MikroTik Changelogs

Search changelog entries

7.21.2 Stable 2026-Jan-29 (3 months ago)
Component Change
app added "media-path" and "download-path" setting in /app/settings;
app added shm_size parameter to apps that require it;
app calibre-web app auto add db if none exists;
app fixed Firefox and Webtop to work with https-proxy;
app fixed fossil app login typo;
bgp implement revised input error handling per RFC 7606;
container added support for the shm_size setting;
container allow non-root user write to SMB share;
container changed default container registry to docker.io;
container do not mount tmpfs on /tmp and /run by default;
container do not start container if any volume is not mounted;
container fixed nftables/iptables not working with "Message too long" error;
container made container mounts writable by the user;
defconf added single port MGMT bridge on CCR/RDS for easier /app configuration;
defconf improved firewall rule for local traffic to the loopback interface;
disk fixed issue where mountpoint was not removed after removing the disk;
dns fixed domain resolution for the ":resolve" command "server" parameter;
lte fixed issue for Chateau 5G R17 ax (introduced in v7.21.1);
poe-out firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
poe-out firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
poe-out fixed occasional firmware update failure on CRS354;
poe-out fixed PSU state recovery upon unplug/replug on CRS320;
ppp added initial support for BG770A-GL modem firmware update;
ppp fixed premature PPP client disconnect on BG77 modems during firmware update;
route prevent creating routing tables with the same name;
routing-filter fixed num-set matcher;
sfp fixed sfp-ignore-rx-loss parameter for RB760iGS;
sfp improved initialization and linking for some QSFP modules;
snmp fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput;
snmp fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.21);
snmp fixed script "run-count" update after execution;
system do not attempt to use FastPath RPS on non-ARM64 devices (introduced in v7.21);
user-manager properly release database backup file after backup creation;
zerotier improved route removal;
7.22beta6 Development 2026-Jan-28 (3 months ago)
Component Change
app added "media-path" and "download-path" setting in /app/settings;
app added configurable app-store URL for custom apps;
app added shm_size parameter to apps that require it;
app fixed /app/export;
app fixed apps constantly polling the cloud;
app fixed Firefox and Webtop to work with https-proxy;
app fixed missing reverse-proxy URL;
bgp added BGP unnumbered support;
bgp fixed prefix-count parameter (introduced in v7.22beta1);
bridge added local and static MAC synchronization for MLAG (additional fixes);
bridge added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically updated after upgrade; downgrading to an older version will result in MLAG configuration loss) (additional fixes);
certificate added support for multiple ACME certificates;
container added support for the shm_size setting;
container allow non-root user write to SMB share;
container do not mount tmpfs on /tmp and /run by default;
container do not start container if any volume is not mounted;
device-mode allow update from Netinstall via mode script (new "Mode script" property available for Netinstall and netinstall-cli, applied before defconf or user-defined script);
disk fixed issue where mountpoint was not removed after removing the disk;
email fixed ability to add attachment (introduced in v7.22beta1);
email use default port if not specified;
fetch added HTTP/2 support on ARM64 and x86/CHR devices (additional fixes);
ip added error messages to reverse-proxy rules;
lte added roaming barring field to LTE "show-capabilities" menu (additional fixes);
lte added subscriber number to monitor command for MBIM modems;
lte do not allow setting unsupported roaming barring settings for R11e-4G;
lte fixed chained firmware update for Chateau 5G;
lte fixed changing eSIM profile nickname;
lte fixed displaying operator name for Chateau ax R17;
lte fixed inappropriate external antenna selection on Chateau ax R17;
lte fixed missing notifications to eSIM provider when eSIM provisioning canceled;
lte fixed tethering support for Google Pixel Pro 8;
lte fixed wrong MTU reading/setting for config-less modems;
port fixed baud rate change for TILE architecture devices;
ppp added initial support for BG770A-GL modem firmware update;
profiler split "management" process into different smaller process groups;
radius improved incoming RadSec packet processing on busy service;
routerboard allow changing /system/routerboard/settings from Netinstall via mode script;
routing-filter fixed num-set matcher;
snmp fixed minor memory leak when changing SNMP authentication/encryption passwords;
snmp fixed reply for empty snmpbulkwalk requests;
system do not attempt to use FastPath RPS on non-ARM64 devices (introduced in v7.21);
user-manager added support for NAS-Identifier attribute;
user-manager always respond to accounting requests;
user-manager do not send Disconnect-Message for unknown usernames for Accounting-Request;
user-manager do not send invalid NAS-Port-Type on CoA/PoD messages;
user-manager fixed unauthenticated access to /PRIVATE/ userman web files;
user-manager properly release database backup file after backup creation;
user-manager show empty value for session NAS-IP-Address if empty;
webfig fixed creating bridge interface (introduced in v7.22beta1);
wifi improved support for 802.11be access points (additional fixes);
wifi introduced /interface/wifi/network menu for higher level network configuration (CLI only);
wifi-mediatek fixed rx chains functionality;
wifi-mediatek improved stability when switching bands (introduced in v7.22beta1);
winbox set "Mount Filesystem" by default under "System/Disk" menu;
7.22beta5 Development 2026-Jan-21 (3 months ago)
Component Change
app added support for custom apps;
app allow configuring bridge port pvid for app;
app calibre-web app auto add db if none exists;
app fixed fossil app login typo;
app show app URL only when it is running;
app show DNS URL for app only if it has a reverse-proxy;
bridge added RA guard feature (additional fixes);
bridge fixed dynamic switch-cpu VLAN creation (introduced in v7.22beta1);
chr improved fast-path stability when using vmxnet3 driver;
console added timestamp support to print follow/follow-only (additional fixes);
container fixed issue where containers may not start with large mounts;
container fixed nftables/iptables not working with "Message too long" error;
container made container mounts writable by the user;
container use the user-defined envs and envlist for container shell command;
defconf added single port MGMT bridge on CCR/RDS for easier /app configuration;
dhcpv6-relay fixed link-layer address inconsistency with the original link-layer address in relay-forward packets;
disk added support for file-based swap space;
fetch added HTTP/2 support on ARM64 and x86/CHR devices (additional fixes);
ip added reverse-proxy support (additional fixes);
ippool6 allow creating sub-pool by specifying "from-pool";
lte added roaming barring field to LTE "show-capabilities" menu;
lte fixed "allow-roaming" setting to return error for modems that do not support roaming barring;
lte fixed cases where AT dialer could get stuck in "modem not ready" state;
lte fixed cases where incorrect network modes and bands could be suggested for active interface;
lte fixed modem recovery after unexpected modem reboot for Chateau 5G and Chateau 5G R16 (introduced in v7.22beta1);
lte strip modem reported padding characters for SIM card (ICCID) on Chateau ax R17;
radius fixed initialization of incoming UDP socket in some situations;
radius fixed RadSec SSL CPU usage increase on closed connections;
radius improved logging;
routerboot allow installing ARM64 on L009 device ("/system routerboard upgrade" required; configure "/system/routerboard/settings set preferred-architecture=arm64 boot-device=try-ethernet-once-then-nand"; start Netinstall with ARM64 image and reboot the device (DO NOT load the backup routerboot with reset button); downgrading to older versions must be avoided) (additional fixes);
sfp improved initialization and linking for some QSFP modules (additional fixes);
snmp fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput;
snmp fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.21);
snmp fixed script "run-count" update after execution;
switch fixed switch type for hAP ax lite devices (introduced in v7.22beta1);
webfig added missing icons for Firewall table;
wifi improved support for 802.11be access points (additional fixes);
wifi updated regulatory information for Malaysia;
wifi-mediatek fixed malformed information elements in beacons (introduced in v7.22beta1);
wifi-mediatek updated driver and firmware;
winbox added Container Repull command;
winbox added SwOS Allow From field;
winbox move "Default" panel from "IPv6/ND/Proxy" to "IPv6/ND/Prefixes";
winbox show separator after "Protocol" field for IPv6 Firewall rules;
wireguard improved stability;
zerotier improved route removal;
7.21.1 Stable 2026-Jan-19 (3 months ago)
Component Change
bridge fixed dynamic switch-cpu VLAN creation (introduced in v7.21);
bridge improved stability when using MVRP (introduced in v7.21);
certificate fixed empty trust store handling in certain cases (introduced in v7.21);
container changed app auto update to be off by default;
container fixed issue where containers may not start with large mounts;
health fixed fan and PSU state logging for MIPSBE devices;
leds fixed power LED behavior for hAP ax S;
lte fixed APN configuration for QMI modems in a 3G network when use-network-apn=yes is used;
switch fixed switch type for hAP ax lite devices (introduced in v7.21);
system fixed rare partial loss of RouterOS configuration;
7.22beta3 Development 2026-Jan-14 (3 months ago)
Component Change
bgp changed multipath to number argument;
bgp fixed BGP output sometimes not being cleaned after session restart;
bgp fixed ignore-as-path-len not being used;
bgp fixed update messages not being sent on default-prepend value change;
bgp implemented add-path;
bridge improved logic for interface remove;
bridge improved stability when using MVRP (introduced in v7.21);
bridge improved VRRP MAC address handling;
bridge removed vlan-filtering check when changing the MVRP setting (allows disabling MVRP through WinBox);
certificate fixed empty trust store handling in certain cases (introduced in v7.21);
console added left shift (<<) and right shift (>>) support for IPv6 addresses;
console added on-event script runner support to print follow/follow-only;
console added timestamp support to print follow/follow-only;
console fixed time drift for interface last-link-down-time and last-link-up-time;
console improved command decoding to drop extraneous commands (visible in history logging);
console improved export command to avoid empty [find];
console improved history logging when performing object rename with set/reset;
console use the same flag output format for both print brief and detail;
container changed app auto update to be off by default;
defconf improved firewall rule for local traffic to the loopback interface;
detnet added request-interval setting (additional fixes);
disk added trim command which functions similarly to fstrim;
disk fixed issue where iSCSI did not work with ESXi and XEN hypervisors;
disk fixed issue with disks not mounting after swapping devices;
disk fixed opening a drive in read-only mode if it became locked;
disk improved BTRFS stability on TILE devices;
disk renamed format file-system=trim and trim-secure to format file-system=discard and discard-secure;
gps fixed GPS port disappearance after reboot for EC25-EU&KNe;
health fixed fan and PSU state logging for MIPSBE devices;
ip added reverse-proxy;
ipv6 improved system stability when manipulating IPv6 configuration that was added while IPv6 was disabled;
log added comment support to rule entries;
lte added AT command timeout for EC25-EU&KNe;
lte do not allow modem firmware-upgrade on "inactive" interface;
lte do not reconfigure on AT command timeout for MBIM modems;
lte enable DHCP relay packet forwarding to the cellular network for EG120K-EA and RG650E-AU;
lte fixed APN configuration for QMI modems in a 3G network when use-network-apn=yes is used;
lte fixed roaming barring support for the EC200A-EU modem (introduced in v7.22beta1);
lte hide external antenna selection menu for the Chateau AX R17;
lte improved APN IP type handling by enabling only the IP protocols defined in the assigned APN profile for config-less modems;
lte show ICCID and IMSI also when the interface is disabled;
poe-out firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
rip,pimsm separate the interface property from the address in /routing/rip/interface and /routing/pimsm/interface menus;
route prevent creating routing tables with the same name;
snmp added 5G NSA connection signal indications: nr-rsrp, nr-rsrq, nr-sinr;
snmp fixed CA band indication;
snmp report RouterOS version in SNMPv2-MIB::sysDescr;
ssh improved logging;
system added reset-configuration keep-apps=yes;
system display serial ports in the /system/resource/hardware menu;
system fixed possible configuration loss;
wifi added optional show-frame=radiotap parameter value to make sniffer display the radiotap header of captured frames;
wifi fixed functionality of the wireless-signal-strength LED trigger;
wifi improved support for 802.11be access points (additional fixes);
wifi quicker re-connections to APs for interfaces in station mode;
wifi-qcom update regulatory information for Malaysia;
winbox added confirmation message to Format Drive;
winbox added error reporting to CAPsMAN Manager menu;
winbox added socsify icon for firewall NAT rules;
winbox fixed the "New QoS Profile" field for switch rules;
winbox fixed modem firmware-upgrade for the RG650E-EU modem;
winbox make File Share URL field clickable (additional fixes);
winbox updated some setting and title names;
x86 fixed interface hang on RTL8125 when processing IP-fragmented UDP traffic (additional fixes);