Community discussions

 
User avatar
emils
MikroTik Support
MikroTik Support
Topic Author
Posts: 278
Joined: Thu Dec 11, 2014 8:53 am

v6.43.7 [stable] is released!

Mon Dec 03, 2018 2:19 pm

RouterOS version 6.43.7 has been released in public "stable" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 6.43.7 (2018-Nov-30 09:01):

MAJOR CHANGES IN v6.43.7:
----------------------
!) upgrade - release channels renamed - "bugfix" to "long-term", "current" to "stable" and "release candidate" to "testing";
!) upgrade - "testing" release channel now can contain "beta" together with "release-candidate" versions;
----------------------

Changes in this release:

*) bridge - properly disable dynamic CAP interfaces;
*) certificate - fixed "expires-after" parameter calculation;
*) certificate - fixed time zone adjustment for SCEP requests;
*) certificate - properly flush old CRLs when changing store location;
*) chr - fixed possible memory allocation failure when using multiple CPUs or interfaces on Xen installations;
*) crs328 - fixed SFP ports not reporting auto-negotiation status;
*) crs328 - improved link status update on disabled SFP and SFP+ interfaces;
*) defconf - automatically accept default configuration if reset done by holding button;
*) defconf - fixed default configuration loading on RB4011iGS+5HacQ2HnD-IN;
*) discovery - fixed malformed neighbor information for routers that has incomplete IPv6 configuration;
*) discovery - fixed neighbor discovery for PPP interfaces;
*) discovery - properly use System ID for "software-id" value on CHR;
*) export - fixed "silent-boot" compact export;
*) health - fixed bad voltage readings on RB493G;
*) interface - improved system stability when including/excluding a list to itself;
*) ipsec - fixed hw-aead (H) flag presence under Installed SAs on startup;
*) ipsec - improved stability when uninstalling multiple SAs at once;
*) ipsec - properly handle peer profiles on downgrade;
*) ipsec - properly update warnings under peer menu;
*) kidcontrol - do not allow users with "read" policy to pause and resume kids;
*) log - properly handle long echo messages;
*) lte - added support for more ZTE MF90 modems;
*) ospf - improved stability while handling type-5 LSAs;
*) routerboard - renamed SIM slots to "a" and "b" on SXT LTE kit;
*) routerboard - show "boot-os" and "force-backup-booter" options only on devices that have such feature;
*) snmp - do not initialise interface traps on bootup if they are not enabled;
*) timezone - updated timezone information from tzdata2018g release;
*) traffic-flow - fixed post NAT port reporting;
*) traffic-flow - fixed "src-mac-address" and added "post-src-mac-address" fields;
*) tunnel - made "ipsec-secret" parameter sensitive;
*) usb - fixed power-reset for hAP ac^2 devices;
*) user - speed up first time login process after upgrade from version older than v6.43;
*) winbox - allow to specify SIM slot on LtAP mini;
*) winbox - enabled "fast-forward" by default when adding new bridge;
*) winbox - fixed neighbor discovery for IPv6 neighbors;
*) winbox - show "System/Health" only on boards that have health monitoring;

What's new in 6.43.6 (2018-Nov-07 10:40):

(factory only release)

What's new in 6.43.5 (2018-Oct-25 12:37):

(factory only release)

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this concrete RouterOS release.
 
Simono
newbie
Posts: 41
Joined: Tue Mar 20, 2018 9:41 am

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 3:18 pm

After upgrade my Hex S. No firewall rules, no CAP access list, etc :( Connention via VPN very slow.
I will check more if I return to home.
In my case, something like this happened for the first time.
What I should do now?
I have backup from 6.43.4
 
pe1chl
Forum Guru
Forum Guru
Posts: 4867
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 3:27 pm

Today I wanted to upgrade some production routers to 6.43.4 after having tested it at some less critical sites and
found that the stable version has just been updated to 6.43.7
Normally I do not want to upgrade production routers to a version released an hour ago.
I know it is possible to upload an arbitrary version manually, but still it would be great when the "Check for Updates" screen
had the option to select a particular version within the selected channel, so in this case I could select 6.43.4 and
do the "download and install" to that version.
 
User avatar
emils
MikroTik Support
MikroTik Support
Topic Author
Posts: 278
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 3:39 pm

After upgrade my Hex S. No firewall rules, no CAP access list, etc :( Connention via VPN very slow.
I will check more if I return to home.
In my case, something like this happened for the first time.
What I should do now?
I have backup from 6.43.4
If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device
 
Simono
newbie
Posts: 41
Joined: Tue Mar 20, 2018 9:41 am

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 3:42 pm

I will check router at home on LAN. Via VPN it show most all option empty, also /system/routerboard
If I can I will send supout file
 
User avatar
emils
MikroTik Support
MikroTik Support
Topic Author
Posts: 278
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 4:26 pm

If you are connected to the router over VPN, it is possible that you are running into some MTU related issues over the VPN link. If packets are being fragmented it can cause your described issues.
 
Note
newbie
Posts: 38
Joined: Fri Jun 03, 2016 12:39 pm

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 4:31 pm

hap ac lite after upgrade, on wlan interface>status, version is shown as 6.43.4 and not 6.43.7 as it should.
 
Simono
newbie
Posts: 41
Joined: Tue Mar 20, 2018 9:41 am

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 6:05 pm

For me most problems was after upgrade empty simpe queue list not all cap-sman access-list not all address-lst on firewall and now I'm searching for rest problems.
 
Keyko
just joined
Posts: 8
Joined: Sat Dec 23, 2017 6:27 pm

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 8:36 pm

Can it be worth removing and "development" ??? Why this item if there is never a developer firmware ???
Screenshot_4.png
You do not have the required permissions to view the files attached to this post.
 
schadom
Member Candidate
Member Candidate
Posts: 118
Joined: Sun Jun 25, 2017 2:47 am
Location: Austria

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 10:26 pm

What's new in 6.43.6 (2018-Nov-07 10:40):

(factory only release)

What's new in 6.43.5 (2018-Oct-25 12:37):

(factory only release)

Just wondering why two versions have been skipped? Never seen that before :-o
 
andriys
Forum Guru
Forum Guru
Posts: 1051
Joined: Thu Nov 24, 2011 1:59 pm
Location: Kharkiv, Ukraine

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 11:06 pm

Just wondering why two versions have been skipped? Never seen that before :-o
It has become a rather common situation lately.
The obvious reason might be the skipped releases not passing the QA.
 
User avatar
ErfanDL
Member Candidate
Member Candidate
Posts: 233
Joined: Thu Sep 29, 2016 9:13 am
Location: IRAN
Contact:

Re: v6.43.7 [stable] is released!

Mon Dec 03, 2018 11:11 pm

Bootloop on RB2011UIAS2HND !!!!!!

Sent from my C6833 using Tapatalk

 
strods
MikroTik Support
MikroTik Support
Posts: 1367
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 6:35 am

Simono - Are these rules actually missing or you do not see them on Winbox interface? Do you see them through CLI? If yes, then this is most likely MTU related issue and due to lost packets Winbox simply can not load all the information necessary to show all the configuration that you have on your router.
pe1chl - Thank you for an idea. However, at the moment you can only use fetch command in order to download necessary packages for your router.
Note - Can you please provide screen shot from this view under Interface/Status where you see wrong version number?
Keyko - This channel is reserved for future and upcoming RouterOS releases.
schadom, andriys - This has happened plenty of times. If you want to see new routers, then we have to build versions for them. We sometimes choose to build special version for new product instead of releasing new version every couple of days with new features, fixes and support for new hardware just to avoid unnecessary problems.
ErfanDL - From which RouterOS version did you upgrade your router? Main part of an upgrade process happens on old version (from which you upgrade) and since v6.42 we have re-worked internal processes that are happening during an upgrade. If it was older version than v6.42, then problem most likely is already fixed.
 
Simono
newbie
Posts: 41
Joined: Tue Mar 20, 2018 9:41 am

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 8:28 am

From LAN all windows on Winbox works properly.
I have recreated most missing rules (from exported before upgrade config). Before upgrade I have about 80k address on address-list - maybe this was a problem. But I don't know what is the reson with missing some entry on access-list.
 
complex1
just joined
Posts: 13
Joined: Wed Jan 04, 2017 9:55 pm

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 9:58 am

Upgraded several RB2011 from 6.43.4 to 6.43.7 without any issues.
I'm very happy.
Kind regards,
Frank.
 
User avatar
zBear
just joined
Posts: 13
Joined: Sat Mar 07, 2015 6:17 pm
Location: Chisinau, Moldova

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 10:01 am

del
Last edited by zBear on Tue Dec 04, 2018 12:55 pm, edited 1 time in total.
 
raymondr15
Member Candidate
Member Candidate
Posts: 116
Joined: Fri Sep 05, 2014 1:11 am
Location: East London, South Africa
Contact:

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 10:39 am

Since upgrading from 6.43.4 to 6.43.7 on all of my MikroTik devices, API-SSL does not work. my management system keeps telling me my devices are down as It cannot login to any of the devices via API-SSL, I haven't tested plain API as I don't use it due to security reasons. I don't see any logs of failed logins on the devices either but every now and then a login does succeed.

My RB2011UiAS-RM is mostly affected with the API-SSL failing to work correctly while the other devices are slightly more stable.
I do notice when trying to login via API-SSL to the RB2011UiAS-RM, the CPU sits at 100% and I think that is causing the issue for API not to respond in time and causing the failed login.

Bug?

UPDATE:
I have checked my graphing on the RB2011UiAS-RM and notice that since upgrading last night, the CPU has been sitting at 100% the entire time thus causing the login issues.
Screenshot from 2018-12-04 10-49-53.png
Screenshot from 2018-12-04 10-51-12.png
You do not have the required permissions to view the files attached to this post.
 
E1uSiV3
just joined
Posts: 2
Joined: Wed Jul 18, 2018 12:40 pm

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 11:59 am

It appears there are issues with the SFP+ negotiation on the CRS328.

I upgraded a CCR1009, and 3x wAP AC with no issue, but my Supermicro server connected with a MikroTik direct attach cable failed to renegotiate link speed after installing 6.43.7 on the CRS328. I have the same direct attach cable between the CCR1009 and the CRS328, which works fine. I checked the settings and 10Gbit was unticked on the interface for some reason, so tried again with it enabled, it still didn't work. I tried forcing 10Gbit, and 1Gbit manual config, and still no dice. I used IPMI to go verify configuration on the server and it showed "network connection unplugged", disabled auto negotiation to match the CRS328, still nothing.

I reverted to 6.43.4, and everything sprang back into life.

Looks like there is an issue somewhere. I can send a supout if required.
 
pe1chl
Forum Guru
Forum Guru
Posts: 4867
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 12:35 pm

pe1chl - Thank you for an idea. However, at the moment you can only use fetch command in order to download necessary packages for your router.
Maybe an easier implementation would be to have a "previous" channel in addition to the "current" or change the "development" channel into that.
You could then use that when the "current" has been changed recently and not well-tested yet.
 
strods
MikroTik Support
MikroTik Support
Posts: 1367
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 1:23 pm

Simono - Then even more this seems to be related with packet fragmentation/loss. Are you sure that downgrade to older version fixes this problem?
raymondr15, E1uSiV3 - Please send supout file from your router to support@mikrotik.com
pe1chl - Thank you for an idea. We will consider implementing something like this in the future, but at the moment we do not have any plans for such changes. Lets not continue to discuss this option in version related topic. You can always use "Fetch" and download packages from our download servers or "Auto Upgrade" option in your local network for upgrades, if you do want to do something different than upgrade to the latest version.
 
raymondr15
Member Candidate
Member Candidate
Posts: 116
Joined: Fri Sep 05, 2014 1:11 am
Location: East London, South Africa
Contact:

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 5:04 pm

raymondr15, E1uSiV3 - Please send supout file from your router to support@mikrotik.com
Have done that already.

I have tried upgrading to beta release and downgrading back to long-term release with the CPU still sitting at 100%. I'm guessing something in the 6.43.7 update changed something in the configuration causing this to happen? I now have to reset and start a new configuration from scratch :( this isn't going to be great due to the router having quite a large configuration.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8140
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 5:33 pm

You can always use "Fetch" and download packages from our download servers
Any simple way to get URLs of necessary packages? There's only ZIP link on Downloads page :(
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
nightcom
newbie
Posts: 34
Joined: Wed Aug 30, 2017 12:47 am
Location: NL

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 8:37 pm

RB3011UiAS-RM and RB750Gr3 upgraded from 6.43.4 to 6.43.7 with no problems
RB3011UiAS-RM / RB2011UiAS-in / RB750Gr3 + Dude / CRS326-24G-2S+RM
 
pe1chl
Forum Guru
Forum Guru
Posts: 4867
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43.7 [stable] is released!

Tue Dec 04, 2018 11:05 pm

You can always use "Fetch" and download packages from our download servers
Any simple way to get URLs of necessary packages? There's only ZIP link on Downloads page :(
I was planning to do a script that does /system package print to list the installed packages and then download the required packages.
After some tinkering I was able to deduce that the are downloaded from this URL:
http://upgrade.mikrotik.com/routeros/[VERSION]/[PACKAGE]-[VERSION]-[ARCH].npk
Where [VERSION] is like 6.43.4 [PACKAGE] is like system ntp etc and [ARCH] is like tile for CCR.

I did a manual first try where I did the /system package print and edited the resulting package list into a series of
/tool fetch url="(like above)"
and put it in a file, uploaded that, and imported the file.

Sure it downloaded the npk files (after 3 or 4 tries with mistakes in the names) but now I get most of the files in the listing
with the box icon denoting a package except the security-6.43.4-tile.npk which has a text file icon.
No idea what went wrong but I do not dare to reboot.
I guess I will just have to re-test with 6.43.7 and then install that. Sigh.
 
JimmyNyholm
Member Candidate
Member Candidate
Posts: 246
Joined: Mon Apr 25, 2016 2:16 am
Location: Sweden

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 6:09 am

Sounds cool but what is the benefit of doing it manual by script /fetch in contrast to /system/package/upgrade ?
 
sindy
Forum Guru
Forum Guru
Posts: 2581
Joined: Mon Dec 04, 2017 9:19 pm

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 6:20 am

what is the benefit of doing it manual by script /fetch in contrast to /system/package/upgrade ?
That you can upgrade to a different version than the newest one in each channel from inside RouterOS, i.e. without using an external PC to download the package from Mikrotik's web and upload it to the device.
Instead of writing novels, post /export hide-sensitive. Use find&replace in your favourite text editor to systematically replace all occurrences of each public IP address potentially identifying you by a distinctive pattern such as my.public.ip.1.
 
eddieb
Frequent Visitor
Frequent Visitor
Posts: 93
Joined: Thu Aug 28, 2014 10:53 am
Location: Netherlands

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 8:47 am

Upgraded from 6.43.4 -> 6.43.7
using dude to push the packages on

CCR1009-8G-1S (2x ipsec/l2tp)
CRS125-24G-1S
RB1100
RB962UiGS-5HacT2HnT (10pc)
RB951
RB750GL
RB2011UAS-RM
CHR running dude

without any issues
 
VipITBE
just joined
Posts: 21
Joined: Tue Apr 02, 2013 10:40 am

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 8:51 am

Today I wanted to upgrade some production routers to 6.43.4 after having tested it at some less critical sites and
found that the stable version has just been updated to 6.43.7
Normally I do not want to upgrade production routers to a version released an hour ago.
I know it is possible to upload an arbitrary version manually, but still it would be great when the "Check for Updates" screen
had the option to select a particular version within the selected channel, so in this case I could select 6.43.4 and
do the "download and install" to that version.
That is why you have a LTS version. LTS is the latest production ready stable release.
The Mikrotik "Stable" version is not always stable. Staying a few versions behind in the "Stable" track is also not done as even that version can have many issues, security or otherwise.
LTS should be used for a production network as "Stable" is not nowhere stable enough for a production network
 
HzMeister
newbie
Posts: 47
Joined: Sun Jan 28, 2018 9:48 pm

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 9:24 am

Today I wanted to upgrade some production routers to 6.43.4 after having tested it at some less critical sites and
found that the stable version has just been updated to 6.43.7
Normally I do not want to upgrade production routers to a version released an hour ago.
I know it is possible to upload an arbitrary version manually, but still it would be great when the "Check for Updates" screen
had the option to select a particular version within the selected channel, so in this case I could select 6.43.4 and
do the "download and install" to that version.
That is why you have a LTS version. LTS is the latest production ready stable release.
The Mikrotik "Stable" version is not always stable. Staying a few versions behind in the "Stable" track is also not done as even that version can have many issues, security or otherwise.
LTS should be used for a production network as "Stable" is not nowhere stable enough for a production network
The lts channel is a safe bet, but I don't think that's entirely accurate. The stable releases have a lot more features and fixes that may not make it to lts, so in some cases it makes sense to go with it over lts. For example, I had issues with 6.40 lts with my config, whereas the 6.42+ stable releases work perfectly...
If you don't have any major issues that are specifically getting address by a particular release, it's not a bad idea to wait a couple weeks to see what the feedback is and decide from there - this goes for any software, from any company(not just mikrotik).

Judging from the responses of this thread, I think I'll stick with 6.43.4 for now..

Oh, and I think it would be a good idea to be able too choose what version you want to install from a drop-down menu and not have to go through the nonsense of manually downloading and installing it.
 
VipITBE
just joined
Posts: 21
Joined: Tue Apr 02, 2013 10:40 am

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 9:32 am

Today I wanted to upgrade some production routers to 6.43.4 after having tested it at some less critical sites and
found that the stable version has just been updated to 6.43.7
Normally I do not want to upgrade production routers to a version released an hour ago.
I know it is possible to upload an arbitrary version manually, but still it would be great when the "Check for Updates" screen
had the option to select a particular version within the selected channel, so in this case I could select 6.43.4 and
do the "download and install" to that version.
That is why you have a LTS version. LTS is the latest production ready stable release.
The Mikrotik "Stable" version is not always stable. Staying a few versions behind in the "Stable" track is also not done as even that version can have many issues, security or otherwise.
LTS should be used for a production network as "Stable" is not nowhere stable enough for a production network
The lts channel is a safe bet, but I don't think that's entirely accurate. The stable releases have a lot more features and fixes that may not make it to lts, so in some cases it makes sense to go with it over lts. For example, I had issues with 6.40 lts with my config, whereas the 6.42+ stable releases work perfectly...
If you don't have any major issues that are specifically getting address by a particular release, it's not a bad idea to wait a couple weeks to see what the feedback is and decide from there - this goes for any software, from any company(not just mikrotik).
Judging from the responses of this thread, I think I'll stick with 6.43.4 for now..
I understand what you are saying, but if you're using Mikrotik for your business critical systems or core, then imo you stay with LTS and the feature set it provides. If you go to the "stable" version, you accept that you can (and will imho) have issues.
As a business that would be unwise imho. As with every vendor, you stay with the LTS train and accept that some features will take time to integrate into the LTS train. (as Mikrotik did when they bumped LTS to 6.42.9)
 
nostromog
newbie
Posts: 41
Joined: Wed Jul 18, 2018 3:39 pm

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 11:59 am

My data point. I updated 2.5 routers (.5 is the testing one, an hAP ac lite, and 2 production hAP ac). Two small offices with some tunneling and a VPN stuff.

Everything seems to work ok after a few hours, nothing happened re: configuration changes, etc. Really smooth. It looks slightly more performant than 3.43.4, but I think this is because performance degrade slowly as uptime grows, and one of them was 6 weeks up...
 
ofer
newbie
Posts: 32
Joined: Wed May 23, 2018 11:45 am

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 4:51 pm

3xHAP AC units upgraded - seems to be no new issues, However AC with 80MHz channel width still causing random connection drops

Thanks!
 
pe1chl
Forum Guru
Forum Guru
Posts: 4867
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 5:01 pm

Today I wanted to upgrade some production routers to 6.43.4 after having tested it at some less critical sites and
found that the stable version has just been updated to 6.43.7
Normally I do not want to upgrade production routers to a version released an hour ago.
I know it is possible to upload an arbitrary version manually, but still it would be great when the "Check for Updates" screen
had the option to select a particular version within the selected channel, so in this case I could select 6.43.4 and
do the "download and install" to that version.
That is why you have a LTS version. LTS is the latest production ready stable release.
The Mikrotik "Stable" version is not always stable. Staying a few versions behind in the "Stable" track is also not done as even that version can have many issues, security or otherwise.
LTS should be used for a production network as "Stable" is not nowhere stable enough for a production network
That is not the point. Even with the LTS version there are issues that become apparent when it is released. The point is
that within a channel you can only install the latest version, and when it has been released an hour ago that is always a
bit dangerous to do even when it is the LTS version. So you might want to install the previous LTS version (or in my case
the previous stable version) in such cases. In my case I tested the 6.43.4 stable version on a couple of routers, was
confident that I could roll it out on 10 more routers, and at that time it was suddenly replaced with 6.43.7 which I had not
tested at all. So now I need to test again or have a way to install 6.43.4. Currently that is only possible by uploading the
right packages for each particular router (different architectures and different package collections are in use), instead of
letting the router determine itself what packages it needs to download to upgrade to 6.43.4
 
User avatar
gyropilot
newbie
Posts: 41
Joined: Sat Sep 10, 2016 10:49 pm
Location: Seaview, WA

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 5:17 pm

hAP ac lite (RB952Ui-5ac2nD) updated from 6.43.4 to 6.43.7 without any problems here.
 
Pea
Member Candidate
Member Candidate
Posts: 109
Joined: Fri Jul 17, 2015 11:07 pm
Location: Czech

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 9:16 pm

I will also share positive update results:
hAP ac, hAP ac lite, hAP ac², hAP lite, RB951
All fine, no problem.
 
pe1chl
Forum Guru
Forum Guru
Posts: 4867
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 9:29 pm

I have a router which is listening on 4 public IP addresses and for IPsec there are 4 passive peers defined for
incoming connections each with a different local-address= parameter.
Now when viewing or exporting the config, the 2nd 3rd and 4th peer definitions have the remark:
# This entry is unreachable
However, all the 4 entries still do work. It looks like the check is not correct.
 
User avatar
tevolo
Member Candidate
Member Candidate
Posts: 114
Joined: Sun Mar 29, 2009 8:39 pm

Re: v6.43.7 [stable] is released!

Wed Dec 05, 2018 9:35 pm

Are there issues with DHCP Server not working after an upgrade like 6.34.4? We never heard back on that post and now the post is locked. Mikrotik support has ignored my emails for over a week on the issue we noticed with 6.34.4 and I'm wondering why.
viewtopic.php?f=21&t=140560&start=50
 
bbs2web
Member Candidate
Member Candidate
Posts: 170
Joined: Sun Apr 22, 2012 6:25 pm
Location: Johannesburg, South Africa
Contact:

Re: v6.43.7 [stable] is released!

Thu Dec 06, 2018 10:58 am

We notice no such problem after upgrading a CCR1016-12S-1S+ from 6.43.4 to 6.43.7:

We access RouterOS using SSL API service. Upgraded router yesterday evening at around 9:30pm:
Image

Since upgrading from 6.43.4 to 6.43.7 on all of my MikroTik devices, API-SSL does not work. my management system keeps telling me my devices are down as It cannot login to any of the devices via API-SSL, I haven't tested plain API as I don't use it due to security reasons. I don't see any logs of failed logins on the devices either but every now and then a login does succeed.
 
pe1chl
Forum Guru
Forum Guru
Posts: 4867
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43.7 [stable] is released!

Thu Dec 06, 2018 4:34 pm

When editing an existing L2TP client via winbox, the already configured "Profile" setting appears in red and the config is invalid (not possible to OK it)
however when the dropdown box on that Profile is opened and the same value is selected, the color changes to black and the change is accepted.
 
strods
MikroTik Support
MikroTik Support
Posts: 1367
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.43.7 [stable] is released!

Thu Dec 06, 2018 11:14 pm

Everyone - As always, please try to keep this topic releated to version, not a release system, version naming, etc. Please open up a new topic or contact support@mikrotik.com directly when you want to discuss something unrelated to disucssion topic.
ofer - Please provide supout file to support@mikrotik.com. Generate this file right after unexpected disconnect and name MAC address of client which got disconnected.
pe1chl - We have had major changes regarding IPsec in v6.44. Have you tried this version where problem might be fixed already?
tevolo - Can you please provide support ticket number so we can look into this? Seems that this is either a configuration problem or software issue which is very specific. Obviously there are plenty of DHCP servers running just fine with v6.43.4 and/or later.
pe1chl - Can you provide screen shot? I do not see such problem when I try to do the same thing on my router
 
PieterVos
just joined
Posts: 5
Joined: Tue Jun 12, 2012 1:37 am
Location: Girona - Spain
Contact:

Re: v6.43.7 [stable] is released!

Fri Dec 07, 2018 2:24 am

After updating a RB3011 to 6.43.7 we lost connection, went to the site and after debugging and checking I discovered that there was a new dhcp-client at the config pointing to eth1 that wasn't there before update.

In our case on eth1 we have our internet-provider router bridged connected via PPPoE, with PPPoEclient at our mikrotik, but this router also serves IP, so with this new DHCP-client it got also IP and the updates mkt was sending traffic to this gw instead of the PPPoE client gw.

I updated a RB750gr3 with the same issue, it has a new dhcp-client activated on eth1.

I don't undersantd why there is a new dhcp-client added!
 
pe1chl
Forum Guru
Forum Guru
Posts: 4867
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43.7 [stable] is released!

Fri Dec 07, 2018 2:01 pm

pe1chl - We have had major changes regarding IPsec in v6.44. Have you tried this version where problem might be fixed already?
No, I was already reluctantly trying 6.43.7
This is in an important production environment where I cannot try beta versions.
(and I prefer to use stable versions that I already tested in other places, however this particular thing does not occur there)
pe1chl - Can you provide screen shot? I do not see such problem when I try to do the same thing on my router
I tried to reproduce it at home but it does not happen here. Now I notice that here I am using winbox 3.18 but at work I still have winbox 3.15...
It only shows on 3.15 not on 3.18 (did not try intermediate versions).
So I will upgrade the winbox at work when I get there.
 
User avatar
acruhl
Member
Member
Posts: 355
Joined: Fri Jul 03, 2015 7:22 pm

Re: v6.43.7 [stable] is released!

Sun Dec 09, 2018 4:27 pm

I don't disagree with what pe1chl is saying. I deal with Cisco and Juniper regularly and they provide a way to roll back to a previous version pretty easily. You can't test for every possible configuration customers use. With the ability to roll back you (MikroTik) can utilize customer feedback much easier if that customer gathers the correct logs when the breakage occurs, then rolls back. They are (semi) happy, and you (MikroTik) have some ability to use customer testing to improve the product.

That said, every admin needs to have a solid disaster recovery plan in place. I only use MikroTik at home and mine is simply another device :) (with a backup of the config of course). They are cheap, why not? I was hoping to set up a VRRP pair so I could fail over to the backup if upgrading the primary caused issues.

I upgraded my RB450Gx4 without issue, but the config isn't very complex. My older RB750Gr3 is my backup.
Upgrade your router! No excuses!
 
pe1chl
Forum Guru
Forum Guru
Posts: 4867
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.43.7 [stable] is released!

Sun Dec 09, 2018 10:32 pm

Oh but the router where I experienced the above problems is a CCR1009 so no problem to do a rollback.
Everywhere where this is still possible (the older MikroTik devices) I have two partitions and I do a copy, then upgrade one of them and go back when there are disastrous problems.
And that has happened.

However, even with rollback I cannot afford to do upgrades to betaversions to see if some problem is fixed, requiring two reboots and incurring some uncertainty.
I can only do reboots outside business hours, from home usually. When I would lose contact and would have to netinstall, big problem because I would have to go
to the site very early to do it as soon as the building opens.
I at least test new versions on some other device and I monitor the forum for reports of disasters.

That is why I don't like the current situation where you can auto-install only the latest version in a release channel.
When I have done some testing on 6.43.4 and have confidence that I can try it on the production system without too much risk, I don't like it when suddenly a 6.43.7 is released on the day when I planned to do upgrades. Because either I need to do the testing all again, or I need to manually install 6.43.4.
 
nmt1900
just joined
Posts: 5
Joined: Wed Feb 01, 2017 12:36 am

Re: v6.43.7 [stable] is released!

Mon Dec 10, 2018 12:26 am

After updating a RB3011 to 6.43.7 we lost connection, went to the site and after debugging and checking I discovered that there was a new dhcp-client at the config pointing to eth1 that wasn't there before update.

In our case on eth1 we have our internet-provider router bridged connected via PPPoE, with PPPoEclient at our mikrotik, but this router also serves IP, so with this new DHCP-client it got also IP and the updates mkt was sending traffic to this gw instead of the PPPoE client gw.

I updated a RB750gr3 with the same issue, it has a new dhcp-client activated on eth1.

I don't undersantd why there is a new dhcp-client added!
I have two RB750gr3 devices both on PPPoE WAN connection (on eth1 of course) and both survived 6.43.4 -> 6.43.7 without this issue. Do you have anything selected on Interfaces -> Detect Internet -> Detect Interface List? I have this option set to none. I have some vague memory of "detect internet" feature doing its' job by means of dhcp client in some cases...
 
mstead
Member Candidate
Member Candidate
Posts: 107
Joined: Sat Mar 04, 2006 2:41 am

Re: v6.43.7 [stable] is released!

Wed Dec 12, 2018 4:19 am

Anyone from Ireland should be aware that Europe/Dublin timezone is screwed up in this release and will set your system clock to GMT+2 hours.

I have emailed Mikrotik support so we will see what happens.

Who is online

Users browsing this forum: No registered users and 8 guests