MikroTik

Posted: **Fri Aug 09, 2019 3:53 am**

hap lite upgrade issue is not fixed! I have a hap lite with very very very basic config (wifi pseudo bridge to local ports + dhcp client). I am running 6.45.1 and if I try to update to 6.45.3 I get an error : "ERROR: not enough disk space, 7.3MiB required and only 7.3MiB is free." ... I have no files on the device.

Looks like 16MiB flash size on hap lite devices was a very bad decision for mikrotik .... hope they learned a lesson from this fiasco!

JF.

I got same problem, Not enough space!
Free HDD Space: 7.3 MiB Architecture Name: smips Board Name: hAP lite Version: 6.45.2 (stable)

Posted: **Fri Aug 09, 2019 7:27 am**

Still Hotspot captive portal not show automatically.

The same thing happened to me, I was trying three days, I took another one with version 6.43 and there was no problem.
The login page does not appear automatically or is not redirected. I have to write manually in the browser.
Mikrotik HAP Lite OS 6.45.3

Posted: **Fri Aug 09, 2019 9:31 am**

Hi, a problem with sstp and ovpn tunnels between ccr1009 and rb2011 over a high latency link (700-1000ms) has appeared after the update. Tunnel is dropping, never stays open for more than a minute, sometimes drops after a few seconds, reconnects are slow - unusable. Tried fiddling with mtu/mru no change, sstp debug showed IPCP TIMER message at disconnects. Reverting to 6.44.5 long term solved the issue.

Kind regards, Andrej

Posted: **Fri Aug 09, 2019 8:16 pm**

Board: RB4011iGS+5HacQ2HnD
Problem: on all ros 6.44.x-6.45.x on PPP client/server interfaces (L2TP, PPTP, PPPoE) appear at the same time small Tx Drops counters. On ros 6.43.16 works well on same config.

yes my router ccr1009 loss tx packet in ppp client after upgarde to 6.45.x

Posted: **Sat Aug 10, 2019 3:08 am**

web proxy is not working with stable 6.45.3 on hAP Lite, not with the redirect firewall rule, nor with the explicit setting of the proxy server in the browser. Did work before, returned to long term 6.44.5 and it is working again.
Why a web-proxy on such a small device, without even caching something? Well the HTTP request handling by the proxy is much better than a Chrome browser. Pages do load 5 to 10 times faster with the proxy over a line with long round trip delay. (Satellite links have 600ms+ delays). Remote handling of the web interface of a router was not even possible over the direct satellite link, with the proxy server its again workable. It seems to be related to HTTP session reuse. (avoiding the long TCP session setup handshake, 600ms per request or answer)

Posted: **Mon Aug 12, 2019 3:40 am**

This L7 Regexp does not work anymore since update:

\.(exe|dmg|cab|msi|flv|mp2|mp3|m4a|mp4|torrent)($|\?)

I used this to block file download. I also don't know which MikroTik version I had before. I think it was the 6.43.

Posted: **Mon Aug 12, 2019 8:36 am**

Please don't try to use L7 for file extension blocking. It's not for that.

Posted: **Mon Aug 12, 2019 1:51 pm**

Can't login via linux MAC-Telnet 0.4.4. after update to this version.
Connecting to.......done
Login failed, incorrect username or password

ROS log: echo: system,error,critical login failure for user admin from XX:XX:XX:XX:XX:XX via mac-telnet.

The password is correct.

Posted: **Mon Aug 12, 2019 2:04 pm**

Can't login via linux MAC-Telnet 0.4.4. after update to this version.
Connecting to.......done
Login failed, incorrect username or password

ROS log: echo: system,error,critical login failure for user admin from XX:XX:XX:XX:XX:XX via mac-telnet.

The password is correct.

Seems like you did not read the release notes ...

Important note!!!
Due to removal of compatibility with old version passwords in this version, downgrading to any version prior to v6.43 (v6.42.12 and older) will clear all user passwords and allow password-less authentication. Please secure your router after downgrading.
Old API authentication method will also no longer work, see documentation for new login procedure:
https://wiki.mikrotik.com/wiki/Manual:API#Initial_login

Posted: **Mon Aug 12, 2019 2:57 pm**

This L7 Regexp does not work anymore since update:
Code: Select all
\.(exe|dmg|cab|msi|flv|mp2|mp3|m4a|mp4|torrent)($|\?)
I used this to block file download. I also don't know which MikroTik version I had before. I think it was the 6.43.

You do understand that this is useless in an ever growing https world, right?

Posted: **Mon Aug 12, 2019 3:40 pm**

We know that a WinBOX upgrade was needed to v3.19 for login in release 6.45.x , now WinBOX v3.19 does succeed in this login but only sometimes for 6.45.3 (and even for the latest test version) . When it fails then 6 or more attempts are needed to log in (user en password wrong message), all that time login via the web is immediate without problems. Combine this with a long latency connection (satelite is 600ms+) , failing logins with WinBOX , unstable SSTP tunnel and not functioning of the webproxy in the hAP Lite, and my remote management has become quite stressfull.

I have remotely a hEX with DUDE. The hEX makes a SSTP tunnel to my hAP Lite (the hEX cannot be contacted from the outside, for many reasons). The hEX and DUDE take care of managing multiple local networks, and gives connections to the web pages and other management tools for routers, switches, APs, line modems (and SXT LTE) . The 2 transparant webproxies in hAP Lite and hEX are very effective accelerators for the management web pages. This all worked fine in 6.44 ,

Posted: **Mon Aug 12, 2019 8:49 pm**

I have upgraded multiple Routers without major issues but I just have noticed that my RB2011 stopped to advertise SLAAC addresses for my IPv6 setup. None of my clients are able to get a global IPv6 address. When I connect to the router I can ping IPv6 addresses but none of the clients can't as they don't get IPv6 addresses.

It was working on on 6.45.2 version

I just downgraded my RB2011 from 6.45.3 to 6.45.2 and all my IPv6 devices got Global Address and can reach IPv6 internet sites normally.

This version has an issue with SLAAC advertising IPv6 addresses to clients.

Posted: **Tue Aug 13, 2019 10:35 am**

Hi, may be I was find the bug.

Than Mikrotik send to RADIUS packet of Interim-Update for DHCP lease the value of Acct-Input-Octets and Acct-Output-Octets is the same!
In Queues I can see the different values of send and recieved octets.

Packet recieved by RADIUS:

rad_recv: Accounting-Request packet from host 192.168.4.254 port 34324, id=124, length=214
        User-Name = "B0:4E:26:D0:33:DB"
        NAS-Port-Type = Ethernet
        NAS-Port = 2213551065
        Calling-Station-Id = "1:b0:4e:26:d0:33:db"
        Framed-IP-Address = 188.114.223.27
        Called-Station-Id = "vlan_22"
        Agent-Remote-Id = 0x646f6d5f3630625f355f32
        Agent-Circuit-Id = 0x30303334
        Event-Timestamp = "Aug 13 2019 08:11:35 MSK"
        Acct-Status-Type = Interim-Update
        Acct-Session-Id = "d91bf083"
        Acct-Authentic = RADIUS
        Acct-Session-Time = 1796
        Acct-Input-Octets = 381994156
        Acct-Input-Gigawords = 0
        Acct-Input-Packets = 290516
        Acct-Output-Octets = 381994156
        Acct-Output-Gigawords = 0
        Acct-Output-Packets = 181132
        NAS-Identifier = "NAS - Center"
        Acct-Delay-Time = 1
        NAS-IP-Address = 192.168.4.254

Posted: **Tue Aug 13, 2019 4:34 pm**

L2TP/IPsec tunnel stopped working after I updated my RouterBOARD 3011UiAS from v6.44.1 to v6.45.3
error:
failed to pre-process ph2 packet.

Had same problem with other router and after downgrade back to rOS v6.42.4 it solved the problem...
Any ideas is it known issue? And when it could be fixed?

Posted: **Tue Aug 13, 2019 5:14 pm**

hap lite upgrade issue is not fixed! I have a hap lite with very very very basic config (wifi pseudo bridge to local ports + dhcp client). I am running 6.45.1 and if I try to update to 6.45.3 I get an error : "ERROR: not enough disk space, 7.3MiB required and only 7.3MiB is free." ... I have no files on the device.

Looks like 16MiB flash size on hap lite devices was a very bad decision for mikrotik .... hope they learned a lesson from this fiasco!

JF.
I got same problem, Not enough space!
Free HDD Space: 7.3 MiB Architecture Name: smips Board Name: hAP lite Version: 6.45.2 (stable)

I have seeing this space error already in few devices: A CRS326, hAP AC, hAP ac2 with any 6.45.x version and I have been unable to find a solution. Even when I manually upload the firmware it reports wrongly the free space (i.e. 5% free) but I can upload the firmware that in theory exceeds this space limit.

I think this is a bug on the code and way files handling is done and/or how they are reported on the File System.

Posted: **Wed Aug 14, 2019 3:38 am**

I have seeing this space error already in few devices: A CRS326, hAP AC, hAP ac2 with any 6.45.x version and I have been unable to find a solution. Even when I manually upload the firmware it reports wrongly the free space (i.e. 5% free) but I can upload the firmware that in theory exceeds this space limit.

I think this is a bug on the code and way files handling is done and/or how they are reported on the File System.

Update packages are usually uploaded to RAM so free flash space is not an issue here. Exclusions are devices with >16 MB flash (mostly Routerboard and CCR devices) and hAP lite as it has only 32 MB of RAM so not enough room there either...

Posted: **Thu Aug 15, 2019 5:34 am**

hap lite upgrade issue is not fixed! I have a hap lite with very very very basic config (wifi pseudo bridge to local ports + dhcp client). I am running 6.45.1 and if I try to update to 6.45.3 I get an error : "ERROR: not enough disk space, 7.3MiB required and only 7.3MiB is free." ... I have no files on the device.

Looks like 16MiB flash size on hap lite devices was a very bad decision for mikrotik .... hope they learned a lesson from this fiasco!

JF.
I got same problem, Not enough space!
Free HDD Space: 7.3 MiB Architecture Name: smips Board Name: hAP lite Version: 6.45.2 (stable)

On hAP Lite, due limitation of storage so upgrade process

main package *.npk

using FTP method will fail because not enough disk space. All you need just change upgrade method using netinstall https://wiki.mikrotik.com/wiki/Manual:Netinstall read the wiki carefully.

Posted: **Thu Aug 15, 2019 12:58 pm**

On hAP Lite, due limitation of storage so upgrade process

main package *.npk

using FTP method will fail because not enough disk space. All you need just change upgrade method using netinstall https://wiki.mikrotik.com/wiki/Manual:Netinstall read the wiki carefully.

Thank you hAP Lite upgraded!

Posted: **Fri Aug 16, 2019 12:03 pm**

https://download.mikrotik.com/routeros/ ... 6.45.3.npk

Pleas need mirror download
Problem 9 kB/s

Posted: **Fri Aug 16, 2019 12:08 pm**

$ wget https://download.mikrotik.com/routeros/6.45.3/routeros-mipsbe-6.45.3.npk
Connecting to download.mikrotik.com (download.mikrotik.com)|2a02:610:7501:4000::226|:443... connected.

routeros-mipsbe-6.4 100%[===================>]  11.54M  5.56MB/s    in 2.1s

IPv4:

$ wget -4 https://download.mikrotik.com/routeros/6.45.3/routeros-mipsbe-6.45.3.npk
Connecting to download.mikrotik.com (download.mikrotik.com)|159.148.172.226|:443... connected.

routeros-mipsbe-6.4 100%[===================>]  11.54M  7.24MB/s    in 1.6s

Posted: **Fri Aug 16, 2019 1:20 pm**

2019-08-16 13:19:34 (33.2 MB/s) - ‘routeros-mipsbe-6.45.3.npk’ saved [12097165/12097165]

Maybe check your ISP ?

Posted: **Fri Aug 16, 2019 10:07 pm**

upgraded an rb450g from 6.44.3 to 6.45.3. my gre tunnel would not come up ike/ipsec working fine but could not get the tunnel up. Also seemed to affect logging, I could not get any debug info, in fact all that filled my logs were fw drops of the gre tunnel establishment traffic. Had to downgrade to my remote net back up. Everything else seemed to work fine as does a rb2011uas which I upgraded as well, but no gre tunnel config on that box.

I also found that downgrading to 6.44.5_lts did not correct the problem.

Posted: **Sun Aug 18, 2019 5:36 pm**

Good day, sirs.
I have a problem: I connected 2 Mikrotiks with IPSec pre-shared keys. When I tryed to make export, I get

#error exporting /ip ipsec identity
#error exporting /ip ipsec policy
#error exporting /ip ipsec settings

How I can reset this error?
I made downgrade from 6.45.3 to 6.44.5, but this not helped.
I can reach this router only through internet. Please, help me.

Posted: **Sun Aug 18, 2019 8:48 pm**

upgraded an rb450g from 6.44.3 to 6.45.3. my gre tunnel would not come up ike/ipsec working fine but could not get the tunnel up. Also seemed to affect logging, I could not get any debug info, in fact all that filled my logs were fw drops of the gre tunnel establishment traffic.

Why did you not fix the firewall instead? Or read about this problem in the earlier discussions about released versions?

Posted: **Sun Aug 18, 2019 11:32 pm**

omnitik crashes after upgrading firmware version to 6.45.3

Posted: **Mon Aug 19, 2019 8:48 am**

omnitik crashes after upgrading firmware version to 6.45.3

Provide more detailed information about "crash". After crash appears, write to support@mikrotik.com and send supout file from your router.

Posted: **Mon Aug 19, 2019 1:30 pm**

My feedback after upgraded ~80x RB951G from 6.43.2 to 6.45.3

About 10x devices at the First login from WinBox 3.19 give me error credentials but second and every try later was successful.

3x devices loose all /user information and new user admin without password appeared. By default I not use admin user and he is deleted.

Posted: **Tue Aug 20, 2019 6:00 am**

Hello! There is the bug in the latest 6.45.3 firmware for RBcAP2nd . If you update fimware on this access point to the latest 6.45.3 and then try to reset it - you will recieve the brick. Next step is only to flash it with netinstall to make it working again. I tryed this with three RBcAP2nd's. And in all cases result was the same - you will recieve the brick.

Posted: **Tue Aug 20, 2019 1:30 pm**

Can't login via linux MAC-Telnet 0.4.4. after update to this version.
Connecting to.......done
Login failed, incorrect username or password

ROS log: echo: system,error,critical login failure for user admin from XX:XX:XX:XX:XX:XX via mac-telnet.

The password is correct.

Same issue here. It seems to be layer 2 side. e.g I can log into the routers if there is layer 3 access. However not via mac telent. Brand new routers, only updated ROS. i.e not downgraded. As soon as layer 3 establishes e.g pppoe then we can login with the correct admin/password combo.

Posted: **Tue Aug 20, 2019 4:16 pm**

As login method was changed in v6.43 and old login method support was dropped in 6.45, you cannot use old MAC-Telnet clients anymore.

Posted: **Tue Aug 20, 2019 9:26 pm**

omnitik crashes after upgrading firmware version to 6.45.3

I've got same problem with RB1100-AhX4. I've got 4 RB1100 and all 4 crashing....

Posted: **Wed Aug 21, 2019 2:30 am**

After upgrading RB3011 from 6.44.3 to 6.45.3, all my PPTP has stopped working, inbound and outbound.

Downgrading one by one PPTP works again only when I got to 6.44.4. Not good!

Posted: **Wed Aug 21, 2019 7:05 am**

After upgrading RB3011 from 6.44.3 to 6.45.3, all my PPTP has stopped working, inbound and outbound.

Search back in the 6.45.x topics for the fix of GRE handling in firewall and the bug introduced by that fix and how to deal with it.

And although PPTP can be fixed easily, think about its drawbacks and consider other types of VPN - it could have been nicknamed a "Poor Privacy Tunneling Protocol" already a long time ago.

Posted: **Wed Aug 21, 2019 1:27 pm**

951Ui-2nD user here.
My internet provider uses pppoe.
I have observed that while using 6.44.5 I do not have occasional disconnects with "peer is not responding" as I have experienced with 6.45.1/2/3.So 6.44.x seem to be ok in this regard.
With 6.45.3 .i may have one or 2 disconnects in 24 hours.
Same.keepalive set at 5.
So it-s not quite "stable" in my view.
If i remember correctly i have used the betas of the 45s series in the past, but i can't remember pppoe disconnecting being an issue with the versions that i have tested.

Posted: **Wed Aug 21, 2019 1:31 pm**

As login method was changed in v6.43 and old login method support was dropped in 6.45, you cannot use old MAC-Telnet clients anymore.

ok so I would need to also upgrade ROS on the interconnected router I am mac-telneting from?

Posted: **Wed Aug 21, 2019 4:16 pm**

ok so I would need to also upgrade ROS on the interconnected router I am mac-telneting from?

Looks like it's not the same problem as Olexandr999's (he's connecting from third-party Linux client, not from RouterOS or WinBox), but yes, you need to upgrade both MAC Telnet server and client

Posted: **Wed Aug 21, 2019 7:16 pm**

In version 6.45.3 this problem is presented. Still Hotspot captive portal not show automatically. In the client devices the message "Internet not available" is presented

Posted: **Thu Aug 22, 2019 7:53 am**

In version 6.45.3 this problem is presented. Still Hotspot captive portal not show automatically. In the client devices the message "Internet not available" is presented

Try ROS 6.44.5 long-term version instead.

thread viewtopic.php?f=21&t=150045
changelogs https://mikrotik.com/download/changelogs
download https://mikrotik.com/download

Posted: **Fri Aug 23, 2019 7:09 am**

it seams to be broken on this version

[admin@MikroTik] > /ip kid-control pause Peter
[admin@MikroTik] > /ip kid-control print

Docu says:
It is also possible to pause all restrictions and then resume them whenever you want it.

But when I pause the ip firewall rules are still active.

Posted: **Sat Aug 24, 2019 7:10 am**

web proxy is not working with stable 6.45.3 on hAP Lite, not with the redirect firewall rule, nor with the explicit setting of the proxy server in the browser. Did work before, returned to long term 6.44.5 and it is working again.
Why a web-proxy on such a small device, without even caching something? Well the HTTP request handling by the proxy is much better than a Chrome browser. Pages do load 5 to 10 times faster with the proxy over a line with long round trip delay. (Satellite links have 600ms+ delays). Remote handling of the web interface of a router was not even possible over the direct satellite link, with the proxy server its again workable. It seems to be related to HTTP session reuse. (avoiding the long TCP session setup handshake, 600ms per request or answer)

Confirmed. Using the Web-Proxy to form a walled garden with a redirect to sign-up server. Was working under 6.44. Upgraded to 6.45.3 and redirect quit working. Downgraded to 6.44.5. Redirect started working again. Upgraded to 6.45.2 and redirect quit again.

Posted: **Thu Aug 29, 2019 7:53 am**

v6.45.5 [stable] is released!

MikroTik

v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!