Community discussions

 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Thu May 31, 2018 7:25 am

Xymox - for example, your Netwatch includes this command "/system script run IPSMTP". So are policies write,read,reboot,test or only some of them, only ones that are enabled on this script? For example, no romon policy, no dude policy, etc. And again - this is not 6.43rc version related discussion.
Netwatch problem persist

tested on rb750UP with routeros 6.43RC21

No log error, only log the netwatch up or down, script dont run, no error messages

User owner of the script permissions full

Captura.JPG
MT has said this thread is not the place for Netwatch discussion. So I started a separate thread. viewtopic.php?f=2&t=134538
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Thu May 31, 2018 8:27 am

valera5505 - Seems that we have missed this one. We will remove this menu from this RouterBOARD too;
Xymox - We will fix the problem with upgrades that results into too much disk space consumed;
chechito - viewtopic.php?f=2&t=134538#p665400
Everyone - Please keep this topic related to v6.43rc version since most of the users visit this page based on its subject. If you have other problems or suggestions, then feel free to create new topics or contact us directly through support@mikrotik.com
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Thu May 31, 2018 9:46 am

Everyone who complained about the Netwatch issue - Please see this topic viewtopic.php?f=2&t=134538
 
User avatar
artz
MikroTik Support
MikroTik Support
Posts: 88
Joined: Tue Oct 17, 2017 5:51 pm
Location: Riga
Contact:

Re: v6.43rc [release candidate] is released!

Thu May 31, 2018 10:53 am

*) dhcp - added dynamic IPv4/IPv6 "dual-stack" simple queue support, based on client's MAC address;
*) dhcp - fixed DHCP server stuck in invalid state;
*) dhcpv4-server - added "allow-dual-stack-queue" implementation (CLI only);
*) dhcpv6-server - added "allow-dual-stack-queue" implementation (CLI only);
Could you please explain how to enable this function?
I've looked at wiki, but there are details only about leases and bindings.
Cheers
The wiki has been updated with examples:
https://wiki.mikrotik.com/wiki/Manual:I ... e_limiting
https://wiki.mikrotik.com/wiki/Manual:I ... e_limiting
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Thu May 31, 2018 11:57 am

When router's identity is very long (for example, "xxx-us-east1.c.xxxxxxx-xxxxx.internal"), Backup files are generated via WinBox (if you don't set custom name) with corrupted names (like "&_jw-20180327-1313.backup") - looks like buffer overflow or something :)
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
kez
newbie
Posts: 39
Joined: Tue Jul 05, 2005 4:13 am

Re: v6.43rc [release candidate] is released!

Thu May 31, 2018 5:21 pm

Thanks for that, artz!
However, I couldn't find a way to enable this for the whole server, not just for the static leases/bindings.
Could you please check this?

We are trying this in an IPoE solution via DHCP Option 82 via RADIUS to provide dual-stack network with queues and accounting.
We are almost there!
Cheers
Last edited by kez on Thu May 31, 2018 11:28 pm, edited 1 time in total.
 
User avatar
juliokato
Member Candidate
Member Candidate
Posts: 229
Joined: Mon Oct 26, 2015 4:27 pm
Location: Brazil

Re: v6.43rc [release candidate] is released!

Thu May 31, 2018 8:06 pm

Everyone who complained about the Netwatch issue - Please see this topic viewtopic.php?f=2&t=134538
I only have suggestions for improvement:

viewtopic.php?f=14&t=133179&p=654580&hi ... ch#p654580

Otherwise it is better that it be discontinued because it is possible to do better things using scripts and schedules.
I apologize my grammatical errors, my english not so good, I am not a native speaker.
Wiki is maintained in English. I use Google translator. 8)
 
User avatar
polly
just joined
Posts: 9
Joined: Sun Dec 10, 2017 8:05 pm
Location: Brasil

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 2:14 am

Could anyone give an example of how to connect in the api PHP in the new version of mikrotik v3.43rc21
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 7:53 am

This makes sense, but, a caution is needed.. If you downgrade from 43RC21 to 42.3 you will be locked out, even at the command line. The new authentication is not backward compatible. So you cannot downgrade.

You also cannot copy the 43RC21 config to 42.3 using the copy config command between partitions.

I dont think thats a bug. It makes sense that previous version of the OS cant read the new authentication files.

It would be good if a downgrade converted the new to the old auth. But that sounds complicated..

Just a caution about this as you can get locked out of a router and only a Netinstall will fix it.

I use partitions, so when i got locked out, I just went back to the other partition.
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 11:14 am

Could anyone give an example of how to connect in the api PHP in the new version of mikrotik v3.43rc21
https://wiki.mikrotik.com/wiki/Manual:API#Initial_login
 
schadom
Member Candidate
Member Candidate
Posts: 139
Joined: Sun Jun 25, 2017 2:47 am
Location: Austria

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 11:30 am

Will we ever see BGP4 SNMP MIBs on ROS? Please!
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 11:31 am

Yes, but not in v6. Currently for monitoring you can already use API.
 
User avatar
polly
just joined
Posts: 9
Joined: Sun Dec 10, 2017 8:05 pm
Location: Brasil

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 1:18 pm

Thanks Xymox, but I know that in this version can work the connection with the API has just changed the way the routeros receives the password. I still do not know which change is required to connect in this current version


I use the class https://github.com/BenMenking/routeros- ... .class.php to connect me with the following code on the page

require ('routeros_api.class.php');


$ API = new RoutersAPI ();
$ API-> debug = false;

if ($ API-> connect ($ ip_RB, $ RBUser, $ password_RB)) {

this version no longer works and can not fix the problem at https://wiki.mikrotik.com/wiki/Manual:API#Initial_login.

I think I need help.
 
User avatar
genesispro
Member Candidate
Member Candidate
Posts: 131
Joined: Fri Mar 14, 2014 12:33 pm

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 1:35 pm

Could anyone give an example of how to connect in the api PHP in the new version of mikrotik v3.43rc21
https://wiki.mikrotik.com/wiki/Manual:API#Initial_login
I modified the php file for now this way and it works... it is not detecting prior version... I hope 6.43 comes out soon to keep it like that


public function connect($ip, $login, $password) {
for ($ATTEMPT = 1; $ATTEMPT <= $this->attempts; $ATTEMPT++) {
$this->connected = false;
$PROTOCOL = ($this->ssl ? 'ssl://' : '' );
$context = stream_context_create(array('ssl' => array('ciphers' => 'ADH:ALL', 'verify_peer' => false, 'verify_peer_name' => false)));
$this->debug('Connection attempt #' . $ATTEMPT . ' to ' . $PROTOCOL . $ip . ':' . $this->port . '...');
$this->socket = @stream_socket_client($PROTOCOL . $ip . ':' . $this->port, $this->error_no, $this->error_str, $this->timeout, STREAM_CLIENT_CONNECT, $context);
// pre 6.43
// if ($this->socket) {
// socket_set_timeout($this->socket, $this->timeout);
// $this->write('/login');
// $RESPONSE = $this->read(false);
// if (isset($RESPONSE[0]) && $RESPONSE[0] == '!done') {
// $MATCHES = array();
// if (preg_match_all('/[^=]+/i', $RESPONSE[1], $MATCHES)) {
// if ($MATCHES[0][0] == 'ret' && strlen($MATCHES[0][1]) == 32) {
// $this->write('/login', false);
// $this->write('=name=' . $login, false);
// $this->write('=response=00' . md5(chr(0) . $password . pack('H*', $MATCHES[0][1])));
// $RESPONSE = $this->read(false);
// if (isset($RESPONSE[0]) && $RESPONSE[0] == '!done') {
// $this->connected = true;
// break;
// }
// }
// }
// }
// fclose($this->socket);
// }
// post 6.43
if ($this->socket) {
socket_set_timeout($this->socket, $this->timeout);
$this->write('/login', false);
$this->write('=name=' . $login, false);
$this->write('=password=' . $password);
$RESPONSE = $this->read(false);
if (isset($RESPONSE[0]) && $RESPONSE[0] == '!done') {
$this->connected = true;
break;
}
fclose($this->socket);
}
sleep($this->delay);
}

if ($this->connected) {
$this->debug('Connected...');
} else {
$this->debug('Error...');
}
return $this->connected;
}
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 1:58 pm

You don't have to check version.

* Send /login with username and password in plain text
* if response is with challenge then fall back to old login method
* otherwise check status if login is successful


As an example see how it is done on python example in the wiki
 
User avatar
genesispro
Member Candidate
Member Candidate
Posts: 131
Joined: Fri Mar 14, 2014 12:33 pm

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 3:44 pm

You don't have to check version.

* Send /login with username and password in plain text
* if response is with challenge then fall back to old login method
* otherwise check status if login is successful


As an example see how it is done on python example in the wiki
check version one would need if he has to manage multiple devices prior the change and after like me.

I am managing 500+ sites so my provisioning platform would need to know the routeros version to use the proper login mechanism.

Unless of course I update them all before I change my php file in the production environment
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jun 01, 2018 3:47 pm

As I mentioned you do not need to know version to log in. Fall back to old login procedure if router responds with =ret=.
 
User avatar
polly
just joined
Posts: 9
Joined: Sun Dec 10, 2017 8:05 pm
Location: Brasil

Re: v6.43rc [release candidate] is released!

Sat Jun 02, 2018 2:45 am

thank you very much genesispro
 
npero
Member
Member
Posts: 316
Joined: Tue Mar 01, 2005 1:59 pm
Location: Serbia

Re: v6.43rc [release candidate] is released!

Sat Jun 02, 2018 7:23 am

Based on mrz suggestions I changed API to work with old and new login style.
 if ($this->socket) {
                socket_set_timeout($this->socket, $this->timeout);
                // RouterOS >= 6.43
                $this->write('/login', false);
                $this->write('=name=' . $login, false);
                $this->write('=password=' . $password);
                $RESPONSE = $this->read(false);
                if (isset($RESPONSE[0]) && $RESPONSE[0] == '!done') {
                                //RouterOs < 6.43
                                if  (isset($RESPONSE[1])) {  
                                    $MATCHES = array();
                                    if (preg_match_all('/[^=]+/i', $RESPONSE[1], $MATCHES)) {
                                        if ($MATCHES[0][0] == 'ret' && strlen($MATCHES[0][1]) == 32) {
                                            $this->write('/login', false);
                                            $this->write('=name=' . $login, false);
                                            $this->write('=response=00' . md5(chr(0) . $password . pack('H*', $MATCHES[0][1])));
                                            $RESPONSE = $this->read(false);
                                            if (isset($RESPONSE[0]) && $RESPONSE[0] == '!done') {
                                                $this->connected = true;
                                                break;
                                                }
                                            
                                            }
                                        }   
                                    }
                                else
                                {    
                                    $this->connected = true;
                                    break;
                                }
                            }
                                    
                fclose($this->socket);
            }
Also here is complete api.inc.php file
You do not have the required permissions to view the files attached to this post.
 
nescafe2002
Long time Member
Long time Member
Posts: 617
Joined: Tue Aug 11, 2015 12:46 pm
Location: Netherlands

Re: v6.43rc [release candidate] is released!

Sat Jun 02, 2018 8:28 am

This is really ironic. Introducing unencrypted plain text authentication in 2018.

I wish 6.43rc introduces SCRAM or removes non-SSL api service.
 
LeftyTs
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Thu Nov 03, 2016 2:39 am
Location: Athens, Greece
Contact:

Re: v6.43rc [release candidate] is released!

Sat Jun 02, 2018 9:26 am

I did test upgrade from 5.26 to this version. Just for testing. Everything went well. Upgrade failed for you due to configuration or something like thta. In general it works just fine.
Nothing worked for me either when I upgraded from v5.26 straight to 6.42.3 and I tested it in different platforms with the same exact boot problem. Everything stopped working after the upgrade and you had to use netinstall to recover. However everything worked good when upgrading to bugfix first and then to current. I had no boot problems whatsoever. However I could not get a clean backup when upgrading from bugfix to current. I get always an error so after both upgrades are done you have to do a final step and reset to factory defaults and then copy paste the original rsc file.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Sat Jun 02, 2018 10:30 am

It is not really reasonable to expect a smooth upgrade with such a large version jump. Often things change in configuration and the upgrade
procedure converts existing configuration to new, but it cannot be expected to work when there are many changes in the same area.
So when you really want to do such an upgrade, do it in a couple of steps. First upgrade to an early 6.x release e.g. 6.1 then to a later
release that has been used very widely like 6.29 and then upgrade to 6.40 as there were big changes in 6.41.
From there you can upgrade to 6.42 and it will probably work just fine.
And, keep "current" a bit more regularly. Running such old versions is a security risk, that is widely known in all of the software world.
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Sun Jun 03, 2018 2:22 am

When doing RCs I think its important to do a good job of testing. Testing a big version jump is good for MT to know what happens. HOWEVER that should only be done as a test with the goal of testing a big version jump. I would PLAN for it to fail and a NAND Format and netinstall required. Again the best way to do this kind of thing is with partitions if you your device supports them. That way you just RS232 console boot and pick Y and change back to the working partition and report what went wrong.

I have a disicplene and proceedure I always follow when testing a RC or even a new stable.

1. Make a backup, export compact. Pull both files off router. Copy files to SD card if present so if I have to do a NAND format and netinstall my backup files are still handy.
1. Copy current working partition to the other partition. Copy config to other partition.
2. Make the new partition active and reboot to it. Make sure all is well.
3. Winbox Packages update..
4. Test...
5 If all goes well, then I NAND format and Netinstall the newest version. COpy over the backup or import the export compact.

SOmetimes I simply config the router by hand rather then using a backup. I consider this cleaner and less likely to import anything from a old version that might cause a issue.

I then run this for a while on my own home router and test things.

If all goes well and its a stable release.. I try and NAND format and Netinstall every client router if I can rather then doing a update. I consider this cleaner.

So just updating a old version without a good partition and without Netinstall and a serial cable could well lead to a headache. I consider testing RCs pretty important to MT, so, I try and do the cleanest setups I can. I also have a variety of devices at home I use for testing. I have a CCR1036, a 1009, a 2011 and even a mAP lite. I do all of them and look for issues before rolling things out to my clients.
 
LeftyTs
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Thu Nov 03, 2016 2:39 am
Location: Athens, Greece
Contact:

Re: v6.43rc [release candidate] is released!

Sun Jun 03, 2018 4:09 pm

And, keep "current" a bit more regularly. Running such old versions is a security risk, that is widely known in all of the software world.
Security risk is really not as important as functionality and speed to me in some installations as those old versions are not accessible. I was actually forced to downgrade from current as there is lack of MT support and broken code in later versions of ROS for the dual nstream, besides a few other problems, like the backup error current ROS almost always has. Those old versions have been working rock solid for many years. Sometimes upgrading is not a very wise choice.
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Sun Jun 03, 2018 5:32 pm

I really like the fact that the wheels stay on the car when drive on the highway. Without security being as good as possible someone else than you can use your router to do harm and thanks to you at a higher speed. ;-)
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
LeftyTs
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Thu Nov 03, 2016 2:39 am
Location: Athens, Greece
Contact:

Re: v6.43rc [release candidate] is released!

Sun Jun 03, 2018 5:43 pm

Depends on how well your car is heavily guarded or not. lol
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Mon Jun 04, 2018 8:51 am

We need a netinstall
oops.jpg
You do not have the required permissions to view the files attached to this post.
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Mon Jun 04, 2018 11:59 am

My tire won't survive a caltrop, sometimes a IED is needed if you are have a more secure tire.
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
User avatar
honzam
Forum Guru
Forum Guru
Posts: 2285
Joined: Wed Feb 27, 2008 10:27 pm
Location: Czech Republic

Re: v6.43rc [release candidate] is released!

Mon Jun 04, 2018 2:37 pm

It is possible add this comand into winbox?

/interface ethernet poe settings set ether1-poe-in-long-cable=yes
Thanks
LAN, FTTx, Wireless. ISP operator
 
Kliwer
just joined
Posts: 23
Joined: Thu Feb 06, 2014 11:08 pm

Re: v6.43rc [release candidate] is released!

Mon Jun 04, 2018 4:08 pm

!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
So where is new Windows Bandwidth Test app?
 
User avatar
blue
Member Candidate
Member Candidate
Posts: 265
Joined: Sun Dec 12, 2004 1:48 pm
Location: Serbia

Re: v6.43rc [release candidate] is released!

Mon Jun 04, 2018 5:57 pm

HI,

Please help: after upgrading two NetBox to latest 6.43rc21 I can't access them anymore! Winbox reports "wrong username or password". I access then via Dude, so I know that user/pass is OK. Any idea how to access those devices?

P.S. Previous version was 6.43rc6
Last edited by blue on Mon Jun 04, 2018 6:05 pm, edited 1 time in total.
 
nescafe2002
Long time Member
Long time Member
Posts: 617
Joined: Tue Aug 11, 2015 12:46 pm
Location: Netherlands

Re: v6.43rc [release candidate] is released!

Mon Jun 04, 2018 6:02 pm

Version 6.43rc21 has been released.

MAJOR CHANGES IN v6.43:
----------------------
!) winbox - improved authentication process excluding man-in-the-middle possibility (Winbox v3.14 required);
----------------------

You can find Winbox here: https://mikrotik.com/download
 
User avatar
blue
Member Candidate
Member Candidate
Posts: 265
Joined: Sun Dec 12, 2004 1:48 pm
Location: Serbia

Re: v6.43rc [release candidate] is released!

Mon Jun 04, 2018 6:06 pm

Version 6.43rc21 has been released.

MAJOR CHANGES IN v6.43:
----------------------
!) winbox - improved authentication process excluding man-in-the-middle possibility (Winbox v3.14 required);
----------------------

You can find Winbox here: https://mikrotik.com/download
Thanks. It's working for Winbox, but Dude is still complaining :(
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Tue Jun 05, 2018 8:55 am

I know I have covered this before and Mikrotik has reproduced the issue and is going to issue a fix, but, I have further isolated the issue and wated to report it and mention again the possible danger.

I took a CCR1009-8G-1S-1S+ and split the disc space into 2 partitions, 64MB each.
I Netinstalled 6.42.3.
I winbox upgraded it to 6.43.RC21
Doing this took up too much disc space and now I cannot upgrade or downgrade. To recover it will require a Netinstall or falling back to one partition.

Something is taking up too much disc space on upgrades. This effects all the versions ive tested. Tile, MIPSBE and PPC. Some units have enough disc space where this is not a issue, some devices the OS does not take up the same % of disc space. So this issue effects different devices differently. Ive got a RB1100 and it will run out of space with just 1 partition.

It also seems cumulitive. So if you do stil have room to upgrade or downgrade again, you space becomes even smaller until you eventually cant upgrade or downgrade and netinstall is required.

So watch your disc space.

Mikrotik is top top of this. I just wanted to post another caution and point out its easily reproducable and most likely everybody has this issue to some degree right now.

I also read symptoms that seemed the same over on the 6.42.3 thread, so, this might effect more then the RC. I have not tested that.
 
LeftyTs
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Thu Nov 03, 2016 2:39 am
Location: Athens, Greece
Contact:

Re: v6.43rc [release candidate] is released!

Tue Jun 05, 2018 1:20 pm

How do you watch the space of your default drive? I can't seem to find this anywhere. I can tell from the backup file as it gets larger and larger every time that there is something wrong with the space but how do you know the consistency and reliability of the rest of your files? /System check-installation reports everything ok and the old system check-disk is no longer there.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 05, 2018 2:13 pm

/System check-installation reports everything ok and the old system check-disk is no longer there.
As I wrote in the 6.42.3 thread, the check-installation function does not seem to have the claimed new functionality
to check for unwanted extra files (introduced some versions ago to detect and remove trojans etc).
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Tue Jun 05, 2018 3:22 pm

Version 6.43rc23 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility (Winbox v3.14 required);
----------------------


Other changes in this release:

*) backup - generate proper file name when router identity is longer than 32 symbols;
*) bridge - added ingress filtering options to bridge interface;
*) bridge - added initial Q-in-Q support;
*) capsman - increase timeout for the CAP to CAPsMAN communication;
*) certificate - added "expires-after" parameter;
*) certificate - fixed "add-scep" template existence check when signing certificate;
*) chr - by default enable link state tracking for virtual drivers with "/interface ethernet disable-running-check=no";
*) chr - fixed boot on hosts older than Windows Server 2012 when running CHR on Hyper-V;
*) chr - fixed interface name assign process when running CHR on Hyper-V;
*) chr - fixed MTU changing process when running CHR on Hyper-V;
*) chr - fixed various network hang scenarios when running CHR on Hyper-V;
*) chr - provide part of network interface GUID at the beginning of "bindstr2" value when running CHR on Hyper-V;
*) console - fixed script permissions if script is executed by other RouterOS service;
*) dhcpv6-server - added initial dynamic simple queue support;
*) ipsec - added "responder" parameter for "mode-config" to allow multiple initiator configurations;
*) ipsec - separate phase1 proposal configuration from peer menu;
*) lte - improved modem event processing;
*) ppp - fixed "hunged up" grammar to "hung up" within PPP log messages;
*) ppp - show comments from "/ppp secrets" menu within "/ppp active" menu when client is connected;
*) quickset - added missing wireless "channel-width" settings;
*) quickset - added support for "5ghz-a/n" band when CPE mode is used;
*) quickset - recognize 160 MHz channel as HomeAP mode;
*) romon - fixed RoMON services becoming unavailable after disabled once during active scanning process;
*) supout - added "partitions" section to supout file;
*) switch - added support for port isolation by switch chip;
*) webfig - properly display time interval within Kid Control menu;
*) webfig - properly show NTP clients "last-adjustment" value;
*) winbox - added "poe-fault" LED trigger;
*) winbox - added "secondary-channel" setting to wireless interface if 80 MHz mode is selected;
*) winbox - added missing "dscp" and "clamp-tcp-mss" settings to IPv6 tunnels;
*) winbox - allow to specify full URL in SCEP certificate signing process;
*) winbox - fixed arrow key handling within table filter fields;
*) winbox - properly close session when uploading multiple files to the router at the same time;
*) winbox - removed duplicate "20/40/80MHz" value from "channel-width" setting options;
*) winbox - show "scep-url" for certificates;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - show firmware upgrade message at the bottom of "System/RouterBOARD" menu;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
User avatar
juliokato
Member Candidate
Member Candidate
Posts: 229
Joined: Mon Oct 26, 2015 4:27 pm
Location: Brazil

Re: v6.43rc [release candidate] is released!

Tue Jun 05, 2018 5:03 pm

is there a final period to close this RC and put it into production mode?

I'm waiting to put into production but do not feel safe with it.
I apologize my grammatical errors, my english not so good, I am not a native speaker.
Wiki is maintained in English. I use Google translator. 8)
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Tue Jun 05, 2018 6:48 pm

*) chr - provide part of network interface GUID at the beginning of "bindstr2" value when running CHR on Hyper-V;
What are those bindstr and bindstr2? :shock:
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Tue Jun 05, 2018 8:06 pm

I am impressed. Thanks for listening to us all.
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
th0massin0
Member Candidate
Member Candidate
Posts: 144
Joined: Sun May 11, 2014 4:16 am
Location: Poland

Re: v6.43rc [release candidate] is released!

Tue Jun 05, 2018 11:54 pm

*) lte - improved modem event processing;
is it for SXT LTE?
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 06, 2018 12:55 am

Ive rolled out RC23 on 2 devices. A 2011 and a CCR1016. No obvious issues on a simple SOHO setup.

Interestingly I gained a bunch of disc space.. Not sure if thats a fix or just a random things. I gained on both the above devices. Both devices were Netinstall 6.42.3 > RC21 > RC23..
 
MonkeyDan
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Fri Dec 29, 2017 8:41 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 06, 2018 9:22 am

Does rc23 fix the w60g issues seen in rc19 and rc21?
 
User avatar
oortega
just joined
Posts: 7
Joined: Sat Jan 06, 2018 8:33 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 06, 2018 5:28 pm

You don't have to check version.

* Send /login with username and password in plain text
* if response is with challenge then fall back to old login method
* otherwise check status if login is successful


As an example see how it is done on python example in the wiki
Hello @mrz ,

Reading https://wiki.mikrotik.com/wiki/Manual:API_Python3

Can you please tell me if the function login is compatible with v 6.42 and v 6.43 ?
 def login(self, username, pwd):
        for repl, attrs in self.talk(["/login"]):
            chal = binascii.unhexlify((attrs['=ret']).encode('UTF-8'))
        md = hashlib.md5()
        md.update(b'\x00')
        md.update(pwd.encode('UTF-8'))
        md.update(chal)
        self.talk(["/login", "=name=" + username,
                   "=response=00" + binascii.hexlify(md.digest()).decode('UTF-8') ])
Thanks
 
zyzelis
Member Candidate
Member Candidate
Posts: 212
Joined: Sun Apr 08, 2012 9:25 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 06, 2018 7:31 pm

Does rc23 fix the w60g issues seen in rc19 and rc21?
seems, not. rc23 even worse for LHG. alot disconnects (~50/hour). after roll back to 6.42.3 - rockstable.
 
alexspils
Member Candidate
Member Candidate
Posts: 176
Joined: Thu Jun 05, 2008 8:57 pm

Re: v6.43rc [release candidate] is released!

Thu Jun 07, 2018 12:29 am

any chance to get fully working dude api ?
we need ability to get list from dude of some type devices, for example only switch, radio, etc with its name, ip, note.
for now we ony can get list with device name using cli
 
Tris
just joined
Posts: 2
Joined: Thu Jun 07, 2018 11:37 am

Re: v6.43rc [release candidate] is released!

Thu Jun 07, 2018 11:49 am

Seems like RC23 needs a user to have the winbox permission to allow API logins, rather than the API permission. RC21 worked as previous version (needing API perm only). Is this an intended change?
Log shows "login failure for user apiuser from 172.16.0.xxx via winbox" where api user is in a group with these permissions: ftp, reboot, read, write, policy, test, sniff, sensitive, api
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Thu Jun 07, 2018 12:05 pm

Reading https://wiki.mikrotik.com/wiki/Manual:API_Python3

Can you please tell me if the function login is compatible with v 6.42 and v 6.43 ?
It was last edited a year ago. It's not compatible with 6.43 changes.
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
kez
newbie
Posts: 39
Joined: Tue Jul 05, 2005 4:13 am

Re: v6.43rc [release candidate] is released!

Thu Jun 07, 2018 4:15 pm

*) dhcpv6-server - added initial dynamic simple queue support;
Hello strods!
We are still strugling to do dual-stack queues via DHCP server.
There is no enough information available on Wiki.
Could you help us?

Thanks!
 
User avatar
genesispro
Member Candidate
Member Candidate
Posts: 131
Joined: Fri Mar 14, 2014 12:33 pm

Re: v6.43rc [release candidate] is released!

Fri Jun 08, 2018 11:22 am

I just found another "issue" with the latest version 6.43rc23 the custom default config that I have using the branding tool gets erased.
It resets to mikrotik's defaults.
Even after I downgrade to stable 6.42.3 and reset it again the default configuration of mikrotik comes up... with the previous rc that rc23 (don't remember the number) it wasn't affected.
I hope that it will be fixed before the 6.43 is out!
 
z1022
just joined
Posts: 16
Joined: Wed Jun 06, 2018 5:51 pm

Re: v6.43rc [release candidate] is released!

Sat Jun 09, 2018 1:08 pm

rc23 still have high ping time in hAP ac².
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Sun Jun 10, 2018 11:03 am

Ive lost control of LEDs from scripting. I can control them via terminal.

/system leds set leds=user-led type=off 3
/system leds set leds=user-led type=on 3

These work fine from terminal but do not work in a script.
 
netwpl
newbie
Posts: 25
Joined: Fri Jun 22, 2012 8:09 pm

Re: v6.43rc [release candidate] is released!

Mon Jun 11, 2018 10:50 am

tested winbox auth. with radius (mschapv2) interworking. works like a charm! :)
 
k3dt
newbie
Posts: 29
Joined: Tue Jul 17, 2007 3:37 pm
Location: Czech Republic

Re: v6.43rc [release candidate] is released!

Mon Jun 11, 2018 5:00 pm

Plaintext password in API login? WTF WHY? api-ssl is SLOW as hell.. please change your mind.. its a step backward.
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Tue Jun 12, 2018 3:49 pm

Version 6.43rc27 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility (Winbox v3.14 required);
----------------------


Other changes in this release:

*) dhcpv4-client - fixed DHCP client that was stuck on invalid state;
*) dhcpv4-server - fixed DHCP server that was stuck on invalid state;
*) health - changed "PSU-Voltage" to "PSU-State" for CRS328-4C-20S-4S+;
*) health - fixed incorrect PSU index for CRS328-4C-20S-4S+;
*) ike1 - purge both SAs when timer expires;
*) ipsec - use monotonic timer for SA lifetime check;
*) led - added "dark-mode" functionality for hEX S devices;
*) lte - added additional ID support for SIM7600 modem;
*) lte - added support for Quanta 1k6e modem;
*) lte - improved r11e-LTE and r11e-LTE-US dialling process;
*) lte - improved readings of info command results for the SXT LTE;
*) lte - improved stability of USB LTE interface detection process;
*) ntp - allow to specify link-local address as NTP server;
*) ppp - added support for additional ID for E3531 modem;
*) snmp - added remote CAP count OID for CAPsMAN;
*) snmp - fixed readings for CAPsMAN slave interfaces;
*) usb - fixed power-reset for hAP ac^2 devices;
*) usb - properly detect USB 3.0 flash on RBM33G when jumper is removed;
*) userman - improved unique username generation process when adding batch of users;
*) w60g - added distance measurement (CLI only);
*) w60g - improved link stability;
*) w60g - improved maximum link distance;
*) wireless - improved Nv2 reliability on ARM devices;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
Tris
just joined
Posts: 2
Joined: Thu Jun 07, 2018 11:37 am

Re: v6.43rc [release candidate] is released!

Tue Jun 12, 2018 5:21 pm

The issue I noted in #298 is still occurring in rc27. Is this the best place to raise possible RC bugs, or should I email support?
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Tue Jun 12, 2018 11:13 pm

We are aware about this problem and will try to resolve it as soon as possible.

This is MikroTik users forum. If you want to discuss configuration, changes, etc. with other users, then use forum. If you are sure that there is a problem, then contact support@mikrotik.com directly.
 
Ulum
just joined
Posts: 2
Joined: Wed Jun 13, 2018 10:32 am

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 10:57 am

Bug in 6.43rc23:
  1. Upgrade from previous version to 6.43rc23 when you have /ip ipsec peer proposal with hash-algorithm=sha512
  2. Open this proposal in Winbox. You will see that in Winbox it have checked md5 and sha1, but in the export it have sha512
  3. Set hash algorithm to sha512 through Winbox, now autosup file starts generating
Is this bug fixed in 6.43rc27?
 
blingblouw
Member Candidate
Member Candidate
Posts: 268
Joined: Wed Aug 25, 2010 9:43 am

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 11:50 am

I am still experiencing a problem with the WAP60 on this firmware.

Both client & AP running latest release.

Client connects when ap set to bridge. However when AP set to ap-bridge same client will not connect. No matter which frequency is selected (even the new 64800)
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 12:05 pm

Bug in 6.43rc23:
  1. Upgrade from previous version to 6.43rc23 when you have /ip ipsec peer proposal with hash-algorithm=sha512
  2. Open this proposal in Winbox. You will see that in Winbox it have checked md5 and sha1, but in the export it have sha512
  3. Set hash algorithm to sha512 through Winbox, now autosup file starts generating
Is this bug fixed in 6.43rc27?
Do you have reported this to Mikrotik and if, what is your support ticket id?
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
joserudi
Frequent Visitor
Frequent Visitor
Posts: 66
Joined: Thu Nov 22, 2007 10:16 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 12:19 pm

*) wireless - improved Nv2 reliability on ARM devices;

There are no improvements in this regard, the nv2 protocol in arm devices remains unstable. It continues to have packet losses. At the moment nstreme is the best option.
 
Ulum
just joined
Posts: 2
Joined: Wed Jun 13, 2018 10:32 am

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 2:47 pm

Do you have reported this to Mikrotik and if, what is your support ticket id?
Reported just now. Ticket id is 2018061322004299
 
User avatar
roulyz
just joined
Posts: 11
Joined: Sun Jul 17, 2016 1:00 am
Location: Ivory Coast
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 5:09 pm

I have upgrade my SXT LTE (band 3,7), from ROS 6.42.3 to 6.43RC27.
But after upgrading... I can't get access to my SXT LTE.
Wrong username or password message.
Device is on tower so, difficult to reset device.
What is the problem?
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 5:26 pm

Please read the changelog.
 
LeftyTs
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Thu Nov 03, 2016 2:39 am
Location: Athens, Greece
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 5:41 pm

I have upgrade my SXT LTE (band 3,7), from ROS 6.42.3 to 6.43RC27.
But after upgrading... I can't get access to my SXT LTE.
Wrong username or password message.
Device is on tower so, difficult to reset device.
What is the problem?
Try to recover with MAC telnet if possible. I had the same issue and I was lucky.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 6:19 pm

He simply needs new WinBox
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
LeftyTs
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Thu Nov 03, 2016 2:39 am
Location: Athens, Greece
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 6:44 pm

I wonder if there will ever be a *nixbox as well. Would anyone know if there is any mac telnet client for *nix systems that works with ROS?
 
blingblouw
Member Candidate
Member Candidate
Posts: 268
Joined: Wed Aug 25, 2010 9:43 am

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 6:59 pm

 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 9:07 pm

But that does not yet work with RouterOS 6.43rc. I opened an issue already.
Is there an detail available about mac telnet protocol?
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
owsugde
just joined
Posts: 20
Joined: Thu Oct 06, 2016 5:01 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 13, 2018 10:56 pm

*) w60g - improved link stability;
*) w60g - improved maximum link distance;
Can anyone already quantify this in some way?

I'd like to know, because two NLoS pathways I tried were ever so slightly too far / too faint as of rc21/23. Maybe after some improvements they could actually work.
 
jarda
Forum Guru
Forum Guru
Posts: 7601
Joined: Mon Oct 22, 2012 4:46 pm

Re: v6.43rc [release candidate] is released!

Thu Jun 14, 2018 3:59 am

How could you think that 60g will work without clear line of sight?
 
SergeyMorozov
just joined
Posts: 17
Joined: Sun Apr 22, 2018 9:27 pm

Re: v6.43rc [release candidate] is released!

Thu Jun 14, 2018 9:32 am

How could you think that 60g will work without clear line of sight?
I think no.
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Thu Jun 14, 2018 9:54 am

Looks like LEDs are working from scripting. Thank you :)

No other issues in my SOHO testing with RC27.
 
kugla007
just joined
Posts: 5
Joined: Thu Mar 29, 2018 12:43 pm

Re: v6.43rc [release candidate] is released!

Thu Jun 14, 2018 11:00 am

tested winbox auth. with radius (mschapv2) interworking. works like a charm! :)
Which RADIUS server did you use? Can you post a configuration example?

EDIT: Nevermind, I managed to get it working.
Last edited by kugla007 on Thu Jun 14, 2018 12:08 pm, edited 1 time in total.
 
User avatar
roulyz
just joined
Posts: 11
Joined: Sun Jul 17, 2016 1:00 am
Location: Ivory Coast
Contact:

Re: v6.43rc [release candidate] is released!

Thu Jun 14, 2018 11:50 am

He simply needs new WinBox
I running lastest version Winbox 3.14.
But problem still
 
User avatar
roulyz
just joined
Posts: 11
Joined: Sun Jul 17, 2016 1:00 am
Location: Ivory Coast
Contact:

Re: v6.43rc [release candidate] is released!

Thu Jun 14, 2018 11:51 am

Please read the changelog.
I have read many many time changelog and nothing explicit about solution or notice about this problem
 
mlenhart
Frequent Visitor
Frequent Visitor
Posts: 83
Joined: Mon Oct 30, 2017 11:30 pm

Re: v6.43rc [release candidate] is released!

Thu Jun 14, 2018 10:10 pm


*) w60g - added distance measurement (CLI only);
*) w60g - improved link stability;
*) w60g - improved maximum link distance;
1) distance mesurement in CLI is here since rc19. Has it been improved somehow? Or what is the difference?
3) what is the new maximum link distance for WAP60 and LHG60?

2) I have a 10 meters long test link between 2 LHG60s (YES, I know it too little for LHG60 and can be clearly solved by wireless wire, but unfortunately I do not have possibility for longer distance for testing at the moment and it will be used for 500m "production" link in the near future) and I have to say that link flaps approximately 5 times per day (no rain, no wind, nothing breaking the clear line of sight, no birds flying, no obvious reason for link flap). Can be caused just by the fact it too close to each other? Or is it something what should be checked by MikroTik (maybe a kind of bug)? The link is under continuous iperf3 bi-directional test, where two servers with 1Gbit/s NICs at the end. Result is somewhere between 800-870 Mbit/s for bi-directional TCP connection and PING is somewhere between 5 to 15 ms.
 
OnixJonix
Frequent Visitor
Frequent Visitor
Posts: 58
Joined: Thu Jun 22, 2006 11:35 am
Location: Latvia

Re: v6.43rc [release candidate] is released!

Fri Jun 15, 2018 8:56 am

Big problem...
Updated Mys CCR (to 6,43rc27) an now stucked outside! All is running but cant connect - wrong username or password??? A bit of PANIC!!!

------------------
Sorry! Had two winbox on my pc!! Just need new winbox! Sorry!
 
Kindis
Member Candidate
Member Candidate
Posts: 245
Joined: Tue Nov 01, 2011 6:54 pm

Re: v6.43rc [release candidate] is released!

Fri Jun 15, 2018 9:17 am

Big problem...
Updated Mys CCR (to 6,43rc27) an now stucked outside! All is running but cant connect - wrong username or password??? A bit of PANIC!!!

------------------
Sorry! Had two winbox on my pc!! Just need new winbox! Sorry!
You need Winbox 3.14
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Fri Jun 15, 2018 1:27 pm

Version 6.43rc29 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility (Winbox v3.14 required);
----------------------


Other changes in this release:

*) dhcp - reduced resource usage of DHCP services;
*) ipsec - improved reliability on IPsec hardware encryption for RB1100Dx4;
*) led - added "dark-mode" functionality for SXTsq 5 ac devices;
*) led - use routers uptime as a starting point when turning off LEDs if option was not enabled on boot;
*) sfp - fixed DDM data with SFP+ modules on CRS328-4C-20S-4S+ (introduced in v6.43rc10);
*) sms - do not require "port" and "interface" parameters when sending SMS if already present in configuration;
*) swos - implemented "/system swos" menu that allows to upgrade, reset, save or load configuration and change address for dual-boot CRS devices (CLI only);
*) w60g - improved maximum link distance;
*) w60g - improved RAM memoy allocation processes;
*) wireless - improved Nv2 reliability on ARM devices;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
antonsb
MikroTik Support
MikroTik Support
Posts: 195
Joined: Sun Jul 24, 2016 3:12 pm
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Fri Jun 15, 2018 3:06 pm


1) distance mesurement in CLI is here since rc19. Has it been improved somehow? Or what is the difference?
3) what is the new maximum link distance for WAP60 and LHG60?

2) I have a 10 meters long test link between 2 LHG60s (YES, I know it too little for LHG60 and can be clearly solved by wireless wire, but unfortunately I do not have possibility for longer distance for testing at the moment and it will be used for 500m "production" link in the near future) and I have to say that link flaps approximately 5 times per day (no rain, no wind, nothing breaking the clear line of sight, no birds flying, no obvious reason for link flap). Can be caused just by the fact it too close to each other? Or is it something what should be checked by MikroTik (maybe a kind of bug)? The link is under continuous iperf3 bi-directional test, where two servers with 1Gbit/s NICs at the end. Result is somewhere between 800-870 Mbit/s for bi-directional TCP connection and PING is somewhere between 5 to 15 ms.
1) Yes, there are some improvements - mostly stability
3) We are still working on distance improvements - currently no exact distance date available

2) Too much power, try to remove reflector and turn them in different directions.
There are some improvements in rc 29 as well that may fix this
 
User avatar
roulyz
just joined
Posts: 11
Joined: Sun Jul 17, 2016 1:00 am
Location: Ivory Coast
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jun 15, 2018 4:51 pm

Big problem...
Updated Mys CCR (to 6,43rc27) an now stucked outside! All is running but cant connect - wrong username or password??? A bit of PANIC!!!

------------------
Sorry! Had two winbox on my pc!! Just need new winbox! Sorry!
MIKROTIK please how can we solve this problem?
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jun 15, 2018 4:53 pm

As you can read from your quote, the problem was solved by updating WinBox to the latest version.
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
Haward
just joined
Posts: 10
Joined: Mon Sep 18, 2017 9:56 pm
Location: Czech Republic

Re: v6.43rc [release candidate] is released!

Sun Jun 17, 2018 7:24 pm

Can somebody please recommend stable SW for wireless wire wAP60G ? I have tried many but all are unstable ? (jam after couple of days = hard reset is necessary). It is probably linked with hot weather ... Thank you.
 
antonsb
MikroTik Support
MikroTik Support
Posts: 195
Joined: Sun Jul 24, 2016 3:12 pm
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Mon Jun 18, 2018 9:59 am

Can somebody please recommend stable SW for wireless wire wAP60G ? I have tried many but all are unstable ? (jam after couple of days = hard reset is necessary). It is probably linked with hot weather ... Thank you.
Please provide more details to support@mikrotik.com
 
antonsb
MikroTik Support
MikroTik Support
Posts: 195
Joined: Sun Jul 24, 2016 3:12 pm
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Mon Jun 18, 2018 10:03 am

I am still experiencing a problem with the WAP60 on this firmware.

Both client & AP running latest release.

Client connects when ap set to bridge. However when AP set to ap-bridge same client will not connect. No matter which frequency is selected (even the new 64800)
Do You have level4 license on Bridge device?
 
blingblouw
Member Candidate
Member Candidate
Posts: 268
Joined: Wed Aug 25, 2010 9:43 am

Re: v6.43rc [release candidate] is released!

Mon Jun 18, 2018 10:18 am

Yes I do
 
Jaxworld
just joined
Posts: 4
Joined: Mon Jun 18, 2018 10:22 am

Re: v6.43rc [release candidate] is released!

Mon Jun 18, 2018 10:43 am

We updated our CCR1016-12G and our network seems to be inverted! We can't tell if it's running default configurations somehow, but our whole network is running in a degraded state.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Mon Jun 18, 2018 10:49 am

Congratulations. Now you know that RC versions must not be installed in production environments.

Rollback to the 'current' or 'bugfix' version and be happy.
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
Jaxworld
just joined
Posts: 4
Joined: Mon Jun 18, 2018 10:22 am

Re: v6.43rc [release candidate] is released!

Mon Jun 18, 2018 10:55 am

Sorry, I misread the title. We're actually running 6.42.3 with this issue after discovering a vulnerability in 6.35.2. My apologies.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Mon Jun 18, 2018 11:49 am

Then post details of your problem in appropriate topic.
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 12:45 pm

Version 6.43rc32 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
----------------------


Other changes in this release:

!) winbox - minimal required version is v3.15;
*) api - properly classify API sessions in log;
*) bridge - improved performance when bridge VLAN filtering is used without hardware offloading;
*) chr - enabled promiscious mode (requires to be enabled on host as well) when running CHR on Hyper-V;
*) crs317 - fixed Ethernet inteface stuck on 100 Mbps speed;
*) crs328 - fixed transmit on sfp-sfpplus1 and sfp-sfpplus2 interfaces;
*) crs3xx - do not report SFP interface as running when interface on opposite side is disabled;
*) dude - fixed client auto upgrade (broken since 6.43rc17);
*) export - do not show w60g password on "hide-sensitive" type of export;
*) log - fixed false log warnings about system status after power on for CRS328-4C-20S-4S+;
*) lte - show UICC in correct format for SXT LTE devices;
*) romon - properly classify RoMON sessions in log and active users list;
*) w60g - improved maximal achievable distance;
*) w60g - properly report center status under "tx-sector-info";

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
mlenhart
Frequent Visitor
Frequent Visitor
Posts: 83
Joined: Mon Oct 30, 2017 11:30 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 1:32 pm

*) w60g - improved maximal achievable distance;
what is the new maximum distance for wAP60g and LHG60G?
 
owsugde
just joined
Posts: 20
Joined: Thu Oct 06, 2016 5:01 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 1:40 pm

How could you think that 60g will work without clear line of sight?
That's just wireless PHY basics. The smaller the wavelength gets, the penetrative wave properties decrease rapidly but the reflective ones increase. Think low/medium frequency ≈ broadcast radio (goes literally straight through the ground), very high frequency ≈ visible light (is reflected almost 100% on mirrors or white objects). This is basically the point for having beamforming, too.

You can try it out yourselves. In the office or at home, put two W60s somewhere in the back of different rooms (with the doors open) and even point them in opposite directions. A connection will be established nonetheless in many cases. In the CLI, you will be able to see a connection length considerably longer than the "beeline" distance between the two devices. What you are witnessing is NLoS propagation.

All that said, I have tried out the benefits from rc27 myself. It got me up to 2dB better RSSI for NLoS setups. Not quite enough to get the "big" route going, but it's something. Eager to try out the new rc32. It would just be so neat if I could go NLoS, without having to put a small relay with two additional W60s in the middle.
 
User avatar
genesispro
Member Candidate
Member Candidate
Posts: 131
Joined: Fri Mar 14, 2014 12:33 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 2:19 pm

I upgraded to 6.43rc32 and even using winbox 3.15 login fails!
 
zyzelis
Member Candidate
Member Candidate
Posts: 212
Joined: Sun Apr 08, 2012 9:25 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 2:24 pm

I upgraded to 6.43rc32 and even using winbox 3.15 login fails!
look for problem on your network, for me works fine.
Last edited by zyzelis on Tue Jun 19, 2018 3:27 pm, edited 1 time in total.
 
User avatar
genesispro
Member Candidate
Member Candidate
Posts: 131
Joined: Fri Mar 14, 2014 12:33 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 2:33 pm

I am directly attached to it and still it doesn't work
I upgraded to 6.43rc32 and even using winbox 3.15 login fails!
look problem on your network, for me works fine.
 
User avatar
genesispro
Member Candidate
Member Candidate
Posts: 131
Joined: Fri Mar 14, 2014 12:33 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 3:13 pm

I reset it and now it works...
weird because the password is saved as a favorite in winbox so I wasn't typing anything wrong earlier... and right before the update I used the same favorite to login to it and update it!
 
zyzelis
Member Candidate
Member Candidate
Posts: 212
Joined: Sun Apr 08, 2012 9:25 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 3:29 pm

I reset it and now it works...
weird because the password is saved as a favorite in winbox so I wasn't typing anything wrong earlier... and right before the update I used the same favorite to login to it and update it!
i have observed this weird issue with password in earlier rc. i just changed password before upgrade and not logged in after upgrade with new one, just with old. :)
Last edited by zyzelis on Tue Jun 19, 2018 3:33 pm, edited 1 time in total.
 
zyzelis
Member Candidate
Member Candidate
Posts: 212
Joined: Sun Apr 08, 2012 9:25 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 3:32 pm

Version 6.43rc32 has been released.

*) dude - fixed client auto upgrade (broken since 6.43rc17);
still need to upgrade dude client manually. Client crashes after each upgrade via client ui
 
User avatar
PaulsMT
MikroTik Support
MikroTik Support
Posts: 283
Joined: Tue Feb 10, 2015 3:21 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 4:36 pm

Version 6.43rc32 has been released.

*) dude - fixed client auto upgrade (broken since 6.43rc17);
still need to upgrade dude client manually. Client crashes after each upgrade via client ui
Thank you for a report, but can you please confirm that your Dude client (executed with the administrator rights) auto upgrade was working before 6.43rc17, and does not work in 6.43rc32 ?
 
jarda
Forum Guru
Forum Guru
Posts: 7601
Joined: Mon Oct 22, 2012 4:46 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 7:52 pm

Just sidenote. I don't run dude client with admin rights, only the installer, if necessary.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 19, 2018 8:54 pm

IP->Cloud has disappeared from menu in WebFig and WinBox.
 
jarda
Forum Guru
Forum Guru
Posts: 7601
Joined: Mon Oct 22, 2012 4:46 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 20, 2018 12:56 am

Maybe good way finally.
 
User avatar
juliokato
Member Candidate
Member Candidate
Posts: 229
Joined: Mon Oct 26, 2015 4:27 pm
Location: Brazil

Re: v6.43rc [release candidate] is released!

Wed Jun 20, 2018 2:46 am

:lol:
I apologize my grammatical errors, my english not so good, I am not a native speaker.
Wiki is maintained in English. I use Google translator. 8)
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Wed Jun 20, 2018 7:36 am

pe1chl - Can you provide supout file from RouterBOARD that does not show IP/Cloud menu on GUI?
 
zyzelis
Member Candidate
Member Candidate
Posts: 212
Joined: Sun Apr 08, 2012 9:25 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 20, 2018 8:38 am

Version 6.43rc32 has been released.

*) dude - fixed client auto upgrade (broken since 6.43rc17);
still need to upgrade dude client manually. Client crashes after each upgrade via client ui
Thank you for a report, but can you please confirm that your Dude client (executed with the administrator rights) auto upgrade was working before 6.43rc17, and does not work in 6.43rc32 ?
So thats the trick :) Yes, with "launch as administrator" dude client updates as expected. But is this "feature" documented somewhere? Because if i load exe "as administrator" i need to enter credentials like first time.
Another hint - winbox does not require to start "as administrator" when upgrading it.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 20, 2018 12:12 pm

pe1chl - Can you provide supout file from RouterBOARD that does not show IP/Cloud menu on GUI?
It is a CHR. Apparently it does not have IP Cloud, but I noticed that only because I wanted to have a look at it after reading change notes.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Wed Jun 20, 2018 12:55 pm

Please fix "/system check-installation" so that it does not only validate the expected installation, but also detects and optionally removes files that should not be there.

E.g. after updating CCR from 6.42.1 a lot of diskspace is lost and "/system check-installation" should identify the file(s) and delete them.
 
User avatar
oortega
just joined
Posts: 7
Joined: Sat Jan 06, 2018 8:33 pm

Re: v6.43rc [release candidate] is released!

Sat Jun 23, 2018 2:45 am

@antonsb I upgrade from v6.43RC21 to 6.43.RC32 and login by API works with old method login.
https://wiki.mikrotik.com/wiki/Manual:API#Initial_login

6.43.RC32 will work with the new and previous login?

Thanks
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Mon Jun 25, 2018 1:43 pm

Version 6.43rc34 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Other changes in this release:

!) cloud - added IPv6 support;
*) console - do not show spare parameters on ping command;
*) crs317 - properly report link state when one link interface is disabled;
*) crs326/crs328 - fixed broken "new-dst-port" ACL rules (introduced in 6.43rc10);
*) crs3xx - fixed flow control;
*) crs3xx - fixed LACP member failover;
*) dhcpv4-client - fixed double ACK packet handling;
*) ethernet - do not show "combo-state" field if interface is not SFP or copper;
*) led - fixed LED default configuration for LtAP mini;
*) lte - added eNB ID to info command;
*) ssh - allow to use "diffie-hellman-group1-sha1" on TILE and x86 devices with "strong-crypto" disabled;
*) supout - added "w60g" section to supout file;
*) watchdog - added "ping-timeout" setting (CLI only);
*) winbox - show "sector-writes" on ARM routers that has such counters;
*) winbox - show "System/Health" only on boards that have health monitoring;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
server8
Member
Member
Posts: 380
Joined: Fri Apr 22, 2011 1:27 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 26, 2018 9:12 am

Strods any change to se the NV2 issue fixed with arm devices?
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Tue Jun 26, 2018 2:40 pm

What kind of issue are you referring to? Have you contacted support directly to see if problem is not caused by configuration or something that can be adjusted in order to resolve the issue?
 
server8
Member
Member
Posts: 380
Joined: Fri Apr 22, 2011 1:27 pm

Re: v6.43rc [release candidate] is released!

Tue Jun 26, 2018 2:50 pm

I have sent an email to support without answer 19.06.2018 10:48

Here you can find some info viewtopic.php?f=7&t=136002 from me and other user
 
User avatar
honzam
Forum Guru
Forum Guru
Posts: 2285
Joined: Wed Feb 27, 2008 10:27 pm
Location: Czech Republic

Re: v6.43rc [release candidate] is released!

Tue Jun 26, 2018 9:01 pm

What kind of issue are you referring to? Have you contacted support directly to see if problem is not caused by configuration or something that can be adjusted in order to resolve the issue?
There is other topic with problems ARM and NV2 - viewtopic.php?f=7&t=128916&p=670546#p669811
Yes, we have opened ticket with this problem - #2018042522004921
Last answer from support 13.6.2018. No solution yet :-(
LAN, FTTx, Wireless. ISP operator
 
jriera
just joined
Posts: 10
Joined: Tue Feb 14, 2012 3:14 am

Re: v6.43rc [release candidate] is released!

Wed Jun 27, 2018 12:42 am

*) tile - fixed Ethernet interfaces becoming unresponsive;

I have a very strange problem with a CCR1072. Suddenly there are IP addresses that stop responding, some work and others do not... within the same broadcast (L2) -no routing apply-. There is no problem of firewall or similar, by ARP the MAC is seen, but communication is simply lost... until a reboot is made and everything works again. It has happened to me twice in the last week. With the 6.42.1. Does this changelog correct this problem or similar?

The problem happens in an 802.3ad bonding interface with vlans on it. At the other end there is a CRS317-1G-16S switch. Even if I restart the switch, it does not recover the communication... I must restart the CCR1072.

We have the same problem, with the eactly same scenario. A CCR1072 with CRS317 and bonding 802.3ad. It has happened to us many times, communication is lost in L2. One way to recover it without restarting the CCR1072 is by simply deactivating the bonding and moving the VLANs to one of the two interfaces... then the ICMP will work again.

So my big question is: Is it the problem in CRS317 or in CCR1072, or maybe the mix of both? I think it has some relationship with bonding...

I hope that with 6.43 this is solved, it is causing us many problems!
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 1813
Joined: Mon Jan 14, 2008 1:53 pm
Location: Straya
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 27, 2018 7:28 am

So my big question is: Is it the problem in CRS317 or in CCR1072, or maybe the mix of both? I think it has some relationship with bonding...
We have about 30 x CCR's installed in exactly this fashion, Bonding interface with LACP to a switch (Extreme x620/x670 and Juniper EX4550) and have not experienced this problem, we have been running this configuration successfully for over 5 years now from 6.0rc5 to 6.40.8

So either the problem is in RouterOS newer than 6.40.8 or it is something specific to the CRS317

I hope this helps you.
http://thebrotherswisp.com/ | Mikrotik MTCNA, MTCRE, MTCINE | Fortinet FTCNA, FCNSP, FCT | Extreme Networks ENA
 
User avatar
docmarius
Forum Guru
Forum Guru
Posts: 1218
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: v6.43rc [release candidate] is released!

Wed Jun 27, 2018 8:57 pm

Still no joy for RG11e-LTE with RB912UAG :-(
Torturing CCR1009-7G-1C-1S+, RB450G, RB750GL, RB951G-2HnD, RB960PGS, RB260GSP, OmniTIK 5HnD and NetMetal 922UAGS-5HPacD + R11e-5HnD in my home network.
 
pcjc
just joined
Posts: 20
Joined: Wed Aug 02, 2017 4:29 pm

Re: v6.43rc [release candidate] is released!

Fri Jun 29, 2018 8:45 pm

Do you guys have an ETA for an updated Android TikApp (or beta version), to match the 6.43rc series authentication / login changes?
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Fri Jun 29, 2018 8:50 pm

Thank you very much for the reports about issues with space, next RouterOS version will fix the issue.
Meanwhile this package can be used to clear space on your router,
This fix has a problem, it ruins the installation. When you have only one partition, it means netinstall.
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Fri Jun 29, 2018 10:19 pm

Do you guys have an ETA for an updated Android TikApp (or beta version), to match the 6.43rc series authentication / login changes?
The current Beta version does match the 6.43rc changes for my device.

v0.0.68 • Fixed login issues on some devices
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Sat Jun 30, 2018 1:25 pm

We are very sorry for any inconvenience caused. Fix package for missing storage space has been temporary removed and will soon be updated to patched version.
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6615
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Mon Jul 02, 2018 1:58 pm

We are sorry for any issues caused by the previous package, we uploaded new packages, that will work fine on any router.

Package updated 07/02/2018
To fix storage issue on your router, use package from the link,
https://www.mikrotik.com/download/share/fix_space.npk
- upload package to your router;
- run /system reboot
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Tue Jul 03, 2018 2:35 am

Can the next RC include the fix for the space issue ?

I want to be able to clean the router with the above patch then I want to install a version that does not have the issue that created the lack of space.

:)

Thansk again for the fix and for the clean up patch.
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Tue Jul 03, 2018 11:46 am

Version 6.43rc40 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - added IPv6 support;
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Other changes in this release:

!) cloud - added support for licensed CHR instances (including trial);
*) bridge - properly handle packets when bridge port changes states
*) crs317 - properly report link state when one side has disabled interface;
*) ethernet - properly handle Ethernet interface default configuration;
*) ike2 - use "/32" netmask by default on initiator if not provided by responder;
*) package - do not allow to install out of bundle package if it already exists within bundle;
*) package - free up used storage space consumed by old RouterOS upgrades;
*) package - renamed "current-version" to "installed-version" under "/system package install";
*) sms - converted "keep-max-sms" feature to "auto-erase";
*) snmp - added CAPsMAN "remote-cap" table;
*) supout - added "ip-cloud" section to supout file;
*) usb - fixed modem initialisation on LtAP mini;
*) userman - fixed compatibility with PayPal TLS 1.2;
*) w60g - do not reset interface after adding comment;
*) watchdog - added "ping-timeout" setting;
*) winbox - show "sector-writes" on devices that have such counters;
*) winbox - show "Switch" menu on hAP ac^2 devices;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
raffav
Member Candidate
Member Candidate
Posts: 286
Joined: Wed Oct 24, 2012 4:40 am

Re: v6.43rc [release candidate] is released!

Tue Jul 03, 2018 12:51 pm

Wow
Nice update..
That why I like mk always improving...


Sent from my XT1580 using Tapatalk

 
joserudi
Frequent Visitor
Frequent Visitor
Posts: 66
Joined: Thu Nov 22, 2007 10:16 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 03, 2018 4:31 pm

*) userman - fixed compatibility with PayPal TLS 1.2;

Paypal works perfectly now. Many thanks.
 
mstead
Member Candidate
Member Candidate
Posts: 112
Joined: Sat Mar 04, 2006 2:41 am

Re: v6.43rc [release candidate] is released!

Tue Jul 03, 2018 8:01 pm

WARNING!!! This version 6.43rc40 just bricked two RBSXTsq5HPnD units I was testing it with. Software upgrade went fine from the factory installed 6.40.4 but then the firmware upgrade bricked the units. Netinstall currently underway.
 
SergeyMorozov
just joined
Posts: 17
Joined: Sun Apr 22, 2018 9:27 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 03, 2018 9:04 pm

WARNING!!! This version 6.43rc40 just bricked two RBSXTsq5HPnD units I was testing it with. Software upgrade went fine from the factory installed 6.40.4 but then the firmware upgrade bricked the units. Netinstall currently underway.
I'm successfully upgraded a hAp ac2.
 
mstead
Member Candidate
Member Candidate
Posts: 112
Joined: Sat Mar 04, 2006 2:41 am

Re: v6.43rc [release candidate] is released!

Tue Jul 03, 2018 9:10 pm

WARNING!!! This version 6.43rc40 just bricked two RBSXTsq5HPnD units I was testing it with. Software upgrade went fine from the factory installed 6.40.4 but then the firmware upgrade bricked the units. Netinstall currently underway.
I'm successfully upgraded a hAp ac2.
hAp ac2 is not a RBSXTsq5HPnD - also this may depend on what ROS version is being upgraded from. I am happy that you have not had a problem. However I can recreate this bricking process by taking another unit off the shelf :-(

Netinstall does recover the unit and even allowed v6.43rc40 to be loaded - so this is a fault of the upgrade process.
 
SergeyMorozov
just joined
Posts: 17
Joined: Sun Apr 22, 2018 9:27 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 03, 2018 10:03 pm

WARNING!!! This version 6.43rc40 just bricked two RBSXTsq5HPnD units I was testing it with. Software upgrade went fine from the factory installed 6.40.4 but then the firmware upgrade bricked the units. Netinstall currently underway.
I'm successfully upgraded a hAp ac2.
hAp ac2 is not a RBSXTsq5HPnD - also this may depend on what ROS version is being upgraded from. I am happy that you have not had a problem. However I can recreate this bricking process by taking another unit off the shelf :-(

Netinstall does recover the unit and even allowed v6.43rc40 to be loaded - so this is a fault of the upgrade process.
This also may depend on the configuration of the device.
 
mstead
Member Candidate
Member Candidate
Posts: 112
Joined: Sat Mar 04, 2006 2:41 am

Re: v6.43rc [release candidate] is released!

Wed Jul 04, 2018 12:22 am

This also may depend on the configuration of the device.
That was a valid point - however I just tested another fresh unit from the same batch which was fully reset with no defaults and I can confirm it is also bricked.

So once again - BEWARE!!!! v6.43rc40 can brick your device - PLEASE CHECK before doing any remote testing.
 
sindy
Forum Guru
Forum Guru
Posts: 3803
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43rc [release candidate] is released!

Wed Jul 04, 2018 9:40 am

It has been stated multiple times here that most of the upgrade process is performed by the old version from which you upgrade. So if you in all cases upgraded from 6.40.4., the issue may also be that one, not the 6.43rc40.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
mstead
Member Candidate
Member Candidate
Posts: 112
Joined: Sat Mar 04, 2006 2:41 am

Re: v6.43rc [release candidate] is released!

Wed Jul 04, 2018 2:16 pm

It has been stated multiple times here that most of the upgrade process is performed by the old version from which you upgrade. So if you in all cases upgraded from 6.40.4., the issue may also be that one, not the 6.43rc40.
Yeah well that doesn't change the value of the warning that I am giving - especially as the units in question came factory shipped with 6.40.4. Also saying that you cannot upgrade from an older version because of problems in the older version is kinda crazy :-)

So
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Wed Jul 04, 2018 2:37 pm

Try to upgrade the 6.40.4 first to the current version (6.42.5) and then upgrade to 6.43rc from there.
 
sindy
Forum Guru
Forum Guru
Posts: 3803
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43rc [release candidate] is released!

Wed Jul 04, 2018 2:45 pm

saying that you cannot upgrade from an older version because of problems in the older version is kinda crazy :-)
Well, saying it is not crazy, the fact that it happens for some versions is a different question ;-) But this warning has been published by Mikrotik staff in earlier topics here, the only thing I'm far from sure is whether 6.40.4 is affected by that issue or not.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
mstead
Member Candidate
Member Candidate
Posts: 112
Joined: Sat Mar 04, 2006 2:41 am

Re: v6.43rc [release candidate] is released!

Wed Jul 04, 2018 4:04 pm

Try to upgrade the 6.40.4 first to the current version (6.42.5) and then upgrade to 6.43rc from there.
I did - and that does work :-D

Well, saying it is not crazy, the fact that it happens for some versions is a different question ;-)
That comment made me smile ;-)
 
Nando_lavras
newbie
Posts: 35
Joined: Tue Jul 11, 2006 4:38 am

Re: v6.43rc [release candidate] is released!

Wed Jul 04, 2018 4:21 pm

WARNING!!! This version 6.43rc40 just bricked two RBSXTsq5HPnD units I was testing it with. Software upgrade went fine from the factory installed 6.40.4 but then the firmware upgrade bricked the units. Netinstall currently underway.
Same for me, but on a CRS328, upgrade is fine, but when i upgraded the routerboot and rebooted the system not load anymore, i do it a netinstall and recovered the board.
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Wed Jul 04, 2018 4:48 pm

Thank you very much for your report. Looks like the next system reboot after upgrading RouterOS directly from pre-6.41 versions to the latest release-candidate version causes the kernel to disappear on devices with flash memory. We will try to resolve the issue in the next release-candidate version. It is safe to upgrade from 6.41 and later versions.
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 10:52 am

Version 6.43rc42 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - added IPv6 support;
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Other changes in this release:

!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
*) check-installation - improved system integrity checking;
*) chr - fixed interface name order when "virtio-net is not being used on KVM installations;
*) chr - improved balooning process;
*) chr - reduced RAM memory required per interface;
*) defconf - fixed bridge default configuration for SOHO devices with more than 9 Ethernet interfaces;
*) health - improved speed of health measurement readings;
*) interface - improved interface "last-link-down-time" and "last-link-up-time" values;
*) package - free up used storage space consumed by old RouterOS upgrades;
*) routerboard - fixed wrongly reported RAM size on ARM devices;
*) snmp - fixed w60g "phy-rate" readings;
*) w60g - general stability and performance improvements;
*) winbox - added 64,6 GHz frequency to w60g interface frequency settings;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
User avatar
Xymox
Member
Member
Posts: 387
Joined: Thu Jan 21, 2010 5:04 pm
Location: Phoenix, Arizona US
Contact:

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 11:50 am

"*) package - free up used storage space consumed by old RouterOS upgrades;"

Awesome ! thank you.. I will test and report back.
 
amokkatmt
newbie
Posts: 30
Joined: Mon Oct 24, 2011 3:31 pm

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 12:04 pm

...
!) cloud - added IPv6 support;
...
How to see it in action?
 
npero
Member
Member
Posts: 316
Joined: Tue Mar 01, 2005 1:59 pm
Location: Serbia

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 1:36 pm

wAP60G 240m link updated from rc32 to rc42, client not connecting any more in scan see signal but not connecting, back to 6.42.5 it is working again, but seem to me it is not stable as has been in 6.42.1.

Also please check scan for frequency 64800 seems to me it is not scanning that frequency when click scan button.
 
antonsb
MikroTik Support
MikroTik Support
Posts: 195
Joined: Sun Jul 24, 2016 3:12 pm
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 1:52 pm

wAP60G 240m link updated from rc32 to rc42, client not connecting any more in scan see signal but not connecting, back to 6.42.5 it is working again, but seem to me it is not stable as has been in 6.42.1.

Also please check scan for frequency 64800 seems to me it is not scanning that frequency when click scan button.
Fixes for connecting issues will be included in next RC version
 
notToNew
Member Candidate
Member Candidate
Posts: 147
Joined: Fri Feb 19, 2016 3:15 pm

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 2:03 pm

WARNING!!! This version 6.43rc40 just bricked two RBSXTsq5HPnD units I was testing it with. Software upgrade went fine from the factory installed 6.40.4 but then the firmware upgrade bricked the units. Netinstall currently underway.
Had the same with my HAP AC2. Had no time to look for a fix, did you need netinstall?
--------------------------------------------------------------------------------------------
CCR1036-12G-4S, several 952Ui-5ac2nD, ...
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 1813
Joined: Mon Jan 14, 2008 1:53 pm
Location: Straya
Contact:

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 3:10 pm

A little bug, When running 6.43rc42 on a cAP AC running "/system health print" outputs nothing, and the health menu is gone from WinBox.
http://thebrotherswisp.com/ | Mikrotik MTCNA, MTCRE, MTCINE | Fortinet FTCNA, FCNSP, FCT | Extreme Networks ENA
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 6:56 pm

A little bug, When running 6.43rc42 on a cAP AC running "/system health print" outputs nothing, and the health menu is gone from WinBox.
In RC34; *) winbox - show "System/Health" only on boards that have health monitoring. I don't know if the cAP AC does support health.
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
sutrus
newbie
Posts: 26
Joined: Fri Jun 30, 2017 11:27 pm

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 7:01 pm

Bug DHCP in RC42. It's a pioneer reciver. All other network devices are OK.
17:26:49 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:27:17 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:27:17 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:27:41 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:27:41 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:28:08 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:28:08 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:28:35 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:28:35 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:29:03 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:29:03 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:29:30 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:29:30 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:29:57 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:29:57 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:30:24 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:30:24 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:30:49 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:30:49 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:31:16 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:31:16 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:31:46 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
17:31:46 dhcp,info dhcp-server assigned 192.168.1.4 to 74:5E:1C:32:14:C3 
17:32:12 dhcp,info dhcp-server deassigned 192.168.1.4 from 74:5E:1C:32:14:C3 
 
LeftyTs
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Thu Nov 03, 2016 2:39 am
Location: Athens, Greece
Contact:

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 7:10 pm

I am having a dhcp problem also with VLANs. One of the voip devices gets an IP from a different dhcp-server VLAN every time I reset the switch. If I reset the device after then dhcp assigns proper IP. I will be sending a supout to support about this.
 
irghost
Member Candidate
Member Candidate
Posts: 280
Joined: Sun Feb 21, 2016 1:49 pm

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 9:22 pm

[admin@MikroTik] /ip cloud> print 
  ddns-enabled: yes
   update-time: no
        status: connecting...
on CHR last build
MTCNA MTCRE MTCTCE MTCUME MTCWE MTCIPv6E MTCINE
 
mlenhart
Frequent Visitor
Frequent Visitor
Posts: 83
Joined: Mon Oct 30, 2017 11:30 pm

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 9:52 pm

wAP60G 240m link updated from rc32 to rc42, client not connecting any more in scan see signal but not connecting, back to 6.42.5 it is working again, but seem to me it is not stable as has been in 6.42.1.

Also please check scan for frequency 64800 seems to me it is not scanning that frequency when click scan button.
Fixes for connecting issues will be included in next RC version
I can confirm, LHG60 does not connect for more than few seconds, still disconnecting and reconnecting. Back on 6.42.5 - works again OK.
 
mistry7
Forum Guru
Forum Guru
Posts: 1279
Joined: Tue Oct 13, 2009 11:57 am
Location: Germany

Re: v6.43rc [release candidate] is released!

Thu Jul 05, 2018 11:19 pm

wAP60G 240m link updated from rc32 to rc42, client not connecting any more in scan see signal but not connecting, back to 6.42.5 it is working again, but seem to me it is not stable as has been in 6.42.1.

Also please check scan for frequency 64800 seems to me it is not scanning that frequency when click scan button.
Fixes for connecting issues will be included in next RC version
I can confirm, LHG60 does not connect for more than few seconds, still disconnecting and reconnecting. Back on 6.42.5 - works again OK.
same here
 
CoMMyz
just joined
Posts: 21
Joined: Fri Dec 04, 2015 10:56 pm

Re: v6.43rc [release candidate] is released!

Fri Jul 06, 2018 1:09 am

If you remove the w60g interface from getting added to bridge, the link works. otherwise it reconnects constantly.

Please fix ;)
 
LeftyTs
Frequent Visitor
Frequent Visitor
Posts: 71
Joined: Thu Nov 03, 2016 2:39 am
Location: Athens, Greece
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jul 06, 2018 1:21 am

I wonder if the same limitations and/or problems apply to LHGG-60ad. Anyone installed them? We are expecting a pair of those and I was wondering what would be the best stable ROS for it. It will be a production link so stability is a must.
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Fri Jul 06, 2018 7:05 am

amokkatmt - If your router can reach cloud server over IPv6, then Cloud should resolve to IPv6 address instead of IPv4. That happens automatically;
npero, mlenhart, mistry7, CoMMyz - Improvements on this version have had some side affects that will be resolved in upcoming rc releases;
notToNew - Problem was present because upgrade was made directly from pre-6.41 release. With rc42 upgrade from these versions should work just fine regarding this matter;
nz_monkey, msatter - This device does not have anything to show under System/Health menu. As you can see, this product does not have anything listed under "Other" as a monitoring tool (https://mikrotik.com/product/cap_ac), but for example, this one does (https://mikrotik.com/product/RB1100Dx4);
sutrus, LeftyTs - Please contact support@mikrotik.com regarding this matter;
irghost - Can you reach cloud.mikrotik.com from your device? I recommend that you contact support@mikrotik.com;
LeftyTs - Do not ever use an rc version on important devices. Rc versions are released strictly for testing purposes (for your test labs, not for real life scenarios).
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jul 06, 2018 8:08 am

amokkatmt - If your router can reach cloud server over IPv6, then Cloud should resolve to IPv6 address instead of IPv4. That happens automatically;
Does it resolve to IPv6 address exclusively then? That would be a real issue for be, because I have devices connected via dual stack, but connect to them from IPv4-only networks.
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
mlenhart
Frequent Visitor
Frequent Visitor
Posts: 83
Joined: Mon Oct 30, 2017 11:30 pm

Re: v6.43rc [release candidate] is released!

Fri Jul 06, 2018 10:11 am

I wonder if the same limitations and/or problems apply to LHGG-60ad. Anyone installed them? We are expecting a pair of those and I was wondering what would be the best stable ROS for it. It will be a production link so stability is a must.
6.42.5 (latest current till now) works OK for me.
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Fri Jul 06, 2018 10:12 am

At the moment RouterOS tries to resolve cloud2.mikrotik.com IPv4 and IPv6 addresses. After that tries to reach IPv4 server, if server is reachable over IPv4, then this address will be used. if IPv4 server is not reachable, then try to use IPv6. At the moment IPv6 cloud is used as a fallback.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jul 06, 2018 12:39 pm

So, if RouterOS connects to the Cloud via IPv4 address, it adds 'A' record, and via IPv6 it adds 'AAAA' record? Can we have adding both records, or at least force A record to be added? I have ipip tunnels between routers, and I don't think they will work if address changes from A to AAAA after upgrade/reboot...
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
nescafe2002
Long time Member
Long time Member
Posts: 617
Joined: Tue Aug 11, 2015 12:46 pm
Location: Netherlands

Re: v6.43rc [release candidate] is released!

Fri Jul 06, 2018 12:43 pm

Fallback? That's worrying.. I'd rather have IPv6 as an optional feature.

I'm hosting several services on IPv4 endpoints (NATted to internal servers, DNS entry CNAME'd to mynetname.net).
Some services could be hosted via IPv6, but they'd have different IPv6 address (no IPv6 NAT possible).
Some services cannot be hosted via IPv6.

If cloud update fails somehow, I'd rather have the old IPv4 entry stay the same than to suddenly have an IPv6 address which would break all of the hosted-behind-the-MT services.
 
nkourtzis
Member Candidate
Member Candidate
Posts: 202
Joined: Tue Dec 11, 2012 12:56 am
Location: Greece

Re: v6.43rc [release candidate] is released!

Tue Jul 10, 2018 1:00 pm

I would better have two separate checkboxes in /ip cloud, one for IPv4 and one for IPv6. Depending on which option is checked, DNS records for the automatically generated FQDN should be created for the IPv4 address, the IPv6 address or BOTH. Even better, have two automatically generated FQDNs, one with a "-ip4" and one with "-ip6" suffixes after the serial number and associate each with the respective address.
Passionate about networks
Enthusiastic about Mikrotik
MTCNA | MTCRE | MTCINE

No trees were killed to send this message,
but a large number of electrons were terribly inconvenienced.
 
mkx
Forum Guru
Forum Guru
Posts: 2792
Joined: Thu Mar 03, 2016 10:23 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 10, 2018 7:48 pm

Even better, have two automatically generated FQDNs, one with a "-ip4" and one with "-ip6" suffixes after the serial number and associate each with the respective address.
Why do you think two DNS names (one with A record and one with AAAA record) is better than having one DNS name with both A and AAAA records?
BR,
Metod
 
sindy
Forum Guru
Forum Guru
Posts: 3803
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 10, 2018 7:55 pm

Because that way you can explicitly choose using which protocol you want to connect to the device by choosing the corresponding domain name :-)
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
nkourtzis
Member Candidate
Member Candidate
Posts: 202
Joined: Tue Dec 11, 2012 12:56 am
Location: Greece

Re: v6.43rc [release candidate] is released!

Wed Jul 11, 2018 11:58 am

Even better, have two automatically generated FQDNs, one with a "-ip4" and one with "-ip6" suffixes after the serial number and associate each with the respective address.
Why do you think two DNS names (one with A record and one with AAAA record) is better than having one DNS name with both A and AAAA records?
Because if for example you have a network with different restrictions for IPv4 and IPv6, you can explicity choose which protocol to use to manage the devices, instead of the device deciding for you.
Passionate about networks
Enthusiastic about Mikrotik
MTCNA | MTCRE | MTCINE

No trees were killed to send this message,
but a large number of electrons were terribly inconvenienced.
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Thu Jul 12, 2018 2:08 pm

Version 6.43rc44 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - added IPv6 support;
!) cloud - added support for licensed CHR instances (including trial);
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Other changes in this release:

*) backup - added support for new backup file encryption (AES128-CTR) with signatures (SHA256);
*) crs326/crs328 - fixed untagged packet forwarding through tagged ports when pvid=1;
*) crs3xx - fixed tagged packet forwarding in 802.1ad aware bridges (introduced in 6.43rc13);
*) dhcpv6 - improved reliability on IPv6 DHCP services;
*) lte - added support for alternative SIM7600 PID;
*) sms - improved reliability on SMS reader;
*) w60g - temporary disabled distance measurement feature;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Thu Jul 12, 2018 2:53 pm

*) dhcpv6 - improved reliability on IPv6 DHCP services;
Please do not post change notes like that!
Is it another security issue? Is it recommended to update and/or are there workarounds for issues?
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Thu Jul 12, 2018 2:56 pm

If dhcpv6 was not working reliably for you then upgrade.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Thu Jul 12, 2018 3:11 pm

In previous cases when such change notices were posted it became clear later that in fact there was a security problem that was being covered up.
(e.g. some buffer overrun with potential code execution, like in the webserver and the smb server)
Somewhat later the same fix appeared as a current version and everyone was urged to upgrade.
Later when all hell broke loose, we were referred back to the update we should have done because it was recommended, all "to improve reliability".
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Thu Jul 12, 2018 10:55 pm

Not all of the problems can be summarized in one sentence. Or the cause of the problem can lead up to different consequences. Sometimes end-user even can not see software issue and that can be seen in supout file only by MikroTik staff. For example, DHCPv6 issue could lead to DHCPv6 service crash (can be seen only by MikroTik staff) and IPv6 services could not work or work incorrectly.

As you can see in 6.43rc release - we are improving changelog so important notes would be more noticeable. Also, for example, Winbox vulnerability issue was mentioned in changelog and special topics were made.
 
User avatar
Cha0s
Forum Veteran
Forum Veteran
Posts: 890
Joined: Tue Oct 11, 2005 4:53 pm

Re: v6.43rc [release candidate] is released!

Fri Jul 13, 2018 12:57 am

For example, DHCPv6 issue could lead to DHCPv6 service crash (can be seen only by MikroTik staff) and IPv6 services could not work or work incorrectly.
Could this, by any remote chance, be related to the issue described here?
DHCP is installed/enabled but not used at all on both ipv4/ipv6.
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Fri Jul 13, 2018 3:01 am

I agree that the release notes have improved much with the extra information. Then we have the ticket system that and it often unclear if a ticket is solved and I have written several time that a bug was not solved for me and then the line in the release notes was for an other bug in the same part of RouterOS.

If we could see if the ticket is resolved or still waiting, it would be great.
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Fri Jul 13, 2018 6:42 am

Cha0s - It is not possible to answer your question without seeing supout file from your router. As you know - if you think that there is a software issue on your router, then contact support@mikrotik.com.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Fri Jul 13, 2018 10:57 am

As you can see in 6.43rc release - we are improving changelog so important notes would be more noticeable. Also, for example, Winbox vulnerability issue was mentioned in changelog and special topics were made.
Yes, it has certainly improved! good to see that warnings like that are now also visible when doing the one-click-upgrade from the router itself. Lots of people never look here so they do not see the warnings about winbox versions when they are not in the changelog.
There still could be some improvement in the clarity of one-line changelog notices, especially when using words like "reliability" that in the past have been used where "security" should actually have been written.
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jul 13, 2018 6:32 pm

*) backup - added support for new backup file encryption (AES128-CTR) with signatures (SHA256);
So encryption=rc4 is the old behaviour, encryption=aes-sha256 is the new one? What is the default if I do not specify the option?
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jul 13, 2018 6:35 pm

default now is aes-sha256
 
abcde
just joined
Posts: 4
Joined: Sun Jul 15, 2018 5:00 am

Re: v6.43rc [release candidate] is released!

Mon Jul 16, 2018 12:00 am

Are you still working on hAP ac2's WiFi performance? I use laptop with Intel 7260 and WiFi performance is very poor (it fluctuates a lot within a huge range between 20 KB/s and 9 MB/s with average around 500 KB/s. The same laptop achieves 250 Mbit (which is what I pay for) when I use router provided by ISP (both stay almost in the same place).
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24137
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Mon Jul 16, 2018 11:32 am

Are you still working on hAP ac2's WiFi performance? I use laptop with Intel 7260 and WiFi performance is very poor (it fluctuates a lot within a huge range between 20 KB/s and 9 MB/s with average around 500 KB/s. The same laptop achieves 250 Mbit (which is what I pay for) when I use router provided by ISP (both stay almost in the same place).
What type of laptop do you have, do you know the WiFi chip and number of antennas it has? There are no known issues with the mentioned model, it works fine for most people
No answer to your question? How to write posts
 
sutrus
newbie
Posts: 26
Joined: Fri Jun 30, 2017 11:27 pm

Re: v6.43rc [release candidate] is released!

Mon Jul 16, 2018 8:06 pm

Are you still working on hAP ac2's WiFi performance? I use laptop with Intel 7260 and WiFi performance is very poor (it fluctuates a lot within a huge range between 20 KB/s and 9 MB/s with average around 500 KB/s. The same laptop achieves 250 Mbit (which is what I pay for) when I use router provided by ISP (both stay almost in the same place).
Do you have updated wifi card drivers? Use the Intel® Driver & Support Assistant, or manually locate it.
He had the same problem and the update helped.
 
abcde
just joined
Posts: 4
Joined: Sun Jul 15, 2018 5:00 am

Re: v6.43rc [release candidate] is released!

Mon Jul 16, 2018 10:10 pm

Are you still working on hAP ac2's WiFi performance? I use laptop with Intel 7260 and WiFi performance is very poor (it fluctuates a lot within a huge range between 20 KB/s and 9 MB/s with average around 500 KB/s. The same laptop achieves 250 Mbit (which is what I pay for) when I use router provided by ISP (both stay almost in the same place).
What type of laptop do you have, do you know the WiFi chip and number of antennas it has? There are no known issues with the mentioned model, it works fine for most people
It's Sony Vaio Pro 13 (https://www.trustedreviews.com/reviews/sony-vaio-pro-13).
I suppose that this is the card: https://ark.intel.com/en/products/75440 ... ess-N-7260
I'm using 5 GHz N/AC (2.4 is disabled because I don't need it).
Please find useful parts of uname, lspci, systool and dmesg below.
Let me know if you need anything more.
# uname -a
Linux vp 4.17.5-1-ARCH #1 SMP PREEMPT Sun Jul 8 17:27:31 UTC 2018 x86_64 GNU/Linux

# lspci
01:00.0 Network controller: Intel Corporation Wireless 7260 (rev 6b)
        Subsystem: Intel Corporation Dual Band Wireless-N 7260
        Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
        Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
        Latency: 0, Cache Line Size: 64 bytes
        Interrupt: pin A routed to IRQ 44
        Region 0: Memory at f7c00000 (64-bit, non-prefetchable) [size=8K]
        Capabilities: [c8] Power Management version 3
                Flags: PMEClk- DSI+ D1- D2- AuxCurrent=0mA PME(D0+,D1-,D2-,D3hot+,D3cold+)
                Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
        Capabilities: [d0] MSI: Enable+ Count=1/1 Maskable- 64bit+
                Address: 00000000fee08004  Data: 4023
        Capabilities: [40] Express (v2) Endpoint, MSI 00
                DevCap: MaxPayload 128 bytes, PhantFunc 0, Latency L0s <512ns, L1 unlimited
                        ExtTag- AttnBtn- AttnInd- PwrInd- RBE+ FLReset+ SlotPowerLimit 0.000W
                DevCtl: Report errors: Correctable- Non-Fatal- Fatal- Unsupported-
                        RlxdOrd- ExtTag- PhantFunc- AuxPwr+ NoSnoop+ FLReset-
                        MaxPayload 128 bytes, MaxReadReq 128 bytes
                DevSta: CorrErr- UncorrErr- FatalErr- UnsuppReq- AuxPwr+ TransPend-
                LnkCap: Port #0, Speed 2.5GT/s, Width x1, ASPM L0s L1, Exit Latency L0s <4us, L1 <32us
                        ClockPM+ Surprise- LLActRep- BwNot- ASPMOptComp-
                LnkCtl: ASPM L1 Enabled; RCB 64 bytes Disabled- CommClk+
                        ExtSynch- ClockPM+ AutWidDis- BWInt- AutBWInt-
                LnkSta: Speed 2.5GT/s, Width x1, TrErr- Train- SlotClk+ DLActive- BWMgmt- ABWMgmt-
                DevCap2: Completion Timeout: Range B, TimeoutDis+, LTR+, OBFF Via WAKE#
                         AtomicOpsCap: 32bit- 64bit- 128bitCAS-
                DevCtl2: Completion Timeout: 16ms to 55ms, TimeoutDis-, LTR+, OBFF Disabled
                         AtomicOpsCtl: ReqEn-
                LnkCtl2: Target Link Speed: 2.5GT/s, EnterCompliance- SpeedDis-
                         Transmit Margin: Normal Operating Range, EnterModifiedCompliance- ComplianceSOS-
                         Compliance De-emphasis: -6dB
                LnkSta2: Current De-emphasis Level: -3.5dB, EqualizationComplete-, EqualizationPhase1-
                         EqualizationPhase2-, EqualizationPhase3-, LinkEqualizationRequest-
        Capabilities: [100 v1] Advanced Error Reporting
                UESta:  DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP- ECRC- UnsupReq- ACSViol-
                UEMsk:  DLP- SDES- TLP- FCP- CmpltTO- CmpltAbrt- UnxCmplt- RxOF- MalfTLP- ECRC- UnsupReq- ACSViol-
                UESvrt: DLP+ SDES+ TLP- FCP+ CmpltTO- CmpltAbrt- UnxCmplt- RxOF+ MalfTLP+ ECRC- UnsupReq- ACSViol-
                CESta:  RxErr- BadTLP- BadDLLP- Rollover- Timeout- NonFatalErr-
                CEMsk:  RxErr- BadTLP- BadDLLP- Rollover- Timeout- NonFatalErr+
                AERCap: First Error Pointer: 00, ECRCGenCap- ECRCGenEn- ECRCChkCap- ECRCChkEn-
                        MultHdrRecCap- MultHdrRecEn- TLPPfxPres- HdrLogCap-
                HeaderLog: 00000000 00000000 00000000 00000000
        Capabilities: [140 v1] Device Serial Number 5c-51-4f-xx-xx-xx-xx-xx
        Capabilities: [14c v1] Latency Tolerance Reporting
                Max snoop latency: 3145728ns
                Max no snoop latency: 3145728ns
        Capabilities: [154 v1] Vendor Specific Information: ID=cafe Rev=1 Len=014 <?>
        Kernel driver in use: iwlwifi
        Kernel modules: iwlwifi


# systool -vm iwlwifi
Module = "iwlwifi"

  Attributes:
    coresize            = "327680"
    initsize            = "0"
    initstate           = "live"
    refcnt              = "1"
    srcversion          = "A082116DEC439F44B0AAD63"
    taint               = ""
    uevent              = <store method only>

  Parameters:
    11n_disable         = "0"
    amsdu_size          = "0"
    antenna_coupling    = "0"
    bt_coex_active      = "Y"
    d0i3_disable        = "Y"
    d0i3_timeout        = "1000"
    debug               = "0"
    disable_11ac        = "N"
    fw_monitor          = "N"
    fw_restart          = "Y"
    lar_disable         = "N"
    led_mode            = "0"
    nvm_file            = "(null)"
    power_level         = "0"
    power_save          = "N"
    swcrypto            = "0"
    uapsd_disable       = "3"

  Sections:
    .altinstr_replacement= "0xffffffffc0a9da3d"
    .altinstructions    = "0xffffffffc0ab9f10"
    .bss                = "0xffffffffc0abeec0"
    .data.once          = "0xffffffffc0abd8f0"
    .data               = "0xffffffffc0abb300"
    .exit.text          = "0xffffffffc0a9da2c"
    .gnu.linkonce.this_module= "0xffffffffc0abeb80"
    .init.text          = "0xffffffffc0acd000"
    .note.gnu.build-id  = "0xffffffffc0a9e000"
    .orc_unwind         = "0xffffffffc0ab35dd"
    .orc_unwind_ip      = "0xffffffffc0aaf6c5"
    .parainstructions   = "0xffffffffc0aba090"
    .ref.data           = "0xffffffffc0abdd00"
    .rodata             = "0xffffffffc0a9e5c0"
    .rodata.str1.1      = "0xffffffffc0aa9bbb"
    .rodata.str1.8      = "0xffffffffc0aab858"
    .smp_locks          = "0xffffffffc0ab9f2c"
    .strtab             = "0xffffffffc0adab40"
    .symtab             = "0xffffffffc0ace000"
    .text               = "0xffffffffc0a7c000"
    .text.unlikely      = "0xffffffffc0a9da45"
    __bpf_raw_tp_map    = "0xffffffffc0abd900"
    __bug_table         = "0xffffffffc0abd0b0"
    __jump_table        = "0xffffffffc0abb000"
    __kcrctab           = "0xffffffffc0a9e490"
    __kcrctab_gpl       = "0xffffffffc0a9e4a0"
    __ksymtab           = "0xffffffffc0a9e030"
    __ksymtab_gpl       = "0xffffffffc0a9e070"
    __ksymtab_strings   = "0xffffffffc0aaf130"
    __mcount_loc        = "0xffffffffc0ab9488"
    __param             = "0xffffffffc0ab9c68"
    __tracepoints_ptrs  = "0xffffffffc0aba1b0"
    __tracepoints_strings= "0xffffffffc0aba280"
    __tracepoints       = "0xffffffffc0abe540"
    _ftrace_events      = "0xffffffffc0abdc20"

# dmesg | grep -i iwl
[    3.119352] iwlwifi 0000:01:00.0: enabling device (0000 -> 0002)
[    3.124355] iwlwifi 0000:01:00.0: loaded firmware version 17.948900127.0 op_mode iwlmvm
[    3.288512] iwlwifi 0000:01:00.0: Detected Intel(R) Dual Band Wireless N 7260, REV=0x144
[    3.314884] iwlwifi 0000:01:00.0: base HW address: 5c:51:4f:xx:xx:xx
[    3.516017] ieee80211 phy0: Selected rate control algorithm 'iwl-mvm-rs'
[    3.518324] iwlwifi 0000:01:00.0 wlp1s0: renamed from wlan0
Are you still working on hAP ac2's WiFi performance? I use laptop with Intel 7260 and WiFi performance is very poor (it fluctuates a lot within a huge range between 20 KB/s and 9 MB/s with average around 500 KB/s. The same laptop achieves 250 Mbit (which is what I pay for) when I use router provided by ISP (both stay almost in the same place).
Do you have updated wifi card drivers? Use the Intel® Driver & Support Assistant, or manually locate it.
He had the same problem and the update helped.
I don't use Windows, I don't have it installed. I use latest Linux kernel so yes, the driver is in latest version :) I use this latptop with many APs all over the world and it has no issues. As I said before, I get 250 Mbit in my house using router provided by my ISP where Mikrotik is not even close. Both routers are next to each other.
 
metricmoose
newbie
Posts: 38
Joined: Sat Nov 21, 2015 2:03 am

Re: v6.43rc [release candidate] is released!

Tue Jul 17, 2018 4:23 am

Version 6.43rc40 has been released.

*) userman - fixed compatibility with PayPal TLS 1.2;
I hope it's not off topic, but when should we expect this to hit the current branch? I have a production userman router that seems to be having some recent Paypal issues lately.
 
tigro11
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: v6.43rc [release candidate] is released!

Thu Jul 19, 2018 8:22 pm

sorry for the question, but is it possible to make sure that when I paste a firewall rule script, the doubles are not loaded?

thank you
 
sindy
Forum Guru
Forum Guru
Posts: 3803
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43rc [release candidate] is released!

Thu Jul 19, 2018 9:36 pm

How is that related to 6.43rc in particular? There is a different section on the forum for these questions, called Scripting.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
tigro11
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: v6.43rc [release candidate] is released!

Thu Jul 19, 2018 9:57 pm

sorry, delete message
 
User avatar
hknet
Frequent Visitor
Frequent Visitor
Posts: 88
Joined: Sun Jul 17, 2016 6:05 pm
Location: Vienna, Austria
Contact:

Re: v6.43rc [release candidate] is released!

Fri Jul 20, 2018 11:44 pm

model: CRS317-1G-16S+
release: v6.43rc44

we use some ports with non-10G SFPs (ie 1G-SX and 1G-TX modules with fiber and copper).

those modules get auto negotiation 'incomplete', while claiming the link is ok but no working datatransmission can be established.

regards,
hk
 
crondrift
just joined
Posts: 1
Joined: Sat Jul 21, 2018 2:32 am

Re: v6.43rc [release candidate] is released!

Sat Jul 21, 2018 2:50 am

model: hAP ac^2 (arm) - RouterBOARD D52G-5HacD2HnD-TC
release: v6.43rc44

I'm experiencing memory leakage. After 8 days of running, free RAM is down to ~90MB (starting at ~205MB after a fresh reboot). The device is "losing" ~14MB of free memory a day...

I don't have any fancy configuration, logs etc. are written external etc.

Anyone else getting this?
 
User avatar
osc86
newbie
Posts: 49
Joined: Wed Aug 09, 2017 1:15 pm

Re: v6.43rc [release candidate] is released!

Sat Jul 21, 2018 1:39 pm

anyone noticing a memory leak that ends with a kernel panic? this is on a CCR1009-7G-1C-1S+ running v6.43rc44

Image
 
SergeyMorozov
just joined
Posts: 17
Joined: Sun Apr 22, 2018 9:27 pm

Re: v6.43rc [release candidate] is released!

Sat Jul 21, 2018 6:39 pm

Anyone else getting this?
This is weekly graph on my hAP ac²
Image
 
User avatar
osc86
newbie
Posts: 49
Joined: Wed Aug 09, 2017 1:15 pm

Re: v6.43rc [release candidate] is released!

Sun Jul 22, 2018 1:04 pm

Yesterday I set up an ipsec connection between 2 devices, one running 6.42.6 the other 6.43rc44.
All IKE related settings were the same on both devices, but I wasn't able to establish a connection, unless I changed the hash algorithm to sha256 on the one running 6.42.6 and sha1 on the other.

When I added a new peer configuration using IKEv2, it killed all other non-IKEv2 connections immediately, which shouldn't happen either.
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 9:13 am

Version 6.43rc45 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - added IPv6 support;
!) cloud - added support for licensed CHR instances (including trial);
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Other changes in this release:

*) ethernet - improved stability when changing ethernet interface L2MTU on CRS328-24P-4S+ (introduced in v6.43rc11);
*) ipsec - improved invalid policy handling when a valid policy is uninstalled;
*) lte - added additional ID support for SIM7600 modem;
*) sfp - fixed default advertised link speeds;
*) vrrp - fixed VRRP packet processing on VirtualBox and VMWare hypervisors;
*) winbox - properly display all flags for bridge host entries;
*) winbox - show "System/RouterBOARD/Mode Button" on devices that has such feature;
*) wireless - improved Nv2 reliability on ARM devices;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
nescafe2002
Long time Member
Long time Member
Posts: 617
Joined: Tue Aug 11, 2015 12:46 pm
Location: Netherlands

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 11:01 am

Mikrotik update server 2a02:610:7501:1000::196 still reports 6.43rc44 1531295119.
GET /routeros/LATEST.6rc HTTP/1.1
Host: upgrade.mikrotik.com

HTTP/1.1 200 OK
Date: Mon, 23 Jul 2018 08:01:34 GMT
Content-Type: application/octet-stream
Content-Length: 20
Last-Modified: Thu, 12 Jul 2018 11:05:13 GMT
Connection: keep-alive
ETag: "5b4735e9-14"
Server: ThirdWorldFileDaemon
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

6.43rc44 1531295119
Edit:
Now redirecting to https://download.mikrotik.com/routeros/LATEST.6rc, same cluster.

[2a02:610:7501:1000::196] => 6.43rc44 1531295119
[2a02:610:7501:4000::226] => 6.43rc45 1531816238
159.148.172.226 => 6.43rc45 1531816238
159.148.147.204 => 6.43rc44 1531295119

Edit2:
Now properly propagated.
 
User avatar
indjov
just joined
Posts: 20
Joined: Fri Jun 03, 2016 12:23 pm

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 11:55 am

So, in this version still i have a problem with Tools/SMS when i try to send sms shows me sms send failed: timeout?

Any news around that problem?
 
sindy
Forum Guru
Forum Guru
Posts: 3803
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 12:09 pm

As a workaround worth trying if this issue complicates your life, it might be possible to send the SMSes using /interface lte at-chat and the AT command used to send SMSes on your modem model.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
joserudi
Frequent Visitor
Frequent Visitor
Posts: 66
Joined: Thu Nov 22, 2007 10:16 pm

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 12:20 pm

*) wireless - improved Nv2 reliability on ARM devices;

The first point-to-point tests with nv2 on arm are not satisfactory. We will perform more tests
 
User avatar
indjov
just joined
Posts: 20
Joined: Fri Jun 03, 2016 12:23 pm

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 4:32 pm

As a workaround worth trying if this issue complicates your life, it might be possible to send the SMSes using /interface lte at-chat and the AT command used to send SMSes on your modem model.
it`s not that the idea? i use this usb stick only for sms netwatch(internet it`s not include it), but i don`t understand why evyrything work normaly before with this gsm option and now did`t not.
 
sindy
Forum Guru
Forum Guru
Posts: 3803
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 5:09 pm

This is a release candidate. Things do break as you add/improve functionality as nobody makes no mistakes at all. Se s tim smiř (in Czech).
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
server8
Member
Member
Posts: 380
Joined: Fri Apr 22, 2011 1:27 pm

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 5:26 pm

Little bit better but the issue still present
*) wireless - improved Nv2 reliability on ARM devices;

The first point-to-point tests with nv2 on arm are not satisfactory. We will perform more tests
 
abcde
just joined
Posts: 4
Joined: Sun Jul 15, 2018 5:00 am

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 10:14 pm

hAP AC2 still works very poorly with Intel Corporation Dual Band Wireless-N 7260. Transfer rate approximately 10 times slower than with other routers and often drops to 0 kbps.
 
User avatar
doneware
Trainer
Trainer
Posts: 508
Joined: Mon Oct 08, 2012 8:39 pm
Location: Hungary

Re: v6.43rc [release candidate] is released!

Mon Jul 23, 2018 10:21 pm

Little bit better but the issue still present
can you show some results? i was experiencing performance varying between 250-430Mbps using SXTsq ACs with early 6.43rc builds even under excellent conditions.
#TR0359
 
JimmyNyholm
Member Candidate
Member Candidate
Posts: 249
Joined: Mon Apr 25, 2016 2:16 am
Location: Sweden

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 11:38 am

NOOOOO!!!! -"radius - use MS-CHAPv2 for "login" service authentication;"

I hope there is a setting for this. chap, chapv2 with or without ms flavour is doing nothing good to the fact that static passwords are weak and should not be used.

We use one time passwords witch will not work in replay mode due to the fact of being ONE TIME. this makes all challenge based algorithm fail there simply is nothing to do challange on.

put PAP back now or atleast make it a setting so admins may choose the best setting for their env and needs. Make this setting universal så that we may use onetime radius password for winbox as well.

I have requested this many times.... This should be a setting is it or is it not? (Have not yet tested the RC in a router but will later this week.)
 
JimmyNyholm
Member Candidate
Member Candidate
Posts: 249
Joined: Mon Apr 25, 2016 2:16 am
Location: Sweden

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 3:36 pm

Ok so now I test the RC45 Build. My setup scripts fail can't rename user admin anymore? WHY?
 
nkourtzis
Member Candidate
Member Candidate
Posts: 202
Joined: Tue Dec 11, 2012 12:56 am
Location: Greece

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 3:45 pm

*) wireless - improved Nv2 reliability on ARM devices;

The first point-to-point tests with nv2 on arm are not satisfactory. We will perform more tests
Just a question without intention of doubting what you say: why use NV2 on PtP?
Passionate about networks
Enthusiastic about Mikrotik
MTCNA | MTCRE | MTCINE

No trees were killed to send this message,
but a large number of electrons were terribly inconvenienced.
 
JimmyNyholm
Member Candidate
Member Candidate
Posts: 249
Joined: Mon Apr 25, 2016 2:16 am
Location: Sweden

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 4:07 pm

And even worse the chap packet that you send out doest not contain any password (you are sending empty radius request even before asking the user of a password. Clean upp your code and enable PAP/CHAP/MSCHAP as option NOW!

I'm trying this RC in a CRS328-4C-20S-4S+RM

After downgrading to Current 6.42.6 Radius pap (one time passwords) and rename admin works like a charm again.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8305
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 4:26 pm

Ok so now I test the RC45 Build. My setup scripts fail can't rename user admin anymore? WHY?
yeah, that's funny :)
[admin@internal] > user set admin name=adminn
failure: user name can't be changed
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 1704
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 5:13 pm

Changing name of logged in user is not good idea. What if you are logged as different user?
Real admins use real keyboards.
 
SergeyMorozov
just joined
Posts: 17
Joined: Sun Apr 22, 2018 9:27 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 5:26 pm

Changing name of logged in user is not good idea. What if you are logged as different user?
[sergey@router.home] > /user set admin name adminn
failure: user name can't be changed
 
User avatar
osc86
newbie
Posts: 49
Joined: Wed Aug 09, 2017 1:15 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 5:46 pm

even more important, the memory leak is still not fixed
 
hzdrus
newbie
Posts: 36
Joined: Mon May 14, 2012 3:58 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 24, 2018 6:17 pm

Drop of RADIUS PAP support for ssh logins is a big problem for us too.

We're using a one-time password implementation which is impossible to integrate with MS-CHAPv2 - the security appliance only stores the hash of the PIN (fixed part of the password) and because of this cannot support MS-CHAPv2 since it would require to store PIN as clear-text. 6.43rc is forcing us to drop the OTP, actually decreasing security of the network.

Please allow us to make decisions on how to secure our network ourselves and make a setting allowing to select PAP for "login" service authentication. In any case RADIUS requests can always be sent via encrypted tunnels, while MS-CHAPv2 security strength has been watered down to level of a long obsolete single DES56 - one can find online services that will crack it in a day.
 
joserudi
Frequent Visitor
Frequent Visitor
Posts: 66
Joined: Thu Nov 22, 2007 10:16 pm

Re: v6.43rc [release candidate] is released!

Wed Jul 25, 2018 12:12 pm

*) wireless - improved Nv2 reliability on ARM devices;

The first point-to-point tests with nv2 on arm are not satisfactory. We will perform more tests
Just a question without intention of doubting what you say: why use NV2 on PtP?
I always use nv2 with mikrotik. There are some noise in my city.
 
ivanfm
newbie
Posts: 46
Joined: Sun May 20, 2012 5:07 pm

Re: v6.43rc [release candidate] is released!

Wed Jul 25, 2018 1:49 pm

Drop of RADIUS PAP support for ssh logins is a big problem for us too.

We're using a one-time password implementation which is impossible to integrate with MS-CHAPv2 - the security appliance only stores the hash of the PIN (fixed part of the password) and because of this cannot support MS-CHAPv2 since it would require to store PIN as clear-text. 6.43rc is forcing us to drop the OTP, actually decreasing security of the network.

Please allow us to make decisions on how to secure our network ourselves and make a setting allowing to select PAP for "login" service authentication. In any case RADIUS requests can always be sent via encrypted tunnels, while MS-CHAPv2 security strength has been watered down to level of a long obsolete single DES56 - one can find online services that will crack it in a day.
I agree.
If the internal system works with hash passwords ok, but If the router manager has a secure radius and want to use this kind of system should be permitted.
The SSH passwords are plain text in the encrypted tunnel and PAP still can be used.
 
alfregil
just joined
Posts: 11
Joined: Fri Aug 05, 2016 7:53 pm

Re: v6.43rc [release candidate] is released!

Fri Jul 27, 2018 6:34 pm

Hi, need some help to configure a paypal payment option with hotspot and usermanager. Just found this and update it to the RC version, but still need help on this.
 
User avatar
ziegenberg
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Thu Mar 07, 2013 11:14 am
Location: Vienna
Contact:

Re: v6.43rc [release candidate] is released!

Mon Jul 30, 2018 5:14 pm

Hi, need some help to configure a paypal payment option with hotspot and usermanager. Just found this and update it to the RC version, but still need help on this.
This is definitely the wrong thread for your request. There are separate threads and parts of the forum for those kind of questions. This thread is solely for issues with this particular release version and it's update.
 
TestCRS
just joined
Posts: 13
Joined: Mon Jan 22, 2018 4:49 pm

Re: v6.43rc [release candidate] is released!

Tue Jul 31, 2018 4:03 pm

>What's new in 6.43rc45 (2018-Jul-17 08:30):
>Changes in this release :
>sfp - fixed default advertised link speeds;

please say: what exactly was corrected
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1406
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43rc [release candidate] is released!

Thu Aug 02, 2018 11:51 am

Version 6.43rc51 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - added IPv6 support;
!) cloud - added support for licensed CHR instances (including trial);
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Other changes in this release:

*) bridge - added per-port based "tag-stacking" feature;
*) bridge - fixed "ingress-filtering", "frame-types" and "tag-stacking" value storing;
*) bridge - improved bridge port state changing process;
*) bridge - improved packet processing when bridge port changes states;
*) bridge - renamed option "vlan-protocol" to "ether-type";
*) certificate - do not allow to perform "undo" on certificate changes;
*) crs3xx - added command that forces fan detection on fan-equipped devices;
*) crs3xx - fixed port disable on CRS326 and CRS328 devices;
*) dhcpv6-client - allow to set "default-route-distance";
*) dhcpv6-client - fixed "add-default-route" parameter;
*) dhcpv6-client - fixed option handling;
*) dhcpv6-server - added additional RADIUS parameters for Prefix delegation, "rate-limit" and "life-time";
*) ethernet - fixed default ethernet advertise values after configuration reset (introduced in v6.43rc33)
*) filesystem - fixed NAND memory going into read-only mode (requires "factory-firmware" >= 3.41.1 and "current-firmware" >= 6.43);
*) health - fixed voltage measurements for RB493G devices;
*) hotspot - allow to properly configure Hotspot directory on external disk for devices that have flash type storage;
*) hotspot - fixed RADIUS CoA & PoD by allowing to accept "NAS-Port-Id";
*) ike1 - added unsafe configuration warning for main mode with pre-shared-key authentication;
*) ike1 - zero out reserved bytes in NAT-OA payload;
*) ike2 - fixed rekeyed child deletion during another exchange;
*) ike2 - improved basic exchange logging readability;
*) ipsec - fixed "sa-src-address" deduction from "src-address" in tunnel mode;
*) ipsec - fixed "static-dns" value storing (CLI only);
*) ipsec - fixed AES-CTR and AES-GCM key size proposing as initiator;
*) ldp - properly load LDP configuration;
*) led - fixed default LED configuration for RBLHGG-5acD-XL devices;
*) lte - added "registration-status" parameter under "/interface lte info" command;
*) lte - added additional D-Link PIDs;
*) lte - added additional low endpoint SIM7600 PIDs;
*) lte - added signal readings under "/interface lte scan" for 3G and GSM modes;
*) lte - fixed memory leak on USB disconnect;
*) lte - fixed SMS send feature when not in LTE network;
*) lte - ignore empty MAC addresses during Passthrough discovery phase;
*) lte - properly detect interface state when running for IPv6 only connection for R11e-LTE modem;
*) multicast - allow to add more than one RP per IP address for PIM;
*) ospf - improved link-local LSA flooding;
*) rb1100ahx4 - added DES and 3DES hardware acceleration support;
*) routerboot - removed RAM test from TILE devices (routerboot upgrade required);
*) sfp - hide "sfp-wavelength" parameter for RJ45 transceivers;
*) snmp - added "phy-rate" reading for "station-bridge" mode;
*) snmp - fixed "remote-cap" peer MAC address format;
*) ssh - strengthen strong-crypto (add aes-128-ctr and disallow hmac sha1 and groups with sha1);
*) tile - added DES and 3DES hardware acceleration support;
*) w60g - added distance measurement feature;
*) w60g - fixed random disconnects;
*) w60g - improved MCS rate detection process;
*) w60g - improved MTU change handling;
*) w60g - properly close connection with station on disconnect;
*) wireless - fixed "/interface wireless sniffer packet print follow" output;
*) wireless - fixed packet processing after removing wireless interface from CAP settings;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Thu Aug 02, 2018 12:21 pm

Version 6.43rc51 has been released.

*) ike1 - zero out reserved bytes in NAT-OA payload;
Thank you, I will test it soon and report.
 
Netstumble
just joined
Posts: 24
Joined: Tue Aug 05, 2014 9:11 am

Re: v6.43rc [release candidate] is released!

Thu Aug 02, 2018 12:33 pm

*) filesystem - fixed NAND memory going into read-only mode (requires "factory-firmware" >= 3.41.1 and "current-firmware" >= 6.43);
Please clarify:
Ex:
I run 6.40.8
System routerboard print:
routerboard: yes
model: RouterBOARD 3011UiAS
serial-number: 689A05572F46
firmware-type: ipq8060
factory-firmware: 3.27
current-firmware: 3.41
upgrade-firmware: 3.41
Will the fix be included only in later production runs?
I was under the assumption that the factory-firmware identifies the firmware ver# the device initially shipped with,
and it can't be somehow upgraded.
Or we are talking about bakup routerboot code... (in which case I still think it is not user-upgradeable?).
Nothing relevant on the wiki.
Thanks.
 
paulct
Member Candidate
Member Candidate
Posts: 287
Joined: Fri Jul 12, 2013 5:38 pm

Re: v6.43rc [release candidate] is released!

Thu Aug 02, 2018 12:35 pm

*) bridge - added per-port based "tag-stacking" feature

Can this also be explained. Similar to selective q-in-q?
 
vspider
just joined
Posts: 2
Joined: Fri Aug 05, 2016 3:55 pm

Re: v6.43rc [release candidate] is released!

Thu Aug 02, 2018 3:02 pm

I have LtAP mini International Kit and have LTE some stability issues. Is it worth upgrading to 6.43rc51 version as it claims fix for my case
*) usb - fixed modem initialisation on LtAP mini;
Is it stable enough for LtAP device at least?
 
User avatar
grusu
Frequent Visitor
Frequent Visitor
Posts: 94
Joined: Tue Aug 13, 2013 7:35 am
Location: Bucharest, Romania

Re: v6.43rc [release candidate] is released!

Fri Aug 03, 2018 10:46 am

Hi,

Something is wrong with the Hash Algorithms in Peer Proposal setting in v6.43.51:
Peer Proposal mismatch.PNG
If I have to set the SHA1 algorithm, in WinBox I have to set md5.
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 03, 2018 5:42 pm

Version 6.43rc51 has been released.

*) ike1 - zero out reserved bytes in NAT-OA payload;
Thank you, I will test it soon and report.
Unfortunately it is the same - report sent to support.
Any others who try to do IPsec from a Draytek router behind NAT?
 
MonkeyDan
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Fri Dec 29, 2017 8:41 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 03, 2018 10:33 pm

rc51 seems better on point-to-point Wireless Wires (fixed dropping issues in 6.42.6)
But we're still seeing a lot of disconnects with multipoint.
 
janos66
just joined
Posts: 2
Joined: Sat Aug 04, 2018 12:07 pm

Re: v6.43rc [release candidate] is released!

Sat Aug 04, 2018 1:17 pm

Will the fix be included only in later production runs?
I was under the assumption that the factory-firmware identifies the firmware ver# the device initially shipped with,
and it can't be somehow upgraded.
Or we are talking about bakup routerboot code... (in which case I still think it is not user-upgradeable?).
Nothing relevant on the wiki.
I think factory routerboard firmware = backup bootloader.
It's normally not allowed but seems possible to upgrade the factory version: https://wiki.mikrotik.com/wiki/Manual:R ... D_settings
The backup RouterBOOT version can not be older than v3.24 version. A special package is provided to upgrade the backup RouterBOOT (DANGEROUS). Newer devices will have this new backup loader already installed at the factory. Download the package for:
I usually assumed the factory/backup version to be completely irrelevant unless you force it by a RESET button sequence (or possibly some other means).
I still think this is the case here. The new feature will probably be available when using the normal boot loader (of a high enough version) but be absent when using the backup bootloader (either manually forced or may be automatically triggered if the "main" one is too corrupted to do anything).

I never tried but thought the secondary (factory) version can be upgraded too, either via Netinstall or even just by using the "force backup booter" and initiating an upgrade from ROS. But I never felt the need, so never tried... I just tried to latter (force backup and upgrade from ROS) but it's not that easy. I wonder if Netinstall could do it.

Edit:
Oh! And I think even though we now have a matching ROS and bootloader version (even for every incremental, let alone RC version), that firmware still has some internal version number (probably still somewhere around 3.4x for ROS 6.4x). So this change only complicates this question (it's probably possible to have basically the same factory backup and "main" booloader on a device even though the visible version number is seemingly much higher on the normally-upgradeable "main" firmware).

I think they just rebuild the source code of the bootloader for every ROS release, so it has a matching version number but this no longer indicates they made any change to the source. But this seems to be impractical because now we don't know when the code actually changes.
 
Netstumble
just joined
Posts: 24
Joined: Tue Aug 05, 2014 9:11 am

Re: v6.43rc [release candidate] is released!

Sat Aug 04, 2018 8:58 pm

Will the fix be included only in later production runs?
I was under the assumption that the factory-firmware identifies the firmware ver# the device initially shipped with,
and it can't be somehow upgraded.
Or we are talking about bakup routerboot code... (in which case I still think it is not user-upgradeable?).
Nothing relevant on the wiki.
I think factory routerboard firmware = backup bootloader.
It's normally not allowed but seems possible to upgrade the factory version: https://wiki.mikrotik.com/wiki/Manual:R ... D_settings
The backup RouterBOOT version can not be older than v3.24 version. A special package is provided to upgrade the backup RouterBOOT (DANGEROUS). Newer devices will have this new backup loader already installed at the factory. Download the package for:
I usually assumed the factory/backup version to be completely irrelevant unless you force it by a RESET button sequence (or possibly some other means).
I still think this is the case here. The new feature will probably be available when using the normal boot loader (of a high enough version) but be absent when using the backup bootloader (either manually forced or may be automatically triggered if the "main" one is too corrupted to do anything).

I never tried but thought the secondary (factory) version can be upgraded too, either via Netinstall or even just by using the "force backup booter" and initiating an upgrade from ROS. But I never felt the need, so never tried... I just tried to latter (force backup and upgrade from ROS) but it's not that easy. I wonder if Netinstall could do it.

Edit:
Oh! And I think even though we now have a matching ROS and bootloader version (even for every incremental, let alone RC version), that firmware still has some internal version number (probably still somewhere around 3.4x for ROS 6.4x). So this change only complicates this question (it's probably possible to have basically the same factory backup and "main" booloader on a device even though the visible version number is seemingly much higher on the normally-upgradeable "main" firmware).

I think they just rebuild the source code of the bootloader for every ROS release, so it has a matching version number but this no longer indicates they made any change to the source. But this seems to be impractical because now we don't know when the code actually changes.
All valid considerations.
I suppose they do refer to the secondary bootloader,
in witch case they should provide a "special" package for the users who would want to upgrade the backup loader.
Still, I would like a clarification from mikrotik.
 
janos66
just joined
Posts: 2
Joined: Sat Aug 04, 2018 12:07 pm

Re: v6.43rc [release candidate] is released!

Sat Aug 04, 2018 11:08 pm

in witch case they should provide a "special" package for the users who would want to upgrade the backup loader.
In my opinion the best solution would be to always auto-upgrade the main bootloader along every ROS upgrade (without the need to issue manual reboot twice) and allow the user to manually upgrade the backup bootloader once the new ROS successfully booted with an upgraded main bootloader (which is a fair enough confirmation that the device is stable enough with the new bootloader to use ROS for bootloader changes, thus it's probably possible to downgrade if some small error occurs later on).
 
laca77
just joined
Posts: 10
Joined: Wed Jun 03, 2015 11:35 am

Re: v6.43rc [release candidate] is released!

Sat Aug 04, 2018 11:40 pm

Hi

I ran into a strange problem.
I had to reinstall the system with Netinstall to the latest rc51 version.

My device is a CRS109-8G-1S-2HnD which is a DHCP client on the SFP copper port (ISP is UPC). I try to run a speedtest.net from my desktop PC .

After everything was ready, i tried to run a speedtest, The speed was 80Mbps with 90% of cpu load. The idle load was 17%.
Ok, i installed back to the 6.42.6. The speed was 400Mbps with 50% of cpu load. Idle load is 4%.
Nice. So i did some screenshot from the tools/profile.
The last step was back to 6.43rc51 to reproduce the problem. But now everything is looks nice, on this RC i can get the 400Mbps with the same load as it was on the 6.42.6...

I don't know what happened, i didn't changed the config.... but now looks like everything is ok...

Just write this post as a note, may be helps to somebody.
 
schadom
Member Candidate
Member Candidate
Posts: 139
Joined: Sun Jun 25, 2017 2:47 am
Location: Austria

Re: v6.43rc [release candidate] is released!

Sun Aug 05, 2018 4:44 pm

*) sfp - hide "sfp-wavelength" parameter for RJ45 transceivers;
"sfp-connector-type" is still falsely displayed as "LC" for S-RJ01 modules in Winbox and CLI
 
jondavy
Member Candidate
Member Candidate
Posts: 125
Joined: Tue May 12, 2009 11:14 pm
Location: Brasil

Re: v6.43rc [release candidate] is released!

Mon Aug 06, 2018 12:08 am

in queues tree in parent does not appear to select queue of hotspot users like <hotspot-john>
 
chubbs596
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Fri Dec 06, 2013 6:07 pm

Re: v6.43rc [release candidate] is released!

Mon Aug 06, 2018 10:23 am

*) bridge - added per-port based "tag-stacking" feature

Can this also be explained. Similar to selective q-in-q?
Would also like this explained
 
petern
just joined
Posts: 22
Joined: Wed Dec 13, 2017 5:58 pm

Re: v6.43rc [release candidate] is released!

Mon Aug 06, 2018 11:56 am

Hi, I'm also using PAP with radius for authentication to support 2FA logins. Using only chap is not helpful. Is feedback here taken on board or is there a more official way to get this heard?
 
User avatar
artz
MikroTik Support
MikroTik Support
Posts: 88
Joined: Tue Oct 17, 2017 5:51 pm
Location: Riga
Contact:

Re: v6.43rc [release candidate] is released!

Mon Aug 06, 2018 2:05 pm

*) bridge - added per-port based "tag-stacking" feature

Can this also be explained. Similar to selective q-in-q?
Wiki has been updated with an example:
https://wiki.mikrotik.com/wiki/Manual:I ... g_stacking

Selective QinQ is not possible yet, only port based QinQ or CVID stacking is possible now.
 
nicoguido
just joined
Posts: 5
Joined: Tue Jul 24, 2018 11:27 pm

Re: v6.43rc [release candidate] is released!

Mon Aug 06, 2018 4:46 pm

Hi,

Here is a problem with CRS317 and rc51.

My configuration :
some clients <---> CRS326 <===== Trunk1(only tagged VLANs) =====> CRS317 <===== Trunk2 (only tagged VLANS) ====> CRS328 <---> some clients

Installation with version 6.42.6 for the three devices : no problem.

Upgrade on version 6.43rc51 for the three devices :
everything is working like version 6.42.6, except the fact that CRS317 is unreachable for remote management via CRS326/CRS328 :
- no access to the web pages
- no access with winbox + it doesn't appear in 'neighbors'
CSR317 is still manageable through a direct connection to one of its ports.

1st Test : I decide to change CRS317 with and old TP-link switch with the same VLAN/Trunk configuration. The TP-Link switch is available for remote management via CRS326/CRS328.
2nd Test : I rebuild CRS317 with a netsintall of version 6.43rc51 and a fresh configuration. Same behaviour, the CRS317 is unreachable for remote management via CRS326/CRS328.

Are you aware of this king of problem with the RC version ?
If I find the time, I'll do a last test by reinstalling version 6.42.6 on the CRS317 only.
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Wed Aug 08, 2018 2:45 pm

Found the problem and it was that I changed to an other DNS server that did not Round Robin by default.
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Tue Aug 14, 2018 1:33 pm

Version 6.43rc56 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - added IPv6 support;
!) cloud - added support for licensed CHR instances (including trial);
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Other changes in this release:

!) security - fixed vulnerabilities CVE-2018-1156, CVE-2018-1157, CVE-2018-1158, CVE-2018-1159;
*) bridge - added support for BPDU Guard (CLI only);
*) bridge - added support for DHCP Option 82 (disables hardware offloading, CLI only);
*) bridge - added support for DHCP Snooping (disables hardware offloading, CLI only);
*) bridge - forward LACPDUs when "protocol-mode=none";
*) bridge - improved packet handling;
*) cloud - added simultaneous IPv4/IPv6 support;
*) console - added "dont-require-permissions" parameter for scripts;
*) dhcpv4-relay - fixed false invalid flag presence;
*) dhcpv6-server - do not allow to run DHCPv6 server on slave interface;
*) dhcpv6-server - fixed dynamic simple queue creation for RADIUS bindings;
*) dhcpv6-server - properly update interface for dynamic DHCPv6 servers;
*) ethernet - fixed possible link flaps after disabling/enabling the interface (introduced in v6.43rc51);
*) ethernet - improved large packet handling on ARM devices with wireless;
*) ethernet - removed obsolete slave flag from "/interface vlan" menu;
*) hotspot - fixed customized HTML file usage (introduced in 6.43rc47);
*) ike1 - zero out reserved bytes in NAT-OA payload;
*) ike2 - fixed initiator first policy selection;
*) ippool - improved used address error message;
*) ipsec - added warning messages for incorrect peer configuration;
*) ipsec - separate phase1 proposal configuration from peer menu;
*) ppp - fixed interface enabling after a while if none of them where active;
*) ppp - improved modem mode switching;
*) snmp - added "temp-exception" trap;
*) switch - fixed possible switch chip hangs after initialization on MediaTek and Atheros8327 switch chips;
*) tile - fixed false HW offloading flag for MPLS;
*) tr069-client - allow editing of "provisioning-code" attribute (CLI only);
*) tr069-client - fixed unresponsive tr069 service when blackhole route is present;
*) upgrade - fixed RouterOS upgrade process from RouterOS v5;
*) ups - improved UPS serial parsing stability;
*) w60g - general stability and performance improvements;
*) w60g - stop doing distance measurements after first successful measurement;
*) winbox - added "default-route-distance" parameter for "IPv6/DHCP-client" menu;
*) winbox - fixed "sfp-connector-type" value presence under "Interface/Ethernet";
*) winbox - fixed warning presence for "IP/IPsec/Peers" menu;
*) winbox - fixed "write-sect-since-reboot" value presence under "System/Resources";
*) winbox - show "System/RouterBOARD/Mode Button" on devices that has such feature;
*) wireless - added option to disable PMKID for WPA2 (CLI only);
*) wireless - fixed memory leak when performing wireless scan on ARM;
*) wireless - updated "united-states" regulatory domain information;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
raffav
Member Candidate
Member Candidate
Posts: 286
Joined: Wed Oct 24, 2012 4:40 am

Re: v6.43rc [release candidate] is released!

Tue Aug 14, 2018 1:46 pm

Nice..
Good work
I get very happy when there are a lot of changes logs, even if I don't use 80% of this improvement , I get happy for whose does.
Can't wait to this became stable release.

Sent from my XT1580 using Tapatalk

 
User avatar
indjov
just joined
Posts: 20
Joined: Fri Jun 03, 2016 12:23 pm

Re: v6.43rc [release candidate] is released!

Tue Aug 14, 2018 1:52 pm

sorry now works.
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 1813
Joined: Mon Jan 14, 2008 1:53 pm
Location: Straya
Contact:

Re: v6.43rc [release candidate] is released!

Tue Aug 14, 2018 3:38 pm

*) bridge - added support for DHCP Option 82 (disables hardware offloading, CLI only);
*) bridge - added support for DHCP Snooping (disables hardware offloading, CLI only);
Could we please get some examples of how to use these features on the Wiki ?

I cannot see any of the options I would expect, e.g. being able to set the contents of the Option-82 injection string with variables for the first feature, or being able to specify the valid DHCP server for the second.
http://thebrotherswisp.com/ | Mikrotik MTCNA, MTCRE, MTCINE | Fortinet FTCNA, FCNSP, FCT | Extreme Networks ENA
 
User avatar
macgaiver
Forum Guru
Forum Guru
Posts: 1721
Joined: Wed May 18, 2005 5:57 pm
Location: Sol III, Sol system, Sector 001, Alpha Quadrant

Re: v6.43rc [release candidate] is released!

Tue Aug 14, 2018 4:09 pm

*) wireless - added option to disable PMKID for WPA2 (CLI only);
All my everyday devices still connects just fine.
With great knowledge comes great responsibility, because of ability to recognize id... incompetent people much faster.
 
User avatar
artz
MikroTik Support
MikroTik Support
Posts: 88
Joined: Tue Oct 17, 2017 5:51 pm
Location: Riga
Contact:

Re: v6.43rc [release candidate] is released!

Tue Aug 14, 2018 5:59 pm

*) bridge - added support for DHCP Option 82 (disables hardware offloading, CLI only);
*) bridge - added support for DHCP Snooping (disables hardware offloading, CLI only);
Could we please get some examples of how to use these features on the Wiki ?

I cannot see any of the options I would expect, e.g. being able to set the contents of the Option-82 injection string with variables for the first feature, or being able to specify the valid DHCP server for the second.
Did you specify which ports are trusted ports under /interface bridge port?
 
MonkeyDan
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Fri Dec 29, 2017 8:41 pm

Re: v6.43rc [release candidate] is released!

Tue Aug 14, 2018 7:29 pm

Still seeing multipoint Wireless Wire disconnects with 6.43rc56. I don't think the RC branch has been stable on these since rc17 :(
6.42.3 continues to be my recommended version.
 
User avatar
IPANetEngineer
Trainer
Trainer
Posts: 1018
Joined: Fri Aug 10, 2012 6:46 am
Location: Jackson, MS, USA
Contact:

Re: v6.43rc [release candidate] is released!

Tue Aug 14, 2018 10:57 pm

*) bridge - added support for DHCP Option 82 (disables hardware offloading, CLI only);
*) bridge - added support for DHCP Snooping (disables hardware offloading, CLI only);
Could we please get some examples of how to use these features on the Wiki ?

I cannot see any of the options I would expect, e.g. being able to set the contents of the Option-82 injection string with variables for the first feature, or being able to specify the valid DHCP server for the second.
I second that!
Global - MikroTik Support & Consulting - English | Francais | Español | Portuguese +1 855-645-7684
https://iparchitechs.com/services/mikro ... l-support/ mikrotiksupport@iparchitechs.com
 
Florian
Frequent Visitor
Frequent Visitor
Posts: 67
Joined: Sun Mar 13, 2016 9:45 am
Location: France

Re: v6.43rc [release candidate] is released!

Wed Aug 15, 2018 11:08 am

Hello,

Funny thing after Version 6.43rc56 , my DHCPv6 client is showing in red in winbox, even though everything is working, and my ipv6 connectivity is ok. Still after after re-creating it from scratch... Not a big deal, but...
ipv6.JPG
You do not have the required permissions to view the files attached to this post.
- Sorry for my english -
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Wed Aug 15, 2018 11:57 am

*) ike1 - zero out reserved bytes in NAT-OA payload;
I tested it again with Draytek router behind NAT and now it works OK!
Thanks!
 
IntrusDave
Forum Guru
Forum Guru
Posts: 1284
Joined: Fri May 09, 2014 4:36 am
Location: Rancho Cucamonga, CA

Re: v6.43rc [release candidate] is released!

Thu Aug 16, 2018 12:31 am

*) console - added "dont-require-permissions" parameter for scripts;
How does this one work? Any specific commands that it works with?
David Joyce
Network & Security Engineer
Intrus Technologies, LLC.
Rancho Cucamonga, CA, USA
 
ath
just joined
Posts: 7
Joined: Thu May 12, 2016 4:17 am
Location: Melbourne, VIC

Re: v6.43rc [release candidate] is released!

Thu Aug 16, 2018 4:16 am

I notice that in 6.43rc34 the /interface bridge vlan untagged= configuration no longer strips all the C-tags from a packet with multiple C-tags. Instead it only strips the top C-tag.
Will this be the case in the production version?
If so, would it be possible to reinstate the former behaviour as an option?
 
diablothebest
newbie
Posts: 27
Joined: Fri May 20, 2016 11:07 pm

Re: v6.43rc [release candidate] is released!

Thu Aug 16, 2018 7:02 am

*) bridge - added support for BPDU Guard (CLI only);
Where I can change this settings via CLI?
 
User avatar
artz
MikroTik Support
MikroTik Support
Posts: 88
Joined: Tue Oct 17, 2017 5:51 pm
Location: Riga
Contact:

Re: v6.43rc [release candidate] is released!

Thu Aug 16, 2018 10:39 am

IntrusDave - you can find more information about this option here:
https://wiki.mikrotik.com/wiki/Manual:S ... repository
https://wiki.mikrotik.com/wiki/Manual:T ... Properties

diablothebest - this can be done under /interface bridge port
https://wiki.mikrotik.com/wiki/Manual:I ... t_Settings

ath - can you please port an example and configuration when this was working?
 
User avatar
boldsuck
Frequent Visitor
Frequent Visitor
Posts: 58
Joined: Sun Sep 01, 2013 1:07 am
Location: Germany

Re: v6.43rc [release candidate] is released!

Fri Aug 17, 2018 11:00 pm

Funny thing after Version 6.43rc56 , my DHCPv6 client is showing in red in winbox, even though everything is working, and my ipv6 connectivity is ok. Still after after re-creating it from scratch... Not a big deal, but...

Same in Webfig and Terminal. DHCPv6 client Flag = I - invalid.
IPv6 connection works without problems. :wink:

[admin@migo] /ipv6 route> check
status: ok
interface: pppoe-out1
nexthop: ::

[admin@migo] /ipv6 route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable
#      DST-ADDRESS               GATEWAY                  DISTANCE
0 ADS	 ::/0			pppoe-out1			1
1 DS	 ::/0			fe80::90:1a00:2a3:47c...	1
2 ADSU	 2001:4dd2:8986::/48					1
3 ADC	 2001:4dd2:8986::/64    bridge-local			0

[admin@migo] /ipv6 dhcp-client> print
Flags: D - dynamic, X - disabled, I - invalid
#    INTERFACE	STATUS          REQUEST         PREFIX            ADDRESS
0  I	pppoe-out1       bound              prefix             2001:4dd2:8986::/48, 22h28m17s
╰_╯ Ciao Marco!
 
adamgardner2
just joined
Posts: 9
Joined: Fri Aug 03, 2018 5:04 am

Re: v6.43rc [release candidate] is released!

Sat Aug 18, 2018 1:32 am

So, I spun up a brand new CHR in AWS and updated it to 6.43rc56, to play around with it. One of my main goals was to update the ruby 'mtik' gem to use the new login method, so that when the 6.43 is eventually released for real, I can continue to use it.

Oddly, though, the old login method still seemed to work on 6.43rc56. Is it intended that both methods are available at the moment? While that certainly provides a better transitional user experience, it does seem to imply that the unhashed password is still being stored (at least insofar as I understand the challenge-response login process).

Can anyone clarify this?
Last edited by adamgardner2 on Tue Aug 21, 2018 2:01 am, edited 1 time in total.
 
soomanyquestions
newbie
Posts: 34
Joined: Sat Aug 20, 2016 6:35 pm

Re: v6.43rc [release candidate] is released!

Sat Aug 18, 2018 9:19 pm

Just posting a datapoint that the disable-pmkid=yes option works flawlessly with android, iphone, ipad, 2x windows 10 laptop, a macbook pro and a LG smart tv.
 
mlenhart
Frequent Visitor
Frequent Visitor
Posts: 83
Joined: Mon Oct 30, 2017 11:30 pm

Re: v6.43rc [release candidate] is released!

Mon Aug 20, 2018 11:53 pm

Version 6.43rc56 has been released.

*) w60g - stop doing distance measurements after first successful measurement;
I have to report, that distance measurement does not work correctly. On AP side it reports 706.54m while on client side just 374.28m (374.28 is the correct distance)
 
tigro11
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: v6.43rc [release candidate] is released!

Wed Aug 22, 2018 5:02 pm

hi guys, it seems to me that it is still not possible to change the date format in dd / mm / yyyy. It would be very useful as I also work with userman reports.
Does anyone have a solution?
thank you
Valerio
 
pe1chl
Forum Guru
Forum Guru
Posts: 5706
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43rc [release candidate] is released!

Wed Aug 22, 2018 5:04 pm

hi guys, it seems to me that it is still not possible to change the date format in dd / mm / yyyy. It would be very useful as I also work with userman reports.
Does anyone have a solution?
thank you
Valerio
I agree with that, it should be possible to have a system setting that changes the date format everywhere, but it would be feature request not something for the v6.43rc topic.
 
tigro11
Frequent Visitor
Frequent Visitor
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: v6.43rc [release candidate] is released!

Wed Aug 22, 2018 5:09 pm

very strange, now all the devices have the ability to change the format of the date ....
I am amazed that until now nobody has raised the problem
 
S4bulba
just joined
Posts: 13
Joined: Mon May 07, 2018 12:18 am

Re: v6.43rc [release candidate] is released!

Thu Aug 23, 2018 12:07 am

Version 6.43rc56 as well as version 6.43rc51 are good builds for 951Ui-2nD.WAN PPPoE stability , good wireless signal for what i use in my house.No problems for a casual SOHO user.
Over & Out !
 
diablothebest
newbie
Posts: 27
Joined: Fri May 20, 2016 11:07 pm

Re: v6.43rc [release candidate] is released!

Thu Aug 23, 2018 8:15 pm

I lose my UserManager database on last RC!
 
diablothebest
newbie
Posts: 27
Joined: Fri May 20, 2016 11:07 pm

Re: v6.43rc [release candidate] is released!

Thu Aug 23, 2018 8:17 pm

Lost all userman data on last RC...
 
freemannnn
Long time Member
Long time Member
Posts: 657
Joined: Sun Oct 13, 2013 7:29 pm

Re: v6.43rc [release candidate] is released!

Thu Aug 23, 2018 8:52 pm

very strange, now all the devices have the ability to change the format of the date ....
I am amazed that until now nobody has raised the problem
viewtopic.php?t=134098
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 10:12 am

Version 6.43rc64 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - added IPv6 support;
!) cloud - added support for licensed CHR instances (including trial);
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) security - fixed vulnerabilities CVE-2018-1156, CVE-2018-1157, CVE-2018-1158, CVE-2018-1159;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Other changes in this release:

*) bridge - added an option to manually specify ports that have a multicast router (CLI only);
*) bridge - added a warning when untrusted port receives a DHCP Server message when DCHP Snooping is enabled;
*) bridge - added more options to fine-tune IGMP Snooping enabled bridges (CLI only);
*) bridge - added support for DHCP Option 82 (CLI only);
*) bridge - added support for DHCP Snooping (CLI only);
*) bridge - added support for IGMP Snooping fast-leave feature (CLI only);
*) cloud - close local UDP port if no activity;
*) console - made "once" parameter mandatory when using "as-value" on "monitor" commands;
*) console - removed automatic swapping of "from=" and "to=" in "for" loops;
*) crs326/crs328 - fixed packet forwarding when port changes states with IGMP Snooping enabled;
*) crs3xx - added hardware support for DHCP Snooping and Option 82;
*) crs3xx - fixed packet forwarding when "frame-type" is changed (introduced in v6.43rc51);
*) crs3xx - fixed SwOS config import;
*) defconf - fixed default configuration for RBSXTsq5nD;
*) dhcpv6-client - fixed false invalid flag (introduced in v6.43rc56);
*) fetch - added "as-value" output format;
*) fetch - fixed address and DNS verification in certificates;
*) health - added missing parameters from export;
*) ipsec - added warning messages for incorrect peer configuration;
*) ipsec - improved stability when using IPsec with disabled route cache;
*) leds - fixed LED behaviour when bonding is configured on SFP+ interfaces;
*) lte - added "sector-id" to info command;
*) lte - fixed SIM7600 series module support with newer device IDs;
*) ppp - added support for Alfa Network U4G modem;
*) rb3011 - added IPsec hardware acceleration support;
*) snmp - added EAP identity to CAPsMAN registration table;
*) supout - added monitored bridge VLAN table to supout file;
*) switch - added CPU Flow Control settings for devices with a Atheros8227, QCA8337, Atheros8327, Atheros7240 or Atheros8316 switch chips;
*) tr069-client - use SNI extension for HTTPS;
*) ups - improved UPS serial parsing stability;
*) w60g - added "beamforming-event" stats counter;
*) w60g - fixed random disconnects;
*) w60g - general stability and performance improvements;
*) wireless - accept only valid path for sniffer output file parameter;
*) wireless - added "czech republic 5.8" regulatory domain information;
*) wireless - added "etsi2" regulatory domain information;
*) wireless - added option to disable PMKID for WPA2;
*) wireless - updated "czech republic" regulatory domain information;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
nescafe2002
Long time Member
Long time Member
Posts: 617
Joined: Tue Aug 11, 2015 12:46 pm
Location: Netherlands

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 11:07 am

*) rb3011 - added IPsec hardware acceleration support;

That was.. unexpected! :D
 
zyzelis
Member Candidate
Member Candidate
Posts: 212
Joined: Sun Apr 08, 2012 9:25 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 11:26 am

Dear Mikrotik stuff,
please add dhcp option82 to dhcp server
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 11:32 am

Already possible with RADIUS server.
 
bennyh
Frequent Visitor
Frequent Visitor
Posts: 69
Joined: Fri Mar 03, 2017 12:37 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 12:23 pm

*) rb3011 - added IPsec hardware acceleration support;
That was.. unexpected! :D
very-very-very-very big thanks for the Miki stuff if it works :D
If they fix the web proxy ipv6 website support too that will makes me very happy :D
 
nkourtzis
Member Candidate
Member Candidate
Posts: 202
Joined: Tue Dec 11, 2012 12:56 am
Location: Greece

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 12:55 pm

*) rb3011 - added IPsec hardware acceleration support;

That was.. unexpected! :D

And VERY VERY welcome! Thanks Mktik!
Passionate about networks
Enthusiastic about Mikrotik
MTCNA | MTCRE | MTCINE

No trees were killed to send this message,
but a large number of electrons were terribly inconvenienced.
 
zyzelis
Member Candidate
Member Candidate
Posts: 212
Joined: Sun Apr 08, 2012 9:25 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 1:01 pm

Already possible with RADIUS server.
Yes i know that.
But to keep radius only for option82 not very smart. isn't?
 
nkourtzis
Member Candidate
Member Candidate
Posts: 202
Joined: Tue Dec 11, 2012 12:56 am
Location: Greece

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 1:20 pm

The winbox behaviour where winbox closes upon reconnecting to a previously broken connection, is again here since v3.16. It occurs not always, but quite often. Mktik, can you please look into it?

Another issue: I am trying to connect to a device via RoMON which runs over a EoIP connection (L2 only, not bridged, no IPs) which is established over a L2TP tunnel. Even though the L2TP tunnel is quite stable, winbox cannot stay connected for more than a few seconds at a time. Actually, winbox opens the RoMON connection, but any list (say, interfaces) shows up empty and after a few seconds the window closes. Any ideas?
Passionate about networks
Enthusiastic about Mikrotik
MTCNA | MTCRE | MTCINE

No trees were killed to send this message,
but a large number of electrons were terribly inconvenienced.
 
gwartass
just joined
Posts: 6
Joined: Tue Aug 18, 2015 5:28 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 3:13 pm

*) wireless - added "czech republic 5.8" regulatory domain information;
*) wireless - updated "czech republic" regulatory domain information;

Is it what I mean? So now we'll have two czech 5GHz ranges now - one for traditional channels and second for channels over 5700 which can have max transmit power 20dBi only?
If yes, It's great! Because now I have big problem if I have the wireless link calculated for 30dBi and DFS switches to channel over 5700 and 20dBi..
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 3:33 pm

[admin@MikroTik] > :put [/tool fetch https://www.eworm.de/ip/ output=user as-value ]
data=80.133.168.147;downloaded=0;duration=00:00:01;status=finished
Finally we can fetch data without writing and reading a file. Thanks a lot!

Looks like it's required to cut the data part, though... Or is there a way to put the data only into a variable?
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1294
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 3:34 pm

*) rb3011 - added IPsec hardware acceleration support;
Maybe we could have some hope that RB750Gr3 would get HW support sooooon. :mrgreen:
 
How to use Splunk to monitor your MikroTik Router

MikroTik->Splunk
 
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 3:36 pm

*) rb3011 - added IPsec hardware acceleration support;
Maybe we could have some hope that RB750Gr3 would get HW support sooooon. :mrgreen:
It has support for harware ipsec for a long time...
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
sindy
Forum Guru
Forum Guru
Posts: 3803
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 3:38 pm

Maybe we could have some hope that RB750Gr3 would get HW support sooooon. :mrgreen:
RB750 Gr3 does have hardware acceleration of IPsec ever since the first release. What it does not have is "hardware acceleration" of VLAN handling on the switch chip.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
mkx
Forum Guru
Forum Guru
Posts: 2792
Joined: Thu Mar 03, 2016 10:23 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 3:55 pm

What it does not have is "hardware acceleration" of VLAN handling on the switch chip.
Unfortunately this is true for most devices, some of them have quite a decent switch chip built in.
BR,
Metod
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 3:56 pm

[admin@MikroTik] > :put [/tool fetch https://www.eworm.de/ip/ output=user as-value ]
data=80.133.168.147;downloaded=0;duration=00:00:01;status=finished
Finally we can fetch data without writing and reading a file. Thanks a lot!

Looks like it's required to cut the data part, though... Or is there a way to put the data only into a variable?
[admin@MikroTik] > :global test
[admin@MikroTik] > :set test [ / tool fetch https://www.eworm.de/ip/ output=user as-value ]
[admin@MikroTik] > :put [ :pick $test 0 ]
80.133.168.147
Works!
Thanks Mikrotik!

(BTW, what the hell make the formatting go nuts?)
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
mkx
Forum Guru
Forum Guru
Posts: 2792
Joined: Thu Mar 03, 2016 10:23 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 3:59 pm

Never mind.
BR,
Metod
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 4:00 pm

eworm, proper syntax would be:
:local test ([tool fetch url="https://www.eworm.de/ip" output=user as-value]->"data");
:put $test;

https://wiki.mikrotik.com/wiki/Manual:T ... a_variable
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 4:03 pm

eworm, proper syntax would be:
:local test ([tool fetch url="https://www.eworm.de/ip" output=user as-value]->"data");
:put $test;

https://wiki.mikrotik.com/wiki/Manual:T ... a_variable
Even better! Thanks a lot!
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
User avatar
osc86
newbie
Posts: 49
Joined: Wed Aug 09, 2017 1:15 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 4:04 pm

I lost all ipsec connections after updating to rc64 because of a bug in peer profiles.

Image
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 4:12 pm

osc86, we are aware of the issue. It will be fixed until 6.43 is released in current release channel.
 
sindy
Forum Guru
Forum Guru
Posts: 3803
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 4:18 pm

(BTW, what the hell make the formatting go nuts?)
You have to use preview and add some empty lines before the [code] ones where necessary.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
User avatar
osc86
newbie
Posts: 49
Joined: Wed Aug 09, 2017 1:15 pm

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 8:07 pm

osc86, we are aware of the issue. It will be fixed until 6.43 is released in current release channel.
Something must have been changed with ipsec processing in rc64. No traffic is passing through the tunnels.
I moved back to 56, where everything works fine.
 
msatter
Forum Guru
Forum Guru
Posts: 1199
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 8:27 pm

osc86, we are aware of the issue. It will be fixed until 6.43 is released in current release channel.
It would be nice if that would also be communicated in the changelog if something gets broken in the process and there is knowledge about that. Preferable also in red to warn.
Saves downgrades for some who are using that specific feature.
Two RB760iGS (hEX S) in series. One does PPPoE and both do IKEv2.
Running:
RouterOS 6.46Beta / Winbox 3.19 / MikroTik APP 1.3.2
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5921
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 8:50 pm

osc86, we are aware of the issue. It will be fixed until 6.43 is released in current release channel.
Something must have been changed with ipsec processing in rc64. No traffic is passing through the tunnels.
I moved back to 56, where everything works fine.
Contact support with attached supout file.
 
JimmyNyholm
Member Candidate
Member Candidate
Posts: 249
Joined: Mon Apr 25, 2016 2:16 am
Location: Sweden

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 9:10 pm

And what about making radius login scheme selectable. chap for people who use static shit that can be challenged pap for us who only use one time passwords.
 
JimmyNyholm
Member Candidate
Member Candidate
Posts: 249
Joined: Mon Apr 25, 2016 2:16 am
Location: Sweden

Re: v6.43rc [release candidate] is released!

Fri Aug 24, 2018 9:12 pm

And what about making radius login scheme selectable. chap for people who use static shit that can be challenged pap for us who only use one time passwords. And therefore Inherrently dosen't have anything to do a challenge on. (CHAP is unusable in this case)
 
User avatar
kometchtech
Member Candidate
Member Candidate
Posts: 194
Joined: Sat Jun 15, 2013 4:25 am
Location: Japan
Contact:

Re: v6.43rc [release candidate] is released!

Sat Aug 25, 2018 3:53 am

I updated to rc64, but it seems I can not communicate with ipv6. There was no problem with at least rc56.
We used netinstall to reintroduce rc64, but the situation has not changed.
--
Routerboard Users Group JP
http://www.rb-ug.jp/
CCR1009-8G-1S-1S+, RB750Gr3, CRS226-24G-2S+, RB850Gx2, RB960PGS, CRS317-1G-16S+,
RB2011UAS, CRS125-24G-1S, RB962UiGS-5HacT2HnT, CRS212-1G-10S-1S+, RB3011UiAS
 
nicob
just joined
Posts: 3
Joined: Tue Apr 11, 2017 5:11 pm

Re: v6.43rc [release candidate] is released!

Sun Aug 26, 2018 2:06 pm

I updated to rc64, but it seems I can not communicate with ipv6. There was no problem with at least rc56.
Same problem here, I updated from rc51 to rc64 and now the mikrotik does not seems to forward ipv6 packets anymore.
 
huntermic
newbie
Posts: 40
Joined: Wed Oct 26, 2016 3:42 pm

Re: v6.43rc [release candidate] is released!

Mon Aug 27, 2018 12:10 pm

I updated to rc64, but it seems I can not communicate with ipv6. There was no problem with at least rc56.
Same problem here, I updated from rc51 to rc64 and now the mikrotik does not seems to forward ipv6 packets anymore.
Strange, all works fine here after upgrading to rc64
 
Aytishnikcom
just joined
Posts: 6
Joined: Wed Jan 29, 2014 10:14 pm

Re: v6.43rc [release candidate] is released!

Mon Aug 27, 2018 9:47 pm

*) rb3011 - added IPsec hardware acceleration support;
VERY VERY welcome! Thanks Mktik!
 
bennyh
Frequent Visitor
Frequent Visitor
Posts: 69
Joined: Fri Mar 03, 2017 12:37 pm

Re: v6.43rc [release candidate] is released!

Tue Aug 28, 2018 7:57 am

*) rb3011 - added IPsec hardware acceleration support;
VERY VERY welcome! Thanks Mktik!
Has anybody tried it? Any positive changes? Are CPU loads lower? Is it stable?
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Tue Aug 28, 2018 12:05 pm

Has anybody tried it? Any positive changes? Are CPU loads lower? Is it stable?
IPsec throughput test results will be published on the RB3011 product page in the next few days. Currently one user has reported a kernel failure caused by the new hardware acceleration. We are looking into it and hopefully will be able to fix it in the next release candidate version. Initial tests show approximately 4 times higher throughput compared to software encryption.
 
ivicask
Member Candidate
Member Candidate
Posts: 232
Joined: Tue Jul 07, 2015 2:40 pm
Location: Croatia, Zagreb

Re: v6.43rc [release candidate] is released!

Tue Aug 28, 2018 10:42 pm

I cant update CCR1009-7G-1C from 6.43rc51 to 6.43rc64, i click check for updates, download&install, after reboot i still have old version.Tried also manually downloading the file and puting into root and rebooting, same thing.

EDIT:I figured it , i had other router package so it failed to select proper one to install.
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Thu Aug 30, 2018 8:34 am

Version 6.43rc66 has been released.

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

MAJOR CHANGES IN v6.43:
----------------------
!) api - changed authentication process (https://wiki.mikrotik.com/wiki/Manual:API#Initial_login);
!) backup - do not encrypt backup file unless password is provided;
!) btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
!) cloud - added IPv6 support;
!) cloud - added support for licensed CHR instances (including trial);
!) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
!) mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
!) radius - use MS-CHAPv2 for "login" service authentication;
!) romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
!) security - fixed vulnerabilities CVE-2018-1156, CVE-2018-1157, CVE-2018-1158, CVE-2018-1159;
!) webfig - improved authentication process;
!) winbox - improved authentication process excluding man-in-the-middle possibility;
!) winbox - minimal required version is v3.15;
----------------------


Changes in this release:

*) bridge - added support for BPDU Guard;
*) bridge - added support for DHCP Snooping;
*) bridge - ignore tagged BPDUs when bridge VLAN filtering is used;
*) certificate - fixed RA "server-url" setting;
*) console - added "dont-require-permissions" parameter for scripts;
*) dhcpv6-client - improved dynamic IPv6 pool addition process;
*) ipsec - added "responder" parameter for "mode-config" to allow multiple initiator configurations;
*) ipsec - fixed AES-192-CTR fallback to software AEAD on ARM devices with wireless and RB3011UiAS-RM;
*) ipsec - fixed "static-dns" value storing;
*) ipsec - improved invalid policy handling when a valid policy is uninstalled;
*) ipsec - separate phase1 proposal configuration from peer menu;
*) l2tp - allow setting "max-mtu" and "max-mru" bigger than 1500;
*) lte - fixed LTE registration in 2G/3G mode;
*) ppp - added support for Telit LM940 modem;
*) rb3011 - added IPsec hardware acceleration support;
*) snmp - fixed interface speed reporting for predefined rates;
*) supout - added "files" section to supout file;
*) switch - added CPU Flow Control settings for devices with a Atheros8227, QCA8337, Atheros8327, Atheros7240 or Atheros8316 switch chip;
*) tr069-client - allow editing of "provisioning-code" attribute;
*) userman - fixed "shared-secret" parameter requiring "sensitive" policy;
*) webfig - fixed www service becoming unresponsive;
*) winbox - added "tag-stacking" option to "Bridge/Ports";
*) winbox - fixed "bad-blocks" value presence under "System/Resources";
*) winbox - fixed "IP/IPsec/Peers" section sorting;
*) winbox - renamed "VLAN Protocol" to "EtherType" under bridge interface "VLAN" tab;
*) winbox - show "System/RouterBOARD/Mode Button" on devices that has such feature;
*) wireless - accept only valid path for sniffer output file parameter;
*) wireless - require "sniff" policy for wireless sniffer;

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as expected or after crash.

Note that release candidate versions are published strictly for testing purposes and should not be used on production routers.
 
freemannnn
Long time Member
Long time Member
Posts: 657
Joined: Sun Oct 13, 2013 7:29 pm

Re: v6.43rc [release candidate] is released!

Thu Aug 30, 2018 9:47 am

just installed latest rc to test dhcp snooping and was amazed how fast winbox connects remotely to my rb at office that i upgraded.
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Thu Aug 30, 2018 10:07 am

I updated a system from 6.42.7 to 6.43rc66, now my ipsec connections are broken... Peer configuration had a comment about wrong parameter (can't give the exact wording). Switched mode-config to "none", now setting it to "request-only" fails:
[admin@Mikrotik] > / ip ipsec peer set mode-config=request-only [ find where !dynamic ]
failure: Wrong mode-config
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
User avatar
emils
MikroTik Support
MikroTik Support
Posts: 477
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43rc [release candidate] is released!

Thu Aug 30, 2018 10:09 am

Send a supout.rif file to support@mikrotik.com
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Thu Aug 30, 2018 10:41 am

Send a supout.rif file to support@mikrotik.com
Done, Ticket#2018083022003478
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
User avatar
kometchtech
Member Candidate
Member Candidate
Posts: 194
Joined: Sat Jun 15, 2013 4:25 am
Location: Japan
Contact:

Re: v6.43rc [release candidate] is released!

Thu Aug 30, 2018 10:50 am

As usual, client PC under Routerboard can not connect with IPv6.
Also, if you try to disable dhcp-snooping or option 82 again and enable it again, it is confirmed that the command times out.

[Ticket#2018083022003334]
--
Routerboard Users Group JP
http://www.rb-ug.jp/
CCR1009-8G-1S-1S+, RB750Gr3, CRS226-24G-2S+, RB850Gx2, RB960PGS, CRS317-1G-16S+,
RB2011UAS, CRS125-24G-1S, RB962UiGS-5HacT2HnT, CRS212-1G-10S-1S+, RB3011UiAS
 
User avatar
eworm
Member
Member
Posts: 377
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.43rc [release candidate] is released!

Thu Aug 30, 2018 10:54 am

I updated a system from 6.42.7 to 6.43rc66, now my ipsec connections are broken... Peer configuration had a comment about wrong parameter (can't give the exact wording). Switched mode-config to "none", now setting it to "request-only" fails:
[admin@Mikrotik] > / ip ipsec peer set mode-config=request-only [ find where !dynamic ]
failure: Wrong mode-config
Worked around the issue:
/ ip ipsec mode-config add name=request responder=no system-dns=no
/ ip ipsec peer set mode-config=request [ find where !dynamic ]
So my system is up and running, but I suppose this is not how things are supposed to work.
Manage RouterOS scripts and extend your devices' functionality: RouterOS Scripts
 
User avatar
kometchtech
Member Candidate
Member Candidate
Posts: 194
Joined: Sat Jun 15, 2013 4:25 am
Location: Japan
Contact:

Re: v6.43rc [release candidate] is released!

Thu Aug 30, 2018 8:21 pm

As usual, client PC under Routerboard can not connect with IPv6.
Also, if you try to disable dhcp-snooping or option 82 again and enable it again, it is confirmed that the command times out.

[Ticket#2018083022003334]
Problems were solved by netinstalling Routerboard, which can not be connected normally from client PC under Routerboard with ipv6.
However, it is unknown whether this correspondence is satisfactory.
--
Routerboard Users Group JP
http://www.rb-ug.jp/
CCR1009-8G-1S-1S+, RB750Gr3, CRS226-24G-2S+, RB850Gx2, RB960PGS, CRS317-1G-16S+,
RB2011UAS, CRS125-24G-1S, RB962UiGS-5HacT2HnT, CRS212-1G-10S-1S+, RB3011UiAS
 
User avatar
grusu
Frequent Visitor
Frequent Visitor
Posts: 94
Joined: Tue Aug 13, 2013 7:35 am
Location: Bucharest, Romania

Re: v6.43rc [release candidate] is released!

Sat Sep 01, 2018 10:53 pm

I can't change the name of the admin user:

[admin@MikroTik] > /user set 0 name=test
failure: user name can't be changed


nor any other user.
 
dziku2
just joined
Posts: 4
Joined: Wed Aug 01, 2018 10:30 pm

Re: v6.43rc [release candidate] is released!

Sun Sep 02, 2018 11:47 am

There is a problem with 6.43RC66 on hAP AC2. My router reboot itself with info in log file: system,error,critical System rebooted because of kernel failure every half hour to 6 hours.
 
nescafe2002
Long time Member
Long time Member
Posts: 617
Joined: Tue Aug 11, 2015 12:46 pm
Location: Netherlands

Re: v6.43rc [release candidate] is released!

Sun Sep 02, 2018 1:39 pm

Can you fetch autosupout.rif from the device and send it to support?

Who is online

Users browsing this forum: No registered users and 8 guests