, if it is a Mikrotik running 6.33 through 6.33.3.

Hope this solves your issue.

pcunite · Sat Jan 23, 2016 8:00 am

/system reset-configuration no-defaults=yes keep-users=no run-after-reset=script.rsc

doesn't execute the script, and the SXT remains with the empty configuration.

Sprinkle these in your script and see where it fails.

/log info "SCRIPT: Step 1"

/log info "SCRIPT: Step 2"

etc.

paoloaga · Sat Jan 23, 2016 6:48 pm

Sprinkle these in your script and see where it fails.

/log info "SCRIPT: Step 1"

/log info "SCRIPT: Step 2"

etc.

I always have a verbose log in my scripts, it's the "run-after-reset" that gets ignored, probably because of this:

00:00:25 system,error,critical router was rebooted without proper shutdown

satish143 · Sat Jan 23, 2016 10:15 pm

I have purchased CCS-1036 and upgrade to latest firmware 6.33.5 and found on high traffic getting kernel failure error and system getting reboot every 1 hours. Did anybody experience same issue?

also i have send sup-output file to support and no reply back

I am running following command to check performance.

hping3 --udp --data 1024 --rand-source --flood 192.168.88.1

is there any limitation of this hardware?

p3rad0x · Sun Jan 24, 2016 10:02 am

I upgraded my CCR1036-12G-4S last week to 6.33.5.

While troubleshooting a issue I disabled the firewall rules.

When I enable them, the RB locks up and reboots.

Error Message Kernal Failure, I left it over the night to see if the issue fixes itself.

Got to work the next morning.

100's of phone calls from customers reporting slow speed, no VoIP and no email.

Downgraded to 6.30.1(version that I upgraded from)

All the issues went away.

That was a very bad day

dkmj · Sun Jan 24, 2016 2:36 pm

I get this error trying to upgrade:

ERROR: missing wireless-6.33.5-mipsbe.npk

Works on one side of my link, not on the 'receiving end' of the link (same hardware). Have rebooted multiple times, and downgraded from 6.33.3 to 6.32.5 error persists.

Tips?

Thanks,
peter

Thalid · Sun Jan 24, 2016 10:14 pm

I get this error trying to upgrade:

ERROR: missing wireless-6.33.5-mipsbe.npk

Works on one side of my link, not on the 'receiving end' of the link (same hardware). Have rebooted multiple times, and downgraded from 6.33.3 to 6.32.5 error persists.

Tips?

Thanks,
peter

the pack have been replaced, see earlyer post about this

rakeshalg · Mon Jan 25, 2016 11:38 am

I have RB951 Ui user-manager not work. Os V6.33.5 in winbox and web browser. Plz support me.

Cha0s · Mon Jan 25, 2016 3:39 pm

If I login via SSH then logout, the connection stays in 'Active users' forever apparently.

2421 users and counting

On the 17th when the logins start is when the router was restarted.
So the logins stay there indefinitely.

Mon Jan 25, 2016 3:50 pm

Cha0s - This issue is fixed in 6.34rc version,

DaxStox · Tue Jan 26, 2016 4:11 pm

HI,
THE CREATION OF SUPOUT.RIF FILE DOSNT WORK FINE. I TRIED SEVERAL TIMES BY USING THE COMMAND MENU "MAKE SUPOUT.RIF" AND THE EFFECT IS THE ROUTER DISCONNECT AND AFTER THE FILE IS NOT GENERATE COMPLETELY, JUST ONLY 24 KB.
I wonder how much is CPU load just while supout.rif creating?
This can be the reason for disconnect, then reboot caused by watchdog timer stopped pinging some host...

The CPU load is 100%. The watchdog is disabled.

nezdeshniy · Wed Jan 27, 2016 7:26 pm

Update from 6.33.1 to 6.33.5

CCR1036, CCR1016, 2xCRS226 and have this:

er1.jpg

on CCR1016 and CCR1036

Also have trouble with trunk on CRS226, after i create 7 gropus (2nic in group) switch have drop packets.

Cha0s · Wed Jan 27, 2016 7:28 pm

I believe the 00:00:00:00:00:00 ARP entries are the incomplete ARP entries mentioned in the changelog.

*) arp - show incomplete ARP entries;

scampbell · Wed Jan 27, 2016 7:32 pm

On hAP on several routers all running 6.33.5 we are seeing a problem with the /tool e-mail settings.

If you set the server in Winbox to 1.1.1.1 (say) and then go to the CLI and execute /tool e-mail pring the address entry is blank.

You can only seem to enter the e-mail server address via the CLI. This then displays correctly in Winbox and CLI and it then works

Cha0s · Wed Jan 27, 2016 7:36 pm

On hAP on several routers all running 6.33.5 we are seeing a problem with the /tool e-mail settings.

If you set the server in Winbox to 1.1.1.1 (say) and then go to the CLI and execute /tool e-mail pring the address entry is blank.

You can only seem to enter the e-mail server address via the CLI. This then displays correctly in Winbox and CLI and it then works

I just tested it on an old RB450 and I can confirm that.

nezdeshniy · Wed Jan 27, 2016 7:52 pm

I believe the 00:00:00:00:00:00 ARP entries are the incomplete ARP entries mentioned in the changelog.

*) arp - show incomplete ARP entries;

Then comes my Switches are defective or faulty settings on them . Which section is best to create a theme ?

hapi · Wed Jan 27, 2016 9:47 pm

*) arp - show incomplete ARP entries;

This function is poor. Run the ip scan and fills you arp table zeros. Extremely chaotic.

In addition, mikrotik say that it will not add new features to bug fix? Disappointments, again.

Wed Jan 27, 2016 10:49 pm

In addition, mikrotik say that it will not add new features to bug fix?

6.33 is not a "bugfix only" branch yet.

hapi · Wed Jan 27, 2016 11:29 pm

6.XX.Y – only bug fixes
6.XX – fixes and feature changes

function added to bug fix version:

What's new in 6.33.5 (2015-Dec-28 09:13):

*) arp - show incomplete ARP entries;

hapi · Wed Jan 27, 2016 11:41 pm

show zero mac but ping is ok. After remove zero mac showing real mac address.

arp.PNG

Thu Jan 28, 2016 8:43 am

Yet another confused customer...

6.XX.Y – only bug fixes
6.XX – fixes and feature changes

Wrong. Please check download page, where it is clearly indicated that currently 6.32.3 is "Bugfix only", while 6.33.5 is "Current". The presence of Y in the version number does not mean anything special on its own.

Thu Jan 28, 2016 8:45 am

If you are talking about incomplete ARP entries then understand that this is how all systems work.

They create incomplete ARP entry, try to find MAC of IP address and if they can not, then entry stays like this until time out.

This is fix because these entries have been always. They simply were not shown. They were hidden.

Some of people did experience issue like this:
1) They have, for example, 4000 ARP entries;
2) They see error that ARP table is full bu max-arp-entries=8192.

That was because there were 4192 incomplete ARP entries at the time.

Thu Jan 28, 2016 8:48 am

About version naming - 6.33.5 is version which contains only bug fixes. Channel bugfix contains most trusted bug fix version so far. Current channel does not mean that this is some specific version - any version (6.33, 6.33.5, 634rc) can be released in this channel.

hapi · Thu Jan 28, 2016 10:33 am

ok, I will not have to guess how it was you thought a bug fix. Your screen of the newsletter shows something else and that is that every x.y.z is a bug fix.

Back to problem. Arp table shows zero mac although it actually exists and ping is ok. Already it happened to me a few places see. screen. You'll deal with it?

dkmj · Thu Jan 28, 2016 11:22 am

For those getting the "ERROR: missing wireless-6.33.5-mipsbe.npk"
This pack have been replaced by the wireless-fp

You need to uninstall the old pack and install the new.
Why we start to get this now i domt know my 435 was on 6.30.2 and it just now i got it

Doing it this wayover the wireless is gonna break you wifi so there must be a bether way

What's new in 6.30 (2015-Jul-08 09:07):
*) removed wireless package from routeros bundle package,
new wireless-fp is left in place and wireless-cm2 added as option

#newbieQ So.... I sawed off the branch I was sitting on. remotely removed previous wireless package and lost link a few days ago. Now on site with new packages downloaded to my macbook. connected with ethernet but unit does not resond on the webfig page. How do I best connect and upload the new wireless packages? Which are available locally. I can see unit is up and using its fixed ip address. ip-connectivity but obviously no internet access since link is down.

don't have a pc, have to use web fig to config?

/peter

spippan · Thu Jan 28, 2016 3:57 pm

For those getting the "ERROR: missing wireless-6.33.5-mipsbe.npk"
This pack have been replaced by the wireless-fp

You need to uninstall the old pack and install the new.
Why we start to get this now i domt know my 435 was on 6.30.2 and it just now i got it

Doing it this wayover the wireless is gonna break you wifi so there must be a bether way

What's new in 6.30 (2015-Jul-08 09:07):
*) removed wireless package from routeros bundle package,
new wireless-fp is left in place and wireless-cm2 added as option
#newbieQ So.... I sawed off the branch I was sitting on. remotely removed previous wireless package and lost link a few days ago. Now on site with new packages downloaded to my macbook. connected with ethernet but unit does not resond on the webfig page. How do I best connect and upload the new wireless packages? Which are available locally. I can see unit is up and using its fixed ip address. ip-connectivity but obviously no internet access since link is down.

don't have a pc, have to use web fig to config?

/peter

if you got physical access to the board on site, do a port-check on the device to see what actually is open and then you might be able to narrow the problem (e.g. maybe the port you try to connect on isn't reachable at all)
best use "zenmap"

zenmap on MacOSX (https://nmap.org/dist/nmap-7.01.dmg)

also you can use winbox (for mac: http://joshaven.com/resources/tools/winbox-for-mac/) and its function "Neighbors" to see, if you can access via MAC-Server.

worst-case would be a reset and re-configure procedure

myke1124 · Thu Jan 28, 2016 4:31 pm

dhcpv6-client - fix DNS address assignement;

Any future hope for Windows clients picking up v6 DNS via ND or v6 DHCP-Server or even auto-magic? I still need to set v6 DNS servers manually in Windows. Windows 10 does seem to use v4 DNS server to get v6 resolution. In previous versions of Windows, I noticed it only used v6 DNS servers to get v6 addresses.
The issue has been documented in 2011.
http://forum.mikrotik.com/viewtopic.php?t=48257
I understand that Microsoft should properly adopt the standards. In reality we know that Microsoft expects everyone to adopt to them. Other router manufactures have already started to submit to Microsoft implementations.

Capture.PNG

Sob · Thu Jan 28, 2016 5:16 pm

Any future hope for Windows clients picking up v6 DNS via ND or v6 DHCP-Server or even auto-magic?

I have open ticket about this. It should be already supported, if you just add DHCPv6 server without any pool, but it was broken in 6.34rc39 (confirmed by support) and who knows how long before that. In 6.34rc45 it's a little better, DHCPv6 server now accepts the info request packet and sends a reply, but it does not contain DNS. I'm waiting for confirmation if it's still bug or if it needs some configuration I didn't find.

vahramm · Fri Jan 29, 2016 7:48 am

Hello

I have upgraded my all routers ( for about 70 units) rb450g and rb750 now from some of my clients is coming wrong my MAC 00:00:00:00:00:00
Version 6.34.rc45 is the same result , Please tell me how can i role back to old version 6.32.5 ?

Fri Jan 29, 2016 2:30 pm

Version 6.34 has been released. If you have issues with 6.33.5 then you should try it out:
http://forum.mikrotik.com/viewtopic.php?f=21&t=104317

IvanTB · Fri Jan 29, 2016 3:13 pm

Where can we get this?

What's new in 6.33.6 (2016-Jan-28 12:06):

*) winbox - show properly route-distinguisher for bgp vpn4;
*) winbox - show dhcp server name in dhcp leases;
*) ppp - make CoA work correctly with address-lists;
*) winbox - fixed tab names to correspond to console;
*) winbox - show only actual switch-cpu ports in switch setting combobox;
*) winbox/webfig - fixed version column ordering in ip neighbors list;
*) webfig - fixed switch port "default vlan id" has missing "auto" value;
*) webfig - fixed firewall connection-bytes option;
*) ipsec - fixed kernel failure after underlying tunnel has been disabled/enabled;
*) romon - allow to see device identity if it is longer than 31 character;
*) fastpath - show fp counters in /interface monitor aggregate;
*) bridge firewall - fix chain check (broken since 6.33.2);
*) bridge firewall - fixed crash when jump rule points to disabled custom chain;
*) smb - fix crash when changing user which has open session;
*) address-list - properly remove unused address-lists from drop-downs;
*) fetch - fixed closure after 30 seconds;
*) capsman - fix radius accounting stop message;
*) log - reopen log file if deleted;
*) packing - fix tcp/udp checksums when simple packing is used;
*) tile - fix ipsec freeze after SA updates;
*) upnp - fixed missing in-interface option for dynamic dst-nat rules;
*) tunnel - fix complaining about loop after ~248 days;
*) vrrp - make sure that VRRP gets state on bootup;
*) ppp - fixed rare kernel crash (introduced in v6.33);
*) ppp - do not allow empty name ppp secrets;
*) ssh - fix active user accounting.

Fri Jan 29, 2016 4:52 pm

This is bugfix version that is current in testing state, it is available in archive at the moment.

Who is online