Mikrotik RouterOS v7 beta

[Nikiforos]

Ευχαριστώ και τους δύο.
Επειδή αρκετές εντολές έχουν αλλάξει από την 6 στην 7, και επειδή στην συγκεκριμένη περίπτωση δεν έχω την πολυτέλεια να στήνω από την αρχή, ήθελα να αντλήσω από τις εμπειρίες σας, σε περίπτωση που κάτι "σπάει".
Μετακομίζω στο "βασικό" θέμα, καθότι stable .

οχι στο βασικο για την ROS στο αλλο με την 7.1 εδω https://www.adslgr.com/forum/threads...E%B7-7-1/page3, γιατι θα τα κανουμε αρκταμα τα θεματα! Σου απανταω εκει.
εδω να λεμε για την RC (Development).

[johnblue]

Νικηφόρε εχω το ιδιο προβλημα, στο παρελθον νόμισα οτι το ειχα λύσει αλλά yok.
(MT ccr2004 me ros 7.1) , στο τηλ. voip (σταθερο σε σταθερό οταν εγω πέρνω δεν ακούω ενω με ακούν !)
(ενω οταν με πέρνουν ειναι οκ) Σε όλες τις άλλες περιπτώσεις ολα είνα οκ , μπερδεμένη κατασταση

[Nikiforos]

Νικηφόρε εχω το ιδιο προβλημα, στο παρελθον νόμισα οτι το ειχα λύσει αλλά yok.
(MT ccr2004 me ros 7.1) , στο τηλ. voip (σταθερο σε σταθερό οταν εγω πέρνω δεν ακούω ενω με ακούν !)
(ενω οταν με πέρνουν ειναι οκ) Σε όλες τις άλλες περιπτώσεις ολα είνα οκ , μπερδεμένη κατασταση

καλησπερα, αυτο με το wireguard με το voip το ειχα με του raspberry (pivpn) το εσβησα και το ξαναπερασα απο την αρχη και εκει και στο κινητο το client και εφτιαξε!
Να τα λεμε ομως στο αλλο θεμα https://www.adslgr.com/forum/threads...E%B7-7-1/page7 της 7.1 εδω λεμε για τις beta.

[johnblue]

ok thanks

[deniSun]

Νικηφόρε εχω το ιδιο προβλημα, στο παρελθον νόμισα οτι το ειχα λύσει αλλά yok.

Σου είχαμε πει όμως ότι οι εντολές που έδινες στο qos δεν είχαν καμία σχέση με την λειτουργία voip.
Εγώ με cosmote voip και sip/alg ενεργοποιημένο δεν έχω θέμα στην 7 όπως και στην 6.

[johnblue]

Όταν έπερνα εγω δεν ειχα και δεν εχω πρόβλημα,οπότε θεώρησα οτι ήταν οκ ,
αλλά όταν με έπερναν δεν με άκουγαν

[deniSun]

7.2rc1 changelog:

Spoiler:

*) arm64 - improved low disk space handling condition on upgrade;
*) backup - added "force-v6-to-v7-configuration-upgrade" option on backup load to clear RouterOS v7 configuration and trigger reimport of RouterOS v6 route configuration (CLI only);
*) backup - fixed automatic backup generation when resetting configuration;
*) bgp - do not export default BGP values;
*) bgp - improvements on detecting peers local address when IPv6 link-local addresses are used;
*) bluetooth - allow to export device, advertiser and scanner configuration;
*) capsman - improved system stability when processing CAP packet by Mangle;
*) certificate - allow to choose digest algorithm for CSR signing;
*) certificate - made "fingerprint" parameter read-only;
*) chr - improved system stability when writing into memory;
*) chr - temporarily suspended downgrade to RouterOS v6;
*) console - fixed "print" command with additional "where" condition;
*) console - made "password" parameter mandatory when creating a new user;
*) console - properly erase CLI history after configuration reset;
*) crs3xx - fixed CPU load balancing for ARM dual core devices;
*) dhcp-server - fixed DHCP Option decimal value parsing;
*) dhcp-server - fixed statistics sending in "Accounting Stop" packets;
*) dhcp-server - send "Class" attribute in "Accounting Request" when provided by RADIUS;
*) dhcpv4-server - allow adding comments;
*) dhcpv4-server - reset dynamic "bcast" flag when receiving offer from DHCP relay;
*) dhcpv4-server - reset offer counter when receiving offer from DHCP relay;
*) ethernet - improved system stability when receiving large packets on devices with 88F3720 CPU (nRAY, LHGG);
*) graphing - properly generate interface graph for traffic higher than 2.1Gbps;
*) hotspot - fixed login page over HTTPS;
*) ipsec - added hardware acceleration support for CCR2116;
*) l3hw - fixed HW offloaded routing when using 7 or more VLAN interfaces;
*) l3hw - fixed ICMP message when routed packet exceeds MTU and DF flag is set;
*) l3hw - fixed bonding source MAC address;
*) l3hw - improved system stability when using 7 or more VLAN interfaces;
*) lora - fixed "antenna-gain" parameter unit;
*) lte - added basic information support for Telit LM960 and LM940 in MBIM mode;
*) lte - expose diagnostics channel for all modems;
*) lte - fixed "monitor" command to not report old info;
*) lte - fixed packet forwarding on R11e-4G and R11e-LTE-US;
*) ntp - print log change time with time-zone applied;
*) ospf - fixed distance if "originate-default" is set to "always";
*) ospf - fixed neighbor stuck in ExStart;
*) ospf - fixed simple authentication;
*) ospf - improved logging;
*) ospf - improved overall stability;
*) ospf - improved stability for very large LSDB;
*) ospf - improved stability when DR goes down;
*) ospf - improves stability when handling looped back OSPF packets;
*) ovpn - added SHA2 authentication algorithm support;
*) ovpn - added hardware acceleration support for IPQ4018/IPQ4019 and AL* series chipsets;
*) ovpn - added option to send disconnect message in UDP mode;
*) ovpn - fixed large option message parsing;
*) poe - update PoE firmware only on devices that support it;
*) ppp - show local and remote IPv6 addresses (CLI only);
*) pppoe - added option to configure "host-uniq" parameter;
*) pppoe - added option to ignore PADI messages with empty service name;
*) pppoe - use default MTU of 1492;
*) pptp - added insecure connection warning;
*) queue - improved system stability when processing traffic;
*) route - fixed "min-prefix" configuration when set to 0;
*) route-filters - allow to filter and modify default route if "originate-default" is set to "always";
*) route-filters - fixed possible address list race condition and memory leak;
*) socks - fixed SOCKS5 support;
*) ssh - fixed forwarding with IPv6 link-local addresses;
*) ssl - fixed CA certificate processing when "subjAltName" is marked as critical;
*) supout - added "port-controller" bridge section;
*) tr069-client - accept 200-299 codes for HTTP diagnostics;
*) tr069-client - added support for wireless client uptime reporting;
*) upgrade - improved 404 error handling when checking for new versions;
*) upgrade - improved downgrade prompt message;
*) user - removed obsolete "tikapp" policy;
*) user - send "Class" attribute in "Accounting Request" when provided by RADIUS;
*) webfig - fixed default configuration popup presence;
*) webfig - fixed user policy lookup for skin designer;
*) wifiwave2 - added support for handling disconnect request messages from RADIUS servers;
*) wifiwave2 - fixed calling "scan" and "frequency-scan" commands through the API;
*) winbox - added "Mode" parameter under "Wireless" menu with WifiWave2 package;
*) winbox - added "TLS Version" parameter for "Interface/OVPN";
*) winbox - added "VRF" parameter for "SSH" and "Telnet" menus;
*) winbox - added interface list support for "IP/Traffic Flow" menu;
*) winbox - added local/remote CPU load parameters for "Bandwidth Test";
*) winbox - added support for "Tool/Speedtest" menu;
*) winbox - added support for W60G align tool;
*) winbox - changed "Accept Redirects" parameter type under "IPv6/Settings" menu;
*) winbox - do not require "name" and "file name" parameters for certificate import/export;
*) winbox - do not show connection tracking table if it has more than 10000 entries;
*) winbox - fixed "Switch" menu on Chateau devices;
*) winbox - fixed "expires-after" certificate parameter value;
*) winbox - fixed address list type parameters in "Routing" menu;
*) winbox - fixed error message when adding NTH rule with "0" value;
*) winbox - fixed minor typo under "LTE" interface menu;
*) winbox - made "9" the default value for "Target" parameter under "IP/Traffic Flow" menu;
*) winbox - made "Routing Filters/Rules" table sortable;
*) winbox - moved "IP/Route/Nexthops" and "IPv6/Route/Nexthops" menus to "Routing/Nexthops";
*) winbox - properly limit "Disconnect Timeout" value under "CAPsMAN/Configuration" menu;
*) winbox - properly update ethernet auto negotiation status on CHR;
*) winbox - renamed "Keep user configuration" to "Keep users" under "System/Reset Configuration" menu;
*) winbox - renamed "Revoked" parameter to "Revoked Time" under "System/Certificates" menu;
*) winbox - report local terminal session as "local" instead of "telnet";
*) winbox - require existing pool for "Address Pool" parameter under "IPv6/DHCP Server" menu;
*) winbox - require non empty "Packet Mark" value under "Queues" menu;
*) winbox - show "Lost Ratio" column by default under "Tools/Traffic Generator" menu;
*) winbox - show "Routes" column by default under "PPP/Secrets" menu;
*) winbox - show additional columns by default for "Wireless" menu with WifiWave2 package;
*) winbox - updated default "Routing/BGP/Peer Cache" table appearance;
*) winbox - use "total" as default value for "Tools/Profile";
*) wireguard - fixed IPv6 LL address generation;
*) wireguard - made "preshared-key" and "private-key" values sensitive;
*) wireless - added information about client signal strength to log messages about disconnections;
*) wireless - fixed frequency range information for IPQ4019 interfaces;
*) zerotier - properly handle IP address change;

[Nikiforos]

καλησπερα, οπως ειπα στο θεμα του express vpn θελει εκτος το TLS, και το AUTH σε SHA256 ενω εχει στο OVPN SHA1.
Στο τελευταιο changelog λεει αναμεσα στα αλλα αυτο :

*) ovpn - added SHA2 authentication algorithm support;

Ξερει κανεις αν αυτο ειναι το SHA256 ?

- - - Updated - - -

αντε περιμενω πως και πως να δω σε κανα changelog της RC και το TLS....
εχει και αυτα για το OVPN αλλα TLS δεν....
*) ovpn - added hardware acceleration support for IPQ4018/IPQ4019 and AL* series chipsets;
*) ovpn - added option to send disconnect message in UDP mode;
*) ovpn - fixed large option message parsing;

[deniSun]

What's new in 7.2rc2 (2022-Jan-28 11:00):

Spoiler:

*) arm - fixed "shutdown" command on hAP ac^2;
*) bgp - fixed routing table and BGP configuration order in export;
*) bluetooth - disable scanning by default;
*) bridge - added fast-path and inter-VLAN routing FastTrack support when vlan-filtering is enabled;
*) bridge - fixed bridge filter and NAT rules on ARM64 and TILE devices;
*) capsman - improved stability when running background scan on CAP;
*) clock - properly notify all instances about time changes;
*) conntrack - properly detect helper status;
*) console - improved console responsiveness when processing received characters;
*) console - updated copyright notice;
*) crs3xx - fixed QSFP+ interface LEDs;
*) crs3xx - fixed optical SFP+ linking (introduced in v7.2rc1);
*) crs3xx - improved SFP+ interface linking after reboot for CRS312 device;
*) crs3xx - improved SFP+/QSFP+ link stability for CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v7.2rc1);
*) defconf - made "192.168.188.1/24" the default LAN IP address for LTE CPE devices;
*) dhcpv4-server - remove dynamic leases when server configuration is removed;
*) dot1x - added "server-fail-vlan-id", "guest-vlan-id" and "reauth-timeout" settings for dot1x server;
*) dot1x - added "src-address", "src-mac-address" and "src-port" settings for dynamic switch rules;
*) dot1x - added NAS-Port-ID attribute for RADIUS Access-Request;
*) firewall - improved system stability when using address lists (introduced in v7.2rc1);
*) hotspot - fixed memory leak on every web page loading;
*) hotspot - fixed web page loading using HTTPS;
*) ike2 - ignore "INITIAL-CONTACT" payload on responder when "send-initial-contact" is disabled;
*) interface - fixed minor memory leak when interface or connected route is changed;
*) l3hw - added HW offloaded FastTrack support for inter-VLAN routing;
*) l3hw - fixed HW offloaded NAT;
*) leds - fixed user LED on RB750Gr3;
*) log - include message also in e-mail body;
*) lora - fixed "antenna-gain" parameter unit;
*) lte - added 3 APN profile support and APN name re-using on R11e-LTE6;
*) lte - added MAC address and IPv6 LL address persistence after reboot on EG12 and EG18 modems;
*) lte - added class based support for configless RNDIS LTE modems;
*) lte - do not show external antenna selector on devices that does not support it;
*) lte - fixed IPv6 address addition after startup on R11e-LTE6;
*) lte - fixed possible timeouts when sending SMS in LTE only mode on R11e-LTE;
*) lte - fixed support for Sierra MC7710;
*) lte - fixed support for Telit 960;
*) lte - improved stability on "+EGMR" response in MBIM mode;
*) lte - improved support for sending/receiving SMS in LTE only mode on R11e-LTE6;
*) lte - properly recognize MBIM modem in USB port as LTE on Chateau 5G;
*) ospf - added "ptmp-broadcast" interface type (compatible with RouterOSv6 PTMP type);
*) ospf - convert ospf "static" redistribute to "static,dhcp,modem,vpn" after update from RouterOS v6;
*) ospf - fixed MD5 authentication;
*) ospf - fixed NBMA hello's not being sent if priority is set to 0;
*) ospf - fixed default type-3 LSA's not being injected to stub area;
*) ospf - fixed incorrect LSA types when changing area types;
*) ospf - fixed neighbor election failure;
*) ospf - improved logging;
*) ospf - improved stability on OSPFv3 instance disabling;
*) ovpn - improved UDP session handling;
*) ppp - fixed AT+CPIN chat when SIM PIN is specified;
*) pptp - show insecure connection warning on dynamic interfaces;
*) qsfp - correctly display auto-negotiation status;
*) queue - improved system stability when processing traffic;
*) route - fixed "suppress-hw-offload" update;
*) route - fixed router's LSA for PTP networks;
*) route - fixed routing configuration export on SMIPS devices;
*) route - improved routing table print speed;
*) route - show OSPF and RIP specific attributes in "/routing route" table;
*) route-filter - fixed "return" action;
*) route-filter - fixed complex matchers with "|| or and &&";
*) route-filter - fixed incorrect invert-match configuration upgrade from RouterOS v6;
*) route-filter - fixed range conversion after update from RouterOS v6;
*) rpki - made RPKI verify non-strict, introduces new state "unverified";
*) rpki - show expire timer;
*) smb - fixed SMB2.0 disk size reporting;
*) snmp - added SFP vendor name to optical table;
*) snmp - added support for "ipv6AddrPrefixTable" and "ipv6RouteNumber" OID's;
*) snmp - allow two level nesting for vlan, bonding speed query;
*) system - fixed license loss on some RB1100Dx4 and RB4011 devices;
*) traffic-flow - do not handle NAT events when "nat-events" is disabled;
*) traffic-generator - fixed transmit speed for multiple asymmetric streams;
*) usb - fixed display of incorrect port count for USB serial ports;
*) vlan - fixed improper VLAN priority addition for routed packets;
*) vxlan - allow unsetting "group" and "interface" properties;
*) webfig - do not show side menu if WebFig is disabled by skin;
*) winbox - added "Disconnect Notify" checkbox to "Interface/OVPN Client" menu;
*) winbox - added "Freq. Usage" and "Scan" buttons for WifiWave2 interfaces;
*) winbox - added "Ignore Missing" selector to "System/Packages" menu;
*) winbox - added "Routing Table" parameter for IPv6 routes;
*) winbox - added "VPN" tab to "Routing/BGP" menu;
*) winbox - added "VRF" parameter to "IP/Services" menu;
*) winbox - added "comment" parameter to "User Manager/Users" menu;
*) winbox - added MLAG support;
*) winbox - added SHA256 and SHA512 "Auth" values for OVPN menu's;
*) winbox - added ZeroTier support;
*) winbox - added explicit "Upload" and "Download" names for "Bucket Size" parameters under "Queues" menu;
*) winbox - allow setting "Interface" parameter for 100G LED types;
*) winbox - do not show "Antenna Scan" button on devices that do not support it;
*) winbox - fixed "action" field in "IP/Web Proxy/Access" menu;
*) winbox - fixed CHR License renewing process;
*) winbox - fixed content filtering in "Tools/Packet Sniffer/Packets" menu;
*) winbox - fixed entry order in "Tools/Packet Sniffer/Packets" menu;
*) winbox - made OSPF interface type names consistent between CLI and GUI;
*) winbox - properly save "IPv6/Settings" menu in session file;
*) winbox - renamed "MBPS" to "Mbps" value unit name in "Tools/Traffic Generator" menu;
*) winbox - show "H" flag for offloaded connections in "IP/Firewall/Connections" menu;
*) winbox - show "System/SwOS" menu only on boards that have dual boot;
*) winbox - sort "Address List" parameter values alphabetically in "IP/DHCP Server/Leases" menu;
*) wireless - improved wireless connection stability during background scans;
*) wireless - fixed interface initialization on Metal 2SHPn;
*) x86 - added support for Intel E810 NIC;
*) x86 - made "no" the default value for "disable-running-check" ethernet parameter;
*) x86 - properly distinguish multiple NICs that share the same PCI bus number;
*) zerotier - made MAC and MTU values read-only;

[billy]

Τι στο καλό το πρωί τσέκαρα.. Thanks μπας και διορθωθει το 5 GHz

[Nikiforos]

εγω μπας και δω στο OVPN υποστηριξη TLS αλλα μονο αυτο : *) ovpn - improved UDP session handling;

[johnblue]

7.2rc3

[deniSun]

7.2rc3 changelog:

*) bridge - fixed filter and NAT "set-priority" action;
*) queue - fixed traffic processing (introduced in v7.2rc2);

[Nikiforos]

Οταν δω παντως να εχει για το OVPN ΤLS support γυρναω τα 2 μηχανηματα μου με την 7 σε RC χωρις δευτερη σκεψη...
θελω να ξηλωσω το l2tp+ipsec για το express vpn να το γυρισω σε OVPN αφου δεν υποστηριζει wireguard.

[johnblue]

in Ros 7.2rc3
/ip/firewall/service ports are all ok