Community discussions

MikroTik App
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 18, 2022 11:01 am

I’d send everything. Surely your server has the bandwidth and disk space.
That for sure is not a good idea. Some "debug" topics send a lot of data, more info than the router transports.
In some cases it can even cause an avalanche (depending on how your syslog server is connected), where it logs that it logs that it logs (etc).
 
WeWiNet
Long time Member
Long time Member
Posts: 591
Joined: Thu Sep 27, 2018 4:11 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 18, 2022 6:09 pm

suddenly after 4 day uptime, device rebooted with kernel failure
and, WG Private key was lost !!!
it generated a new key
furthermore ...
exported the "new" config, and WG private key is missing from export!!!
Do you know that to export passwords, keys etc into config file you need to use the additional option "show-sensitive" ?
export file=myconfig show-sensitive
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 18, 2022 6:25 pm

Do you know that to export passwords, keys etc into config file you need to use the additional option "show-sensitive" ?
Additional info:
this behavior was changed from ROS6 (default show-sensitive) to ROS7 (default hide-sensitive).
 
User avatar
npeca75
Frequent Visitor
Frequent Visitor
Posts: 75
Joined: Thu Aug 03, 2017 3:12 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 18, 2022 9:37 pm

export file=myconfig show-sensitive
Please
before you reply to post, read the WHOLE post
as you could see, and hopefully read, you will notice
that after crash, WG key was missing from export
AFTER modifying WG key, it was exported as expected

so, yes, i know how to export sensitive things, like passwords and WG keys
 
ishanjain
Frequent Visitor
Frequent Visitor
Posts: 55
Joined: Tue Sep 29, 2020 8:40 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 18, 2022 11:20 pm

It turns out there has been a change in route processing with routing rules and route marking in 7.2.2 (vs 7.2.1)
Something to do with vrf's (Thank you Mikrotik Support)
7.2.1 and Prior, routing rules had priority over routing mark. This was changed in 7.2.2
This behavior was reverted in 7.2.2 back to how it was before but this has only been done for IPv4. With IPv6, Routing rules still have priority over Routing marks.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 19, 2022 9:53 pm

In some cases of instability it can help to do this:
- /export show-sensitive file=export
- download the export.rsc file to your computer
- netinstall the device (do not keep the config and omit default configuration)
- connect using MAC address
- upload the export.rsc
- check with /export to the terminal that config is empty, remove what you see (e.g. DHCP client)
- /import verbose=yes export.rsc
hopefully it will finish the import without errors. when it doesn't, start at the next item using:
/import verbose=yes skip-lines=123 export.rsc (when the error is in line 123)

This way you remove the config database and re-fill it with the readable config that you have.
(making sure there are no strange things left behind)
In v6, this never fixed a problem, at least not for me. For v7, this appears to be different.
 
tangent
Forum Guru
Forum Guru
Posts: 1329
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 19, 2022 11:10 pm

- /export show-sensitive file=export

That won't include everything.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 19, 2022 11:11 pm

Save RouterBOARD full backup of everything [configuration, certificates, host key, router users (no passwords), user-manager, dude, other files]
viewtopic.php?f=1&t=175360&p=858564#p858564
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 12:34 pm

Yes it skips some items, fortunately they usually are either not commonly used, or stored somewhere else anyway (e.g. SSH key). But the original asker of the question can take this advice into account.

I think one of the things to do on v7 development is to include all such data in a /export show-sensitive output, in such a way that it can be re-imported too.
(e.g. a password can be output in hashed form, but using an option name like hashed-password= that the /user add command would then be able to process)
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 1:31 pm

From unprotected backup you can extract idx and dat of user database.
Why not export on /user export show-sensitive file=users.rsc also the hash already readable on database? (And the possibility to set back?)
Is more simple manage users...
 
bratislav
Frequent Visitor
Frequent Visitor
Posts: 65
Joined: Mon May 05, 2014 10:36 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 1:39 pm

can you explain what is pref-src=0.0.0.0 what thats for?
If you have more than one IP addresses you can set the one that is used by default for this particular route...
 
woro
Member Candidate
Member Candidate
Posts: 104
Joined: Sun May 24, 2015 12:47 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 2:00 pm

Upgraded from 7.1.x to 7.2.3 on my RB4011 and it seems that it started crashing once in a while which was not an issue with 7.1.x.

Smells a bit like my earlier issues here: viewtopic.php?t=179071
For me helped disabling CapsMan
Disabling Capsman is not an option for me.
I've contacted support, collected a supout.rif and downgraded to 7.1.5.
All fine again.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 2:04 pm

Capsman and v7 are not yet friends... I would recommend to remain on v6 until that is fixed.
 
woro
Member Candidate
Member Candidate
Posts: 104
Joined: Sun May 24, 2015 12:47 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 2:32 pm

Capsman and v7 are not yet friends... I would recommend to remain on v6 until that is fixed.
Works fine for me with 7.1.5 for quite a while. I guess I'll stay on long-term then for now. But still would like Mikrotik to acknowledge the crash/reboot issue and address it.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 2:41 pm

I run a small capsman setup using 7 2.
Hasn't crashed yet nor any other problems for the past 2 weeks.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 3:52 pm

Route with dst-address="" can be exported, but not printed or deleted [ROS 7.2.3]
viewtopic.php?t=185950
SUP-82277
 
gittubaba
newbie
Posts: 30
Joined: Thu May 31, 2018 5:55 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 20, 2022 11:56 pm

Just give a try to update 750G r3 mmips from 7.2.1 to 7.2.3 (create backop before the upgrade)...after I cannot access my router from several LAN connectors, cannot even ping the router form some lan, while the PC gets IP from the router DHCP on that lan. So tried
* restore saved configuration before the upgrade - not help
* reset router to defaults on 7.2.3 and resore saved config - not help
* then downgraded do 7.2.1 (config was probably corrupted at all by that..no accees to router from any LAN connector)
* so again reset to defaults on 7.2.1 and restore saved config - everything works like before!

so for me - keep away from v7.2.3 as well :-(
Please send support output file from your router with the configuration, that was upgraded to 7.2.3.
Same problem in 750Gr3 for me too. Emailed support with supout. SUP-82725
 
User avatar
jimmer
just joined
Posts: 19
Joined: Wed Mar 06, 2019 10:06 am
Location: Tasmania, Australia

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sat May 21, 2022 2:54 am

Capsman and v7 are not yet friends... I would recommend to remain on v6 until that is fixed.
with

Works fine for me with 7.1.5 for quite a while. I guess I'll stay on long-term then for now. But still would like Mikrotik to acknowledge the crash/reboot issue and address it.
Works for me too, 7.1.5, later versions and 7.3beta are too flaky but 7.1.5 is romping along ok, 56days of uptime on one of my hapac2's and 45days on the other without issues, RB3011 which is the manager is presently at 27 days, would be 56days too but made the disastrous decision to try one of the newer 7.2 STABLE releases and reverted back.

So yeah, 7.1.5 is a winner out of the 7.x tree thus far.
 
rpingar
Long time Member
Long time Member
Posts: 592
Joined: Fri May 28, 2004 2:46 pm
Location: Italy

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sat May 21, 2022 9:11 am

the new inter NIC x7xx driver in 7.2.3 let my x86 box reboot each 2 days.
icmp (ping stop working from the router) issue still present
 
GuntOn
just joined
Posts: 15
Joined: Mon Apr 23, 2018 7:11 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sat May 21, 2022 1:04 pm

Does anybody else have issue that Chateau LTE 12 is randomly rebooting about two times per day?
 
eenpahlefi
just joined
Posts: 4
Joined: Wed Mar 19, 2014 12:40 pm
Location: Banjarmasin
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sat May 21, 2022 8:12 pm

get value name system health not use..
tested routerboard RB750Gr3 v7.2.3
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sat May 21, 2022 10:22 pm

It works, but differently that what you are trying to do.
This would work: :put [get value-name=value [find where name=voltage]]
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3279
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sun May 22, 2022 7:57 am

I am getting the voltage this way.
/system health
:put [get [find where name=voltage] value]
Its more inline with the rest of my scripting.

After som testing, it seems that value-name are not needed if you specify what you need after the data id.
Differences:
This works
:put [get [find where name=voltage] value-name=value]
This works
:put [get value-name=value [find where name=voltage]]
This works
:put [get [find where name=voltage] value]
This does not work
:put [get value [find where name=voltage]]
 
woro
Member Candidate
Member Candidate
Posts: 104
Joined: Sun May 24, 2015 12:47 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sun May 22, 2022 3:16 pm

Does anybody else have issue that Chateau LTE 12 is randomly rebooting about two times per day?
Have a RB4011 rebooting about every 4 hours with 7.2.3. Fixed after downgrade to 7.1.5
 
tangent
Forum Guru
Forum Guru
Posts: 1329
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sun May 22, 2022 5:04 pm

Have a RB4011 rebooting about every 4 hours with 7.2.3.

My reply above is still valid. My RB4011iGS+RM's uptime is now 14 days.

To me, what you've got there is the beginning of the diagnosis process, not its end. You're blessed with a repeatable bug, which should make it amenable to ready diagnosis:

  1. Enable remote logging. (Link above.)
  2. Enable resource graphing, especially memory.
  3. Export your sanitized config for examination here.
  4. While waiting for responses, bisect the 7.2 feature list, turning off features until it stops restarting. There are 327 items on that list, which might seem an overwhelming number, but it really isn't. First, at least half of those items are likely to be irrelevant to your local setup. Second, the log₂(n) nature of bisection reduces the process to 7 or 8 tries; with a 4 hour reboot time, you should have your answer in a day or two, if bisection can work on your problem at all.
 
Liopleus
just joined
Posts: 7
Joined: Tue Aug 24, 2021 8:06 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 23, 2022 5:13 pm

The wireless LED is finally working with wifiwave 2 on my hAP ac^3 after updating to 7.2.3.
Does anyone else experience this or is this actually fixed a couple of versions ago?
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 23, 2022 5:14 pm

I am getting the voltage this way.
/system health
:put [get [find where name=voltage] value]
Its more inline with the rest of my scripting.

After som testing, it seems that value-name are not needed if you specify what you need after the data id.
Differences:
This works
:put [get [find where name=voltage] value-name=value]
This works
:put [get value-name=value [find where name=voltage]]
This works
:put [get [find where name=voltage] value]
This does not work
:put [get value [find where name=voltage]]

Or also on v7
/system/health
:put ([get [find where name="voltage"]]->"value")
 
mcskiller
newbie
Posts: 40
Joined: Mon Feb 13, 2012 7:12 am
Location: Argentina
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 23, 2022 10:27 pm

upgrade rb4011 from 7.2.1 to 7.2.3 no bgp connection agains my peers.
from one of my peer side can see this in logs:
Image
i have other peer in similar situation.
from my side no logs.
after a downgrade all is working without touch any config
 
rpingar
Long time Member
Long time Member
Posts: 592
Joined: Fri May 28, 2004 2:46 pm
Location: Italy

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 23, 2022 10:32 pm

upgrade rb4011 from 7.2.1 to 7.2.3 no bgp connection agains my peers.
from one of my peer side can see this in logs:
Image
i have other peer in similar situation.
from my side no logs.
after a downgrade all is working without touch any config
I am sure they are ibgp.
they changed the way to choose local address!
Manually set the local ip into the connection and everything starts to work again.
It is not a bug, for ibgp MT usues the loopbackip (as local ip) if there is one.
regards
Ros
 
mcskiller
newbie
Posts: 40
Joined: Mon Feb 13, 2012 7:12 am
Location: Argentina
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 23, 2022 10:47 pm

upgrade rb4011 from 7.2.1 to 7.2.3 no bgp connection agains my peers.
from one of my peer side can see this in logs:
Image
i have other peer in similar situation.
from my side no logs.
after a downgrade all is working without touch any config
I am sure they are ibgp.
they changed the way to choose local address!
Manually set the local ip into the connection and everything starts to work again.
It is not a bug, for ibgp MT usues the loopbackip (as local ip) if there is one.
regards
Ros
Yes is ibgp, where i have to change ip? i am using for router-id a loopback ip.
 
rpingar
Long time Member
Long time Member
Posts: 592
Joined: Fri May 28, 2004 2:46 pm
Location: Italy

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 23, 2022 10:50 pm



I am sure they are ibgp.
they changed the way to choose local address!
Manually set the local ip into the connection and everything starts to work again.
It is not a bug, for ibgp MT usues the loopbackip (as local ip) if there is one.
regards
Ros
Yes is ibgp, where i have to change ip? i am using for router-id a loopback ip.
manually set local ip into the bgp connection!
 
mcskiller
newbie
Posts: 40
Joined: Mon Feb 13, 2012 7:12 am
Location: Argentina
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 23, 2022 10:53 pm


Yes is ibgp, where i have to change ip? i am using for router-id a loopback ip.
manually set local ip into the bgp connection!
thank! after 5 upgrades/downgrades is working again!
 
User avatar
npeca75
Frequent Visitor
Frequent Visitor
Posts: 75
Joined: Thu Aug 03, 2017 3:12 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Tue May 24, 2022 6:55 am

ahhh, another bug, this time on LLDP
there is NO mac cc:2d:e0:3d:b6:18 on my rb3011
but MT send this MAC in LLPD packets
it is unusable this way, could not match ifName because bridge/ifName notation
and could not match with non existent MAC address

looked at every interface, every bridge, simply, there is NO cc:2d:e0:3d:b6:18

Linux directly connected to 3011
~$ sudo lldpctl
LLDP neighbors:

Interface:    eth0, via: LLDP, RID: 2, Time: 0 day, 08:41:44
  Chassis:     
    ChassisID:    mac cc:2d:e0:3d:b6:18
    SysName:      soada-mkt
    SysDescr:     MikroTik RouterOS 7.2.3 (stable) May/02/2022 15:18:17 RB3011UiAS
    MgmtIP:       169.254.2.1
    MgmtIP:       fd00:2:1::1
    Capability:   Bridge, on
    Capability:   Router, on
  Port:        
    PortID:       ifname BR: Switch/eth8: NMS (ac1000)
    TTL:          120
  LLDP-MED:    
    Device Type:  Network Connectivity Device
    Capability:   Capabilities, yes
    Capability:   MDI/PSE, yes

and, Eltex switch connected to 3011 with bonding
#show lldp neighbors GigabitEthernet1/0/23

Device ID: cc:2d:e0:3d:b6:18
Port ID: BR: Switch/BND: bond1/eth1: sw22 (bond1)
Capabilities: Bridge, Router
System Name: soada-mkt
System description: MikroTik RouterOS 7.2.3 (stable) May/02/2022 15:18:17 RB3011UiAS
Port description: 
Management Address: 169.254.2.1
Management Address: fd00:2:1::1
Time To Live: 63


802.1 PVID: None
802.1 PPVID: 
802.1 VLAN:
802.1 Protocol: 

#show lldp neighbors GigabitEthernet1/0/24

Device ID: cc:2d:e0:3d:b6:18
Port ID: BR: Switch/BND: bond1/eth2: sw22 (bond1)
Capabilities: Bridge, Router
System Name: soada-mkt
System description: MikroTik RouterOS 7.2.3 (stable) May/02/2022 15:18:17 RB3011UiAS
Port description: 
Management Address: 169.254.2.1
Management Address: fd00:2:1::1
Time To Live: 77


802.1 PVID: None
802.1 PPVID: 
802.1 VLAN:
802.1 Protocol: 
 
Liopleus
just joined
Posts: 7
Joined: Tue Aug 24, 2021 8:06 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Tue May 24, 2022 7:16 pm

The wireless LED is finally working with wifiwave 2 on my hAP ac^3 after updating to 7.2.3.
Does anyone else experience this or is this actually fixed a couple of versions ago?
Still doesn't work for me; after picking either wifi1 or wifi2 interface, I get:
Couldn't change LED Trigger <wireless signal strength> - Cannot assign interface to trigger! Interface is disabled or this is not a wireless interface! (8)
I can't configure it as well, but it didn't even light up in the previous versions. At least now it lights up with wireless activity.
 
zainarbani
Frequent Visitor
Frequent Visitor
Posts: 54
Joined: Thu Jul 22, 2021 9:42 am
Location: Pati, Indonesia

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 25, 2022 10:57 am

its been a while since last update :/
 
User avatar
Panbambaryla
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Sat Jun 08, 2019 12:12 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 25, 2022 11:05 am

its been a while since last update :/
This is "silence before the storm"...
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 25, 2022 11:36 am

its been a while since last update :/
This is "silence before the storm"...
Ladies and gentlemen, brace yourself ...
 
Rox169
Member
Member
Posts: 432
Joined: Sat Sep 04, 2021 1:47 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 25, 2022 12:33 pm

yes, leťs see how many devices will be bricked this time :)
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 25, 2022 1:28 pm

RouterOS 7.2.3
New bug:
Hotspot walled garden on export or print do not export or show if the rules are enabled or disabled.
Adding by terminal the rule, the parameter action= is ignored.
Adding the rule with Winbox GUI work correctly.

viewtopic.php?t=186234

Rules inserted correctly on WinBox 64 3.35, terminal do not export or print action= status:
[admin@MikroTik] /ip/hotspot/walled-garden> export verbose show-sensitive 
# model = 911G-5HPnD
/ip hotspot walled-garden
add comment="show allow on winbox" disabled=no dst-host=test.test !dst-port !method !path !server !src-address
add comment="show deny on winbox" disabled=no dst-host=test.test !dst-port !method !path !server !src-address
[admin@MikroTik] /ip/hotspot/walled-garden> print detail 
 0   ;;; show allow on winbox
     dst-host=test.test hits=0 
 1   ;;; show deny on winbox
     dst-host=test.test hits=0 

Terminal insert only allowed rules, regardlessly to the action=, and the action= still not exported (or printed)
[admin@MikroTik] /ip/hotspot/walled-garden> add comment="terminal test allow" dst-host="new.test" action=allow
[admin@MikroTik] /ip/hotspot/walled-garden> add comment="terminal test deny" dst-host="new.test" action=deny
[admin@MikroTik] /ip/hotspot/walled-garden> export verbose show-sensitive 
/ip hotspot walled-garden
add comment="terminal test allow" disabled=no dst-host=new.test !dst-port !method !path !server !src-address
add comment="terminal test deny" disabled=no dst-host=new.test !dst-port !method !path !server !src-address
 
User avatar
Panbambaryla
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Sat Jun 08, 2019 12:12 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 25, 2022 6:11 pm

Fun fact:
@Normis is promoting Mikrotik automatic upgrade with his new, todays video.
 
User avatar
Larsa
Forum Guru
Forum Guru
Posts: 1025
Joined: Sat Aug 29, 2015 7:40 pm
Location: The North Pole, Santa's Workshop

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 25, 2022 6:37 pm

Wow, great news! This is perfect for tested and stable versions like v7.2.2. And besides that, if something should happen (god forbid), you may use Netinstall that is a very capable tool that doesn't require any settings and will easily restore your device within minutes. ;-)
 
User avatar
Znevna
Forum Guru
Forum Guru
Posts: 1347
Joined: Mon Sep 23, 2019 1:04 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed May 25, 2022 8:41 pm

It takes some balls promoting auto upgrade after recent 100% bricking releases.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 11:44 am

Wow, great news! This is perfect for tested and stable versions like v7.2.2. And besides that, if something should happen (god forbid), you may use Netinstall that is a very capable tool that doesn't require any settings and will easily restore your device within minutes. ;-)
Unfortunately such videos or other publications will reach only a tiny number of users, and most MikroTik routers will spend their life on their factory software, even 5 years after critical vulnerabilities have been found in it.
There should be a default auto-upgrade mechanism in place (if only by adding this example to the default config) and it should use a dedicated channel where new versions are only placed after at least a month of testing in one of the other (long-term or stable) channels, determining there are no known cases of bricking or other major problems.

Unfortunately MikroTik do not understand that and suggest that long-term serves this purpose. But long-term only refers to longer maintenance of an older version, not to a safe upgrading path you can apply without risk. New versions are placed in long-term without field testing in the "stable" branch, so they can brick or cause big problems to your router anyway. Not good when that happens automatically...
 
User avatar
Larsa
Forum Guru
Forum Guru
Posts: 1025
Joined: Sat Aug 29, 2015 7:40 pm
Location: The North Pole, Santa's Workshop

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 12:24 pm

Good summary!

In particular, the importance of distinguishing between versions for long-term maintenance and safe upgrading. Hopefully MT will look over and take a holistic approach to the whole upgrade process for automatic updates (and fall-back), a new channel for properly tested versions and a usable tool for painless recovery.
 
User avatar
SiB
Forum Guru
Forum Guru
Posts: 1888
Joined: Sun Jan 06, 2013 11:19 pm
Location: Poland

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 12:43 pm

btw, I use L2TP with CCR for ~400 clients.. and v6 from time to time give me error, and all still works.
Anyone have it at ros7 ?
ppp,error,critical: 217.67.*.*: Encryption got out of sync - disabling
This is old unsolved by MikroTik case with one we all must live... of course it was reported in past.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 12:59 pm

I don't think they are getting the point. You can see that in reactions to the video, and also before on this forum.
We have seen it before:
- at some random (for us) point in time the decision is made to "promote a development version to stable" (in the middle of a discussion about stability)
- at that time:
-- 6.(xx+1)rc5 (development) becomes 6.(xx+1) which is the new "stable".
-- the most important fixes from "development" are back ported to 6.xx.n (the previous "stable") it becomes 6.xx.(n+1) and it is renamed to "long-term".
- unfortunately there are issues (as could be expected due to the state of the development version)
- soon, a new 6.(xx+1).1 "stable" version and a 6.xx.(n+2) "long-term" version are released to fix the most apparent issues.

So when the long-term version increments, it essentially is an earlier "stable" version plus a couple of patches, and the whole thing is not field-tested (never was "stable").
It certainly would not be a good idea to update millions of devices to that the next night. Let it spend some time in long-term, to wait for the problem reports and fixes.

There should be an extra "security" channel for those users that do automatic updates, that receives the version from long-term after it has really stabilized, and does not receive updates that are merely feature changes. Only security-related changes trigger a new version from long-term to be copied to "security", and only after having spent a month or so in "long-term" without reports of bricking or major bugs.

In rare cases where there is a critical security bug that affects most installations badly, it can be considered to release a new version in that channel that is based on the previous "security" version plus ONLY a fix for that particular problem. So NOT the "currently stable" version or another upgrade that also changes other things.

It could be considered to make this "security" channel special in that a user could have selected "stable" or "long-term" as their main channel from which they do manual updates, and "security" is the channel used by the daily job, in such a way that updates are installed from there only when they are newer than the installed version.
Those that do not want any unpredictable changes can always remove or disable the scheduled job, and those that do not know or do not care will receive updates when required to keep the router secure, but can still track the developments when they choose to do so.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 1:01 pm

btw, I use L2TP with CCR for ~400 clients.. and v6 from time to time give me error, and all still works.
Anyone have it at ros7 ?
ppp,error,critical: 217.67.*.*: Encryption got out of sync - disabling
This is old unsolved by MikroTik case with one we all must live... of course it was reported in past.
I have never seen that error. Does it occur with particular types of clients?
 
User avatar
Larsa
Forum Guru
Forum Guru
Posts: 1025
Joined: Sat Aug 29, 2015 7:40 pm
Location: The North Pole, Santa's Workshop

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 2:26 pm

I don't think they are getting the point. You can see that in reactions to the video, and also before on this forum.

One possibility why MT does't understand and hasn't already fixed the problems is that they lack an experienced "release manager" with authority who works at management level. There may also be a lack of resources, but for whatever reason they've arisen, these problems can be remedied if management really wants to (and is aware of the problem)

They've managed to develop marketing to a new level with new websites, newsletters and communication channels thus it should be possible to fix the release management as well.
 
User avatar
mozerd
Forum Veteran
Forum Veteran
Posts: 871
Joined: Thu Oct 05, 2017 3:39 pm
Location: Canada
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 2:45 pm

@Larsa IMO I believe that Tik management understand the cost equation ... the more people you hire in mgmt positions the les comparative you will become.. MikroTik are doing a GREAT Job with the resources they do have --- consequently very competitive and an unbeatable value proposition to boot.

But seeing that you are from California where tech companies go nuts for over-management socialistic practices I can understand your stance. :)
 
User avatar
Larsa
Forum Guru
Forum Guru
Posts: 1025
Joined: Sat Aug 29, 2015 7:40 pm
Location: The North Pole, Santa's Workshop

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 3:27 pm

Well, middle management might be a pain in the b*tt pure cost wise but a tech company like MT probably already has sufficient technical resources but lacks awareness how to organize things like promoting someone who can take the lead regarding release mgmt. This doesn't necessarily mean you will act as full time manager but it's rather a job description that comes with some kind of authority. (IMHO)
Last edited by Larsa on Thu May 26, 2022 4:01 pm, edited 2 times in total.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 3:55 pm

v7 uses more CPU than v6, especially when doing benchmarking like speedtest.
has been explained several times already.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 3:57 pm

has been explained several times already.
cetipabo, the key words are "routing cache" - it's removed in recent Kernel versions
 
winap
just joined
Posts: 20
Joined: Thu Sep 23, 2021 10:57 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 3:58 pm

v7 uses more CPU than v6, especially when doing benchmarking like speedtest.
has been explained several times already.
But why? More throughput or less?
Thanks
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 4:02 pm

But why? More throughput or less?
Thanks
Less fake throughput.
Read: results you see now in ROS7 are closer to real life performance.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 4:03 pm

i'm just starting on Mikrotik world, so sorry for not having read the whole forum in one night, i just received my RB4011 yesterday.
Tss tss tss... some catching up to do then :lol:
 
winap
just joined
Posts: 20
Joined: Thu Sep 23, 2021 10:57 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 4:17 pm

Less fake throughput.
Read: results you see now in ROS7 are closer to real life performance.
But fake throughput you mean from bandwidth test, or from speedtest ISP?
Why just it drain more CPU on same Gbit line?
 
User avatar
Paternot
Forum Veteran
Forum Veteran
Posts: 953
Joined: Thu Jun 02, 2016 4:01 am
Location: Niterói / Brazil

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 5:38 pm

Routing cache was removed from the Linux kernel, a long time ago - security issues. This is showing only in version 7.x because RoS 6.x runs one really ancient kernel.

No, it is NOT fake result. What DOES happes is this:
1) Route caching works with a limit number of routes. Exceed this limit, and it has no benefits.
2) A router used on a SoHo environment will probably get faster routing with route cache, since it will use a small number of routes.
3) A router used on an ISP environment probably won't benefit from it - since it will see a huge number of routes.

Some people say this is a fake result, since it would give a greater speed with Speedtest and services alike in contrast with "real" usage. I disagree: what is "real" usage changes with every case - and SoHo routing is a huge use case for Mikrotik.

But, yes: RoS 7.x uses more CPU than 6.x, due to the removing of routing cache. And it will NOT come back. We will have to adapt, and specify our routers accordingly.
 
tangent
Forum Guru
Forum Guru
Posts: 1329
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 6:17 pm

Some people say this is a fake result, since it would give a greater speed with Speedtest and services alike in contrast with "real" usage. I disagree: what is "real" usage changes with every case - and SoHo routing is a huge use case for Mikrotik.

I can't find information on the size of this route cache, when it existed. I wonder how much those 10-year-old conclusions hold up in today's Internet, where a given web page might result in a hundred hits, many to servers in disparate data centers. Or, take the case of CDNs, where simply "flipping channels" in your OTT app of choice might pull from multiple data centers for the same reason. Are we talking about a cache of a dozen routes? Hundreds? Thousands?

I don't think the existence proof of RouterOS 6 tells the whole story. According to the slides for a presentation by one of the people who did the work to remove the route cache, an effort which finished nearly a decade ago, they had a goal of only a 10% speed hit for their udpflood test case, which seems even more artificial than Internet speed tests.

Regardless, the linked slide deck shows why they thought they had to remove it.
 
tangent
Forum Guru
Forum Guru
Posts: 1329
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 6:59 pm

By the way, now i don't understand why in V7 it says : route cache : yes

Presumably that's the "…completely different route lookup algorithm…" in ROS 7 that raimondsp mentioned in the post you linked.
 
winap
just joined
Posts: 20
Joined: Thu Sep 23, 2021 10:57 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 7:23 pm

Paternot:
Thank you so much!
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 7:29 pm

I can't find information on the size of this route cache, when it existed. .... Are we talking about a cache of a dozen routes? Hundreds? Thousands?

I found a nice article explaining some inttinsics of route caching ... about dimensioning it says:
As a rule of thumb, two millions entries eat about 500 MiB of memory on a 64-bit system. You should be able to compute the average memory usage and the maximum memory usage from the values of net.ipv4.route.max_size, rhash_entries and net.ipv4.route.gc_elasticity. For example, if the route cache hash table has 262,144 buckets, the maximum allowed number of entries in the cache is 4,194,304 and net.ipv4.route.gc_elasticity is set to 8, the memory usage will be 500 MiB on average and 1 GiB max. If this is too much, you will need to lower some values.
so route cache size actually depends on available memory unless set otherwise.

I guess memory usage on 32-bit system is a bit less (but still more than half), but we're still talking about a few hundred kB on modest home router and a few MB on a small-business router (and much more on ISP router which likely runs out of memory sooner rather than later making route cache less efficient).
 
tangent
Forum Guru
Forum Guru
Posts: 1329
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 7:34 pm

So ~2000 routes with 0.5 MB of RAM. That’s usable for home scenarios. The proper argument therefore is security in a hostile environment rather than ineffectiveness.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 8:00 pm

I guess route caching can be (relatively) inedffective in both extreme cases: in end-host case where anything but hosts from own subnet is behind single gateway ... and in core routing business with large number of gateways where number of route cache entries easily rises beyond 2G.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 8:27 pm

Wait a moment, people! The "route cache" and its size has nothing to do with the maximum route table size. And the effect has nothing to do with the number of routes.
The "route cache" cache does not cache routes, rather it caches route lookup results.
When the router has to send a packet to 1.2.3.4 it looks in the route table and finds "you need to send that to gateway 5.6.7.8 on interface ether1".
When it has to send a packet to 192.168.88.10 it looks and finds "you need to send that to bridge1".
That is the kind of things that route cache stored. The result of lookup actions. So when the next packet goes to 1.2.3.4 it does not have to look in the route table again.
(which in terms of CPU activity unfortunately is more complicated than you may think, because "more specific routes have more priority than less specific routes", so you need to check many things before you can assume the default route is the correct one)

Of course this gets more effective when you have a more complex route table, but also it gets more effective when you have only a small number of addresses involved in traffic at a given time. The route cache can store only a couple of entries, or else the action "see if we have this address in our cache" will take similar time as "lookup in the route table". So maybe it caches 5-10 entries.
When you are doing a speedtest, the router only has to route 2 addresses and all lookups are cache hits.
But when you are visiting a modern website or when multiple users are making multiple connections (e.g. your television, computer, mobile phone etc are all having a connection open), there will be more cache misses than hits, and the extra time spent to check if the address is in the cache is just wasted.

So in a test scenario it showed good results, but in practice it did not work. That is why it was removed, and why it won't return.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 8:47 pm

So in a test scenario it showed good results, but in practice it did not work. That is why it was removed, and why it won't return.
Hence my use of the term 'fake results'
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3279
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 9:08 pm

ppp,error,critical: 217.67.*.*: Encryption got out of sync - disabling
At what severity level is this message?
Error or Critical

From Syslog Severity level
https://en.wikipedia.org/wiki/Syslog
0	Emergency
1	Alert
2	Critical
3	Error
4	Warning
5	Notice
6	Informational
7	Debug
Please Mikrotik fix the mess of information tagging.

viewtopic.php?t=124291
I made this post 2017 and sent support information about this and was told that they will look at it, but nothing has changed.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 10:54 pm

I made this post 2017 and sent support information about this and was told that they will look at it, but nothing has changed.
Likely the problem is that a complete overhaul of the logging system would make some people (who have invested time in handling the mess as it is) angry...
As I also wrote in the other thread it should be changed in such a way that you can filter individual messages in the logging topic filtering, both internal to the router and in external handler programs.
But that means existing matching is going to break.
 
User avatar
Paternot
Forum Veteran
Forum Veteran
Posts: 953
Joined: Thu Jun 02, 2016 4:01 am
Location: Niterói / Brazil

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 11:31 pm


Of course this gets more effective when you have a more complex route table, but also it gets more effective when you have only a small number of addresses involved in traffic at a given time. The route cache can store only a couple of entries, or else the action "see if we have this address in our cache" will take similar time as "lookup in the route table". So maybe it caches 5-10 entries.
When you are doing a speedtest, the router only has to route 2 addresses and all lookups are cache hits.
But when you are visiting a modern website or when multiple users are making multiple connections (e.g. your television, computer, mobile phone etc are all having a connection open), there will be more cache misses than hits, and the extra time spent to check if the address is in the cache is just wasted.

So in a test scenario it showed good results, but in practice it did not work. That is why it was removed, and why it won't return.
It worked with far more than a few cached routes. Take a look at this link:
https://access.redhat.com/solutions/71333

He is complaining of a little more than 5% cache miss - out from a table with 7 million entries.

Yes, probably a small router wouldn't have enough CPU (let alone memory) to do this - but it only need to cache about 10k hashes in order to make a huge difference in a SoHo environment.
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3279
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 11:33 pm

Likely the problem is that a complete overhaul of the logging system would make some people (who have invested time in handling the mess as it is) angry...
One of them is me, since I have to rewrite the Splunk Mikrotik logging.
But its worth it.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu May 26, 2022 11:57 pm

Yes, probably a small router wouldn't have enough CPU (let alone memory) to do this - but it only need to cache about 10k hashes in order to make a huge difference in a SoHo environment.
Remember it was not MikroTik or me who deemed the cache ineffective and removed it. It happened in the Linux kernel development team, and MikroTik has
to live with its removal.
There can be other optimizations. E.g. in a SoHo environment probably half of the traffic is routed using the default route, a route that is most expensive of all to lookup.
But it would be possible to have a "bitmap" that has 1 bit corresponding to every possible IPv4 address in 2 megabytes of RAM, with the bits in that bitmap indicating "is this address to be routed using the default route yes/no". Most of the current routers can easily spare 2 megabytes RAM, and a costly lookup for half of the packet routings would be replaced by a single index and bit test.
When the router is the really basic home setup with only TWO routes in the table (one to the local bridge and the other being the default route to internet), the bit test could even decide between those two cases and replace all routing table lookup.

But apparently it is not worth it.
 
User avatar
Paternot
Forum Veteran
Forum Veteran
Posts: 953
Joined: Thu Jun 02, 2016 4:01 am
Location: Niterói / Brazil

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 27, 2022 3:36 am

Remember it was not MikroTik or me who deemed the cache ineffective and removed it. It happened in the Linux kernel development team, and MikroTik has
to live with its removal.
I'm not advocating to get it back - it had serious problems. I'm just pointing out that the results of its use weren't fake - they were just faster for some use cases and slower for others.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 27, 2022 8:27 am

But it would be possible to have a "bitmap" that has 1 bit corresponding to every possible IPv4 address in 2 megabytes of RAM

One bit per address means 2³² bits which equals 2²⁴ bytes which is 16MB actually. Which is a very considerable portion of RAM installed in Mikrotik's low-end devices. And searching through that amount of RAM using slow CPU is probably way slower than lookup in route table, SOHO devices will have only a few routes there. Route cache searches were done using hash value for a reason.

And we haven't started with IPv6 yet, performance of it is slowly becoming mainstream news lately.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 27, 2022 11:21 am

Ok now we both made a calculation mistake... it actually would require 512MB or a 448MB when only considering the routable portion of the address space.
So less feasible than I thought. When it would be a bit per /24 subnet it would be the 2MB that I calculated.
However, the advantage of the method is that it does not require "searching". It only requires indexing and bit testing. That is why it is fast.

For others: the issue with route table lookup is that your route table may contain can contain different routes like this:
0.0.0.0/0 (the default route)
192.168.88.0/24 (the local network route when using MikroTik default config)
192.168.100.0/28 (maybe you have a small space for VPN connections)
etc

To lookup an address in this table you cannot consider the table as one big array where you are looking for a number. You will effectively have to do up to 33 lookups.
First check if a /32 route exists that matches. If not, check if there is a /31 route. If not, check if there is a /30 route.
Etc etc. until you either find a matching route or you end at "check if there is a /0 route" which always matches.

Now of course the data structure for storing the routing table is optimized for fast lookup by dividing it in 33 different structures that each have some form of hashing.
So you walk along those 33 different structures (from a head pointer) and often most of them will be empty (e.g. there is no route with /1 or /2 in your table), so they can be quickly skipped without running expensive hash and compare operations.
But when there are several routes with different subnet sizes, it can still be an "expensive" operation. In my home router there are 272 active routes of many different subnet sizes (32,29,28,27,24,22,16,10,9,8 and 0). But that is not the typical home user situation of course. However, in an internet router there are many many more of them.

The principle of the route cache was that a separate routing table was created with only /32 routes. Every time a lookup in the normal table succeeds, an entry in the cache table was created with the /32 address that was actually looked up, and containing the information from the /nn entry in the normal table where it was found. And some expiry timer.
Now for further routing always this table was searched first. But because it only has /32 routes it does not require the 33 iterations and the lookup will be faster.
Within a single subnet size the route table data structure uses a form of hashing to quickly find a matching entry so it does not have to do a linear search that becomes slower proportionally to the number of items in the cache. My estimation of 5-10 entries was far too low and based on another system that had a small cache that was linearly searched, indeed now I remember that in Linux it was much larger.
Apparently there still were problems with it. Also, I remember that it wasn't automatically flushed when the routing table was changed, so when you e.g. manually added routes you needed to do a "ip route flush table cache" command or else the cache would return invalid results until its entries timed out by themselves. Probably not convenient when running an automatic routing protocol.

Finally, sometimes in Linux features are changed or dropped because the maintainer or a small committee does not see the value of it. Often they do not consider broader use cases than they have in their own world. This is clearly visible in the optimization of several core parts of the system (e.g. systemd, network manager) towards the use-case of a laptop that has to boot quickly, roam along different fixed and wireless networks that have DHCP, and has only a single active network connection.
Personally I do not care at all how fast the system boots, and I have more use for systems with several network connections, services running only on a part of them, and with a predictable startup order and -synchronization. But I have to live with the constant demolishing of the working solutions for that and replacement with facilities that work in the world of the writer but are inconvenient for me.
The route cache is only a minor example of such changes.
 
User avatar
Larsa
Forum Guru
Forum Guru
Posts: 1025
Joined: Sat Aug 29, 2015 7:40 pm
Location: The North Pole, Santa's Workshop

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri May 27, 2022 12:48 pm

Cisco and many other network tech companies (besides MT) have contributed a significant amount of work to Linux development especially to the network components mainly because they depend on certain features to work properly in their own solutions. Thus I'm pretty sure they had plenty of different use cases in mind when developing and testing the new routing components.

I think the risk is very small that just a single individual may influence which parts are to be kept or not especially regarding a key component as routing and Linus' (& co.) exceptional need for control of the kernel in mind
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sat May 28, 2022 11:52 am

You are in trouble. Installing separate packages instead of the full package causes this problem and we are still waiting for MikroTik to fix this.
Reports are that it works when you remove the wireless package first, then reboot, and do the upgrade.
You need to make a backup and restore that after the upgrade.
But of course you cannot do that when these LHG are "remote" and you access them via the wireless link.
 
fragtion
Member Candidate
Member Candidate
Posts: 257
Joined: Fri Nov 13, 2009 10:08 pm
Location: Johannesburg, South Africa

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sat May 28, 2022 12:02 pm

Maybe the fix_space.npk can help ? Or it could brick a v7 install. I don't know xD - viewtopic.php?t=133420&start=100#p671674
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sat May 28, 2022 12:10 pm

Maybe the fix_space.npk can help ? Or it could brick a v7 install. I don't know xD - viewtopic.php?t=133420&start=100#p671674
NO! Don't use that. it was for a completely different problem. The problem of upgrading installations with separate packages on 16MB flash devices is already wellknown and is not fixed by that.
 
helipos
Member Candidate
Member Candidate
Posts: 132
Joined: Sat Jun 25, 2016 11:32 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sun May 29, 2022 4:23 am

Is anyone else seeing their OSPF interface templates setting the interface to "unknown" when the router is rebooted?

The bottom screenshot is before and top is after a reboot.
Untitled.png
If I export the config it's got some real funky interface names in there.
/routing ospf interface-template
add area=backbone-v2 disabled=no interfaces=bridge1 networks=192.168.1.0/24 priority=1
add area=backbone-v2 cost=10 disabled=no interfaces=*F0000A networks=172.16.1.16/30 type=ptp
add area=backbone-v2 cost=10 disabled=no interfaces=*F00012 networks=172.16.1.0/30 type=ptp
add area=backbone-v2 cost=10 disabled=no interfaces=*F0000B networks=172.16.1.8/30 type=ptp
add area=backbone-v2 cost=10 disabled=no interfaces=*F00010 networks=172.16.1.24/30 type=ptp
add area=backbone-v2 cost=10 disabled=no interfaces=l2tp-Roaming_Box networks=172.16.1.20/30 type=ptp
add area=backbone-v2 cost=10 disabled=no interfaces=<l2tp-Jasper_Downs_Shearing_Shed> networks=172.16.1.12/30 type=ptp
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sun May 29, 2022 11:56 am

That probably happens for any "dynamic interface". These are interfaces that are created when someone calls in with L2TP and deleted when they disconnect.
So after a reboot they certainly are gone. You should not refer to them in static configuration.
I am not familiar with OSPF configuration but maybe you can do something with an "interface list". You can configure the L2TP server to make dynamic interfaces member of an interface list when they are created.
 
helipos
Member Candidate
Member Candidate
Posts: 132
Joined: Sat Jun 25, 2016 11:32 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 30, 2022 7:09 am

I just tried the list as suggested and it does work.
So thanks for that. I suppose its another "feature" to watch out for in ROS7
 
User avatar
SiB
Forum Guru
Forum Guru
Posts: 1888
Joined: Sun Jan 06, 2013 11:19 pm
Location: Poland

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 30, 2022 10:06 am

This not should be thread about L2TP but in Interface > Add > L2TP Binding *enter username from sicret tab".
Even l2tp link is down then that L2TP Binding exist. This is not perfect when you use from remote Radius/LDAP.

btw. very often OSPF can be not use if you have 2 main DC, branches not must see themself. Just add static route to remote range of branches by opposite DC with metric >=2 . Each branch have own ppp>secrets with a route field who will do route to it with metric1 directly to that DC. Branch must have two routes via two tunels and one EMCP and this is all. Simple and very often this is safer then use OSPF, special with ros7.
Last edited by SiB on Mon May 30, 2022 10:11 am, edited 1 time in total.
 
oleg1345140
just joined
Posts: 2
Joined: Sun Feb 27, 2022 12:54 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Mon May 30, 2022 10:09 am

Good day. After the update, I lost records from the black list and the log was reset. Whitelist entries remain. How normal is this and how can you avoid it?
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11381
Joined: Thu Mar 03, 2016 10:23 pm

Re: v7.2.2 [stable] is released!

Tue May 31, 2022 8:33 pm

The device's CPU frequency has not been manually set, nor changed from the defaults.

No, but default changed meanwhile to "auto" and software upgrade doesn't change running values (and that's for good reasons).
 
User avatar
thuety
just joined
Posts: 16
Joined: Fri Jul 09, 2021 7:03 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Wed Jun 01, 2022 3:41 pm

I think the 7.2 branch should be renamed from "stable" to "vista" ;)
 
bruins0437
newbie
Posts: 33
Joined: Thu Jul 13, 2017 4:30 am
Location: New Hampshire

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu Jun 02, 2022 2:20 am

I think the 7.2 branch should be renamed from "stable" to "vista" ;)
Eeek!
 
moiskey
just joined
Posts: 9
Joined: Mon May 31, 2010 9:34 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu Jun 02, 2022 3:08 am

please add support for quad ethernet cards. version 6.x works without problems. version 7 does not change its status to running (x86)

Image
 
Kraken2k
Frequent Visitor
Frequent Visitor
Posts: 72
Joined: Wed Oct 01, 2014 1:50 pm
Location: Prague

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu Jun 02, 2022 5:58 pm

Since upgrading from RoS v6.48.1 to v7 I have trouble with both IP-IP and EoIP tunnels (until then, they were working with the same configuration without any issue). Now I'm getting "eoip-tunnel-1 transmit loop detected, downing interface for 60 seconds" error all the time.

On both sides, tunnels are added to bridges to provide L2 connectivity between devices (separate vlans) and the tunnel usually fails after sending some amount of data through, so I assume this is not connected with any regular mechanism that actually checks for loops.

I tried to disable all loop detection mechanisms on both sides (on the tunnel interfaces and on the bridges) but the message keeps coming and the interface is being disabled. Makes me wonder, which RoS mechanism actually does this.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Thu Jun 02, 2022 6:35 pm

You have both IPIP and EoIP tunnels?
Then it will be very important to fully understand the matter and to configure things really carefully.
 
Kraken2k
Frequent Visitor
Frequent Visitor
Posts: 72
Joined: Wed Oct 01, 2014 1:50 pm
Location: Prague

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri Jun 03, 2022 11:36 am

You have both IPIP and EoIP tunnels?
Then it will be very important to fully understand the matter and to configure things really carefully.
no, I have just EoIP now, but I tried both protocols (separately) and both failed with the same error.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri Jun 03, 2022 12:42 pm

You have both IPIP and EoIP tunnels?
Then it will be very important to fully understand the matter and to configure things really carefully.
no, I have just EoIP now, but I tried both protocols (separately) and both failed with the same error.
That points in the direction "not fully understanding the matter"...
 
iT0mT0m
just joined
Posts: 2
Joined: Tue Aug 18, 2015 2:01 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri Jun 03, 2022 7:16 pm

I have Mikrotik CHR version. In all latest stable version I have 50% usage CPU. Profiler tool show "management process" is uses 50% CPU. When I use only testing version this problem does not occur. I use CHR in home with VLAN, EoIP and OVPN TCP for remote access. Why is this problem only on the stable version?
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Fri Jun 03, 2022 8:44 pm

The testing version is supposed to contain fixes for bugs that have not yet been fixed in the stable version.
So when you observe that, it is good. It would be bad when it was the other way around (testing version using CPU and stable version not).
 
dusan2819
just joined
Posts: 3
Joined: Tue Jun 11, 2019 8:42 pm

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sun Jun 05, 2022 5:07 am

hi
look true whole post and not seen 1 note how to upgrade my classic wAP 60G AP to 7.2.3 from 6.49.6 factory at 6.41.2
so can somebody that knows the secret let me or as that invested (have 5 old classic wAP 60G AP units)
in development of this wAP 60G AP product line know or what to do next

i have rev3 wAP 60G AP at fac os 6.44.6 that upgrade to 7.2.3 fine no memory size error

thank you

d
 
Rox169
Member
Member
Posts: 432
Joined: Sat Sep 04, 2021 1:47 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Sun Jun 05, 2022 10:42 pm

hi
look true whole post and not seen 1 note how to upgrade my classic wAP 60G AP to 7.2.3 from 6.49.6 factory at 6.41.2
so can somebody that knows the secret let me or as that invested (have 5 old classic wAP 60G AP units)
in development of this wAP 60G AP product line know or what to do next

i have rev3 wAP 60G AP at fac os 6.44.6 that upgrade to 7.2.3 fine no memory size error

thank you

d
upgrade to latest version of ROS 6 - 6.49.6 in winbox you should seen the option of channel upgrade... upgrade to version 7,
 
sirca
just joined
Posts: 11
Joined: Sun Sep 29, 2019 4:11 am

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Tue Jun 07, 2022 4:17 am

Updated from 6.49.5 to 6.49.6 to 7.2.3
crs305-1g-4s+ OK
crs326-24g-2s+ OK
crs317-1g-16s+ OK
chr (esxi) panic kernel with boot loop (No system package found - ACPI MEMORY OR I/O RESET_REG)
Best Regards from Rome
 
User avatar
strods
MikroTik Support
MikroTik Support
Posts: 1616
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: v7.2.2 [stable] and v7.2.3 [stable] are released!

Tue Jun 07, 2022 11:27 am

New version v7.3 has been released!

viewtopic.php?t=186567

Who is online

Users browsing this forum: No registered users and 9 guests