MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| bgp | multipath eBGP now does not propagate BGP nexthop unless forced in configuration; |
| general | fix autosupout.rif generation after kernel panic; |
| general | removed 10/100 half duplex from autonegotiation advertisement on CCR; |
| ipv6 pool | fix dynamic prefix disappearing which may influence large VPNs with IPv6; |
| ovpn | make it work again; |
| ovpn client | remove cipher=any %26 auth=any options, protocol does not support them; |
| pptp | fixed where Windows %26 MacOS clients were disconnecting all the time; |
| ssh client | fix key agreement when sometimes wrong DH algorithm was selected; |
| sstp | make it work with Windows client with AES encryption; |
| Component | Change |
|---|---|
| address-list | fix crash when adding two identical address list entries; |
| bgp | don't show community 'internet' in BGP advertisements; |
| bridge | default protocol-mode changed to RSTP for new bridges, fixed bridge mac address changing when port (with lowest mac address) goes down |
| default configuration | changed dhcp server lease time to 10 minutes; |
| dhcp | parse decimal strings and IP addreses in options value; |
| dhcp client | support interfaces in bridge; |
| firewall | improved address-type matcher, and added it for ipv6 aswell; |
| general | fixed port isolation on CRSs (bug introduced in v6.6); |
| general | timezone information updated; |
| general | improved speed of PPP, PPPoE, PPTP %26 L2TP on multicore routers; |
| general | fixed multicast forwarding on CCRs; |
| general | kernel drivers for ppp, pppoe, pptp, l2tp are now lock-less on transmit %26 receive; |
| general | all ppp packets (except discovery packets) now can be handled by multiple cores; |
| general | MPPE driver now can handle up to 256 out-of-order packets; |
| ipsec | enable hardware acceleration for aes-cbc + md5|sha1|sha256 aead on CCR; |
| ospf | fixed checksum calculation for OSPFv3 AS-external-LSAs; |
| ppp | fixed ppp bridging (did not work since v6.6); |
| smb | added support for SMB 2.002 |
| sstp client | support server name verification from certificate; |
| userman | improve startup time; |
| wireless | improved 11n and nv2 stability; |
| Component | Change |
|---|---|
| address-list | allow manually adding timeoutable entries; |
| address-list | show dynamic entry timeout; |
| certificate | support ip, dns and email subject alternative names; |
| dhcpv4 server | added REMOTE_ID option variable for relayed packets; |
| fixed l2mtu changing on CCRs | could cause port flapping; |
| fixed port flapping on CCR | could happen when having other than only-hardware-queue interface queue. Note that having other interface queue than only-hardware-queue dramatically reduces performace, so should be avoided if possible; |
| general | support Android usb tethering interface; |
| general | fixed hairpin nat on bridge with use-ip-firewall=yes; |
| general | fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address; |
| general | disabling/enabling ethernet ports did not work properly on CCRs, could cause port flapping; |
| ipsec | added aes-gcm icv16 encryption mode; |
| ipsec | added aes-ctr encryption mode; |
| ipsec | added sha256 and sha512 support; |
| ipsec | proposal defaults changed to aes-128 and sha1 for both phase1 and phase2; |
| ipsec | fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter; |
| leds | inverted modem signal trigger, now it will trigger when the signal level rises above the treshold; |
| poe | new poe controller firmware for RB750UP and OmniTIK UPA; |
| userman | fix crash on tilera; |
| wireless | improve rate selection for nstreme protocol |
| Component | Change |
|---|---|
| certificate | no more 'reset-certificate-cache' and 'decrypt' commands, private keys can be decrypted only on 'import', use 'decrypt' before upgrade if needed; |
| certificate | merged '/certificate ca issued', '/certificate scep client' and '/certificate templates' into '/certificate'; |
| certificates | fixed certificate import; |
| console | :foreach command can iterate over keys and values in an array, by specifying two counter variables, e.g.: :foreach k,v in=[/system clock get] do={:put "$k is $v"}; |
| general | fixed arp-reply only with more than one ip address on interface; |
| general | fixed RB400 not to reboot by watchdog during micro-sd format; |
| general | added support for new Intel 10Gb ethernet cards (82599); |
| general | fixed port flapping on CCR; |
| web proxy | fix SPDY server push handling; |
| winbox | fixed problem where all previous session opened windows were read only; |
| wireless | fixed crash when dfs was enabled on pre-n wireless cards; |