|
6to4
|
fixed 6to4 tunnel LL address generation after system reboot; |
|
6to4
|
improved system stability when using 6to4 tunnel without specified remote-address; |
|
6to4
|
limit keepalive timeout maximum value; |
|
address
|
added "S" flag for addresses that belong to a slave interface; |
|
arm64
|
fixed "disable-running-check" for ARM64 UEFI; |
|
arm64
|
increased reserved storage space for bootloader; |
|
arm64/x86
|
added rtl8111/8168/8411 firmware; |
|
arp
|
fixed possible issue with invalid entries; |
|
bgp
|
fixed BGP sessions missing vpnv6 afi; |
|
bgp
|
fixed cluster-list and originator-id; |
|
bgp
|
fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15); |
|
bgp
|
fixed minor logging typo; |
|
bgp
|
fixed vpnv6 safi; |
|
bgp
|
small logging improvements; |
|
bridge
|
added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge; |
|
bridge
|
added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade); |
|
bridge
|
added L2 MDB support for IGMP snooping; |
|
bridge
|
added max-learned-entries property for bridge; |
|
bridge
|
added message about who created a dynamic VLAN entry; |
|
bridge
|
added MVRP support for VLANs assigned to bridge; |
|
bridge
|
do not allow duplicate ports; |
|
bridge
|
fixed BPDU address when using "ether-type=0x88a8" configuration; |
|
bridge
|
fixed MVRP leave; |
|
bridge
|
fixed port "point-to-point" status after first link change; |
|
bridge
|
fixed typo in filter and NAT error message; |
|
bridge
|
improved system stability when removing MLAG configuration; |
|
bridge
|
show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached); |
|
bth
|
improved stability on system time change; |
|
certificate
|
added no-key-export parameter for import; |
|
certificate
|
added support for cloud-dns challenge validation for sn.mynetname.net (CLI only); |
|
certificate
|
automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt; |
|
certificate
|
improved DNS challenge error reporting for Let's Encrypt; |
|
certificate
|
improved RSA key signature processing speed; |
|
certificate
|
show validity beyond year 2038; |
|
chr
|
added support for licensing over IPv6 network; |
|
chr
|
fixed incorrect disk size for ARM64; |
|
console
|
added "about" filters for "find" and "print where" commands; |
|
console
|
added "verbose=progress" mode for import status updates, and verbose output only on failures; |
|
console
|
added additional byte-array option to :convert command; |
|
console
|
added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only); |
|
console
|
added limits for dst-start and dst-end clock properties; |
|
console
|
added lock screen via :lock command; |
|
console
|
added uppercase and lowercase transform modes to :convert command; |
|
console
|
disallow ping command with empty address; |
|
console
|
display hint when requesting specific argument syntax; |
|
console
|
do not show default boot-os setting in export; |
|
console
|
fixed an issue where certain MAC address can be interpreted as time value; |
|
console
|
fixed negative values for gmt-offset clock property; |
|
console
|
fixed output of ping command in certain cases; |
|
console
|
fixed typo in firewall error message; |
|
console
|
improved :serialize and :deserialize commands and added support for DSV (delimiter separated values) format; |
|
console
|
improved large import file handling, error detection and stability; |
|
console
|
improved stability when pasting a large input; |
|
console
|
improved stability when removing script; |
|
console
|
increased default width for bitrate type of columns; |
|
console
|
removed follow-strict parameter; |
|
console
|
show rest-api name for active user connections; |
|
container
|
clear VETH address on container exit and mark interface as running only when VETH is in use; |
|
defconf
|
configure the default-route property for PPP clients only on devices with a built-in modem; |
|
detnet
|
properly detect "Internet" status when multiple detnet instances preset in network; |
|
dhcp
|
added comment property for matchers, options and option sets; |
|
dhcp
|
improved DHCP IPv4 and IPv6 client/relay/server underlying interface state change handling; |
|
dhcp
|
improved insert-queue-before, parent-queue and allow-dual-stack-queue behavior; |
|
dhcpv4-client
|
execute script on DNS server or gateway address change; |
|
dhcpv4-server
|
added "class-id" parameter for DHCP server leases; |
|
dhcpv4-server
|
added matcher ability to match substring; |
|
dhcpv4-server
|
added name for "User-Class" option (77), "Authentication" option (90), "SIP-Servers-DHCP-Option" option (120) and "Unassigned" option (163-174) in debug logs; |
|
dhcpv4-server
|
fixed setting and getting "next-server" property; |
|
dhcpv4-server
|
increased lease offer timeout to 120 seconds; |
|
dhcpv4-server
|
remove corresponding dynamic leases if their address-pool gets removed; |
|
dhcpv4-server
|
show active-server and host-name in print active command; |
|
dhcpv6-client
|
do not add default gateway twice when both prefix and address is acquired; |
|
dhcpv6-client
|
fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0; |
|
dhcpv6-client
|
pause client and remove dynamically installed objects while it becomes invalid; |
|
dhcpv6-client
|
release client on failed renew attempt; |
|
dhcpv6-client
|
update gateway address for default route on renew; |
|
dhcpv6-server
|
improved system stability; |
|
discovery
|
added discover-interval setting; |
|
discovery
|
added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs support; |
|
discovery
|
added LLDP-MED timeout; |
|
discovery
|
changed default discover-interval setting from 60s to 30s; |
|
discovery
|
set unknown bit for any unspecified link type in MAC/PHY TLV; |
|
disk
|
added "wipe-quick" file-system option to format-drive command (CLI only); |
|
disk
|
added log message when disks get added or removed; |
|
disk
|
added simple test command to test device and filesystem speeds (CLI only); |
|
disk
|
improved system stability; |
|
disk
|
remove dummy "slot1" entries on CHR; |
|
dns
|
added support for DoH with adlist; |
|
dns
|
added support for DoH with static FWD entries; |
|
dns
|
added support for mDNS proxy; |
|
dns
|
improved imported adlist parsing; |
|
dns
|
refactored adlist service internal processes and improved logging; |
|
dns
|
refactored DNS service internal processes; |
|
dns
|
show static entry type "A" field in console; |
|
dude
|
fixed map element RouterOS package upgrade functionality; |
|
ethernet
|
fixed port speed downshift functionality for CRS354 devices; |
|
ethernet
|
improved system stability for Alpine CPUs when dealing with unexpected non-UDP/TCP packet transmit; |
|
fetch
|
handle HTTP 401 status correctly; |
|
fetch
|
improved logging; |
|
file
|
renamed "creation-time" to "last-modified"; |
|
filesystem
|
improved boot speed after device is rebooted without proper shutdown; |
|
filesystem
|
refactored internal processes to minimize sector writes; |
|
firewall
|
added message when interface belonging to VRF is added in filter rules; |
|
firewall
|
fixed an issue with unsetting src-address-type; |
|
firewall
|
fixed IPv6 "nth" matcher showing up twice in help; |
|
firewall
|
fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo command; |
|
firewall
|
removed unnecessary TLS host matcher from NAT tables; |
|
health
|
fixed board-temperature for KNOT device (introduced in v7.15); |
|
health
|
fixed bogus CPU temperature spikes for CCR2216 device; |
|
health
|
fixed missing health for CRS112-8G-4S device (introduced in v7.15); |
|
health
|
improved voltage measurements for RB912UAG-6HPnD and RB912UAG-5HPnD devices; |
|
health
|
removed unnecessary health settings for RB921 and RB922 devices; |
|
health
|
upgraded fan controller firmware to latest version; |
|
hotspot
|
properly escape all reserved URI characters; |
|
ike1
|
removed unsupported NAT-D drafts with invalid payload numbers; |
|
ike2
|
improved performance by balancing multicore CPU usage for key exchange calculation; |
|
install
|
allow to save old configuration during cdrom install; |
|
install
|
fixed ARM64 cdrom install (introduced in v7.15); |
|
iot
|
added an option to delete default LoRa servers and a button to recover them if needed; |
|
iot
|
added an option to log LoRa filtered packets; |
|
iot
|
added LoRa NetID and JoinEUI filtering for LNS and CUPS connections; |
|
iot
|
added LoRa option to filter out proprietary packets; |
|
iot
|
fixed incorrect LoRa filter export behavior; |
|
iot
|
fixed LoRa inability to set SSL for LoRa servers via command line; |
|
iot
|
fixed LoRa inability to use variables for GPS-spoofing setting; |
|
ip
|
added max-sessions property for services; |
|
ip/ipv6
|
added multipath hash policy settings; |
|
ipip6
|
make IPv6 LL address random; |
|
ipsec
|
changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4; |
|
ipsec
|
improved installed SA statistics update; |
|
ipv6
|
added "d" deprecated flag for expired IPv6 SLAAC addresses; |
|
ipv6
|
allow to properly disable address when it is generated from pool; |
|
ipv6
|
allow to properly move IPv6 address from slave interface to a bridge interface; |
|
ipv6
|
do not allow adding address with invalid prefix when using pool; |
|
ipv6
|
do not allow to manually delete LL address; |
|
ipv6
|
fixed "no-dad" functionality; |
|
ipv6
|
fixed dynamic duplicate address showing when static address is already configured; |
|
ipv6
|
fixed pool allocated addresses missing after reboot; |
|
ipv6
|
fixed SLAAC address dynamic appearance; |
|
ipv6
|
improved handling of IPv6 address information; |
|
ipv6
|
improved LL address generation process; |
|
ipv6
|
properly initialize default ND "interface=all" entry; |
|
ipv6
|
respect APN settings for "add-default-route" and "use-peer-dns" also when "accept-router-advertisements=yes"; |
|
ipv6
|
warn user that reboot is required in order to properly apply accept-router-advertisements changes; |
|
isis
|
fixed filter-chain and filter-select settings; |
|
isis
|
install IPv6 link-local gateways correctly; |
|
l2tp
|
improved system stability; |
|
l3hw
|
added per-VLAN packet and byte counters to compatible switches; |
|
l3hw
|
disable L3HW on bonding modes that do not support it; |
|
log
|
added basic validation for "disk-file-name" property; |
|
lte
|
added "sms-protocol" setting in "/interface lte" menu (CLI only); |
|
lte
|
fixed "at-chat" for DELL T99W175 (PID: 0x05c6 VID: 0x90d5); |
|
lte
|
fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15); |
|
lte
|
fixed cases where modem could be handled by multiple dialer instances; |
|
lte
|
fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15); |
|
lte
|
fixed possible crash when enabling/disabling config-less modem interface; |
|
lte
|
fixed R11e-LTE no traffic flow when modem with older firmware version is used; |
|
lte
|
fixed support for Fibocom modem fm150-na; |
|
lte
|
improved modem AT/modem port open; |
|
lte
|
improvements to "/interface/lte/show-capabilities" command; |
|
media
|
improved file indexing for DLNA; |
|
modem
|
added authentication functionality to EC200A; |
|
modem
|
fixed PPP link recovery when port unexpectedly removed and returned due to modem firmware crash; |
|
modem
|
fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacity; |
|
modem
|
improved support for KNOT BG77 modem firmware update; |
|
mqtt
|
broker password is no longer exported unless "show-sensitive" flag is used; |
|
netinstall-cli
|
added check for device and package architectures match; |
|
netinstall-cli
|
added support for multiple device install; |
|
netinstall-cli
|
allow mixed package architectures; |
|
netwatch
|
added DNS probe; |
|
netwatch
|
added ttl and accept-icmp-time-exceeded properties for ICMP probe; |
|
netwatch
|
use time format according to ISO standard; |
|
ospf
|
improved system stability during LSA monitoring; |
|
ovpn
|
improved system stability; |
|
pimsm
|
improved system stability; |
|
poe-out
|
fixed low-voltage detection while PD is connected for KNOT device; |
|
poe-out
|
fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15); |
|
poe-out
|
upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces); |
|
port
|
added IPv6 support for the "remote-access" feature; |
|
ppp
|
added SIM hot-plug enable command to default init-string for KNOT and CME gateway; |
|
ppp
|
added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-client; |
|
ppp
|
automatically generate IPv6 firewall rules when filter-id is specified; |
|
ppp
|
fixed dynamic queue default name (introduced in v7.15); |
|
ppp
|
fixed PPP info parser showing error for BG77 modem running on KNOT AUX AT/modem port; |
|
profiler
|
classify wifi processing as "wireless"; |
|
ptp
|
added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devices; |
|
qos-hw
|
added H and I flags to queues; |
|
qos-hw
|
added new monitoring properties for ports and global QoS stats; |
|
qos-hw
|
added queue-buffers property to tx-manager; |
|
qos-hw
|
allow port print stats, usage and pfc while QoS is disabled; |
|
qos-hw
|
allow to set queue-buffers in bytes, percent or auto; |
|
qos-hw
|
enabling ECN forces WRED (unless share is disabled); |
|
qos-hw
|
fixed egress-rate limit validation; |
|
qos-hw
|
fixed global buffer limits for 98DX8212 and 98DX8332 switches; |
|
qos-hw
|
fixed WRED thresholds; |
|
qos-hw
|
improved behavior when changing ports tx-manger; |
|
qos-hw
|
limit WRED to queues with enabled shared buffers; |
|
queue
|
improved system stability; |
|
quickset
|
removed Basic AP mode; |
|
rose-storage
|
fixed "/file sysnc status" parameter to be read-only; |
|
rose-storage
|
moved "/rsync-daemon" to "/file rsync-daemon; |
|
rose-storage
|
renamed sync "remote-addr" property to "remote-address"; |
|
route
|
added ability to redistribute isis routes; |
|
route
|
fixed incorrectly handled route distinguisher and route targets (introduced in v7.15); |
|
route
|
fixed memory leak (introduced in v7.15); |
|
route
|
fixed some missing route parameters when printing (introduced in v7.15); |
|
route
|
improved route attribute handling (may increase memory usage); |
|
route
|
improved routing table update performance; |
|
route
|
improved stability when getting entries from large routing tables; |
|
route
|
place static route in the correct VRF when vrf-interface parameter is used; |
|
route
|
rename route type from is-is to isis; |
|
routerboard
|
improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required); |
|
routerboard
|
improved Etherboot stability for IPQ-40xx devices ("/system routerboard upgrade" required); |
|
routerboot
|
improved boot process ("/system routerboard upgrade" required); |
|
rpki
|
fixed preference sorting; |
|
sfp
|
fixed calculated link length based on EEPROM in certain cases; |
|
sfp
|
fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ device; |
|
sfp
|
fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe device; |
|
sfp
|
fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe device; |
|
sms
|
added polling setting so that RouterOS itself checks SMS instead of relying on URC messages; |
|
snmp
|
added support for KNOT BG77 modem cellular signal info; |
|
snmp
|
fixed LAST-UPDATED format in MIKROTIK-MIB; |
|
ssh
|
fixed SSH cryptographic accelerator selection for GCM cipher (introduced in v7.14); |
|
ssh
|
fixed unsupported user SSH public key import (introduced in v7.15); |
|
ssh
|
improved system stability when SSH tries to bind to non-existing interface; |
|
supout
|
added detnet section; |
|
supout
|
added monitor command for all wifi interfaces; |
|
supout
|
added netwatch section; |
|
supout
|
added user SSH keys section; |
|
supout
|
increased console output width; |
|
supout
|
limit address-list and connection tracking entries to 999 in supout.rif; |
|
supout
|
rename "store" section to "disk"; |
|
switch
|
fixed an issue where half-duplex links could occupy Tx resources for 98DX8xxx, 98DX4xxx, 98DX325x switch chips; |
|
switch
|
fixed an issue with Ethernet port group hang for CRS354 devices; |
|
switch
|
fixed Ethernet interface counter 32bit overflow for CRS354 devices; |
|
switch
|
fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15); |
|
switch
|
improved switch reset; |
|
switch
|
improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices; |
|
system
|
added "clock" logging topic for time change related messages; |
|
system
|
added critical log message when not enough space to store new configuration; |
|
system
|
added log message if device failed to reboot gracefully; |
|
system
|
added more details to user initiated reboot (reset, upgrade, downgrade); |
|
system
|
added support for upgrade over IPv6 network; |
|
system
|
do not cancel package upgrade if another architecture packages found on the router; |
|
system
|
do not download packages scheduled for uninstall; |
|
system
|
do not start IPsec and certificate processes when not necessary; |
|
system
|
fixed "free disk space" error message on system upgrade/downgrade; |
|
system
|
fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15); |
|
system
|
fixed empty logs after reboot in certain cases; |
|
system
|
improved internal system services messaging; |
|
system
|
improved performance for TCP input; |
|
system
|
improved reporting of total memory size; |
|
system
|
improved system stability for CCR2004-1G-2XS-PCIe device; |
|
system
|
improved system stability for RBSXTsq5nD and RBLDF-5nD; |
|
system
|
improved system stability; |
|
system
|
improved watchdog and kernel panic reporting; |
|
system
|
reduced RAM usage for ARM64 devices; |
|
system
|
set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required); |
|
system
|
set flash-boot mode as "boot-device" after system reset initiated from software; |
|
traceroute
|
do not stop traceroute after 5 consecutive unreachable hops; |
|
tunnel
|
allow specifying IPv6 LL address as "remote-address" for EoIPv6, GRE6 and IPIP6 tunnels; |
|
user
|
added inactivity timeout for non-GUI sessions; |
|
user-manager
|
updated logo; |
|
vxlan
|
added comment support to VTEPs; |
|
vxlan
|
prevent creating multiple VTEPs with same IP/port combination; |
|
webfig
|
allow to enter time that exceeds 23:59:59; |
|
webfig
|
correctly display default value for number type; |
|
webfig
|
enabled hotlock mode for terminal; |
|
webfig
|
fixed an issue where wrong menu title was shown; |
|
webfig
|
fixed issue with incorrectly applying optional fields; |
|
webfig
|
fixed sorting by datetime; |
|
webfig
|
use "any" argument by default for Torch "Port" property; |
|
wifi
|
added "slave-name-format"; |
|
wifi
|
added interface provisioning logs; |
|
wifi
|
adjusted virtual interface naming when provisioning local radios; |
|
wifi
|
do not allow frequency-scan on virtual interfaces; |
|
wifi
|
do not unset radio-mac and master-interface properties on reset; |
|
wifi
|
enable creating virtual wifi interfaces using "copy-from" setting; |
|
wifi
|
fixed packet receive when having multiple station interfaces; |
|
wifi
|
fixed signal strength reporting during association (introduced in v7.15); |
|
wifi
|
fixed typo in log message; |
|
wifi
|
improve regulatory compliance for Chateau ax devices; |
|
wifi
|
improved interface stability when receiving invalid FT authentication frames; |
|
wifi
|
improved system stability after interface hang; |
|
wifi
|
improved WPA3 PMKSA handling when access-lists with custom passphrases are used; |
|
wifi
|
make sniffer tool return an error when attempting to sniff with a radio which does not support it; |
|
wifi
|
send channel switch announcements to clients when switching channels at requested re-select intervals; |
|
wifi
|
use name-format also for local interfaces when provisioning; |
|
wifi-qcom
|
add spectral-scan and spectral-history tools (CLI only); |
|
wifi-qcom-ac
|
count dropped packets to "tx-drop" instead of "tx-error"; |
|
wifi-qcom-ac
|
improved memory allocating process; |
|
winbox
|
added "Import Router ID" parameter under "Routing/BGP/VPN" menu; |
|
winbox
|
added "Switch/QoS" menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices; |
|
winbox
|
added "Trace" column under "System/History" menu; |
|
winbox
|
added configuration settings for ROSE; |
|
winbox
|
added extra "File System" under "Format Drive" button; |
|
winbox
|
added missing "Default Name" property for interfaces; |
|
winbox
|
do not show "Last Logged In" and "Expire Password" when creating new system user; |
|
winbox
|
fixed "Authority" property under "System/Certificates/Requests" menu; |
|
winbox
|
fixed duplicated "MVRP Attributes" table; |
|
winbox
|
fixed false invalid flag under "System/Ports/Remote Access" menu; |
|
winbox
|
fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15); |
|
winbox
|
fixed signal bar "excellent" tooltip; |
|
winbox
|
fixed Switch menu for RB1100AHx4 device; |
|
winbox
|
improved QR code display; |
|
winbox
|
moved DHCPv6 Server "Allow Dual Stack Queue" property from General to Queues tab; |
|
winbox
|
moved Switch menu tabs to individual menus; |
|
winbox
|
properly display available address-pools for DHCPv6 server configuration; |
|
winbox
|
removed deprecated x86/CHR specific settings under "System/Resources" menu; |
|
winbox
|
removed spare argument for "PFS Group" property under "IP/IPsec/Proposals" menu; |
|
winbox
|
renamed configurable wifi property "Tx Power" to "Max Tx Power"; |
|
winbox
|
separated different Watchdog settings into logical tabs; |
|
winbox
|
use CAP serial number with "Set Identity" button under "WiFi/Remote CAP" menu; |
|
winbox
|
use correct default value for "Partition Offset" property; |
|
winbox/webfig
|
fixed skins (introduced in v7.15); |
|
wireless
|
allow unsetting signal-range and ssid-regext properties for capsman access-list; |
|
wireless
|
fixed dynamic VLAN assignments for vlan-filtering bridge in certain cases; |
|
wireless
|
limit antenna-gain property to 100; |
|
www
|
log out inactive REST API users; |
|
x86
|
added missing PCI ids for bnx2x driver; |
|
x86
|
added RTL8156 driver support; |
|
x86
|
fixed missing serial ports with MCS9900; |