MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| branding | fixed identity setting from branding package; |
| bridge | fixed host moving with fast-path; |
| bridge | removed "age" monitoring property from the host table; |
| container | fixed tar extracting; |
| dns | do not query upstream DNS servers for matched regex records; |
| dns | fixed changing of "forward-to" parameter for FWD entries; |
| dns | fixed handling of CNAME entry pointing to another FWD entry; |
| hotspot | added "install-hotspot-queue" parameter to control dynamic queue creation (CLI only); |
| ike1 | fixed XAuth responder trying to recreate phase 1; |
| ike2 | improved certificate payload parsing; |
| ipsec | added support for AVX optimized SHA acceleration; |
| ipsec | improved "H" (hw-aead) flag presence for accelerated SA's; |
| ipsec | improved configuration of IPsec proposal auth-algorithms; |
| ipsec | improved IKE payload processing; |
| l3hw | improved system stability when disabling or enabling L3HW offloading; |
| lte | fixed error handling on opening AT control channel; |
| lte | show band number in "ca-band" in NSA mode on Chateau 5G; |
| mpls | added VPLS LDP information in remote/local-mappings; |
| netinstall | added "-i <interface>" parameter for Netinstall (CLI Linux); |
| netinstall | improved automatic netbooting interface selection; |
| netwatch | added support for "https-get" type (CLI only); |
| ovpn | added "route-nopull" option for client side; |
| ovpn | added support for IPv6 tunnelling; |
| package | fixed missing menus when both "lora" and "wifiwave2" packages are installed; |
| ppp | fixed displaying of "info" command for PPP client; |
| ppp | improved authentication method negotiation; |
| sfp | added 2.5G SFP module support for RB5009; |
| ssh | added support for Ed25519 key exchange; |
| ssh | fixed handling of non standard size RSA keys; |
| switch | fixed egress mirror for 98DX4310 and 98DX8525 switches; |
| switch | fixed Ethernet monitor when disabling auto-negotiation for 10G interfaces for 98DX8212 switch (introduce in v7.7beta3); |
| switch | improved 10G, 25G and 40G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98DX8525, 98PX1012 switches; |
| switch | improved 25G interface stability for 98PX1012, 98DX4310 and 98DX8525 switches (introduced in v7.6); |
| swos | fixed "allow-from-ports" setting; |
| vpls | expose VPLS related debug logs to "vpls" logging topic; |
| w60g | improved system stability for Cube Pro devices; |
| webfig | fixed displaying of VRF routes; |
| webfig | properly show limited number of available options; |
| wifiwave2 | added "ft-preserve-vlanid" parameter to control whether to change VLAN ID after FT; |
| wifiwave2 | added initial CAPsMAN support (only compatible with wifiwave2 interfaces) (CLI only); |
| wifiwave2 | fixed "radio-mac" provisioning matcher; |
| wifiwave2 | fixed 4-way handshake with TKIP; |
| wifiwave2 | improved general system stability; |
| Component | Change |
|---|---|
| bgp | improved BGP session load distribution across multiple CPU cores; |
| certificate | improved certificate management, signing and storing processes; |
| container | fixed access to "/dev/stderr" from containers; |
| container | made "ram" and "tmp" directories use tmpfs; |
| crs1xx/2xx | fixed "new-customer-pcp" setting for ACL rules; |
| firewall | added "set-priority" option for IPv6 mangle firewall; |
| firewall | made "dynamic" parameter settable for IPv4 address lists; |
| hotspot | fixed minor memory leak after each successful login from WEB; |
| ike2 | added support for ChaChaPoly1305 encryption (CLI only); |
| ike2 | added support for DH Group 31 (EC25519) (CLI only); |
| ipsec | added hardware acceleration support for IPQ-6010; |
| netwatch | improved "interval" and "packet-interval" coexistence for ICMP type; |
| ovpn | fixed "Called-Station-Id" usage in RADIUS requests; |
| ppp | do not inherit routing mark for encapsulated packets; |
| ssh | do not allow SHA1 usage with strong crypto enabled; |
| switch | hide invalid settings for 98DX3255 and 98DX8525 switch chips; |
| swos | improved default SwOS backup file name; |
| vxlan | added VRF support; |
| webfig | ensure login page is displayed after each log out; |
| webfig | improved WEB caching capabilities; |
| wifiwave2 | added "datapath" settings to configure data forwarding for an interface (CLI only); |
| wifiwave2 | added initial CAPsMAN support (only compatible with wifiwave2 interfaces) (CLI only); |
| wifiwave2 | improved system stability when multiple virtual AP are configured; |
| Component | Change |
|---|---|
| conntrack | improved system stability when PPTP helper is used; |
| hotspot | fixed maximum allowed connections limitation; |
| netwatch | fixed reporting of VRF name in logging messages; |
| ospf | fixed MD5 checksum calculation; |
| sfp | added 2.5G SFP module support for RB5009; |
| webfig | properly detect current location for navigation buttons; |
| wifiwave2 | properly report interface on which traffic is received when multiple station interfaces are used concurrently; |
| wifiwave2 | removed maximum limit for group key update interval and changed the default to 1 day; |
| Component | Change |
|---|---|
| bgp | improved BGP advertisement printing; |
| bonding | properly detect VPLS interface state changes; |
| bridge | added support for static MDB entries; |
| bridge | disallow port-controller while the bridge has MSTP enabled; |
| bridge | fixed "edge=yes" setting for MSTP; |
| bridge | fixed incorrect root port blocking for MSTP; |
| bridge | fixed mst-override port priority for MSTP; |
| bridge | fixed MSTP compatibility with STP; |
| bridge | fixed port priority for STP and RSTP; |
| bridge | fixed RSTP BCP with bridged PPP interfaces; |
| bridge | fixed STP blocking state on port-controller; |
| bridge | improved port-controller system stability; |
| bridge | improved system stability when using MSTP and many VLAN mappings; |
| certificate | improved certificate management, signing and storing processes; |
| container | fixed handling of groups and usernames from Dockerfile; |
| dhcpv6-client | handle receiving of invalid T1 and T2 times; |
| discovery | added "discovered-by" parameter to indicate which protocol discovered the neighbor; |
| discovery | added "mode" parameter for discovery configuration; |
| discovery | fixed neighbor discovery on Mesh interfaces; |
| discovery | report IPv6 LL address if global address does not exist; |
| filesystem | fixed repartition on devices with containers; |
| hotspot | added "install-hotspot-queue" parameter to control dynamic queue creation (CLI only); |
| ike1 | improved expired IPsec-SA processing; |
| interface | improved system stability when handling large packets on CCR2216; |
| ipsec | removed Blowfish and Camellia encryption algorithms for IKE; |
| ipv6 | do not generate LL addresses for VPN interfaces when IPv6 is disabled; |
| ipv6 | do not use invalid/disabled global addresses for IPv6 ND; |
| l2tp | added VRF support for L2TP Ether interfaces; |
| lte | added CA information in 5G mode; |
| lte | fixed new MTU value validation; |
| lte | use RSRP value reported by MBIM signal for MBIM type modems; |
| lte | validate bearer count when activating MBIM modem; |
| macsec | fixed packet duplication on Ethernet interface; |
| macsec | fixed packet transmission using traffic-generator; |
| macsec | fixed packet validation; |
| netwatch | improved "interval" and "packet-interval" coexistence for ICMP type; |
| ntp | log error message when server is unreachable; |
| ospf | fixed simple authentication and checksums for NBMA and PTMP links; |
| ospf | fixed virtual-link address selection for PTP links; |
| ping | fixed ARP ping; |
| port | added serial port support for Telit FB990 modem; |
| port | do not show unusable USB port on hAP ax^2; |
| ppp | changed default lease time of dynamic DHCPv6 server to 1 day; |
| quickset | fixed addition of bridge filter rules in bridged mode; |
| quickset | fixed interface list member table on configuration changes; |
| quickset | update DNS server IP address when changing router's IP address; |
| rb4011 | fixed reporting of current CPU frequency and changed default frequency to "auto"; |
| sfp | allow usage of "10G Base-LR" mode for XS+31LC10D module; |
| snmp | added support for "lldpRemLocalPortNum" OID's; |
| supout | added missing IPv6 firewall sections; |
| supout | added MSTI and mst-override monitor for bridge MSTP; |
| switch | avoid packet corruption in some setups for 98DX3257, 98DX3255, 98DX4310, 98DX8525 and 98PX1012 switches; |
| switch | fixed SFP Tx disable when changing auto-negotiation settings for 98DXxxxx and 98PX1012 switches; |
| switch | improved 10Gbps Ethernet interface stability for 98DX8212 switch; |
| system | allow up to 4GB of RAM allocation per process on x86, ARM64 and TILE; |
| system | improved handling of user policies; |
| tr069-client | updated data model to version 2.15; |
| traffic-flow | fixed sending of sampling interval; |
| tunnels | added VRF support for EoIP, IPIP and GRE tunnels; |
| vxlan | added "local-address" parameter support; |
| vxlan | added VRF support; |
| webfig | fixed displaying of VRF routes; |
| webfig | fixed input validation for "VPLS ID" parameter; |
| webfig | fixed setting of "DHCP Option Set" parameter; |
| wifiwave2 | added "datapath" settings to configure data forwarding for an interface (CLI only); |
| wifiwave2 | added disable/enable commands to configuration profile sub-menus (CLI only); |
| wifiwave2 | added interworking/Hotspot 2.0 support (CLI only); |
| wifiwave2 | added more informative log messages on configuration profile changes; |
| wifiwave2 | added option to set per-client vlan-id in access list (only supported on 802.11ax interfaces) (CLI only); |
| wifiwave2 | added "provisioning" menu to automatically assign interface configurations to radios (CLI only); |
| wifiwave2 | do not permit a client device to be connected to more than one interface at a time; |
| wifiwave2 | removed maximum limit for group key update interval and changed the default to 1 day; |
| winbox | added "Active" prefix for current "Circuit ID" and "Cookie Length" fields for L2TP-Ether interfaces; |
| winbox | added "Make Static" button to "IP/DHCP Server/Leases" menu; |
| winbox | fixed minor typo in "Zerotier" menu; |
| winbox | improved handling of large WinBox protocol messages; |
| winbox | properly save "Interfaces/Detect Internet/Detect Internet State" menu in session file; |
| winbox | show "Switch" menu on Chateau 5G ax; |
| winbox | show "System/Health/Settings" only on boards that have configurable values; |
| winbox | show "System/RouterBOARD/Mode Button" on devices that have such feature; |
| winbox | show "USB Power Reset" menu on Chateau 5G ax; |
| wireless | fixed setting of realms interworking parameter if realms-raw is unset; |
| Component | Change |
|---|---|
| bgp | added support for BGP advertisement displaying (CLI only); |
| bgp | fixed reporting of session uptime; |
| bgp | improved session establishment speed after bootup; |
| bonding | fixed ARP monitor packets with bond's MAC address; |
| bonding | improved interface stability on slave configuration changes; |
| bonding | reduce "actual-mtu" according to interface "l2mtu"; |
| branding | execute "autorun.scr" file when installing branding package; |
| capsman | fixed RADIUS accounting when EAP is used; |
| certificate | fixed SHA1 certificate name lookup; |
| certificate | improved certificate management, signing and storing processes; |
| certificate | restricted maximum retry attempt window for Let's Encrypt certificate to 60 minutes; |
| container | added "start-on-boot" parameter for automatic container startup; |
| container | allow changing container related parameters while it is running; |
| container | fixed usage of non-authenticated registries; |
| dhcpv4-server | fixed matcher functionality; |
| dhcpv4-server | fixed RADIUS accounting for local leases; |
| dhcpv4-server | improved service stability when removing dynamic leases; |
| dhcpv6-client | fixed false error status reporting when server offers T1 or T2 value as 0; |
| dns | added "match-subdomain" option for static entries (CLI only); |
| dot1x | fixed incorrect error when using "mac-auth"; |
| ethernet | added "5Gbps" option for speed setting; |
| firewall | added "src/dst-address-type" parameter under "IPv6/Firewall/Mangle" menu; |
| firewall | disable IRC NAT helper on upgrade; |
| firewall | fixed IPv6 filtering with "in/out-interface" matcher that is in VRF; |
| firewall | fixed IRC NAT helper (CVE-2022-2663); |
| firewall | fixed usage of "netmap" action for IPv6 source NAT; |
| health | fixed fan speed and temperature reporting on CCR1072; |
| health | improved voltage reading on RBmAP-2nD; |
| hotspot | fixed service initialization when HTML directory configured on an external disk; |
| hotspot | fixed SSL usage on all HotSpot pages; |
| hotspot | improved stability when receiving bogus packets; |
| hotspot | limit maximum allowed connections based on free RAM resources; |
| hotspot | removed "routerboard.com" URL from default HotSpot advertise; |
| interface | added warning when interface has configured "mtu" higher than "l2mtu"; |
| ipsec | added "invalid-packets" counter for Installed SA's menu; |
| ipsec | fixed packet processing by hardware encryption engine on MMIPS devices; |
| l3hw | added "l3hw-settings" sub menu under the switch menu; |
| l3hw | added support for IPv6 route offloading (disabled by default); |
| l3hw | fixed "H" flag presence for accelerated connection tracking entries; |
| l3hw | fixed possible packet loss when using HW offloaded NAT; |
| l3hw | improved connected host offloading on startup; |
| l3hw | improved connected IPv6 host offloading when routing table is nearly full for 98DX224S, 98DX226S, and 98DX3236 switch chips; |
| l3hw | improved system stability; |
| l3hw | made route offloading selection work only on unicast; |
| lte | added interface name in MTU debug logging message; |
| lte | added periodic IPv6 RS to trigger IPv6 adress acquisition for non-MBIM modems; |
| lte | added support for Neoway N75-EA; |
| lte | added support to perform FOTA upgrade from local file for EG12-EA, EG18-EA, RG502Q-AE, EG06-A, EP06-A modems; |
| lte | disabled RPLMN on Chateau 5G; |
| lte | fixed at-chat on Telit FN980m; |
| lte | fixed handover from UMTS to LTE when PS activation had failed for MBIM modems; |
| lte | fixed MBIM modem initialization; |
| lte | fixed re-attaching on PS detach for MBIM modems; |
| lte | removed reconnect delay after receiving DETACH notification for MBIM modems; |
| mac-telnet | respect interface MTU setting when sending packets for MAC-Telnet and MAC-WinBox; |
| macsec | added configuration support with VLAN, ARP, DHCP and bridge tagging/untagging; |
| macsec | added logging support with "debug" and "dot1x" topics; |
| macsec | added support for MTU and L2MTU; |
| macsec | fixed interface after Ethernet link down; |
| macsec | fixed interface statistics and missing properties; |
| macsec | fixed interface status; |
| macsec | fixed multiple interface creation on different Ethernet ports |
| macsec | improved interface stability; |
| macsec | improved system stability for TILE and RB5009 devices; |
| macsec | removed interface from SMIPS devices; |
| netwatch | fixed string variable values in script; |
| ntp | improved initial synchronization speed after bootup; |
| ospf | added SHA hashing for authentication; |
| ospf | fixed area "no-summary" setting; |
| ospf | fixed checksum calculation; |
| ospf | fixed displaying of VRF interface in related logs; |
| ospf | fixed transmit of LSA/ACK's on p2p interfaces; |
| ospf | improved logging when invalid configuration is detected; |
| ospf | refresh OSPFv3 interface configuration when IPv6 network becomes available; |
| ovpn | added IPv6 support; |
| ovpn | added VRF support for client; |
| ppp | fixed memory leak; |
| ppp | improved service stability when multiple users disconnect simultaneously; |
| pppoe | fixed MRU negotiation even when it is set to 1500; |
| qsfp | added interface temperature warnings and shutdown; |
| queue | improved stability for CAKE type queues; |
| radius | require "policy" policy for "login" service configuration; |
| rip | fixed passwordless MD5 authentication; |
| route | fixed disappearance of inactive static routes after upgrade; |
| route | fixed memory leak; |
| route-filter | fixed filtering for multiple community routes; |
| route-filter | fixed memory allocation when moving entries; |
| routerboard | return router's short name in "model" parameter; |
| routerboard | set "Delete" as default key to enter booter menu ("/system routerboard upgrade" required); |
| serial | added support for newer PL2303 serial controllers; |
| sfp | improved QSFP/SFP interface stability for 98DXxxxx and 98PX1012 switches; |
| sms | added "status-report-request" parameter for "send" command; |
| sms | fixed handling of SMS send attempts on unsupported modems; |
| snmp | improved retrieval of routing related OID's; |
| snmp | improved stability when receiving bogus packets; |
| ssh | increased key generation timeout; |
| sstp | added VRF support for client; |
| supout | added tr069-client section; |
| supout | removed duplicate "bridge-controller" section; |
| switch | improved traffic forwarding at 5Gbps rate for 98DX8525, 98DX4310 switches; |
| system | renamed error messages when trying to edit or remove dynamic entries; |
| tile | improved system stability when processing packets; |
| tr069-client | do not allow ":" symbols in username; |
| tr069-client | fixed reporting of "X_MIKROTIK_MimoRSRP" parameter; |
| user | removed unused "dude" policy; |
| user-manager | accept any username for outer authentication; |
| user-manager | added "comment" parameter for batch user creation; |
| user-manager | added support for multiple accounting sessions; |
| user-manager | added variables to print profile name and end time in voucher templates; |
| user-manager | allow specifying router's address as subnet; |
| user-manager | fixed "migrate-legacy-db" command; |
| user-manager | fixed session expiry when it is stopped by Disconnect-Request; |
| user-manager | forced username verification against client's certificate for EAP-TLS; |
| user-manager | use "Class" attribute to associate user's accounting session; |
| vrrp | fixed connection tracking synchronization on MMIPS and MIPSBE devices; |
| vxlan | added IPv6 support for remote VTEPs (only IPv4 or IPv6 will be used at the same time, use "vteps-ip-version" property on VXLAN interface to change the version); |
| w60g | improved system stability (introduced in v7.5); |
| webfig | fixed creation of new IPv6 routes; |
| webfig | fixed displaying of "Last Seen" parameter under "IP/DHCP Server/Leases" menu; |
| webfig | fixed hex input for "Host Uniq" field; |
| webfig | fixed unsetting of "endpoint-address" parameter under "WireGuard/Peers" menu; |
| wifiwave2 | fixed enabling of unconfigured interfaces; |
| wifiwave2 | fixed malfunction of WPA3 hash-to-element technique when enabled on multiple interfaces; |
| wifiwave2 | fixed RADIUS accounting after fast-transition; |
| wifiwave2 | fixed "WPA Key Data Length" value in EAPOL frame when FT-EAP-SHA384 AKM is used; |
| winbox | added "Active" prefix for current remote and local session ID fields for L2TP-Ether interfaces; |
| winbox | added "address-list" parameter under "IP/DNS/Static" menu; |
| winbox | added "File Name" option for "Load Config" parameter under "System/SwOS" menu; |
| winbox | added icon for TR069-client menu; |
| winbox | added MACsec support; |
| winbox | added quick filtering option for route list; |
| winbox | added "Rapid Commit" parameter support under "IPv6/DHCP-Server" menu; |
| winbox | added "Reset Traffic Counters" button for all interfaces; |
| winbox | added "type" and "status-report-request" parameters under "Tools/SMS" menu; |
| winbox | allow "timeout" value to be less than 1 under "Tools/Netwatch" menu; |
| winbox | allow to rename mounted disks; |
| winbox | changed order of tabs under "User Manager" menu; |
| winbox | changed "uptime" parameter format when using the wifiwave2 package; |
| winbox | do not show unavailable features on SMIPS devices; |
| winbox | fixed interface traffic graph drawing on RB5009; |
| winbox | fixed maximum allowed value for VRRP's "priority" parameter; |
| winbox | fixed "Session Uptime" value for not established sessions under "Routing/BGP" menu; |
| winbox | fixed "Session Uptime" value under "Routing/BGP" menu; |
| winbox | fixed "System/SwOS" window refreshing after changes are detected; |
| winbox | fixed "User Manager/User Profiles" window refreshing after changes are detected; |
| winbox | made "backup.swb" the default value for SwOS backup; |
| winbox | made sessions removable in "User Manager" menu; |
| winbox | show "F" flag for failed entries under "Interfaces/VRRP" menu; |
| winbox | show "Switch" menu on Chateau LTE18 ax; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| winbox | show "System/RouterBOARD/Mode Button" on devices that have such feature; |
| wireguard | strip whitespaces from keys; |
| wireless | disallowed using "default" as scan list or channel names; |
| wireless | fixed incorrectly applied ingress priority to non-wireless packets; |
| wireless | fixed missing wireless interface on some RB921GS-5HPacD devices; |
| www | improved stability when receiving bogus packets; |
| x86 | improved ixgbe driver support; |