MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| arp | added ARP status (CLI only); |
| calea | improved system stability when adding bridge rule without "calea" package installed; |
| console | updated copyright notice; |
| defconf | do not add loopback interface to the bridge ports (introduced in v7.14beta3); |
| defconf | fixed wifi configuration if interface MAC address is changed; |
| defconf | increased LTE interface wait time; |
| dhcpv6-client | install dynamic IPv6 blackhole routes in corresponding routing-table; |
| dns | fixed domain name lookup resolving for internal services; |
| fetch | fixed DNS resolving when domain has only AAAA entries (introduced in v7.13); |
| fetch | fixed timeout when content-length is 0 (introduced in v7.14beta4); |
| fetch | improved fetch stability in SFTP mode; |
| fetch | less verbose logging; |
| iot | improved LoRa LNS; |
| l3hw | fixed neighbor offloading after link flap; |
| l3hw | preserve offloading for VLANs when bridge ports are down; |
| leds | fixed default LTE LED configuration for wAPR-2nD; |
| lte | added AT channel support for Quectel EM120K-GL modem; |
| lte | don't duplicate primary band in 5G SA mode for chateau 5G; |
| lte | fixed "use-peer-dns" setting for EC200A modem; |
| lte | fixed an issue for EC200A modem that IPv6 address could be added as IPv4 address; |
| lte | fixed support for config-less modem detection (introduced in v7.13); |
| lte | improved modem recovery after failed IPv4 configuration; |
| mpls | fixed VPN fragmentation when forwarding IP traffic; |
| port | fixed support for USB/serial adapters (introduced in v7.13); |
| port | removed bogus serial port on RB750Gr3, RB760iGS and RBM11G devices; |
| ppp | added support for "WISPr-Session-Terminate-Time" RADIUS attribute; |
| qos-hw | fixed "tx-queue7-packet" counter; |
| routerboard | added "reset-button" support for RBwAPR-2nD device; |
| sfp | added support for modules requiring single byte I2C read transactions; |
| sfp | improved link establishment for RB4011 devices; |
| smips | improved system stability (introduced in v7.14beta4); |
| sms | improved system stability when working with SMS; |
| snmp | hide "MikroTik" in LLDP MIB when branding with hide SNMP option is used; |
| ssh | improved SSH performance on ARM, MIPS, MMIPS, SMIPS and TILE devices; |
| system | improved system stability when processing packets in FastPath (introduced in v7.13); |
| tftp | improved invalid request processing; |
| timezone | updated timezone information from "tzdata2023d" release; |
| tr069 | don't duplicate cellular info in "X_MIKROTIK_5G" nodes when connected in NR SA mode; |
| vlan | fixed non-running VLAN interface after failed MTU change; |
| vrf | prevent VRF interface name collision with interface lists; |
| vxlan | fixed underlying tunnel reusing routing marks of encapsulated packets; |
| wifi | fixed issue with setting country profile (introduced in v7.13.1); |
| wifi | increased value for SAE retransmit period to 3s to improve WPA3 compatibility with IoT client devices; |
| wifi | use "Latvia" as default value for "country" property; |
| winbox | added "Name" parameter under "Tools/Netwatch" menu; |
| winbox | added "Port Cost Mode" setting under "Bridge" menu; |
| winbox | added "VRF" parameter under "Tools/Ping" menu; |
| winbox | added "x25519" argument for "DH Group" parameter under "IP/IPsec/Profiles" menu; |
| winbox | added missing "Protocol" arguments under "IPv6/Firewall" menu; |
| winbox | added missing monitoring properties under "WireGuard/Peers" menu; |
| winbox | fixed "Bridge Cost" range under "Interfaces/VPLS" menu; |
| winbox | fixed "Password" button under "Quick Set" menu; |
| winbox | improved system stability with large packets; |
| winbox | remove "Root Bridge ID" property under "Bridge/MSTIs" menu; |
| Component | Change |
|---|---|
| bridge | fixed auto "path-cost" for bonding interfaces (introduced in v7.13); |
| console | updated copyright notice; |
| dns | fixed domain name lookup resolving for internal services; |
| fetch | do not require "content-length" for HTTP (introduced in v7.13); |
| fetch | fixed DNS resolving when domain has only AAAA entries (introduced in v7.13); |
| fetch | fixed fetch when using "src-path" with HTTP/HTTPS modes (introduced in v7.13); |
| fetch | fixed IPv4 address logging (introduced in v7.13); |
| fetch | improved file download stability with HTTP/HTTPS modes; |
| leds | do not show LTE connection state/mode using RGB power LED from configless LTE modems (introduced in v7.13); |
| leds | fixed wireless type of LED triggers for routers using WiFi package (introduced in v7.13); |
| lte | fixed support for config-less modem detection (introduced in v7.13); |
| lte | fixed USB mode switch and initialization race condition for configless USB modems; |
| modem | fixed SMS removal (introduced in v7.13); |
| port | fixed support for USB/serial adapters (introduced in v7.13); |
| switch | improved 100G interface stability for 98DX4310 and 98DX8525 switches; |
| switch | minimise potential packet overflows on CRS354; |
| system | improved system stability when processing packets in FastPath (introduced in v7.13); |
| timezone | updated timezone information from "tzdata2023d" release; |
| tr069 | fixed bandwidth test; |
| wifi | use "Latvia" as default value for "country" property; |
| winbox | renamed "Wireless Table" menu to "Wifi"; |
| Component | Change |
|---|---|
| bridge | fixed auto "path-cost" for bonding interfaces (introduced in v7.13); |
| bth | added simple "Back To Home Users" manager under IP/Cloud menu; |
| console | increased maximum file content length that can be managed through command line to 60 KB; |
| dns | do not add new entries to cache if "cache-size" is reached; |
| fetch | fixed fetch when using "src-path" with HTTP/HTTPS modes (introduced in v7.13); |
| fetch | improved file download stability with HTTP/HTTPS modes; |
| leds | do not show LTE connection state/mode using RGB power LED from configless LTE modems; |
| lte | fixed USB mode switch and initialization race condition for configless USB modems; |
| lte | improved support for "ACER" and "MSFT" branded EM12-G modems; |
| route-filter | added option to set "isis-ext-metric"; |
| sfp | improved combo-sfp handling for CRS328-4C-20S-4S+; |
| switch | fixed "vlan-mode" and "default-vlan-id" property reset after reboot (introduced in v7.14beta3); |
| system | expose "lo" and "vrf" interfaces; |
| system | improved memory allocation for ARM64 devices; |
| tr069 | fixed bandwidth test; |
| usb | show "Supermicro CDC" adapter as Ethernet interface; |
| wifi-qcom | fixed new connections, when maximum supported number of MAC addresses behind connected station-bridges is reached; |
| x86 | fixed VLAN tagged packet transmit for igb (introduced in v7.12); |
| Component | Change |
|---|---|
| 6to4 | make "ipsec-secret" sensitive parameter; |
| api | improved REST API stability when processing invalid requests; |
| api | properly return SNMP OIDs when requested; |
| arm | improved system stability when using microSD on RB1100Dx4; |
| bridge | added MLAG support for MSTP bridges; |
| bridge | added MVRP support (CLI only); |
| bridge | improved bridge VLAN configuration validation; |
| bridge | improved configuration speed on large VLAN setups; |
| bridge | improved protocol-mode MSTP functionality; |
| bridge | improved protocol-mode STP and RSTP functionality; |
| bridge | make "point-to-point=yes" default value for non-wireless bridge ports; |
| bridge | try to set wireless bridge ports as edge ports automatically; |
| bth | added simple "Back To Home Users" manager under IP/Cloud menu; |
| console | added missing "where" clause for "/ipv6/firewall/filter" table print command; |
| console | added ":tolf" and ":tocrlf" commands for converting line break to/from LF or CRLF; |
| console | do not accept negative or too large values for ":delay" command; |
| console | do not allow to use out-of-range values for time type fields; |
| console | fix configuration export when user does not have a "sniff" policy; |
| console | hint on reset command help that ".rsc file" is required for "run-after-reset" parameter; |
| console | improved editor functionality in full screen mode; |
| console | increased maximum file content length that can be managed through command line to 60 KB; |
| container | improved VETH interface management responsiveness and reliability; |
| container | restrict "/container/shell" menu for users without "write" permissions; |
| defconf | use "fq_codel" queue as default interface queue for wired ports on LTE devices; |
| disk | added exFAT and NTFS mount/read/write support (CLI only); |
| disk | properly unmount disk when it is disconnected; |
| ethernet | improved cable-test reliability for hAP ax3 PoE out port; |
| ethernet | resolved minor memory leak while processing packets; |
| fetch | do not require "content-length" for HTTP (introduced in v7.13); |
| fetch | fixed IPv4 address logging (introduced in v7.13); |
| fetch | treat any 2xx HTTP return code as success (introduced in v7.13); |
| filesystem | improved filesystem integrity for several RB3011 units with automatic firmware upgrade; |
| firewall | added "creation-time" parameter for IPv6 address list entries; |
| firewall | increased default "udp-timeout" value from 10s to 30s; |
| health | improved fan control on CRS3xx and CCR1016-12S-1S+r2; |
| iot | added LoRa CUPs protocol support; |
| iot | fixed modbus partial frame reception issue; |
| iot | improved modbus Tx/Rx switching behaviour; |
| leds | fixed "type=on" LED behaviour after reboot; |
| leds | fixed wireless type of LED triggers for routers using WiFi package; |
| lte | refactored AT command control for AT modems; |
| modem | fixed SMS removal (introduced in v7.13); |
| ovpn | added support for pushing routes; |
| ovpn | improved OVPN configuration file import process; |
| ovpn | improved key-renegotiation process; |
| poe-out | improved PoE out reliability on routers with a single PoE out interface; |
| ppp | log an error when IPv6 DHCP pool is exhausted; |
| route | improved route print "count-only" process speed; |
| route | improved stability on route table lookup; |
| sfp | improve high-power SFP module initialization; |
| ssh | improved SSH performance on ARM and MIPS devices; |
| ssh | refactored SSH service internal processes; |
| switch | improved 100G interface stability for 98DX4310 and 98DX8525 switches; |
| switch | minimise potential packet overflows on CRS354; |
| system | changed build time format according to ISO standard; |
| system | expose "lo" interface; |
| system | improved RAM allocation for L009UiGS-RM; |
| system | improved system stability when processing packets in FastPath (introduced in v7.13); |
| system | provide more precise "total-memory" value for ARM devices; |
| system | provide more precise "total-memory" value under "System/Resources" menu for L009 and hAP ax lite routers; |
| tr069-client | show 5G signal info in X_MIKROTIK_5G nodes only for 5G NSA bands; |
| wifi | added "station-pseudobridge" interface mode (CLI only); |
| wifi | use correct CAP identity for interface name provisioning after it has been changed by remote-cap/set-identity; |
| winbox | added "accept-protocol-version" parameter to the L2TP server settings; |
| winbox | added "mode-button" and "switch" menus for L41G-2axD&FG621-EA; |
| winbox | added "page-refresh" setting to the Graphing settings; |
| winbox | aded Preboot Etherboot settings to the System/RouterBOARD/Settings menu; |
| winbox | do not show USB settings for CRS devices that does not need it; |
| winbox | improved connection speed and reliability; |
| winbox | improved route table automatic refresh process for static routes; |
| winbox | include "te-tunnel" parameter in VPLS interface monitor; |
| winbox | properly validate "passthrough-subnet-size" in the LTE APN settings; |
| winbox | removed "sfp all" option from combo port settings; |
| winbox | renamed "Wireless Table" menu to "Wifi"; |
| winbox | show "routing-table" column under IP/Route menu by default; |
| wireguard | do not allow to use multiple WireGuard interfaces on the same "listen-port"; |
| wireguard | optimised and improved WireGuard service logging; |
| Component | Change |
|---|---|
| bridge | added automatic "path-cost" values depending on interface rate; |
| bridge | added bridge interface property "port-cost-mode" with "short" and "long" arguments; |
| bridge | fixed bogus VLAN entries from wifi when vlan-filtering is not enabled; |
| bridge | improved HW offload enable; |
| bridge | improved host flush when removing VLAN on HW offloaded bridge; |
| bth | added "VPN Prefer Relay Code" option; |
| bth | improved automatic firewall rule generation process; |
| certificate | add support for multiple DNS names for Let's Encrypt; |
| certificate | added HTTP redirect support for CRL download; |
| certificate | added support for certificates with key size 16384; |
| certificate | fixed CRL updating; |
| certificate | fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name"; |
| certificate | improved CRL signature verification and download error messages; |
| certificate | improved initial certificate creation using SCEP; |
| certificate | use error topic for CRL update failures; |
| cloud | improved re-connect speed after network related connection errors; |
| console | added ":grep" command; |
| console | added ":onerror" command; |
| console | added ":serialize" and ":deserialize" commands for converting values to/from JSON; |
| console | added "interface" name when printing "interface/pppoe-server" entries; |
| console | added "read" command under "file" menu; |
| console | added "where" functionality for "export" command; |
| console | added flags to "print" command with "value-list"; |
| console | added interface helper for "gateway" property under "ip/route" menu; |
| console | added unset option for "ssid-regex" and "allow-signal-out-of-range" properties under "interface/wifi/access-list" menu; |
| console | clear console history when resetting configuration; |
| console | disallow setting existing "name" under "system/script" and "system/scheduler" menus; |
| console | fixed "export" boolean arguments when saving output to file using API; |
| console | fixed "interface/ethernet/switch/port-isolation" export; |
| console | fixed "on-event" argument highlighting under "system/scheduler" menu; |
| console | fixed graphic distortions in WinBox; |
| console | fixed issue where API incorrectly asks for missing arguments; |
| console | fixed printing to file using API; |
| console | ignore negative values for ":delay" command; |
| console | improved flag printing in certain menus; |
| console | improved stability when running "tool/ping" from API; |
| console | removed "route-cache" setting from "ip/settings" menu; |
| console | replace reserved characters in file and script names with underscores; |
| console | resolve "wifiwave2" directory to "wifi"; |
| console | show "l2vpn-link" address family under "routing/route" menu; |
| console | use more compact login screen for empty branding; |
| defconf | expire password when reverting configuration; |
| defconf | fixed bogus wifi password on certain Audience devices; |
| defconf | fixed configuration for Audience with "wifi-qcom-ac" package; |
| defconf | fixed wireless band and channel-width selection (introduced in v7.12); |
| defconf | hide default configuration for users without "sensitive" policy; |
| defconf | improved wifi interface detection after upgrade; |
| defconf | updated configuration with new "wifi" directory; |
| defconf | use "WISP Bridge" default configuration mode for RBGrooveGA-52HPacn device; |
| defconf | use "fan-min-speed-percent=25" for CRS354-48P-4S+2Q+ device; |
| defconf | use device factory preset credentials when using CAPs mode; |
| defconf | use one SSID and enable FT when using "wifi" packages; |
| disk | fixed hang on reboot when network file systems mounted; |
| ethernet | improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic; |
| ethernet | improved system stability for L009 and hAP ax lite devices; |
| fetch | added "http-auth-scheme" parameter, allows to select HTTP basic or digest authentication; |
| fetch | added "http-content-encoding" setting; |
| fetch | added raw logging; |
| fetch | allow to receive HTTP response headers; |
| fetch | require "ftp" user policy; |
| firewall | added "nat-pmp" support; |
| firewall | added new IPv6 filter arguments "icmp-err-src-routing-header" and "icmp-headers-too-long" for "reject-with" setting; |
| firewall | do not mark all IPv6 GRE packets as invalid; |
| firewall | fixed IPv6 address-list timeout; |
| firewall | fixed altered address-list when upgrading from RouterOS v6; |
| firewall | fixed connections being tracked when tracking is disabled; |
| firewall | removed "prohibited" and "unreachable" IPv4 address-type arguments; |
| ftp | improved upload and download speeds; |
| health | dynamically add and remove invalid sensors (e.g. sfp-temperature); |
| hotspot | fixed incorrect host moving to VLAN 0 when receiving packets through bridge; |
| ike2 | fixed ike2 double reply; |
| iot | fixed incorrect LoRa ACK packet handling during downlink messaging (introduced in v7.12); |
| ipv6 | do not send out IPv6 RA deprecate message for re-used prefix; |
| isis | added IS-IS protocol support (CLI only); |
| l3hw | fixed routing for IPsec encapsulated packets; |
| leds | fixed LED indication in multi-APN setup for Chateau; |
| leds | improved LED indication during modem registration state for Chateau; |
| log | added "fetch" topic; |
| lora | added CUPs protocol support; |
| lora | fixed issue with lost LoRa configuration when rebooting the device; |
| lte | added RNDIS support for neoway N75-EA modem; |
| lte | added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA; |
| lte | disabled IMS service for Chateau 5G on A1 HR network; |
| lte | fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets; |
| lte | improved SIM slot status change notification handling for MBIM modems; |
| lte | replaced "passthrough-subnet-selection" with "passthrough-subnet-size" setting (CLI only); |
| lte | show each CA band in a new line; |
| mipsbe | improved system stability when removing USB devices; |
| mmips | properly mount and unmount USB devices; |
| modem | added option to read SMS using MBIM interface; |
| mpls | added "te-tunnel" property for VPLS monitor (CLI only); |
| mpls | fixed IPv6 RSVP-TE; |
| mpls | improved logging; |
| netinstall-cli | added more details to help messages; |
| ospf | fixed LSA Type3 advertisement for OSPFv2; |
| ospf | fixed missing OSPF interface on L2TP interface reconnect; |
| ospf | fixed missing opaque bit in opaque LSA; |
| ovpn | improved memory allocation during key-renegotiation; |
| ovpn | removed "ping-timer-rem" option from client config file; |
| package | added warning log about missing "wireless" or "wifi" package; |
| pimsm | improved elected BSR change; |
| poe-out | improved firmware upgrade stability for AF/AT controlled boards; |
| ppc | fixed RouterOS bootup (introduced in v7.12); |
| ppp | added remote-ipv6-prefix to IPv6 firewall address-list if "address-list" property is provided; |
| ppp | allow at-chat and info commands in "waiting for packets" state for modems with shared data/info channel; |
| ppp | improved IPv6 link-local address uniqueness; |
| pppoe-server | fixed connection count limit per license level; |
| profiler | improved "disk" and "supout.rif" classifiers; |
| qos-hw | added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only); |
| qsfp | added support for QSFP-to-SFP adapters; |
| qsfp | fixed supported rates for breakout cables (introduced in v7.12); |
| quickset | show DDNS name as VPN address for devices with new style serial number; |
| route-filter | improved performance; |
| sfp | added "1G-baseT" link mode for modules that supports "2.5G-baseT" mode; |
| sfp | allow 2.5G rates only in forced link mode; |
| sfp | fixed link establishment with S+DA0001 DAC cables; |
| sfp | ignore irrelevant extended compliance code for SFP modules; |
| sfp | improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips; |
| sfp | improved link establishment for SFP copper modules; |
| sfp | improved link establishment with certain modules for hEX S device; |
| sfp | show 10M and 100M supported rates for RJ45 copper modules; |
| ssh | added cipher and hash function acceleration for ARM64 and x86 architectures; |
| ssh | fix error that caused large chunks of text not being pasted in their entirety into console; |
| supout | added VXLAN FDB section; |
| supout | added multiple WiFi sections; |
| switch | fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches; |
| system | added "rtrace" debugging tool (CLI only); |
| system | improved incoming and outgoing TCP connection performance; |
| system | improved internal process communication performance; |
| traffic-generator | improved system stability when modifying interfaces; |
| usb | added support for RTL8152 USB ethernet on ARM, ARM64 and x86; |
| vpls | improved performance when decapsulating data; |
| vrf | fixed ICMP reply lookup; |
| webfig | allow to display comments in multiline or compact modes; |
| webfig | make table headers always visible; |
| webfig | use local storage for user preferences; |
| wifi | added "flat-snoop" tool for surveying WiFi APs and stations (CLI only); |
| wifi | added "radio-mac" variable for "name-format" provisioning setting; |
| wifi | added "remove" command in "capsman/remote-cap" menu; |
| wifi | after radar detections, avoid selection of channels not permitted by the user; |
| wifi | changed CAPsMAN generated certificate common name; |
| wifi | create first interface without number when using "name-format" provisioning setting; |
| wifi | enable protected interworking ANQP responses; |
| wifi | fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined; |
| wifi | fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces; |
| wifi | fixed overridden datapath settings on CAP when unsetting from CAPsMAN; |
| wifi | improved CAPsMAN stability during provisioning; |
| wifi | make slave APs use datapath bridge settings inherited from master by default; |
| wifi | removed "openflow-switch" setting; |
| wifi-qcom | added fast-path for received packets; |
| winbox | added "Hw. Offload" property under "IP/Firewall/Filter" menu; |
| winbox | added "Ping" button under "IP/DHCP Server/Leases" menu; |
| winbox | added "Tx bps" and "Rx bps" monitor values under "WiFi/Registration" menu; |
| winbox | added "none" argument for "Preshared Key" under "WireGuard/Peers" menu; |
| winbox | added icon to entries under "WiFi/Access List" menu; |
| winbox | added missing "qos-classifier" argument for "Hw. Caps" under "WiFi/Radios" menu; |
| winbox | added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu; |
| winbox | allow opening entries under "WiFi/Registration" menu; |
| winbox | fixed default "Name Format" property under "WiFi/Provisioning" menu; |
| winbox | fixed minor typo under "Routing/BFD" menu; |
| winbox | improved connection speed; |
| winbox | updated "wireless" and "wifi" menus; |
| wireless | fixed "wlan1" default name for RBSXTsqG-5acD and RBLDFG-5acD; |
| wireless | fixed snooper information gathering from re-assocation requests; |
| wireless | keep configuration after manual package removal; |