MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| app | fixed birdnet-go, cryptpad, lorawan-stack, mikrodash (introduced in v7.23beta5); |
| ethernet | fixed false excessive broadcast warning (introduced in v7.20); |
| general | ipsec – fixed expired SA handling to prevent “no such item” errors during listing; |
| lte | fixed AT modem dialer command timeout (introduced in v7.23beta5); |
| lte | fixed operator setting for QMI modems; |
| poe-out | firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed occasional detection issue when using auto-on mode; |
| route | revert to old routing rule priorities for containers (introduced in v7.22); |
| sniffer | fixed missing VLAN tag in the TZSP packets (additional fixes); |
| system | improved system stability; |
| wifi-mediatek | fixed stability issue getting regulatory information and during initialization; |
| wifi-qcom-be | fixed stability issue during initialization; |
| www | improved service stability when cancelling REST API sessions; |
| Component | Change |
|---|---|
| app | check if certificate already exists before creating a new one; |
| app | fixed some apps not containing the full repository URL; |
| app | fixed store issue when adding a custom app; |
| bridge | synchronize only local bridge MAC addresses for MLAG (introduced in v7.22); |
| certificate | added option to configure built-in trust store for all services (additional fixes); |
| certificate | allow deleting ACME certificate that failed to generate; |
| certificate | improved ACME logging; |
| certificate | improved ACME status reporting; |
| certificate | set Let's Encrypt as default ACME directory; |
| container | check if root-dir is not used before adding a container; |
| container | check if root-dir does not exist before adding a container; |
| discovery | added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entries (additional fixes); |
| discovery | added option to disable/enable LLDP MED (additional fixes); |
| firewall | improved system stability (additional fixes); |
| interface | show warning when same MAC address is used on more than one virtual interface (additional fixes); |
| ipsec | improved NAT encapsulation parameter forwarding; |
| isis | improved stability with fragmented CSNP; |
| leds | fixed default LED configuration for CCR2004-1G-12S+2XS; |
| leds | fixed LED dark mode for RB5009; |
| log | added "discover" topic and log events for discovered local DNS entries; |
| lte | delete CID profiles one by one instead of "delete all" for QMI modems, as command does not work for all modems; |
| ospf | allow adding interface configuration manually, bypassing interface-template (additional fixes); |
| ospf | improved stability on configuration change; |
| switch | improved FDB operations on QCA8337, Atheros8327 (additional fixes); |
| system | improved handling of HTTP/2 connection closure; |
| system | improved RouterOS package download over slow connection; |
| usb | fixed crash when using Ethernet adapter (introduced in v7.22); |
| user-manager | improved stability when removing user-profile while session updates counters; |
| vrrp | fixed packet drop in CHR (introduced in v7.22); |
| vxlan | improved system stability; |
| wifi-mediatek | fixed communication issues on 802.11ax access points with Intel clients; |
| zerotier | switch to 1.14.2 version, fixed multipath (introduced in v7.23beta2); |
| Component | Change |
|---|---|
| app | added lorawan-stack, mikrodash, trip apps; |
| app | added restart command; |
| app | updated uptime-kuma image; |
| bridge | fixed missing dynamic "switch-cpu" VLAN entry in WiFi setup; |
| certificate | added "ISRG Root X1" and "DigiCert Global Root G2" to SMIPS built-in root certificate authorities store; |
| console | added comment in "/ip/dhcp-server/option/sets" and "/ipv6/dhcp-server/option/sets" menus; |
| console | added path parameter to export; |
| console | export mentions custom defconf script presence in header (additional fixes); |
| console | fixed output when oversized completion present; |
| console | rename "cpu-used-per-cpu" to "cpe-used-per-core" in "/system/resource/monitor"; |
| console | show warning in print header when terminal is too narrow to show any columns; |
| console | treat non-existent command parameters as runtime errors; |
| container | allow setting memory-max global and per container (additional fixes); |
| dhcpv4-server | added "add-dns" and "add-dns-suffix" properties for creating local DNS entries; |
| discovery | added "add-dns-entries" and "dns-entry-suffix" properties for creating local DNS entries; |
| disk | improved device name tracking in "/system/resource/hardware" menu; |
| disk | use USB UASP interface for supported devices (additional fixes); |
| ethernet | improved system stability for RB3011, L009, NetMetal ax, hAP ax lite devices; |
| ethernet | improved system stability on devices with Alpine CPUs; |
| firewall | improved system stability; |
| health | hide health menu for RB951ui-2nD; |
| iot | improved LoRa Tx scheduling; |
| ip | fixed hanging connections for reverse-proxy; |
| ipv6,ra | improved service stability; |
| ipv6,ra | use received prefix when RA on-link flag is 0 (introduced in v7.22); |
| log | fixed crash when a rule references a non-existent action (introduced in v7.23beta2); |
| lte | improved system stability when modem configured in passthrough mode with VLANs for "Chateau 5G R16" and "Chateau 5G"; |
| lte | keep MAC persistent across reboots for QMI modems; |
| ospf | fixed missing interface-template configuration which previously was converted by upgrading from RouterOS v6 (additional fixes); |
| ovpn | fixed OVPN push routes; |
| ping | resolve domain name to IPv6 if src-address is IPv6 address; |
| port | expose RG650E-EU diagnostics channel; |
| port | remove unused serial port on RB1100AHx4; |
| ptp | allow manual domain configuration for 802.1AS profile; |
| ptp | fixed crash during initialization on some devices; |
| ptp | set DSCP (EF) for default profile when using IPv4; |
| switch | use names instead of numbers in switch menu configuration export; |
| system | improved stability for internal RouterOS service communication; |
| upgrade | added the option to configure HTTP/HTTPS modes when connecting to MikroTik upgrade servers (additional fixes); |
| webfig | added postfix byte value support (e.g. "/ip/settings/ipv4-high-fragment-thresh"); |
| wifi | improved authentication stability for WiFi 7 access points; |
| wifi-qcom-be,mediatek | correctly advertise RRM capabilities when 802.11k neighbor reports are enabled; |
| winbox | added “Remove” action under "System/Certificates/Requests" menu; |
| winbox | do not accept interface without specifying IP or MAC in "Ping To" field; |
| winbox | show "Directory URL" field for ACME certificates in Certificate view; |
| winbox | show accepted connections in tree view under "IP/Services" menu; |
| Component | Change |
|---|---|
| app | added birdnet-go, cryptpad, diagrams-net, metube, nextcloud-whiteboard, paperless-ngx, wbo, zulip apps; |
| app | allow filtering by installed apps; |
| app | allow picking app category from drop-down; |
| app | automatically restart app when required hardware device is changed; |
| app | bundled ollama with openwebui; |
| app | fixed issue where XFS disks did not appear in the app disk drop-down; |
| app | make sure all layer .tar.gz files are deleted after extraction finishes; |
| bfd | fixed source address selection for IPv6 multihop sessions; |
| bgp | fixed stability issue when nonexistent output select-chain was specified; |
| bgp-vpn | fixed non-working import filter after reboot; |
| bridge | improved MAC synchronization for MLAG (additional fixes); |
| bth | fixed WireGuard client config IP address netmask; |
| chr | improved guest tool config for arm64 CHR; |
| console | removed the "reset" command from shared settings menus (IP/IPv6/Bridge/L3HW/Neighbor-Discovery/Connection-Tracking); |
| container | added support for noexec option to mounts; |
| container | added support for USB audio devices for containers; |
| container | do not allow starting container/shell with non-existing user or group; |
| container | draw graphs in container stats; |
| container | remove container backup directory if import fails; |
| container | show container size and container data size; |
| container | show default DNS servers; |
| dhcpv4-server | changed lease agent-circuit-id and agent-remote-id format to HEX; |
| discovery | added option to disable/enable LLDP MED; |
| discovery | added separate read-only menu "/ip/neighbor/lldp" for neighbors discovered by LLDP the (CLI only); |
| discovery | dynamically update advertised "interface-name"; |
| discovery | fixed LLDP MAC/PHY TLV; |
| disk | added disk check and repair for ext4, btrfs and xfs file systems; |
| disk | use USB UASP interface for supported devices; |
| file | added copy, tail, head commands (CLI only) (additional fixes); |
| graphing | improved service stability when storing data; |
| interface | show warning when same MAC address is used on more than one virtual interface; |
| iot | improved LoRa stability; |
| ip | added SNI logging for reverse-proxy; |
| ip-settings | added ipv4-fragment-time and ipv4-high-fragment-thresh settings, use default values based on total device memory (additional fixes); |
| ippool6 | properly follow pool changes for already used prefixes; |
| log | added ssld error logging (additional fixes); |
| log | do not provide non-existent logging topics for configuration; |
| log | fixed "/system/logging/action/get" command (introduced in v7.22); |
| lte | added fast SIM switchover support using AT channel for MBIM modems without MBIM_CID_MS_UICC_RESET firmware support; |
| lte | configure IP address for AT modems even if no DNS is received from the network; |
| lte | do not reconfigure modem in passthrough mode if passthrough cannot be activated because of slave interface; |
| lte | fixed automatic modeswitch for "Chateau 5G R16" and "Chateau 5G"; |
| lte | fixed broken network scan after being interrupted by reconfiguration; |
| lte | fixed LTE modem automatic modeswitch (introduced in v7.22); |
| lte | fixed missing automatic redial when cellular connectivity is lost for R11e-LTE; |
| lte | improved system stability; |
| lte | stop network scan on interruption for QMI modems; |
| lte | unify "modem-init" for all driver types; |
| ospf | allow adding interface configuration manually, bypassing interface-template; |
| ospf | change virtual link configuration to use OSPF interface directly; |
| ospf | fixed missing interface-template configuration which previously was converted by upgrading from RouterOS v6; |
| qos-hw | added ECN and PFC support on CRS8xx (additional fixes); |
| qos-hw | display queue0 limits for CPU port; |
| qos-hw | fixed "offline" tx-manager ability to queue at least one packet (introduced in v7.21); |
| qos-hw | fixed CPU traffic mapping to queues on CRS8xx switches; |
| qos-hw | prohibit setting CPU port with "offline" tx-manager; |
| route | fixed link-local interface check when resolving IPv6 nexthops; |
| route | improved service stability when removing routes; |
| routerboard | fixed applying settings via WinBox on devices with fixed CPU frequency; |
| routerboot | fixed Netinstall failure when using multiple partitions on AL73400, AL52400, AL32400 CPUs ("/system routerboard upgrade" required); |
| sftp | fixed path canonicalization request; |
| snmp | added missing BRIDGE-MIB OIDs (dot1dBaseNumPorts, dot1dBaseType, dot1dStpDesignatedRoot, dot1dStpRootCost, dot1dStpRootPort, dot1dStpHoldTime, dot1dStpBridgeMaxAge, dot1dStpBridgeHelloTime, dot1dStpBridgeForwardDelay, dot1dStpPortForwardTransitions, dot1dTpAgingTime); |
| snmp | added missing LLDP-MIB OIDs (lldpMessageTxInterval, lldpMessageTxHoldMultiplier, lldpLocManAddrTable); |
| snmp | fixed compliance of LLDP-MIB lldpRemManAddrTable; |
| snmp | fixed dot1dStpPortDesignatedPort OID; |
| snmp | fixed ifSpeed and ifHighSpeed OIDs for 802.3ad and balance-xor bonding interfaces; |
| snmp | fixed lldpLocSysDesc OID; |
| snmp | fixed return value for certain string OIDs (introduced in v7.23beta2); |
| snmp | use "/ip/neighbor/lldp" for lldpRemTable and lldpRemManAddrTable (fixes lldpRemTable showing neighbors discovered by MNCP or CDP); |
| ssh | improved host resolve error logging; |
| switch | improved FDB operations on QCA8337, Atheros8327; |
| switch | rework how IEEE reserved MAC addresses are handled on QCA8337, Atheros8327; |
| system | added FCC Part 15 Compliance label to "System/Regulatory" menu; |
| system | included full certificate chain to Windows executables; |
| system | keep HTTP/2 connection open if it is not closed by system or server; |
| system | make default identity based on board name; |
| veth | fixed link-local address not being configurable as a gateway; |
| wifi-mediatek | fixed HE capabilities IE on 2GHz band; |
| winbox | added "MLD Static" and "MLD Datapath" properties under the "WiFi/CAP" menu; |
| winbox | added "Multipath" property under the "Routing/BGP/Instance" menu; |
| winbox | added "Supported HW Caps" and "Multi Link Mode" configuration options under the "WiFi/Provisioning" menu; |
| winbox | allow setting "CAPsMAN address" for CAP as domain name; |
| winbox | do not set empty chain when adding/editing routing rule; |
| winbox | improved "External Antenna" property display; |
| winbox | properly display multiple bands for multi-link interface clients under registration table; |
| winbox | show "IPv6 Address" property by default under the "IP/Neighbors" menu; |
| wireguard | improved system stability; |
| Component | Change |
|---|---|
| bgp-vpn | fixed non-working import filter after reboot; |
| certificate | added option to configure built-in trust store for all services (CLI only); |
| certificate | use "default" for built-in trust store default value; |
| chr | improved virtio_net stability; |
| console | removed the "reset" command from shared settings menus (IP/IPv6/Bridge/L3HW/Neighbor-Discovery/Connection-Tracking); |
| defconf | fixed architecture detection for apps; |
| hardware | name serial devices after port names; |
| hardware | name storage hardware devices after slot name in "/disk" menu; |
| l3hw | fixed a system stability issue (introduced in v7.21); |
| leds | allow multiple interface selection for interface-activity trigger; |
| log | do not provide non-existent logging topics for configuration; |
| log | fixed "/system/logging/action/get" command (introduced in v7.22); |
| lte | fixed LTE modem automatic modeswitch (introduced in v7.22); |
| lte | fixed Tx stat reporting in LTE passthrough mode (introduced in v7.22); |
| qos-hw | display queue0 limits for CPU port; |
| qos-hw | fixed "offline" tx-manager ability to queue at least one packet (introduced in v7.21); |
| qos-hw | prohibit setting CPU port with "offline" tx-manager; |
| quickset | fixed configuration of multi-link APs; |
| ssh | make login process asynchronous; |
| switch | disable EEE on RB5009 and CCR2004-16G-2S+ devices; |
| system | fixed total memory reporting on hAP be3 Media; |
| tr069 | fixed modem extended revision reporting; |
| wifi | fixed bridge VLAN configuration for multi-link interfaces; |
| wifi | fixed EAP authentication for multi-link clients; |
| wifi | improved link-specific parameter application after reboot for multi-link interfaces; |
| wifi | improved stability during association; |
| winbox | added "Supported HW Caps" and "Multi Link Mode" configuration options under the "WiFi/Provisioning" menu; |
| winbox | do not set empty chain when adding/editing routing rule; |
| winbox | fixed "Remote AS" setting under the "Routing/BGP/Connections" menu; |
| winbox | fixed "Src/Dst Address Type" under the "IP/Firewall/NAT" menu; |
| winbox | make the band field on the WiFi registration table multi-argument; |