Search changelog entries
| Component | Change |
|---|---|
| address-list | allow manually adding timeoutable entries; |
| address-list | show dynamic entry timeout; |
| certificate | support ip, dns and email subject alternative names; |
| dhcpv4 server | added REMOTE_ID option variable for relayed packets; |
| fixed l2mtu changing on CCRs | could cause port flapping; |
| fixed port flapping on CCR | could happen when having other than only-hardware-queue interface queue. Note that having other interface queue than only-hardware-queue dramatically reduces performace, so should be avoided if possible; |
| general | support Android usb tethering interface; |
| general | fixed hairpin nat on bridge with use-ip-firewall=yes; |
| general | fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address; |
| general | disabling/enabling ethernet ports did not work properly on CCRs, could cause port flapping; |
| ipsec | added aes-gcm icv16 encryption mode; |
| ipsec | added aes-ctr encryption mode; |
| ipsec | added sha256 and sha512 support; |
| ipsec | proposal defaults changed to aes-128 and sha1 for both phase1 and phase2; |
| ipsec | fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter; |
| leds | inverted modem signal trigger, now it will trigger when the signal level rises above the treshold; |
| poe | new poe controller firmware for RB750UP and OmniTIK UPA; |
| userman | fix crash on tilera; |
| wireless | improve rate selection for nstreme protocol |
| Component | Change |
|---|---|
| certificate | no more 'reset-certificate-cache' and 'decrypt' commands, private keys can be decrypted only on 'import', use 'decrypt' before upgrade if needed; |
| certificate | merged '/certificate ca issued', '/certificate scep client' and '/certificate templates' into '/certificate'; |
| certificates | fixed certificate import; |
| console | :foreach command can iterate over keys and values in an array, by specifying two counter variables, e.g.: :foreach k,v in=[/system clock get] do={:put "$k is $v"}; |
| general | fixed arp-reply only with more than one ip address on interface; |
| general | fixed RB400 not to reboot by watchdog during micro-sd format; |
| general | added support for new Intel 10Gb ethernet cards (82599); |
| general | fixed port flapping on CCR; |
| web proxy | fix SPDY server push handling; |
| winbox | fixed problem where all previous session opened windows were read only; |
| wireless | fixed crash when dfs was enabled on pre-n wireless cards; |
| Component | Change |
|---|---|
| certificates | merge '/certificate ca' into '/certificate', use set-ca-passphrase to maintain CA functionality; |
| console | exported physical interface configuration uses 'default-name' instead of item number to match relevant interface; |
| console | report all constituent errors for parameters with multiple alternative value types; |
| console | ':return' does not trigger 'on-error=' action of ':do' command; |
| dhcp server | added option to disable conflict-detection; |
| general | fix routerboot upgrading if RouterOS is partitioned; |
| general | add support for second serial port on CCR boards; |
| general | fix serial port baudrate selection on CCR boards; |
| general | ethernet interface stats that are behind switch chip show real hw stats instead of just the traffic that goes through cpu; |
| ipsec | fix peer mathing with non byte aligned masks; |
| lcd | backlight option is replaced with "/lcd backlight" command |
| ovpn server | use only ciphers that are allowed not that client requested; |
| route | fixed crash that could be triggered by change in nexthop address resolution; |
| route | some imported VPNv4 routes were not using MPLS labels; |
| route | imported VPNv4 routes were not always updated or removed when the original route changed; |
| ssh client | fixed public key authentication; |
| tftp | added data packet pipelining for read requests; |
| winbox | fixed problem where all settings were read only on first open; |
| Component | Change |
|---|---|
| console | make newly added item names always immediately available; |
| general | fixed watchdog on mipsle boards; |
| general | fixed usb Yota LTE modem hangup; |
| graphing | make sure that interface graphs gets preserved across reboots; |
| ovpn | allow to specify server via dns name; |
| traceroute | added count %26 max-hops parameters; |
| traceroute | added back use-dns parameter; |
| winbox | fixed problem where ipv6 routes with non local link address gateway could not be added; |
| wireless | improved 802.11n wireless retransmission (doesn't effect nstreme/nv2) |