Search changelog entries
| Component | Change |
|---|---|
| arm64 | allow enabling receive packet steering on /system/resource/irq/rps menu in order to overcome unbalanced CPU load (additional fixes); |
| bridge | fixed incorrectly blocked ports by STP (introduced in v7.20); |
| certificate | fixed incorrect appearance of "invalid-before" and "invalid-after" dates; |
| dhcp4-server | allow creating static DHCPv4 leases for VETH interfaces; |
| dhcpv6-client | improved system stability when DHCPv6 client uses "rapid-commit=no", "accept-prefix-without-address=no" and receives only prefix from the server; |
| dhcpv6-server | do not force set "address-pool" on static bindings with unset pool option after system reboot; |
| added "certificate-verify" parameter; | |
| ethernet | fixed issue with 10/100 Mbps links for C53, S53 devices on certain ethernet interfaces (introduced in v7.21beta2); |
| evpn | added basic logging support; |
| evpn | fixed MAC mobility; |
| file | improved stability and interoperability with WinBox and console; |
| firewall | reduce maximum connection tracking entry count; |
| ip | removed duplicate CLI parameters for socksify; |
| ippool6 | added "Valid Lifetime" and "Preferred Lifetime" options and use them when constructing IPv6 address (additional fixes); |
| ipsec | support Post-Quantum Pre-shared Key (PPK) with QKD integration (CLI only) (additional fixes); |
| l3hw | added per-VLAN "l3-hw-offloading" setting and "H" flag for /interface/vlan menu (additional fixes); |
| log | cleaned up older config by removing leading slashes from "disk-file-name" values; |
| lte | fixed LED behavior for Chateau 5G R17 ax; |
| lte | fixed MTU inheritance from master interface in multi-APN setups; |
| mpls | fixed LDP label binding if nexthop is link-local address; |
| ospf | fixed possible LSA issue after reboot or link changes (introduced in v7.21beta2); |
| ovpn-server | added support for pushing IPv6 routes (additional fixes); |
| ppp | do not automatically add apn=internet for manually created ppp-client interfaces; |
| ppp | fixed ppp-client not dialing when two interfaces are same multi-channel port; |
| qos-hw | always show usage and PFC counters, even when they are zero; |
| routing-filter | change "^$" regexp to bgp-path-len=0 on upgrade from v6 to v7; |
| routing-filter | use bgp-out-med for set bgp-med on upgrade from v6 to v7; |
| snmp | fixed various connection tracking OID definitions in MIKROTIK-MIB; |
| snmp | set maximum message size to 8 KB; |
| ssh | fixed non-interactive command execution (introduced in v7.20); |
| switch | improved HW bond load balancing by adding MPLS labels to transmit hash for 98DXxxxx, 98CXxxxx switches; |
| system | fixed ".auto.rsc" file execution (introduced in v7.20); |
| system | fixed package list fetch from local upgrade server; |
| tr069-client | added LTE link recovery timer setting (additional fixes); |
| veth | fixed VETH interface not getting an IP addresses in a vlan-aware bridge containing multiple DHCP servers; |
| wifi | changed country code to "XA" for "UK 5.8 fixed outdoor" regulatory domain; |
| wifi | improved interface stability when encountering authentication failures; |
| wifi,wireless | include "Event-Timestamp" in RADIUS accounting messages; |
| winbox | added IP/Socksify menu; |
| winbox | fixed Ethernet Tx Stats (introduced in v7.20); |
| wireguard | added VRF option (CLI only) (additional fixes); |
| Component | Change |
|---|---|
| lte | fixed LED behavior for Chateau 5G R17 ax; |
| ppp | do not automatically add apn=internet for manually created ppp-client interfaces; |
| ppp | fixed ppp-client not dialing when two interfaces use same multi-channel port; |
| snmp | fixed various connection tracking OID definitions in MIKROTIK-MIB; |
| ssh | fixed non-interactive command execution (introduced in v7.20); |
| wifi | changed country code to "XA" for "UK 5.8 fixed outdoor" regulatory domain; |
| Component | Change |
|---|---|
| bridge | fixed incorrectly blocked ports by STP (introduced in v7.20); |
| console | fixed incorrect ids in /file/print relative mode (introduced in v7.20); |
| console | improved stability when printing ids for a non-existent directory (introduced in v7.20) |
| dhcpv6-client | improved system stability when DHCPv6 client uses "rapid-commit=no", "accept-prefix-without-address=no" and receives only prefix from the server; |
| dhcpv6-server | do not force set "address-pool" on static bindings with unset pool option after system reboot; |
| evpn | added basic logging support; |
| evpn | fixed MAC mobility; |
| firewall | reduce maximum connection tracking entry count; |
| iot | fixed an issue preventing LoRa downlink packets from being broadcasted; |
| ip | removed duplicate CLI parameters for socksify; |
| log | cleaned up older config by removing leading slashes from "disk-file-name" values; |
| mpls | fixed LDP label binding if nexthop is link-local address; |
| poe-out | fixed RB5009 PoE-in indication on cold-boot with no other power source; |
| routing-filter | change "^$" regexp to bgp-path-len=0 on upgrade from v6 to v7; |
| routing-filter | use bgp-out-med for set bgp-med on upgrade from v6 to v7; |
| snmp | fixed SNMP SET operation (introduced in v7.20); |
| snmp | set maximum message size to 8 KB; |
| system | fixed ".auto.rsc" file execution (introduced in v7.20); |
| system | fixed package list fetch from local upgrade server; |
| system | fixed Windows executable compatibility with Microsoft AppLocker; |
| winbox | added IP/Socksify menu; |
| winbox | added support for 200Gbps/400Gbps Rate fields; |
| winbox | fixed Ethernet Tx Stats (introduced in v7.20); |
| Component | Change |
|---|---|
| arm64 | allow enabling receive packet steering on /system/resource/irq/rps menu in order to overcome unbalanced CPU load (additional fixes); |
| console | fixed incorrect ids in /file/print relative mode (introduced in v7.20); |
| console | improved stability when printing ids for a non-existent directory (introduced in v7.20) |
| container | add initial Bluetooth device support; |
| container | added "/app" menu for simple containerized app installation (requires "container" package and enabled "container" device-mode); |
| container | do not allow layer-dir to be within some containers root-dir; |
| container | enable relevant kernel features to support more container apps (additional fixes); |
| ethernet | added "unsupported speed" warning for forced 1Gbps, 2.5Gbps, 5Gbps, 10Gbps baseT modes; |
| firewall | use the highest TTL as timeout value for domain address list entries if multiple domain names resolve to same IP (additional fixes); |
| ike1 | fixed an issue where policies could be released too early before re-acquisition; |
| ipv6 | added "self" option for IPv6/ND DNS advertise settings (additional fixes); |
| ipv6 | properly remove SLAAC installed route when prefixes expire; |
| ipv6,ra | fixed prefix unlinking from interface on configuration change and stop deprecating prefixes when the validity lifetime expires; |
| l3hw | added per-VLAN "l3-hw-offloading" setting and "H" flag for /interface/vlan menu (additional fixes); |
| l3hw | fixed issue with IPv4 ARP and IPv6 neighbor resolve for CRS812; |
| lte | added confirmation prompt when deleting eSIM profile; |
| qos-hw | always use qos-hw-offloading=yes for CRS812 device; |
| route | fixed missing connected routes on setups with large amount of interfaces (introduced in v7.20); |
| routerboard | fixed non-running interfaces for CRS310-8G+2S+IN after booting to SwOS ("/system routerboard upgrade" required) (introduced in v7.20); |
| snmp | fixed SNMP SET operation (introduced in v7.20); |
| snmp | fixed SNMP trap messages being corrupted when sent to multiple targets; |
| switch | fixed "failure: cpu flow control not supported" (introduced in v7.20); |
| system | fixed Windows executable compatibility with Microsoft AppLocker; |
| veth | fixes IP address not appearing in the app menu when VETH uses DHCP; |
| winbox | added support for 200Gbps/400Gbps Rate fields; |
| winbox | Bandwidth test, Speed test, Ping, Traceroute tools use RouterOS DNS service to resolve domain names (additional fixes); |
| winbox | make VETH gateway fields not required; |
| winbox | removed "Add" for dynamic DNS servers; |
| Component | Change |
|---|---|
| bgp | added output.network-blackhole setting; |
| bgp | do not auto-generate blackhole routes by default (introduced in v7.20); |
| bgp | fixed inactive flag in GUI after instance disable/enable; |
| console | fixed ".id" printing when using "group-by" (introduced in v7.20); |
| console | fixed relative path printing (introduced in v7.20); |
| ike1 | fixed an issue where policies could be released too early before re-acquisition; |
| ipv6,ra | fixed prefix unlinking from interface on configuration change and stop deprecating prefixes when the validity lifetime expires; |
| lte | fixed issue with firmware update for FG621-EA modem; |
| ppp | added support for KNOT BG77 modem firmware upgrade to version BG77LAR02A04_A0.301.A0.301; |
| qos-hw | always use qos-hw-offloading=yes for CRS812 device; |
| quickset | fixed issue where routes set by QuickSet did not appear in export; |
| route | fixed missing connected routes on setups with large amount of interfaces (introduced in v7.20); |
| route | improved stability; |
| routerboard | fixed non-running interfaces for CRS310-8G+2S+IN after booting to SwOS ("/system routerboard upgrade" required) (introduced in v7.20); |
| sfp | improved interface link speed configuration for CRS812; |
| snmp | fixed SNMP trap messages being corrupted when sent to multiple targets; |
| switch | fixed "failure: cpu flow control not supported" (introduced in v7.20); |
| system | improved system stability when using hardware-offloaded encryption on RB3011 and hAP ac2 (introduced in v7.20); |
| webfig | fixed form closing with saving when pressing Enter key (introduced in v7.20); |
| webfig | fixed interface settings and graphs (introduced in v7.20); |
| webfig | improved container form loading performance when router has a lot of files; |
| winbox | fixed WinBox 3 application failure when opening IPv6/Firewall/Connection entry (introduced in v7.20); |
| www | improved stability (CVE-2025-10948); |