Community discussions

MikroTik App
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1623
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

v6.49.3 [stable] is released!

Tue Feb 15, 2022 11:29 am

RouterOS version 6.49.3 has been released in public "stable" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

New RouterOS 6.49.3 (Dec/22/2021 13:49:22):

*) bridge - improved system stability when initialising bridge interface
*) console - updated copyright notice;
*) defconf - fixed secondary-frequency configuration;
*) ethernet - improved system stability when receiving large packets on devices with 88F3720 CPU (nRAY, LHGG);
*) led - fixed default LED configuration for CubeG-5ac60ad;
*) netinstall - fixed x86 installation process;
*) socks - fixed SOCKS5 support;
*) upgrade - improved 404 error handling when checking for new versions;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) wireless - added U-NII-2 support for US and Canada country profiles for OmniTik 5, Metal 52 ac, and GrooveA 52 devices;
*) x86 - fixed downgrade from RouterOS v7.1.2 and above;

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this particular RouterOS release.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released! Post Reply

Tue Feb 15, 2022 11:50 am

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.
Please add this text to the text shown in "check for updates" on the device itself.
This is especially important in case the user selected a channel that will result in an upgrade to v7.
In that case it would be better when an additional warning is shown that an upgrade to v7 could cause additional issues not commonly experienced when doing an update within v6.xx.
 
VitaliySte
just joined
Posts: 3
Joined: Mon May 07, 2018 11:12 am

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 12:36 pm

Dec/22/2021 ?
Back to the future 4?
 
User avatar
amt
Long time Member
Long time Member
Posts: 529
Joined: Fri Jan 16, 2015 2:05 pm

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 12:41 pm

upss, something wrong in here ?
version.png
You do not have the required permissions to view the files attached to this post.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 12:57 pm

try again, it should work correctly now
 
User avatar
amt
Long time Member
Long time Member
Posts: 529
Joined: Fri Jan 16, 2015 2:05 pm

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 1:13 pm

try again, it should work correctly now
Yes, Now it's okay. :)
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3291
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 1:31 pm

try again, it should work correctly now
Was 6.49.3 really compiled Des 22 2021?
.
6.49.3.jpg
You do not have the required permissions to view the files attached to this post.
 
User avatar
strods
MikroTik Support
MikroTik Support
Topic Author
Posts: 1623
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 1:50 pm

The Christmas party simply took longer than expected...
 
dave3
newbie
Posts: 45
Joined: Mon Feb 07, 2022 8:06 am

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 1:51 pm

It underwent 2 months of rigorous testing before release. :)
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 2:04 pm

The Christmas party simply took longer than expected...
No wonder with Eva in the company :-)
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3291
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 2:24 pm

If this compile time is true, this is the far longest time between compile date and post date. Longest I did found other than this is the 19 day for 6.42.11.
viewtopic.php?t=143805

:)
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 3:22 pm

Yes, see above Strods response.
We 🥔 you guys
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3291
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: v6.49.3 [stable] is released!

Tue Feb 15, 2022 5:27 pm

Or some forgot that it was done :)

Just another strange notice. I do always open this page with scripts and announcement: viewforum.php?f=9 to look for new releases and scripts problem. But this time this page does not show the new 6.49.3 post???? But if you look at this page: viewforum.php?f=21 you see it. All other post are equal. One with 11 post and the other with 12?? Bug in forum, or some other posting error?
 
User avatar
Vlad2
just joined
Posts: 6
Joined: Thu Jun 02, 2016 2:39 pm
Location: the Kamchatka Peninsula

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 1:37 am

Hi!
I decided to update the CHR, take a look. And tell me, is it still 2021 or is it already 2022? (joke/reality) ?
Year2021-realy.JPG

P.S.
If I'm wrong, or it should be, then sorry.
You do not have the required permissions to view the files attached to this post.
 
User avatar
bpwl
Forum Guru
Forum Guru
Posts: 2983
Joined: Mon Apr 08, 2019 1:16 am

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 1:54 am

2021: Correct at time of compilation: viewtopic.php?p=913348#p913162
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 8:11 am

Fixed post announcement placement. Not it shows in all forum sections.
 
mducharme
Trainer
Trainer
Posts: 1777
Joined: Tue Jul 19, 2016 6:45 pm
Location: Vancouver, BC, Canada

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 8:16 am

Or some forgot that it was done :)
I suspect the same thing - with all the excitement around v7, somebody possibly forgot that 6.49.3 stable was never actually posted.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11433
Joined: Thu Mar 03, 2016 10:23 pm

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 8:26 am

Or some forgot that it was done :)
I suspect the same thing - with all the excitement around v7, somebody possibly forgot that 6.49.3 stable was never actually posted.

Guys, have faith in Mikrotik ... nobody forgot anything, they performed diligent testing and this takes time. ;-)
 
rpingar
Long time Member
Long time Member
Posts: 593
Joined: Fri May 28, 2004 2:46 pm
Location: Italy

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 1:57 pm

New RouterOS 6.49.3 (Dec/22/2021 13:49:22):

*) bridge - improved system stability when initialising bridge interface
*) console - updated copyright notice;
*) defconf - fixed secondary-frequency configuration;
*) ethernet - improved system stability when receiving large packets on devices with 88F3720 CPU (nRAY, LHGG);
*) led - fixed default LED configuration for CubeG-5ac60ad;
*) netinstall - fixed x86 installation process;
*) socks - fixed SOCKS5 support;
*) upgrade - improved 404 error handling when checking for new versions;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) wireless - added U-NII-2 support for US and Canada country profiles for OmniTik 5, Metal 52 ac, and GrooveA 52 devices;
*) x86 - fixed downgrade from RouterOS v7.1.2 and above;

date in changelog is broekn!!!!
 
msatter
Forum Guru
Forum Guru
Posts: 2897
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 2:17 pm

New RouterOS 6.49.3 (Dec/22/2021 13:49:22):

shorter

date in changelog is broekn!!!!
When that is only problem then we have a winner and the first release EVER without bugs....oh bugger, something just bit me!!!
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 2:26 pm

If they test the release before public publishing, people are bitching that the date is wrong and what took them so long.
If they release it soon after compile and it has critical bugs, people are bitching that it wasn't fully tested for critical bugs.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11433
Joined: Thu Mar 03, 2016 10:23 pm

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 3:33 pm

If they test the release before public publishing, people are bitching that the date is wrong and what took them so long.
If they release it soon after compile and it has critical bugs, people are bitching that it wasn't fully tested for critical bugs.
Ain't that great? We can bitch whatever they do ...
 
Dude2048
Member Candidate
Member Candidate
Posts: 212
Joined: Thu Sep 01, 2016 4:04 pm

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 9:14 pm

He has a point. Just stop bitching about it.
 
GuntOn
just joined
Posts: 15
Joined: Mon Apr 23, 2018 7:11 pm

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 9:44 pm

By the way how long RoS 6 version will be developed and maintained?
 
msatter
Forum Guru
Forum Guru
Posts: 2897
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 9:49 pm

Till V7 is bug free....and that will be a long wait. ;-)
 
mikrotikedoff
newbie
Posts: 29
Joined: Mon Nov 06, 2017 7:27 pm

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 10:37 pm

I thought some devices will never be able to use 7 so 6 was intended to be maintained for the foreseeable future?
 
Sob
Forum Guru
Forum Guru
Posts: 9119
Joined: Mon Apr 20, 2009 9:11 pm

Re: v6.49.3 [stable] is released!

Wed Feb 16, 2022 11:06 pm

There's v7 for all supported devices. Some old ones don't seem to get much testing, but nobody said anything about discontinuing support for any, and there's no good reason to. Possibly problematic are those with just 32MB RAM. Even worse when they also have 16MB flash, but that should be only hAP mini and hAP lite. And they still sell them, so if they can make those work, the rest must work too.
 
mducharme
Trainer
Trainer
Posts: 1777
Joined: Tue Jul 19, 2016 6:45 pm
Location: Vancouver, BC, Canada

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 2:56 am

I thought some devices will never be able to use 7 so 6 was intended to be maintained for the foreseeable future?
No, I believe in another thread they have said that once there is a true long-term channel release of v7, after that point v6 development will completely end, no updates.
 
User avatar
pothi
newbie
Posts: 46
Joined: Fri Sep 14, 2018 7:48 pm
Location: Srivilliputhur, Tamil Nadu, India
Contact:

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 5:37 am

Probably, security updates will continue for sometime. Since these are policy decisions, I expect the change to be slow and a long time will be given before ending development and / or maintenance of v6 branch.
 
SergeS
Frequent Visitor
Frequent Visitor
Posts: 67
Joined: Fri Mar 25, 2016 6:23 am

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 7:12 am

Have two CAP AC configured as Bridge AP. Have updated from 6.49.2 to 6.49.3 both of them.
One is OK, the other one is bricked... E1 indicator is blinking, but no access at all, including MAC.
User LED is ON, although I have never enable it. Have tried to reset to default with RESET button, no luck.

What are my options?
 
User avatar
bpwl
Forum Guru
Forum Guru
Posts: 2983
Joined: Mon Apr 08, 2019 1:16 am

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 12:02 pm

Upgraded hAP ac2, wAPac and Omnitik ac yesterday from 6.47.9, 6.48.6 and 6.49.2.
All went well, stable operation, no performance issues or unexpected disconnects so far.
(handpicked old versions were already working well)

6.49.3 looks like a good really "stable" release.
 
eddieb
Member
Member
Posts: 322
Joined: Thu Aug 28, 2014 10:53 am
Location: Netherlands

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 1:05 pm

I also upgraded all my devices to 6.49.3 no problems found.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11433
Joined: Thu Mar 03, 2016 10:23 pm

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 4:53 pm

I will be happy to listen to any suggestions on how to revive it.
Did anybody mention netinstall in this context?
 
SergeS
Frequent Visitor
Frequent Visitor
Posts: 67
Joined: Fri Mar 25, 2016 6:23 am

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 5:01 pm

Did anybody mention netinstall in this context?
Have heard about it but have never used it.
Also, have heard it is not working on win10 64bit.
Are there any good instructions on how to use NetInstall?
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 5:21 pm

https://wiki.mikrotik.com/wiki/Manual:Netinstall
However, be warned that using Netinstall is never easy the first time or when it has not been used for a long time.
There are a lot of things that can go wrong and can be diagnosed when you know how it proceeds when everything is well.
There often are posts claiming "netinstall does not work" but actually it is usually some user error. The next day it may be fine.
 
mfrommel
newbie
Posts: 25
Joined: Wed Dec 23, 2020 2:21 pm
Location: Munic, Germany

Re: v6.49.3 [stable] is released!

Thu Feb 17, 2022 5:23 pm

Are there any good instructions on how to use NetInstall?
https://help.mikrotik.com/docs/display/ROS/Netinstall
 
mducharme
Trainer
Trainer
Posts: 1777
Joined: Tue Jul 19, 2016 6:45 pm
Location: Vancouver, BC, Canada

Re: v6.49.3 [stable] is released!

Fri Feb 18, 2022 4:43 am

Probably, security updates will continue for sometime. Since these are policy decisions, I expect the change to be slow and a long time will be given before ending development and / or maintenance of v6 branch.
I don't expect it to be that long. When RouterOS v6 came out, the last update for v5 came out only a few months later and then that was the end of v5. The scenario here is a little different and obviously I do not believe RouterOS v7 will be retired as quickly as v5 was. I can see them potentially releasing security updates for v6 if there is some very serious issue after it has been discontinued, but aside from that, nothing.
 
dave3
newbie
Posts: 45
Joined: Mon Feb 07, 2022 8:06 am

Re: v6.49.3 [stable] is released!

Fri Feb 18, 2022 5:37 am

I used netinstall on windows 10 64 bit to install both v6.49.2 and v6.49.3. From what I've read, it's the best way to insure a problem-free upgrade, if you don't mind reconfiguring it. It worked fine, as long as I enabled the "apply default config." Without that, I couldn't find it on my network after it was finished.
 
SergeS
Frequent Visitor
Frequent Visitor
Posts: 67
Joined: Fri Mar 25, 2016 6:23 am

Re: v6.49.3 [stable] is released!

Fri Feb 18, 2022 6:40 am

Are there any good instructions on how to use NetInstall?
https://help.mikrotik.com/docs/display/ROS/Netinstall
Have recovered with NetInstall, thanks to everybody.
Run NetInstall on my Win10 64bit laptop, but NetInstall64 by some reasons cannot find my device, 32bit version make the trick.
 
bbs2web
Member Candidate
Member Candidate
Posts: 232
Joined: Sun Apr 22, 2012 6:25 pm
Location: Johannesburg, South Africa
Contact:

Re: v6.49.3 [stable] is released!

Fri Feb 18, 2022 1:05 pm

I have an odd situation in that two virtual RouterOS instances, both running 6.49.4 (x86), support IPSec AES hardware offloading differently. Any ideas on where I could hunt?

Both have default IPSec settings:
[user@router] > ip ipsec export verbose 
# feb/18/2022 12:44:25 by RouterOS 6.49.3
# software id = xxxx-xxxx
#
#
#
/ip ipsec mode-config set [ find default=yes ] name=request-only responder=no use-responder-dns=exclusively
/ip ipsec policy group set [ find default=yes ] name=default
/ip ipsec profile set [ find default=yes ] dh-group=modp2048,modp1024 dpd-interval=2m dpd-maximum-failures=5 \
  enc-algorithm=aes-128,3des hash-algorithm=sha1 lifetime=1d name=default nat-traversal=yes proposal-check=obey
/ip ipsec proposal set [ find default=yes ] auth-algorithms=sha1 disabled=no enc-algorithms=aes-256-cbc,\
  aes-192-cbc,aes-128-cbc lifetime=30m name=default pfs-group=modp1024
/ip ipsec policy set 0 disabled=no dst-address=::/0 group=default proposal=default protocol=all src-address=::/0 template=yes
/ip ipsec settings set accounting=yes interim-update=0s xauth-use-radius=no


[user@router] > ip ipsec export 
# feb/18/2022 12:44:28 by RouterOS 6.49.3
# software id = xxxx-xxxx
#
#
#
<blank>

L2TP IPSec configuration is identical on the two routers:
/ppp profile set *FFFFFFFE only-one=yes
/ppp secret add local-address=192.168.253.5 remote-address=192.168.253.6 service=l2tp name=site password=****************
/interface l2tp-server server set authentication=mschap2 enabled=yes ipsec-secret=******************************** \
  max-mru=1379 max-mtu=1379 use-ipsec=required
/interface l2tp-server add name=vpn-site user=site

The two virtual routers have identical KVM virtualisation containers, with the same CPU family and feature codes exposed. Herewith the CPU information for when we start the virtual container using Debian 11 (bullseye):
[root@debian11 ~]# cat /proc/cpuinfo
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 61
model name      : Intel Core Processor (Broadwell)
stepping        : 2
microcode       : 0x1
cpu MHz         : 2394.454
cache size      : 16384 KB
physical id     : 0
siblings        : 1
core id         : 0
cpu cores       : 1
apicid          : 0
initial apicid  : 0
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx rdtscp lm constant_tsc rep_good nopl xtopology cpuid tsc_known_freq pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch cpuid_fault invpcid_single pti fsgsbase bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat
bugs            : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit srbds
bogomips        : 4788.90
clflush size    : 64
cache_alignment : 64
address sizes   : 40 bits physical, 48 bits virtual
power management:

processor       : 1
vendor_id       : GenuineIntel
cpu family      : 6
model           : 61
model name      : Intel Core Processor (Broadwell)
stepping        : 2
microcode       : 0x1
cpu MHz         : 2394.454
cache size      : 16384 KB
physical id     : 1
siblings        : 1
core id         : 0
cpu cores       : 1
apicid          : 1
initial apicid  : 1
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx rdtscp lm constant_tsc rep_good nopl xtopology cpuid tsc_known_freq pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch cpuid_fault invpcid_single pti fsgsbase bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat
bugs            : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit srbds
bogomips        : 4788.90
clflush size    : 64
cache_alignment : 64
address sizes   : 40 bits physical, 48 bits virtual
power management:

Detected system resources in RouterOS are identical between the two VMs:
[user@router] > sys resource print 
                   uptime: 6h18m11s
                  version: 6.49.3 (stable)
               build-time: Dec/22/2021 13:49:22
              free-memory: 202.3MiB
             total-memory: 256.0MiB
                      cpu: Intel
                cpu-count: 2
            cpu-frequency: 2194MHz
                 cpu-load: 5%
           free-hdd-space: 67.3MiB
          total-hdd-space: 95.3MiB
  write-sect-since-reboot: 85096
         write-sect-total: 85096
        architecture-name: x86
               board-name: x86
                 platform: MikroTik


Working router (shows hw-aead as being active 'HE'):
[user@router] > /ip ipsec installed-sa print where state=mature
Flags: H - hw-aead, A - AH, E - ESP 
 0 HE spi=0xED7D7AE src-address=1.1.103.49:4500 
      dst-address=2.2.72.16:4500 state=mature auth-algorithm=sha1 
      enc-algorithm=aes-cbc enc-key-size=256 
      auth-key="8a23a02449d3a1edd01d24b93ce0a85a84c1a0b1" 
      enc-key="cc69d8ea1b08fa311a1d5616e3804731df2a1a8afefd52e40512f0cf82cfa8f4" 
      addtime=feb/18/2022 12:38:55 expires-in=15m40s add-lifetime=24m/30m 
      current-bytes=92354 current-packets=912 replay=128 

 1 HE spi=0xDE4CD14 src-address=2.2.72.16:4500 
      dst-address=1.1.103.49:4500 state=mature auth-algorithm=sha1 
      enc-algorithm=aes-cbc enc-key-size=256 
      auth-key="489dd6dc11b292c08a3a0dc4bc761da3c38cc972" 
      enc-key="6cc009d1dcddd980bb1d6bcb402be5d47a35d489e25a4bad0e1634b89cf85a18" 
      addtime=feb/18/2022 12:38:55 expires-in=15m40s add-lifetime=24m/30m 
      current-bytes=92086 current-packets=912 replay=128

Non hardware accelerated router (shows hw-aead being inactive 'E'):
[user@router]  > /ip ipsec installed-sa print where state=mature
Flags: H - hw-aead, A - AH, E - ESP 
 0  E spi=0x6E05009 src-address=1.1.35.120 dst-address=2.2.23.89 
      state=mature auth-algorithm=sha1 enc-algorithm=aes-cbc enc-key-size=256 
      auth-key="8b10c0e4fd943fc598295d0ab1540b356e5ecefd" 
      enc-key="e5dcd3cdf09988ed298cf50acf2b250df040ed0b09d48cf0788df889d5a0079c" 
      addtime=feb/18/2022 12:31:00 expires-in=7m41s add-lifetime=24m/30m 
      current-bytes=425537 current-packets=2947 replay=128 

 1  E spi=0x12C8896 src-address=2.2.23.89 dst-address=1.1.35.120 
      state=mature auth-algorithm=sha1 enc-algorithm=aes-cbc enc-key-size=256 
      auth-key="1370d7011235de40722b1227ff46d0434ebd9f33" 
      enc-key="d09001b3f2d6c83e85a2bf01ce3fa6e7578981d2d80d70f9f997207537be056a" 
      addtime=feb/18/2022 12:31:00 expires-in=7m41s add-lifetime=24m/30m 
      current-bytes=158794 current-packets=1554 replay=128 

PS: I can further validate that AES-NI is working when booting the VM with Debian 11 (bullseye). The first result is without it using AES-NI, the second is with it enabled:
[root@debian11 ~]# openssl speed aes-256-cbc
Doing aes-256 cbc for 3s on 16 size blocks: 22326434 aes-256 cbc's in 2.98s
Doing aes-256 cbc for 3s on 64 size blocks: 5773155 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 256 size blocks: 1477639 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 1024 size blocks: 368841 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 8192 size blocks: 45853 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 16384 size blocks: 23164 aes-256 cbc's in 2.99s
OpenSSL 1.1.1k  25 Mar 2021
built on: Tue Aug 24 08:28:12 2021 UTC
options:bn(64,64) rc4(16x,int) des(int) aes(partial) blowfish(ptr)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-MBf3dh/openssl-1.1.1k=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
aes-256 cbc     119873.47k   123572.55k   126513.57k   126318.79k   125628.02k   126929.42k

[root@debian11 ~]# openssl speed -evp aes-256-cbc
Doing aes-256-cbc for 3s on 16 size blocks: 65818605 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 64 size blocks: 18056419 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 256 size blocks: 4754481 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 1024 size blocks: 1174841 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 8192 size blocks: 148046 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 16384 size blocks: 74660 aes-256-cbc's in 2.98s
OpenSSL 1.1.1k  25 Mar 2021
built on: Tue Aug 24 08:28:12 2021 UTC
options:bn(64,64) rc4(16x,int) des(int) aes(partial) blowfish(ptr)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-MBf3dh/openssl-1.1.1k=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
aes-256-cbc     352206.58k   386491.91k   407072.62k   402353.57k   405616.33k   410479.68k
 
User avatar
bajodel
Long time Member
Long time Member
Posts: 551
Joined: Sun Nov 24, 2013 8:30 am
Location: Italy

Re: v6.49.3 [stable] is released!

Fri Feb 18, 2022 6:32 pm

A couple of RDB52 (aka hAP ac2) in my LAB went into bootloop after upgrade from 6.49.2 to 6.49.3, no special conf (AP and a GRE tunnel on it)
I had to netinstall them, so sorry no supout. They are on 6.49.3 now (netinstalled directly to that version) and working fine.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Fri Feb 18, 2022 9:20 pm

I have an odd situation in that two virtual RouterOS instances, both running 6.49.4 (x86), support IPSec AES hardware offloading differently. Any ideas on where I could hunt?
No idea, but I also have a CHR running 6.49.2 on VMware ESXi 7 and while Debian VMs on the same host show "aes" in the cpu flags, the CHR does not show H in the IPsec SA table.
So when you find how that can be, I am interested as well!
 
User avatar
bajodel
Long time Member
Long time Member
Posts: 551
Joined: Sun Nov 24, 2013 8:30 am
Location: Italy

Re: v6.49.3 [stable] is released!

Sat Feb 19, 2022 8:28 am

Just guessing, did you "import" the vm (ova or alike) or did you make the vm from scratch ?
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Sat Feb 19, 2022 11:43 am

In my case it was imported from the .ova. It has virtual hardware version 19 (7.0U2 and later), and OS settings "Linux / Other 3.x Linux (64-bit)".
 
User avatar
pendie
just joined
Posts: 4
Joined: Wed Jun 03, 2020 3:32 pm

Re: v6.49.3 [stable] is released!

Sat Feb 19, 2022 5:41 pm

since it appeared 6.47 until now
sector writes are huge i went back to 6.46.8 maybe i will last as long as with that version 750 gr3 ,hap lite,and rb951 2nd
 
dave3
newbie
Posts: 45
Joined: Mon Feb 07, 2022 8:06 am

Re: v6.49.3 [stable] is released!

Sat Feb 19, 2022 6:21 pm

I upgraded my RB750gr3 to v6.49.3 with netinstall. And when I connect in winbox it says I'm connected to v6.49.3 on hEX (mmips). But if I do a /system routerboard print, it says my current-firmware is 6.47.10 (the same as the factory-firmware). Should I be concerned?

[admin@MikroTik] > system routerboard print
       routerboard: yes
        board-name: hEX
             model: RB750Gr3
          revision: r4
     serial-number: ---
     firmware-type: mt7621L
  factory-firmware: 6.47.10
  current-firmware: 6.47.10
  upgrade-firmware: 6.49.3
 
User avatar
eworm
Forum Guru
Forum Guru
Posts: 1070
Joined: Wed Oct 22, 2014 9:23 am
Location: Oberhausen, Germany
Contact:

Re: v6.49.3 [stable] is released!

Sat Feb 19, 2022 6:27 pm

This is just the boot code. To upgrade run:
/ system routerboard upgrade
 
dave3
newbie
Posts: 45
Joined: Mon Feb 07, 2022 8:06 am

Re: v6.49.3 [stable] is released!

Sat Feb 19, 2022 7:18 pm

Thanks, I didn't know that. I didn't see it anywhere in the netinstall instructions. It's interesting, even the packages were listed as 6.49.3. But after doing the /system routerboard upgrade, the current-firmware is listed as 6.49.3.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Sat Feb 19, 2022 8:25 pm

The firmware is just the bootloader. It does not matter so much what version it is, after MikroTik totally messed up the version numbering on it.
The RouterOS version is what matters, you find it under /system resource print
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11433
Joined: Thu Mar 03, 2016 10:23 pm

Re: v6.49.3 [stable] is released!

Sat Feb 19, 2022 8:57 pm

Sometimes routerboot does matter, older routerboots sometimes can't boot newer ROS kernel. So yes, MT did screw up numbering and doesn't publish change log for it. So it seems it's wise to keep it current.
 
User avatar
kehrlein
newbie
Posts: 48
Joined: Tue Jul 09, 2019 1:35 am

Re: v6.49.3 [stable] is released!

Mon Feb 21, 2022 1:00 am

Same as with previous versions (e.g. 6.49.1, 6.49.2):
Upgrade to 6.49.3 resulted in a boot loop of a particular hEX S (RB760iGS, mmips).
No access to device was possible until Netinstall, which solved the issue.


Updated soft- and firmware on these models without any issues:
CCR2004-1G-12S+2XS
CCR1009-7G-1C-1S+
CRS112-8P-4S
CRS309-1G-8S+
RB1100AHx4
RB750GL
RBcAPGi-5acD2nD (cAP ac)
x86
 
han
just joined
Posts: 10
Joined: Fri Oct 30, 2020 11:30 am

Re: v6.49.3 [stable] is released!

Mon Feb 21, 2022 4:23 pm

I expect the change to be slow and a long time will be given before ending development and / or maintenance of v6 branch.
I think v6 is already abandoned.

I guess there will be 1-3 more updates to current v7.1 "stable" branch, then that will probably become "long term" and v6 reaches end-of-life officially.

v6 got its last update by end of december and probably only so because 6.49 appears to have significant issues. 6.49.3 is not even the 3rd real bug-fix update as 6.49.2 was a feature update adding device-mode.

It would be really nice to see 6.49 getting a few more updates, but I don't expect it to happen.
 
User avatar
Vlad2
just joined
Posts: 6
Joined: Thu Jun 02, 2016 2:39 pm
Location: the Kamchatka Peninsula

Re: v6.49.3 [stable] is released!

Tue Feb 22, 2022 1:32 am

I think v6 is already abandoned.
I guess there will be 1-3 more updates to current v7.1 "stable" branch, then that will probably become "long term" and v6 reaches end-of-life officially.
Unfortunately, I don't share your opinion. I think it would be too rash on the part of the MT team to do this, and abandon version 6 and take up version 7 (and for many, this 7th is still very "raw"). It should also be understood that Mikrotik has obligations to companies and organizations, the transition to a new version is a guarantee of the operation of devices, staff training, new courses, new trainers.
In general, I think that back in 2021 it was necessary to do active tests of version 7 and we would have had a working version 7.5 or 7.7 for the current period, at the time of the release of new devices (like RB5009). But they missed the time.
So there will be a year of transition for sure, and I think even more, the company has no right to force us to switch to a new version if we, as engineers, do not trust this version.
And version 6 after the official closure, it should be supported for 6-12 months with security fixes for sure.

My point of view is only. (Translated automatically)
 
han
just joined
Posts: 10
Joined: Fri Oct 30, 2020 11:30 am

Re: v6.49.3 [stable] is released!

Tue Feb 22, 2022 10:46 am

Well, Mikrotik sold already last year devices (e.g. RB5009) that come from factory with v7. (Back then v7 was even still officially beta and v6 won't work on RB5009).

So v7 is already in production environments...
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Tue Feb 22, 2022 11:06 am

Well, Mikrotik sold already last year devices (e.g. RB5009) that come from factory with v7. (Back then v7 was even still officially beta and v6 won't work on RB5009).

So v7 is already in production environments...
Yes, they have made new hardware that was too difficult to get working under v6, and thus required v7.
But unfortunately, instead of first making v7 feature complete and as bugfree as v6 (i.e. no showstopper bugs in facilities that worked OK in v6), they keep playing with new v7 features.
So now the world is in limbo between "have to use v6 or else our network won't work" and "want or have to use v7 on this new box or to have this new feature".
That is a bit unfortunate.
 
han
just joined
Posts: 10
Joined: Fri Oct 30, 2020 11:30 am

Re: v6.49.3 [stable] is released!

Tue Feb 22, 2022 12:38 pm

I'm sure Mikrotik's Support has a very clear impression how the situation is currently seen from customers....

If you have only a limited developer team, why spend half of the development power on both v6 and v7 development - risking nothing gets really done. Put all on v7 and accept bumps in the road.

In particular, when v7 has been delayed that long. But of course, that's only my personal impression. Only Mikrotik knows.
 
User avatar
bpwl
Forum Guru
Forum Guru
Posts: 2983
Joined: Mon Apr 08, 2019 1:16 am

Re: v6.49.3 [stable] is released!

Tue Feb 22, 2022 12:45 pm

See only discussion v6-versus v7. No hickups in 6.49.3 besides some upgrade processes??

Who knows what the DHCP option means in the WLAN "Multicast Helper" ? It's not in the old wiki or newer help wiki files. What does it do, and where should it be applied? In the "AP" or in the "station pseudobridge"? Or is there anything else about this ??? New for 6.49.3? Or when was it introduced? Was not in 6.48.4 yet.
Klembord-2.jpg
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Tue Feb 22, 2022 12:56 pm

I'm sure Mikrotik's Support has a very clear impression how the situation is currently seen from customers....

If you have only a limited developer team, why spend half of the development power on both v6 and v7 development - risking nothing gets really done. Put all on v7 and accept bumps in the road.
It is a bit unclear what picture they have of their customers.
Of course their only direct customers are their distributors. And they have indicated several times that the distributors are the ones that call the shots w.r.t. complicated new developments.
I.e. anything major has to be asked for by the distributors. And that is not surprising, as they bring in the money.

But in the past this has lead to a lot of very diverse functionality in the MikroTik routers, and the end-users have come to rely on it. They chose MikroTik, and bought it at the distributors, because of these features.
Now the new version RouterOS is introduced, and while most features are now kind of stable, there still remain use cases where v7 is essentially UNUSABLE.
One is a private network which uses BGP for the autorouting. BGP is unfinished and buggy. It has been in (at least theoretical) development for like 10 years now, but in still lacks essential features, compared to v6.
Now, is this an issue for MikroTik? Us poor users cannot tell them what to work on. "stop working on these new things like wireguard or l3 hw accel, first finish the BGP!". We do not bring in the money (at the moment) and it may well be that major distributors have indicated that their buyers want wireguard, not BGP.

That leaves us in limbo. Cannot upgrade so cannot test, cannot provide feedback, cannot buy new devices that require v7. But too little impact for MikroTik to notice it.
 
han
just joined
Posts: 10
Joined: Fri Oct 30, 2020 11:30 am

Re: v6.49.3 [stable] is released!

Tue Feb 22, 2022 9:23 pm

I perfectly agree!

High value customers are assigned a key accountant and get fast-tracked in support and development. Low prio customers meet in support forum.

But, there is an easy solution for your BGP issue - become an important customer.

Buy 5000 RB4011 (as these still run v6), promise to buy another 5000 if they fix BGP. That should do the trick.

PS: if you really do that I would be glad to take a few RB4011 from you ;-)
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Tue Feb 22, 2022 9:52 pm

... I already have a 4011, and at the moment I am using it to test v7. I selected it because it would be a drop-in replacement of the 2011 I had for years (and became too slow).
However it has a architecture-specific bug. I hope it will be fixed sometime soon.
And I now doubt it was a wise selection. It has lots of memory, yet it cannot use the new Wifi2 driver without disabling the 2GHz WiFi. And it has no way to add more storage, so using it with the appealing "Docker container" feature is also limited.
I am certainly not going to buy 5000 of these! On the other hand, maybe the CCR2004-1G-2XS-PCIe :-)
 
dragonauta
newbie
Posts: 28
Joined: Thu Feb 02, 2017 12:50 am

Re: v6.49.3 [stable] is released!

Wed Feb 23, 2022 8:17 pm

Hello, I recently upgraded my RB2011UiAS-2HnD from 6.49.2 to 6.49.3

I have an L2TP server up and running but after the upgrade and proper reboot, all secrets were gone, just the secrets. Profile and L2TP configuration was ok after the upgrade. Everything else is ok.
It wasn't that bad, because I had a configuration backup, just put in secrets again and done.

I wonder if this was a bug for this update or "a feature"?

Thanks
 
User avatar
kehrlein
newbie
Posts: 48
Joined: Tue Jul 09, 2019 1:35 am

Re: v6.49.3 [stable] is released!

Sat Feb 26, 2022 6:19 pm

... I already have a 4011, and at the moment I am using it to test v7. I selected it because it would be a drop-in replacement of the 2011 I had for years (and became too slow).
However it has a architecture-specific bug. I hope it will be fixed sometime soon.
What specific architecture bug do you mean? I would be interested in some details. Thx!
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: v6.49.3 [stable] is released!

Sat Feb 26, 2022 7:04 pm

There is a complicated problem with DSCP, PPPoE and VLAN priority tags that is not occurring with exactly the same config in a 2011. It could be CPU-architecture or switch-chip specific, I don't know. Others have reported it too.
Support tells me it is fixed in 7.1.3 but I am running 7.2rc3 at the moment, I will upgrade to 7.2rc4 tomorrow and see if that fixes it as well.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5403
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: v6.49.3 [stable] is released!

Sat Feb 26, 2022 7:34 pm

7.1.3 and 7.2rc3/4 are not the same dev stream, I think ?
 
User avatar
emils
Forum Veteran
Forum Veteran
Posts: 906
Joined: Thu Dec 11, 2014 8:53 am

Re: v6.49.3 [stable] is released!

Wed Mar 02, 2022 10:06 am

New version v6.49.4 has been released:

viewtopic.php?t=183744

Who is online

Users browsing this forum: almdandi, BOFG, jvanhambelgium, lecyborg and 20 guests