MikroTik Changelogs

Search changelog entries

7.13beta2 Testing 2023-Nov-14 (2 years ago)
Component Change
bridge fixed missing "S" flag after configuration changes (introduced in v7.13beta1);
certificate added HTTP redirect support for CRL download;
certificate added support for certificates with key size 16384;
console added ":grep" command;
console added "interface" name when printing "interface/pppoe-server" entries;
console fixed missing escaped characters when using print in certain menus (introduced in v7.13beta1);
disk fixed hang on reboot when network file systems mounted;
lora added CUPs protocol support;
lte disabled IMS service for Chateau 5G on A1 HR network;
ppc fixed RouterOS bootup (introduced in v7.12);
route-filter improved performance;
supout added multiple WiFi sections;
wifi improved system stability when using sniffer (introduced in v7.13beta1);
winbox improved connection speed;
7.12 Stable 2023-Nov-09 (2 years ago)
Component Change
api fixed fetching objects with warning option from REST API;
bfd fixed sessions when setting VRF;
bfd improved system stability;
bgp fixed "atomic-aggregate" always set in output;
bgp fixed "input.filter-chain" argument selection in VPN configuration;
bgp fixed local and remote port settings for BGP connections;
bgp fixed typos and missing spaces in log messages;
bgp implemented IGP metric sending in BGP messages;
bgp improved logging;
bgp increase "hold-time" limit to 65000;
bluetooth added basic support for connecting to BLE peripheral devices;
bluetooth use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
bridge fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
bridge fixed untagged VLAN entry disable;
bridge fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
bridge improved system stability;
bridge improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
bth added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
calea improved system stability when trying to add rules without the CALEA package;
certificate allow to get and maintain Let's Encrypt certificate in IPv6 environment;
certificate allow to remove issued certificates when CRL is not used;
certificate fixed "subject-alt-name" duplicating itself when SCEP is used;
certificate fixed certificate auto renewal via SCEP;
certificate improved certificate validation logging error messages;
certificate log CRL HTTP errors under the "error" logging topic;
chr iavf updated driver to 4.9.1 version;
chr increased OVA default RAM amount from 160MB to 256MB;
console added ":jobname" command;
console added "as-string" and "as-string-value" properties for "get" command;
console added "terminal/ask" command;
console added "transform" property for ":convert" command;
console display "End-User License Agreement" prompt after configuration reset;
console export required properties with default values;
console fixed scheduler "on-event" script highlighting when editing;
console improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
console improved multi-argument property parsing into array;
console improved randomness for ":rndstr" and ":rndnum" commands;
console improved stability and responsiveness;
console improved stability when editing long scripts;
console improved stability when using "special-login";
console improved system stability through RoMON session;
console improved system stability when using autocomplete;
console improved system stability;
console restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services;
console show full date and time in scheduler "next-run" property;
dhcp fixed DHCP server and relay related response delays;
email rename "address" property to "server";
ethernet added "supported" and "sfp-supported" values for "monitor" command;
firewall added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
flash show more accurate "total-hdd-space" resource property;
gps expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512");
ike1 fixed invalid key length on phase1 negotiation;
ike1 log an error when non-RSA keys are being used;
ike2 improved rekey collision handling;
interface added "macvlan" interface support;
iot fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
iot fixed behavior where GPIO output state would change on boot;
ipsec fixed Diffie-Hellman public value encoding size;
ipsec fixed IPSec policy when using modp3072;
ipsec fixed minor typo in logs;
ipsec reduce disk writes when started without active configuration;
ipv6 fixed IPv6 RA delay time from 5s to 500ms according to RFC;
ipv6 send RA and RA deprecate messages out three times instead of just once;
l3hw fixed IPv6 route suppression;
l3hw improved system stability during IPv6 route offloading;
l3hw prioritize local IP addresses over the respective /32 and /128 routes;
led fixed "interface-status" configuration for virtual interfaces;
led fixed 5G modem mobile network category LED colours;
leds added "dark-mode" functionality for RBwAPG-5HacD2HnD;
leds added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
log improved logging for user actions;
lora added LNS protocol support;
lte added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
lte added SINR reporting for FG621-EA modem;
lte changed R11e-LTE ARP behavior to NoArp;
lte fixed 5G data-class reporting for Chateau 5G;
lte fixed APN authentification in multi APN setup for R11e-LTE6;
lte fixed FG621-EA possible timeouts during firmware upgrade;
lte fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
lte fixed RSSI for FG621-EA modem to show the correct value;
lte fixed Sierra modem detection for modems with vendor-specific USB descriptors;
lte fixed Sierra modem initialization;
lte fixed startup race condition when SIM card is in "up" slot for LtAP mini;
lte fixed sub-interface auto-removal in multiple APN setups;
lte show correct data class when connected to 5G SA network;
lte use more compact logging messages;
modbus added additional security settings for Modbus TCP;
mpls added option to match and set MPLS EXP with bridge and mangle rules;
mpls fixed "propagate-ttl=no" setting;
mpls improved FastPath next-hop selection hash algorithm;
mqtt added on-message feature for subscribed topics;
mqtt added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time;
mqtt added wildcard topic subscription support;
netinstall added option to discard branding package;
netinstall display package filename in GUI Description column if package description is not specified;
netinstall-cli added empty configuration option "-e";
netinstall-cli added option to discard branding package;
netinstall-cli allow ".rsc" script filenames;
netinstall-cli prioritise interface option over address option;
netinstall-cli updated configuration option description;
netwatch decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
ospf fixed adding ECMP routes;
ospf fixed BFD on virtual-link with configured VRF;
ospf fixed OSPFv3 authentication header length calculation;
ospf fixed OSPFv3 not working with NSSA areas;
ospf fixed parsing of opaque LSAs used by TE;
ospf fixed translated NSSA routes not showing in backbone;
ovpn added "tls-auth" option support for imported .ovpn profiles;
ovpn improved system stability;
pimsm fixed BSR update process;
pimsm fixed UIB update process;
pimsm improved system stability;
poe-out driver optimization for AF/AT controlled boards;
poe-out fixed rare CRS328 poe-out menu and poe-out port config loss after reboot;
poe-out improved "auto" mode for devices with single PoE-out port;
poe-out removed "auto" mode support for L009 devices;
port add support for Huawei MS237h-517;
port expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
qsfp added 50Gbps rate support for QSFP28 interfaces;
qsfp fixed incorrect QSFP temperature readings in negative temperature;
qsfp improved auto link detection for AOC cables;
qsfp use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
quickset fixed "LAN" interface list members if configuration does not contain bridge;
rip added BFD support;
rip fixed session not working in VRF;
route added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory;
route added "suppress-hw-offload" setting for IPv6 routes;
route fixed gateway after link restart;
route removed deprecated "received-from" property;
route reverse community "delete" and "filter" command behavior;
routerboard added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices;
routerboard fixed "reset-button" support for wAP ac and wAP R ac devices;
sfp added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips;
sfp fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
sfp fixed occasional bad EEPROM data reading for L009 devices;
sfp improved interface stability for SFP and QSFP types of interfaces;
sfp improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips;
snmp changed "mtxrGaugeValue" type to integer;
ssh added support for user ed25519 public keys;
ssh allow to specify key owner on import;
ssh fixed SSH tunnel performance (introduced in v7.10);
ssh improved connection stability when pasting large chunks of text into console;
supout added interface list members section;
supout added LLDP power to supout.rif;
supout fixed BFD section;
switch improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
switch improved switch chip stability for CCR2004-16g-2s+ devices;
system fixed process multithreading (introduced in v7.9);
system improved system stability during booting for L009 devices;
system improved system stability when MD5 checksums are used;
tftp fixed empty file name matching;
tile improved system stability when using queues;
traffic-generator added "priority" property for "inject" command;
traffic-generator fixed traffic-generator on CHR and x86;
usb added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
vrf limit maximum VRFs to 1024;
vxlan improved system stability for Tile devices;
webfig fixed "Days" property configuration change under "IP/Firewall" menu;
webfig fixed timezone for interface "Last Link Down/Up Time";
webfig improved Webfig performance and responsiveness;
webfig try to re-establish connection after disconnect;
wifiwave2 added an alternative QoS priority assignment mechanism based on IP DSCP;
wifiwave2 added comment property for registration-table;
wifiwave2 added station-bridge interface mode;
wifiwave2 correctly add interface to specified "datapath.interface-list";
wifiwave2 do not show default "l2mtu" on compact export;
wifiwave2 enable changing interface MTU and L2MTU;
wifiwave2 fixed malformed Interworking packet elements;
wifiwave2 fixed PTK renewal for interfaces in station mode;
wifiwave2 fixed re-connection failures for 802.11ax interfaces in station mode;
wifiwave2 fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
wifiwave2 fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
wifiwave2 fixed warning on CAP devices when radar detected;
wifiwave2 implemented an option to transmit IP multicast packets as unicasts;
wifiwave2 improved compliance with regulatory requirements;
wifiwave2 limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that;
wifiwave2 list APs with a higher maximum data rate as more preferable roaming candidates;
wifiwave2 log more information regarding authentication failures;
wifiwave2 make 4-way handshake procedure more robust when acting as supplicant (client);
wifiwave2 use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid";
winbox added "Addresses" property under "Routing/BFD/Configuration" menu;
winbox added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072;
winbox added "Comment" under "Routing/BFD/Configuration" menu;
winbox added "g" flag under "IPv6/Routes" menu;
winbox added "Host Key Type" setting under "IP/SSH" menu;
winbox added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus;
winbox added "Name Format" property under "WifiWave2/Provisioning" menu;
winbox added "Remote Min Tx" parameter under "Routing/BFD/Session" menu;
winbox added "Startup Delay" setting under "Tools/Netwatch" menu;
winbox added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD;
winbox added "Use BFD" setting under "Routing/RIP/Interface-Template" menu;
winbox added Enable/Disable button under "Routing/RIP/Static Neighbors" menu;
winbox added missing properties under "WifiWave2" menu;
winbox added MQTT subscription menu;
winbox allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
winbox allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
winbox allow to specify server as DNS name under "Tools/Email" menu;
winbox changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
winbox do not show "F" flag for disabled entries under "IP/Routes" menu;
winbox fixed "Address" property under "WifiWave2/Remote-CAP" menu;
winbox fixed "Do" property under "Routing/Filters/Select Rule" menu;
winbox fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
winbox fixed "Range" property under "Routing/Filters/Num Set" menu;
winbox fixed "Switch" menu for CCR2004-16G-2S+;
winbox fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
winbox fixed minor typos;
winbox improved support for certain properties under "WifiWave2/Interworking Profiles" menu;
winbox rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu;
winbox rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu;
winbox rename "Password" button to "Change Now" under "System/Password" menu;
winbox show "unknown" value for "FS" property under "System/Disks" menu if the data is not available;
wireguard added "auto" and "none" parameter for "private-key" and "presharde-key" parameters;
wireguard added "wg-export" and "wg-import" functionality (CLI only);
wireguard allow to specify client settings under peer menu which will be included in configuration file and QR code;
wireguard request public or private key to be specified in order to create peer;
wireless added more "radius-mac-format" options (CLI only);
wireless fixed malformed Interworking packet elements;
www fixed allowed address setting for REST API users;
www fixed fragmented POST data for SCEP service;
x86 added support for Mellanox ConnectX-6 Dx NIC;
x86 i40e updated driver to 2.23.17 version;
x86 igb updated driver to 5.14.16 version;
x86 igbvf updated driver from in-tree Linux kernel;
x86 igc updated driver to 5.10.194 version;
x86 ixgbe updated driver to 5.19.6 version;
x86 Realtek r8169 updated driver;
x86 updated latest available pci.ids;
7.13beta1 Testing 2023-Nov-09 (2 years ago)
Component Change
bridge added automatic "path-cost" values depending on interface rate;
bridge added bridge interface property "port-cost-mode" with "short" and "long" arguments;
bridge fixed bogus VLAN entries from wifi when vlan-filtering is not enabled;
bridge improved host flush when removing VLAN on HW offloaded bridge;
bth added "VPN Prefer Relay Code" option;
certificate add support for multiple DNS names for Let's Encrypt;
certificate fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name";
certificate improved initial certificate creation using SCEP;
cloud improved re-connect speed after network related connection errors;
console added ":grep" command;
console added ":onerror" command;
console added ":serialize" and ":deserialize" commands for converting values to/from JSON;
console added "read" command under "file" menu;
console added "where" functionality for "export" command;
console added flags to "print" command with "value-list";
console added interface helper for "gateway" property under "ip/route" menu;
console clear console history when resetting configuration;
console disallow setting existing "name" under "system/script" and "system/scheduler" menus;
console fixed "export" boolean arguments when saving output to file using API;
console fixed "interface/ethernet/switch/port-isolation" export;
console fixed "on-event" argument highlighting under "system/scheduler" menu;
console fixed graphic distortions in WinBox;
console fixed issue where API incorrectly asks for missing arguments;
console fixed printing of "on-event" under "system/scheduler" menu;
console fixed printing to file using API;
console ignore negative values for ":delay" command;
console improved flag printing in certain menus;
console improved stability when running "tool/ping" from API;
console removed "route-cache" setting from "ip/settings" menu;
console replace reserved characters in file and script names with underscores;
console resolve "wifiwave2" directory to "wifi";
console show "l2vpn-link" address family under "routing/route" menu;
console use more compact login screen for empty branding;
defconf expire password when reverting configuration;
defconf hide default configuration for users without "sensitive" policy;
defconf updated configuration with new "wifi" directory;
defconf use "fan-min-speed-percent=25" for CRS354-48G-4S+2Q+ device;
defconf use device factory preset credentials when using CAPs mode;
defconf use one SSID and enable FT when using "wifi" packages;
ethernet improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic;
fetch added "http-content-encoding" setting;
fetch allow to receive HTTP response headers;
fetch require "ftp" user policy;
firewall added "nat-pmp" support;
firewall added new IPv6 filter arguments "icmp-err-src-routing-header" and "icmp-headers-too-long" for "reject-with" setting;
firewall do not mark all IPv6 GRE packets as invalid;
firewall fixed altered address-list when upgrading from RouterOS v6;
firewall fixed connections being tracked when tracking is disabled;
firewall fixed IPv6 address-list timeout;
firewall removed "prohibited" and "unreachable" IPv4 address-type arguments;
health dynamically add and remove invalid sensors (e.g. sfp-temperature);
hotspot fixed incorrect host moving to VLAN 0 when receiving packets through bridge;
ike2 fixed ike2 double reply;
ipv6 do not send out IPv6 RA deprecate message for re-used prefix;
isis added IS-IS protocol support (CLI only);
l3hw fixed routing for IPsec encapsulated packets;
leds fixed LED indication in multi-APN setup for Chateau;
leds improved LED indication during modem registration state for Chateau;
log added "fetch" topic;
lora fixed issue with lost LoRa configuration when rebooting the device;
lte added RNDIS support for neoway N75-EA modem;
lte added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA;
lte disabled IMS service for Chateau 5G on A1 HR network;
lte fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets;
lte improved SIM slot status change notification handling for MBIM modems;
lte replaced "passthrough-subnet-selection" with "passthrough-subnet-size" setting (CLI only);
lte show each CA band in a new line;
mipsbe improved system stability when removing USB devices;
mmips properly mount and unmount USB devices;
modem added option to read SMS using MBIM interface;
mpls added "te-tunnel" property for VPLS monitor (CLI only);
mpls fixed IPv6 RSVP-TE;
mpls improved logging;
netinstall-cli added more details to help messages;
ovpn improved memory allocation during key-renegotiation;
ovpn removed "ping-timer-rem" option from client config file;
package added warning log about missing "wireless" or "wifi" package;
pimsm improved elected BSR change;
poe-out improved firmware upgrade stability for AF/AT controlled boards;
ppp added remote-ipv6-prefix to IPv6 firewall address-list if "address-list" property is provided;
ppp allow at-chat and info commands in "waiting for packets" state for modems with shared data/info channel;
ppp improved IPv6 link-local address uniqueness;
pppoe-server fixed connection count limit per license level;
profiler improved "disk" and "supout.rif" classifiers;
qos-hw added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only);
qsfp added support for QSFP-to-SFP adapters;
quickset show DDNS name as VPN address for devices with new style serial number;
sfp improved link establishment with certain modules for hEX S device;
sfp improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips;
ssh fix error that caused large chunks of text not being pasted in their entirety into console;
supout added VXLAN FDB section;
switch fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches;
system added "rtrace" debugging tool (CLI only);
traffic-generator improved system stability when modifying interfaces;
usb added support for RTL8152 USB ethernet on ARM, ARM64 and x86;
vpls improved performance when decapsulating data;
vrf fixed ICMP reply lookup;
webfig allow to display comments in multiline or compact modes;
webfig make table headers always visible;
webfig use local storage for user preferences;
wifi added "flat-snoop" tool for surveying WiFi APs and stations (CLI only);
wifi added "remove" command in "capsman/remote-cap" menu;
wifi after radar detections, avoid selection of channels not permitted by the user;
wifi changed CAPsMAN generated certificate common name;
wifi fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined;
wifi fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces;
wifi fixed overridden datapath settings on CAP when unsetting from CAPsMAN;
wifi make slave APs use datapath bridge settings inherited from master by default;
wifi removed "openflow-switch" setting;
winbox added "Hw. Offload" property under "IP/Firewall/Filter" menu;
winbox added "none" argument for "Preshared Key" under "WireGuard/Peers" menu;
winbox added "Ping" button under "IP/DHCP Server/Leases" menu;
winbox added "Tx bps" and "Rx bps" monitor values under "WiFi/Registration" menu;
winbox added icon to entries under "WiFi/Access List" menu;
winbox added missing "qos-classifier" argument for "Hw. Caps" under "WiFi/Radios" menu;
winbox added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu;
winbox allow opening entries under "WiFi/Registration" menu;
winbox fixed default "Name Format" property under "WiFi/Provisioning" menu;
winbox fixed minor typo under "Routing/BFD" menu;
winbox updated "wireless" and "wifi" menus;
wireless fixed "wlan1" default name for RBSXTsqG-5acD and RBLDFG-5acD;
wireless fixed snooper information gathering from re-assocation requests;
7.12rc7 Testing 2023-Nov-08 (2 years ago)
Component Change
sfp fixed occasional bad EEPROM data reading for L009 devices;
webfig fixed authentication for branded login page (introduced in v7.12beta7);
7.12rc6 Testing 2023-Nov-06 (2 years ago)
Component Change
mqtt fixed service startup on boot (introduced in v7.12rc4);