MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| certificate | fixed trust store CRL link if generated on an older version (introduced in v7.7); |
| console | improved stability when canceling console actions; |
| ike2 | fixed ECP521 DH group usage (introduced in v7.11 beta1); |
| lte | fixed R11e-LTE6 "EARFCN" reporting format (introduced in v7.11rc1); |
| ssh | fixed SSH key agreement on the client side when ed25519 used under server settings; |
| wireguard | fixed peer IPv6 "allowed-address" usage; |
| Component | Change |
|---|---|
| bridge | fixed MAC learning on "switch-cpu" port with enabled FastPath; |
| bridge | fixed dynamic untagged VLAN management (introduced in v7.11beta5); |
| bth | added "Back To Home" VPN service for ARM, ARM64, and TILE devices; |
| container | fixed IP address in container host file; |
| ethernet | fixed forced half-duplex 10/100 Mbps link speeds on CRS312 device; |
| firewall | improved system stability when using "endpoint-independent-nat"; |
| ike2 | improved SA rekeying reply process; |
| lte | added "at-chat" support for Dell DW5829 modem; |
| lte | added "at-chat" support for Fibocom L850-GL modem; |
| lte | added "at-chat" support for SIMCom 8202G modem; |
| lte | added "band" info to the "monitor" command for MBIM modems that support serving cell info reporting over MBIM; |
| lte | fixed LtAP mini default SIM slot "down" changeover to "up" after an upgrade (introduced in v7.10beta1); |
| lte | improved system stability when changing the "radio" state for MBIM modems; |
| sfp | improved Q/SFP interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches; |
| switch | fixed BPDU packet processing on MT7621, MT7531 with HW offloaded vlan-filtering; |
| switch | improved multicast packet forwarding on MT7621; |
| Component | Change |
|---|---|
| certificate | allow to import certificate with DNS name constraint; |
| certificate | require CRL presence when using "crl-use=yes" setting; |
| conntrack | fixed "active-ipv4" property; |
| console | added ":convert" command; |
| dhcp-server | fixed setting "bootp-lease-time=lease-time"; |
| ike2 | log "reply ignored" as non-debug log message; |
| modem | added initial support for BG77 modem DFOTA firmware update; |
| modem | changed Quectel EC25 portmap to expose DM (diag port), DM channel=0, GPS channel=1; |
| ovpn | do not try to use the "bridge" setting from PPP/Profile, if the OVPN server is used in IP mode (introduced in v7.10); |
| ovpn | improved key renegotiation process; |
| ovpn | include "connect-retry 1" and "reneg-sec" parameters into the OVPN configuration export file; |
| routerboot | increased etherboot bootp timeout to 40s on MIPSBE and MMIPS devices ("/system routerboard upgrade" required); |
| ssh | fixed private key import (introduced in v7.9); |
| user | added "sensitive" policy requirement for SSH key and certificate export; |
| webfig | fixed gray-out italic font for entries after enable; |
| Component | Change |
|---|---|
| console | updated copyright notice; |
| defconf | fixed invalid default password setting after configuration reset for 60GHz interface (introduced in v6.49.5); |
| firewall | fixed IRC NAT helper (CVE-2022-2663); |
| hotspot | improved stability when receiving bogus packets; |
| smb | fixed SMB2 file list reporting; |
| Component | Change |
|---|---|
| bfd | improved system stability; |
| bth | added "Back To Home" VPN service for ARM, ARM64 and TILE devices; |
| certificate | removed request for "passphrase" property on import; |
| defconf | do not change admin password if resetting with "keep-users=yes"; |
| modem | fixed missing sender's last symbol in SMS inbox if the sender is an alphabetic string; |
| ssh | fixed host public key export (introduced in v7.9); |
| tftp | improved file name matching; |