MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| bridge | fixed dhcp-snooping incorrectly disabling HW offloading on QCA8337, Atheros8327 switch chips (introduced in v7.20); |
| certificate | fixed initial certificate creation using SCEP (introduced in v7.21); |
| console | improved service stability when processing files over CLI; |
| dhcpv4-server | append "s" after lease-time value in setup command; |
| gps | fixed port configuration for CubeG-5ac60ay; |
| hotspot | rename totp-secret to otp-secret; |
| ipv6 | do not invalidate router if RA without included prefix is received (introduced in v7.21); |
| ipv6 | fixed "on-link" and "autonomous" flag detection (introduced in v7.21); |
| ipv6 | invalidate router only when router lifetime expires (introduced in v7.21); |
| lte | fixed eSIM profile switching on ATL 5G R16; |
| lte | improved notification handling during firmware update for Quectel modems; |
| poe-out | firmware update for hEX PoE, OmniTIK 5 PoE ac, PowerBox Pro (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed rare false overload triggers on hEX PoE, OmniTIK 5 PoE ac, PowerBox Pro; |
| sfp | fixed sfp-ignore-rx-loss parameter for hEX PoE; |
| Component | Change |
|---|---|
| app | enable swap on all devices that use apps to help with performance; |
| app | show app URL only when it is running (additional fixes); |
| app | show DNS URL for app only if it has a reverse-proxy (additional fixes); |
| bridge | added local and static MAC synchronization for MLAG (additional fixes); |
| bridge | added RA guard feature (additional fixes); |
| bridge | fixed dhcp-snooping incorrectly disabling HW offloading on QCA8337, Atheros8327 switch chips (introduced in v7.20); |
| bridge | improved VRRP MAC address handling (additional fixes); |
| certificate | added support for multiple ACME certificates (additional fixes); |
| ethernet | increased Rx buffer size for devices with Alpine CPUs (reduces packet rx-drop in certain cases); |
| gps | fixed port configuration for CubeG-5ac60ay; |
| hotspot | allow WireGuard interface type (additional fixes); |
| hotspot | check validity of base32 for otp-secret; |
| hotspot | rename totp-secret to otp-secret; |
| hotspot | set sensitive flag on /ip/hotspot/user otp-secret; |
| ike1 | added ChaCha20-Poly1305 ESP encryption support; |
| ike1,ike2 | improved netlink update handling; |
| iot | added modbus delay using interframe-gap setting; |
| ip | added reverse-proxy (additional fixes); |
| ip-service | properly disable IP/Service on manual disable; |
| ipv6 | fixed "on-link" and "autonomous" flag detection (introduced in v7.21); |
| ppp | added initial support for BG770A-GL modem firmware update; |
| route | fixed routes when scope was less than 10; |
| sfp | fixed sfp-ignore-rx-loss parameter for RB960PGS; |
| snmp | report maximum "ifSpeed" value if out of bounds; |
| wifi | fixed an issue preventing WiFi interfaces from getting correct bridge vlan-id (introduced in v7.22beta1); |
| wifi | improved support for 802.11be access points (additional fixes); |
| wireguard | fixed private key generation when creating a WireGuard interface; |
| x86 | added JME network driver (additional fixes); |
| Component | Change |
|---|---|
| bgp | fixed route refresh subcode 0 warning; |
| bgp | implement revised input error handling per RFC 7606; |
| bridge | fixed dynamic switch-cpu VLAN creation (introduced in v7.20.7); |
| container | fixed nftables/iptables not working with "Message too long" error; |
| health | fixed fan and PSU state logging for MIPSBE devices; |
| poe-out | firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed PSU state recovery upon unplug/replug on CRS320; |
| ppp | added initial support for BG770A-GL modem firmware update; |
| route | prevent creating routing tables with the same name; |
| routing-filter | fixed num-set matcher; |
| sfp | fixed sfp-ignore-rx-loss parameter for RB760iGS; |
| snmp | fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput; |
| snmp | fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.20.7); |
| snmp | fixed script "run-count" update after execution; |
| system | fixed rare partial loss of RouterOS configuration; |
| user-manager | properly release database backup file after backup creation; |
| w60g | fixed possible memory leak when an interface is disabled; |
| zerotier | improved route removal; |
| Component | Change |
|---|---|
| app | added "media-path" and "download-path" setting in /app/settings; |
| app | added shm_size parameter to apps that require it; |
| app | calibre-web app auto add db if none exists; |
| app | fixed Firefox and Webtop to work with https-proxy; |
| app | fixed fossil app login typo; |
| bgp | implement revised input error handling per RFC 7606; |
| container | added support for the shm_size setting; |
| container | allow non-root user write to SMB share; |
| container | changed default container registry to docker.io; |
| container | do not mount tmpfs on /tmp and /run by default; |
| container | do not start container if any volume is not mounted; |
| container | fixed nftables/iptables not working with "Message too long" error; |
| container | made container mounts writable by the user; |
| defconf | added single port MGMT bridge on CCR/RDS for easier /app configuration; |
| defconf | improved firewall rule for local traffic to the loopback interface; |
| disk | fixed issue where mountpoint was not removed after removing the disk; |
| dns | fixed domain resolution for the ":resolve" command "server" parameter; |
| lte | fixed issue for Chateau 5G R17 ax (introduced in v7.21.1); |
| poe-out | firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed occasional firmware update failure on CRS354; |
| poe-out | fixed PSU state recovery upon unplug/replug on CRS320; |
| ppp | added initial support for BG770A-GL modem firmware update; |
| ppp | fixed premature PPP client disconnect on BG77 modems during firmware update; |
| route | prevent creating routing tables with the same name; |
| routing-filter | fixed num-set matcher; |
| sfp | fixed sfp-ignore-rx-loss parameter for RB760iGS; |
| sfp | improved initialization and linking for some QSFP modules; |
| snmp | fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput; |
| snmp | fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.21); |
| snmp | fixed script "run-count" update after execution; |
| system | do not attempt to use FastPath RPS on non-ARM64 devices (introduced in v7.21); |
| user-manager | properly release database backup file after backup creation; |
| zerotier | improved route removal; |
| Component | Change |
|---|---|
| app | added "media-path" and "download-path" setting in /app/settings; |
| app | added configurable app-store URL for custom apps; |
| app | added shm_size parameter to apps that require it; |
| app | fixed /app/export; |
| app | fixed apps constantly polling the cloud; |
| app | fixed Firefox and Webtop to work with https-proxy; |
| app | fixed missing reverse-proxy URL; |
| bgp | added BGP unnumbered support; |
| bgp | fixed prefix-count parameter (introduced in v7.22beta1); |
| bridge | added local and static MAC synchronization for MLAG (additional fixes); |
| bridge | added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically updated after upgrade; downgrading to an older version will result in MLAG configuration loss) (additional fixes); |
| certificate | added support for multiple ACME certificates; |
| container | added support for the shm_size setting; |
| container | allow non-root user write to SMB share; |
| container | do not mount tmpfs on /tmp and /run by default; |
| container | do not start container if any volume is not mounted; |
| device-mode | allow update from Netinstall via mode script (new "Mode script" property available for Netinstall and netinstall-cli, applied before defconf or user-defined script); |
| disk | fixed issue where mountpoint was not removed after removing the disk; |
| fixed ability to add attachment (introduced in v7.22beta1); | |
| use default port if not specified; | |
| fetch | added HTTP/2 support on ARM64 and x86/CHR devices (additional fixes); |
| ip | added error messages to reverse-proxy rules; |
| lte | added roaming barring field to LTE "show-capabilities" menu (additional fixes); |
| lte | added subscriber number to monitor command for MBIM modems; |
| lte | do not allow setting unsupported roaming barring settings for R11e-4G; |
| lte | fixed chained firmware update for Chateau 5G; |
| lte | fixed changing eSIM profile nickname; |
| lte | fixed displaying operator name for Chateau ax R17; |
| lte | fixed inappropriate external antenna selection on Chateau ax R17; |
| lte | fixed missing notifications to eSIM provider when eSIM provisioning canceled; |
| lte | fixed tethering support for Google Pixel Pro 8; |
| lte | fixed wrong MTU reading/setting for config-less modems; |
| port | fixed baud rate change for TILE architecture devices; |
| ppp | added initial support for BG770A-GL modem firmware update; |
| profiler | split "management" process into different smaller process groups; |
| radius | improved incoming RadSec packet processing on busy service; |
| routerboard | allow changing /system/routerboard/settings from Netinstall via mode script; |
| routing-filter | fixed num-set matcher; |
| snmp | fixed minor memory leak when changing SNMP authentication/encryption passwords; |
| snmp | fixed reply for empty snmpbulkwalk requests; |
| system | do not attempt to use FastPath RPS on non-ARM64 devices (introduced in v7.21); |
| user-manager | added support for NAS-Identifier attribute; |
| user-manager | always respond to accounting requests; |
| user-manager | do not send Disconnect-Message for unknown usernames for Accounting-Request; |
| user-manager | do not send invalid NAS-Port-Type on CoA/PoD messages; |
| user-manager | fixed unauthenticated access to /PRIVATE/ userman web files; |
| user-manager | properly release database backup file after backup creation; |
| user-manager | show empty value for session NAS-IP-Address if empty; |
| webfig | fixed creating bridge interface (introduced in v7.22beta1); |
| wifi | improved support for 802.11be access points (additional fixes); |
| wifi | introduced /interface/wifi/network menu for higher level network configuration (CLI only); |
| wifi-mediatek | fixed rx chains functionality; |
| wifi-mediatek | improved stability when switching bands (introduced in v7.22beta1); |
| winbox | set "Mount Filesystem" by default under "System/Disk" menu; |