MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| 6to4 | fixed 6to4 tunnel LL address generation after system reboot; |
| 6to4 | limit keepalive timeout maximum value; |
| 6to4 | make "remote-address" parameter mandatory; |
| address | added "S" flag for addresses that belong to a slave interface; |
| arm64/x86 | added rtl8111/8168/8411 firmware; |
| bridge | added L2 MDB support for switch chips with HW offloaded IGMP snooping; |
| bridge | do not allow duplicate ports; |
| bth | improved system stability; |
| certificate | added support for cloud-dns challenge validation for sn.mynetname.net (CLI only); |
| certificate | automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt; |
| chr | fixed incorrect disk size for ARM64; |
| console | added additional byte-array option to :convert command; |
| console | fixed an issue where certain MAC address can be interpreted as time value; |
| console | fixed typo in firewall error message; |
| console | improved stability when pasting a large input; |
| defconf | configure the default-route property for PPP clients only on devices with a built-in modem; |
| dhcp | added comment property for matchers, options and option sets; |
| dhcpv4-server | added matcher ability to match substring; |
| dhcpv4-server | added name for "User-Class" option (77), "Authentication" option (90), "SIP-Servers-DHCP-Option" option (120) and "Unassigned" option (163-174) in debug logs; |
| dhcpv6-client | release client on failed renew attempt (additional fixes); |
| discovery | added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs support; |
| discovery | added LLDP-MED timeout; |
| discovery | set unknown bit for any unspecified link type in MAC/PHY TLV; |
| disk | added log message when disks get added or removed; |
| dns | added support for DoH with static FWD entries; |
| dns | added support for mDNS proxy (CLI only); |
| dns | refactored DNS service internal processes; |
| firewall | removed unnecessary TLS host matcher from NAT tables; |
| health | removed unnecessary health settings for RB921 and RB922 devices; |
| install | allow to save old configuration during cdrom install; |
| iot | added an option to log LoRa filtered packets (additional fixes); |
| iot | added LoRa option to filter out proprietary packets (additional fixes); |
| ipip6 | make IPv6 LL address random; |
| ipsec | improved performance by balancing multicore CPU usage; |
| ipv6 | added "d" deprecated flag for expired IPv6 SLAAC addresses; |
| ipv6 | allow to properly disable address when it is generated from pool; |
| ipv6 | allow to properly move IPv6 address from slave interface to a bridge interface; |
| ipv6 | do not allow adding address with invalid prefix when using pool; |
| ipv6 | do not allow to manually delete LL address; |
| ipv6 | fixed "no-dad" functionality; |
| ipv6 | fixed SLAAC address dynamic appearance; |
| ipv6 | properly initialize default ND "interface=all" entry; |
| ipv6 | warn user that reboot is required in order to properly apply accept-router-advertisements changes; |
| leds | fixed system LED to indicate correct RAT for Chateau (introduced in v7.16beta1); |
| lte | fixed modem dialer disable for Chateau 5G devices when cellular modem support mode set to serial (introduced in v7.16beta2); |
| lte | improved system stability for MBIM modem during AT query (introduced in v7.16beta1); |
| modem | fixed cases where USB bus could switch places (introduced in v7.16beta1); |
| modem | fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15) (additional fixes); |
| netwatch | use time format according to ISO standard; |
| port | added IPv6 support for the "remote-access" feature; |
| ppp | automatically generate IPv6 firewall rules when filter-id is specified; |
| profiler | classify wifi processing as "wireless"; |
| rose-storage | fixed "/file sysnc status" parameter to be read-only; |
| rose-storage | moved "/rsync-daemon" to "/file rsync-daemon; |
| route | fixed incorrectly handled route distinguisher and route targets (introduced in v7.15); |
| sfp | fixed calculated link length based on EEPROM in certain cases; |
| ssh | improved system stability when SSH tries to bind to non-existing interface; |
| ssh | fixed SSH cryptographic accelerator selection (introduced in v7.14); |
| supout | rename "store" section to "disk"; |
| switch | fixed an issue where half-duplex links could occupy Tx resources for 98DX8xxx, 98DX4xxx, 98DX325x switch chips; |
| switch | fixed an issue with Ethernet port group hang for CRS354 devices; |
| system | added "clock" logging topic for time change related messages; |
| system | do not start IPsec and certificate processes when not necessary; |
| system | fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15); |
| system | improved reporting of total memory size; |
| tunnel | allow specifying IPv6 LL address as "remote-address" for EoIPv6, GRE6 and IPIP6 tunnels; |
| user | added inactivity timeout for non-GUI sessions; |
| wifi | added "slave-name-format" (CLI only); |
| wifi | adjusted virtual interface naming when provisioning local radios; |
| wifi | do not allow frequency-scan on virtual interfaces; |
| wifi | fixed packet receive when having multiple station interfaces; |
| wifi | fixed signal strength reporting during association (introduced in v7.15) (additional fixes); |
| wifi | improve regulatory compliance for Chateau ax devices; |
| wifi-qcom | add spectral-scan and spectral-history tools (CLI only) (additional fixes); |
| wifi-qcom-ac | count dropped packets to "tx-drop" instead of "tx-error"; |
| winbox | fixed false invalid flag under "System/Ports/Remote Access" menu; |
| winbox | moved Switch menu tabs to individual menus (additional fixes); |
| winbox | separated different Watchdog settings into logical tabs; |
| winbox/webfig | fixed skins (introduced in v7.15); |
| wireless | allow unsetting signal-range and ssid-regext properties for capsman access-list (additional fixes); |
| x86 | added missing PCI ids for bnx2x driver; |
| Component | Change |
|---|---|
| bth | improved system stability; |
| defconf | configure the default-route property for PPP clients only on devices with a built-in modem; |
| modem | fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15); |
| route | fixed incorrectly handled route distinguisher and route targets (introduced in v7.15); |
| ssh | fixed SSH cryptographic accelerator selection (introduced in v7.14); |
| switch | fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15); |
| system | fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15); |
| winbox/webfig | fixed skins (introduced in v7.15); |
| Component | Change |
|---|---|
| arm64 | increased reserved storage space for bootloader; |
| bgp | fixed BGP sessions missing vpnv6 afi; |
| bgp | fixed cluster-list and originator-id; |
| bridge | fixed typo in filter and NAT error message; |
| chr | added support for licensing over IPv6 network; |
| dhcpv4-server | added "class-id" parameter for DHCP server leases; |
| dhcpv4-server | fixed setting and getting "next-server" property; |
| dhcpv4-server | increased lease offer timeout to 120 seconds; |
| disk | added simple test command to test device and filesystem speeds (CLI only) (additional fixes); |
| disk | improved system stability; |
| dns | added support for DoH with adlist; |
| ethernet | fixed port speed downshift functionality for CRS354 devices; |
| firewall | added message when interface belonging to VRF is added in filter rules (additional fixes); |
| health | improved voltage measurements for RB912UAG-6HPnD device; |
| iot | added an option to delete default LoRa servers and a button to recover them if needed; |
| iot | added an option to log LoRa filtered packets; |
| ip/ipv6 | added multipath hash policy settings; |
| ip/ipv6 | warn user that reboot is required in order to properly apply changes under IP/Settings and IPv6/Settings menus; |
| ipsec | changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4; |
| ipv6 | fixed dynamic duplicate address showing when static address is already configured; |
| ipv6 | improved LL address generation process; |
| l2tp | improved system stability; |
| lte | fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15); |
| lte | fixed MBIM modem registration on the network (introduced in v7.16beta1); |
| modem | fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15); |
| netinstall-cli | added support for multiple device install (additional fixes); |
| poe-out | upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces); |
| ppp | fixed dynamic queue default name (introduced in v7.15); |
| qos-hw | fixed incorrect per-port packet and byte cap (introduced in v7.16beta1); |
| queue | improved system stability; |
| route | fixed memory leak (introduced in v7.15); |
| route | fixed some missing route parameters when printing (introduced in v7.15); |
| routerboot | improved boot process ("/system routerboard upgrade" required); |
| sfp | fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ device; |
| switch | fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15); |
| system | added support for upgrade over IPv6 network; |
| system | improved watchdog and kernel panic reporting (additional fixes); |
| system | reduced RAM usage for ARM64 devices; |
| wifi-qcom | add spectral-scan and spectral-history tools (CLI only) (additional fixes); |
| winbox | added "Switch/QoS" menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices; |
| winbox | added "Trace" column under "System/History" menu; |
| winbox | do not show "Last Logged In" and "Expire Password" when creating new system user; |
| winbox | fixed "Authority" property under "System/Certificates/Requests" menu; |
| winbox | fixed error when changing wifi interface settings in some rare conditions (introduced in v7.16beta1); |
| winbox | moved DHCPv6 Server "Allow Dual Stack Queue" property from General to Queues tab; |
| winbox | moved Switch menu tabs to individual menus; |
| wireless | allow to unset signal-range and ssid-regext properties for capsman access-list; |
| Component | Change |
|---|---|
| bgp | fixed BGP sessions missing vpnv6 afi; |
| bgp | fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15); |
| bgp | fixed vpnv6 safi; |
| health | fixed board-temperature for KNOT device (introduced in v7.15); |
| health | fixed missing health for CRS112-8G-4S device (introduced in v7.15); |
| install | fixed ARM64 cdrom install (introduced in v7.15); |
| lte | fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15); |
| lte | fixed cases where modem could be handled by multiple dialer instances; |
| modem | fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacity; |
| poe-out | fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15); |
| ppp | fixed dynamic queue default name (introduced in v7.15); |
| route | fixed memory leak (introduced in v7.15); |
| route | fixed some missing route parameters when printing (introduced in v7.15); |
| wifi | fixed signal strength reporting during association (introduced in v7.15); |
| wifi | improved WPA3 PMKSA handling when access-lists with custom passphrases are used; |
| winbox | fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15); |
| winbox | fixed missing system note on login (introduced in v7.15); |
| Component | Change |
|---|---|
| bgp | fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15); |
| bgp | fixed vpnv6 safi; |
| bgp | small logging improvements; |
| bridge | added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge; |
| bridge | added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade); |
| bridge | added max-learned-entries property for bridge; |
| bridge | added message about who created a dynamic VLAN entry; |
| bridge | added MVRP support for VLANs assigned to bridge; |
| bridge | fixed BPDU address when using "ether-type=0x88a8" configuration; |
| bridge | improved system stability when removing MLAG configuration; |
| bridge | show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached); |
| certificate | added no-key-export parameter for import; |
| certificate | improved DNS challenge error reporting for Let's Encrypt; |
| certificate | show validity beyond year 2038; |
| console | added "verbose=progress" mode for import status updates, and verbose output only on failures; |
| console | added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only); |
| console | added limits for dst-start and dst-end clock properties; |
| console | added lock screen via :lock command; |
| console | added uppercase and lowercase transform modes to :convert command; |
| console | disallow ping command with empty address; |
| console | display hint when requesting specific argument syntax; |
| console | do not show default boot-os setting in export; |
| console | fixed negative values for gmt-offset clock property; |
| console | fixed output of ping command in certain cases; |
| console | improve large import file handling, error detection and stability; |
| console | improved :serialize and :deserialize commands and added support for DSV (delimiter separated values) format; |
| console | improved stability when removing script; |
| console | removed follow-strict parameter; |
| console | show rest-api name for active user connections; |
| container | clear VETH address on container exit and mark interface as running only when VETH is in use; |
| detnet | properly detect "Internet" status when multiple detnet instances preset in network; |
| dhcp | improved insert-queue-before, parent-queue and allow-dual-stack-queue behavior; |
| dhcpv4-client | execute script on DNS server or gateway address change; |
| dhcpv4-server | show active-server and host-name in print active command; |
| dhcpv6-client | do not add default gateway twice when both prefix and address is acquired; |
| dhcpv6-client | fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0; |
| dhcpv6-client | pause client and remove dynamically installed objects while it becomes invalid; |
| dhcpv6-client | release client on failed renew attempt; |
| dhcpv6-client | update gateway address for default route on renew; |
| dhcpv6-server | improved system stability; |
| disk | added simple test command to test device and filesystem speeds (CLI only); |
| dude | fixed map element RouterOS package upgrade functionality; |
| fetch | handle HTTP 401 status correctly; |
| fetch | improved logging; |
| firewall | added message when interface belonging to VRF is added in filter rules; |
| firewall | fixed IPv6 "nth" matcher showing up twice in help; |
| firewall | fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo command; |
| health | fixed board-temperature for KNOT device (introduced in v7.15); |
| health | fixed bogus CPU temperature spikes for CCR2216 device; |
| health | fixed missing health for CRS112-8G-4S device (introduced in v7.15); |
| health | upgraded fan controller firmware to latest version; |
| ike1 | removed unsupported NAT-D drafts with invalid payload numbers; |
| install | fixed ARM64 cdrom install (introduced in v7.15); |
| iot | added LoRa NetID and JoinEUI filtering for LNS and CUPS connections; |
| iot | added LoRa option to filter out proprietary packets; |
| iot | fixed LoRa inability to use variables for GPS-spoofing setting; |
| ip | added max-sessions property for services; |
| ipv6 | fixed pool allocated addresses missing after reboot; |
| ipv6 | respect APN settings for "add-default-route" and "use-peer-dns" also when "accept-router-advertisements=yes"; |
| isis | fixed filter-chain and filter-select settings; |
| isis | install IPv6 link-local gateways correctly; |
| l3hw | added per-VLAN packet and byte counters to compatible switches; |
| l3hw | disable L3HW on bonding modes that do not support it; |
| lte | added "sms-protocol" setting in "/interface lte" menu (CLI only); |
| lte | fixed "at-chat" for DELL T99W175 (PID: 0x05c6 VID: 0x90d5); |
| lte | fixed cases where modem could be handled by multiple dialer instances; |
| lte | fixed support for Fibocom modem fm150-na; |
| lte | improvements to "/interface/lte/show-capabilities" command; |
| media | improved file indexing for DLNA; |
| modem | added authentication functionality to EC200A; |
| modem | fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacity; |
| modem | improved support for KNOT BG77 modem firmware update; |
| mqtt | broker password is no longer exported unless "show-sensitive" flag is used; |
| netinstall-cli | added check for device and package architectures match; |
| netinstall-cli | added support for multiple device install; |
| netinstall-cli | allow mixed package architectures; |
| netwatch | added DNS probe; |
| netwatch | added ttl and accept-icmp-time-exceeded properties for ICMP probe; |
| ospf | improved system stability during LSA monitoring; |
| ovpn | improved system stability; |
| pimsm | improved system stability; |
| poe-out | fixed low-voltage detection while PD is connected for KNOT device; |
| poe-out | fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15); |
| poe-out | upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces); |
| ppp | added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-client; |
| ptp | added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devices; |
| qos-hw | added H and I flags to queues (CLI only); |
| qos-hw | added new monitoring properties for ports and global QoS stats (CLI only); |
| qos-hw | added queue-buffers property to tx-manager (CLI only); |
| qos-hw | allow port print stats, usage and pfc while QoS is disabled (CLI only); |
| qos-hw | allow to set queue-buffers in bytes, percent or auto (CLI only); |
| qos-hw | enabling ECN forces WRED (unless share is disabled); |
| qos-hw | fixed global buffer limits for 98DX8212 and 98DX8332 switches; |
| qos-hw | limit WRED to queues with enabled shared buffers; |
| quickset | removed Basic AP mode; |
| route | added ability to redistribute isis routes; |
| route | place static route in the correct VRF when vrf-interface parameter is used; |
| route | rename route type from is-is to isis; |
| rpki | fixed preference sorting; |
| sfp | fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe device; |
| sfp | fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe device; |
| sms | added polling setting so that RouterOS itself checks SMS instead of relying on URC messages; |
| snmp | added support for KNOT BG77 modem cellular signal info; |
| snmp | fixed LAST-UPDATED format in MIKROTIK-MIB; |
| supout | added detnet section; |
| supout | added monitor command for all wifi interfaces; |
| supout | added netwatch section; |
| supout | added user SSH keys section; |
| supout | increased console output width; |
| supout | limit address-list and connection tracking entries to 999 in supout.rif; |
| switch | fixed Ethernet interface counter 32bit overflow for CRS354 devices; |
| switch | improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices; |
| system | added log message if device failed to reboot gracefully; |
| system | added more details to user initiated reboot (reset, upgrade, downgrade); |
| system | do not cancel package upgrade if another architecture packages found on the router; |
| system | do not download packages scheduled for uninstall; |
| system | fixed empty logs after reboot in certain cases; |
| system | improved system stability for RBSXTsq5nD and RBLDF-5nD; |
| system | improved system stability; |
| system | improved watchdog and kernel panic reporting; |
| system | set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required); |
| system | set flash-boot mode as "boot-device" after system reset initiated from software; |
| user | added inactivity timeout for non-GUI sessions (CLI only); |
| user-manager | updated logo; |
| vxlan | added comment support to VTEPs; |
| vxlan | prevent creating multiple VTEPs with same IP/port combination; |
| webfig | fixed issue with incorrectly applying optional fields; |
| wifi | do not unset radio-mac and master-interface properties on reset; |
| wifi | enable creating virtual wifi interfaces using "copy-from" setting; |
| wifi | fixed signal strength reporting during association (introduced in v7.15); |
| wifi | fixed typo in log message; |
| wifi | improved interface stability when receiving invalid FT authentication frames; |
| wifi | improved WPA3 PMKSA handling when access-lists with custom passphrases are used; |
| wifi | make sniffer tool return an error when attempting to sniff with a radio which does not support it; |
| wifi | use name-format also for local interfaces when provisioning; |
| wifi-qcom | add spectral-scan and spectral-history tools (CLI only); |
| winbox | added "Import Router ID" parameter under "Routing/BGP/VPN" menu; |
| winbox | fixed duplicated "MVRP Attributes" table; |
| winbox | fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15); |
| winbox | fixed signal bar "excellent" tooltip; |
| winbox | removed deprecated x86/CHR specific settings under "System/Resources" menu; |
| winbox | removed spare argument for "PFS Group" property under "IP/IPsec/Proposals" menu; |
| winbox | use CAP serial number with "Set Identity" button under "WiFi/Remote CAP" menu; |
| wireless | allow to unset signal-range and ssid-regext properties for capsman access-list (CLI only); |
| wireless | fixed dynamic VLAN assignments for vlan-filtering bridge in certain cases; |
| wireless | limit antenna-gain property to 100; |
| www | log out inactive REST API users; |
| x86 | added RTL8156 driver support; |