Search changelog entries
| Component | Change |
|---|---|
| CCR | improved performance; |
| bridge | added "Auto Isolate" stp enhancement (802.1q-2011, 13.25.6) |
| console | added unary operator 'any' that evaluates to true if argument is not null or nothing value; |
| dhcpv4 server | support multiple radius address lists; |
| dns-update | fix zone update; |
| firewall | packet defragmenting will only happen with connection tracking enabled; |
| firewall | optimized option matching order with-in a rule; |
| firewall | rules that require CONNTRACK to work will now have Invalid flag when CONNTRACK is disabled; |
| firewall | rules that require use-ip-firewall to work will now have invalid flag when use-ip-firewall is disabled; |
| firewall | rules that have interface with "Slave" flag specified as in-/out-interface will now have Invalid flag; |
| firewall | rules that have interface without "Slave" flag specified as in-/out-bridge-port will now have Invalid flag; |
| firewall | rules with Invalid flags will now be auto-commented to explain why; |
| general | simple queue performance optimisation/improvement for multi-core RouterOS devices (especially CCR) |
| ippool | improve performance when acquiring address without preference; |
| ipsec | when peer config is changed kill only relevant SAs; |
| ipv6 | Gre6 can now correctly fragment large packets |
| l2tp | force l2tp to not use MPPE encryption if IPsec is used; |
| partitions | copying partitions did not work on some boards; |
| sstp | make sstp work on i386 as well; |
| sstp | force sstp to not use MPPE encryption (it already has TLS one); |
| sstp | make it work for x86 systems |
| vpls | do not abort BGP connection when receiving invalid 12 byte nexthop encoding; |
| winbox | added dual PSU stats in health menu |
| wireless | improvements for nv2 and 802.11ac |
| Component | Change |
|---|---|
| api | use the same syntax for property values as is used in 'print detail' output, with the exception of numbers, that are not shown with suffixes (K/M/G/T or bitrate) and are not contracted or separated into digit groups, and "yes"/"no" values that continue to be reported as "true"/"false". |
| console | print command does not try to reuse item numbers assigned by previous invocations of 'print' when doing 'print where' or 'print follow', items are numbered consecutively starting from '0'. |
| console | fix compact export of some partially modified configuration values; |
| console | show internal numbers in the form returned by 'find' (like *9A0F) instead of "(unknown)" when configuration refers to deleted items. This change also applies to API. |
| console | when exporting to file, use name ending in '.in_progress', and rename when export finishes; |
| console | values of type 'nil' were returning 'nil' as result of most operations. Now it compares less than all values except 'nil' and 'nothing', and compares inequal to all values except 'nil'. This was changed to make 'print where' and 'find where' more useful. An example. Previously the following command /ip route print where routing-mark!=nosuch Would not print routes that had no value for 'routing-mark' set, because (nil != "nosuch") was equal to nil. Now it evaluates to 'true', and this command will also print all routes that have no 'routing-mark' value set. |
| console export | put qutes around item names that start with a digit; |
| general | bridge setups sometimes could crash on CCR devices; |
| general | fixed port flapping in 1G mode on sfp-sfpplus1 on CRS226; |
| general | fixed SXT ac model losing it's interface if changing regulatory settings in "routerboard" menu |
| ipsec | fix addition of default policy template; |
| l2tp | fixed problem on CCR where server responded with wrong source address; |
| safe mode | do not allow user with less permissions to disrupt active safe mode; |
| sntp client | added support for dns lookup of ntp servers; |
| sstp | report TLS encryption as well; |
| Component | Change |
|---|---|
| CCR1009 | fixed crash, only affects CCR1009; |
| Component | Change |
|---|---|
| CCR | fixed rare file system corruption when none of configuration could be changed or some of it disappeared; |
| certificates | use SHA256 for fingerprinting; |
| support tls only connections; | |
| general | 802.11ac support added in wireless-fp package for QCA9880/9882 rev2 (-BR4A) chips; |
| general | l2tp server: added option to enable IPsec automatically; |
| general | poe-out: added power-cycle-ping and power-cycle-interval settings; |
| general | updated timezone information; |
| general | latency improvements on CCR devices; |
| gps | increased retry duration to 30 seconds; |
| ip cloud now allows to set which IP to use | detected (public) or local (private); |
| ipsec | fix AH proposal and problem when sometimes policy was not generated; |
| ipsec | allow multiple encryption algorithms per peer; |
| l2tp, pptp, pppoe | fixed possible packet corruption when encryption was enabled; |
| ovpn | fixed ethernet mode; |
| quickset | added VPN settings for HomeAP mode; |
| smb | fixed usb share issues after reboot |
| snmp | support AES encryption (rfc3826); |
| snmp | fix v3 protocol time window checks; |
| sntp | disabling/enabling client was causing dynamic-servers to be ignored (bug introduced in 6.14); |
| time | on routerboards, current time is saved in configuration on reboot and on clock adjustment, and is used to set initial time after reboot; |
| Component | Change |
|---|---|
| fixed upgrade from v5 | on first boot all the optional packages were disabled; |
| general | fixed problem where sntp server could not be specified in winbox %26 webfig; |
| metarouter | make openwrt work on ppc metarouter again; |