Search changelog entries
| Component | Change |
|---|---|
| certificate | improved stability when sending bogus SCEP message; |
| conntrack | limit total connection tracking table size based on installed RAM size; |
| crs3xx | fixed interface linking for some optical QSFP+ modules on CRS354 devices; |
| dhcpv6-server | fixed DUID generation with timestamp; |
| health | improved temperature reporting; |
| led | added "dark-mode" functionality control with Mode button for cAP XL ac; |
| leds | fixed LTE LED default mapping for LHGG; |
| lte | improved RSSI reporting on R11e-LTE6; |
| routerboot | enabling "protected-routerboot" feature requires a press of a button; |
| snmp | fixed IPsec-SA byte and packet counter reporting; |
| sstp | fixed client stuck in "nonce matching" state; |
| system | improved system stability if device is upgraded from RouterOS and/or RouterBOOT v6.41.4 or older; |
| traffic-flow | added systematic count-based packet sampling support; |
| upgrade | added new "upgrade" channel for upgrades between major versions; |
| winbox | added "Modbus" menu support; |
| wireless | added U-NII-2 support for US and Canada country profiles for cAP ac XL and QRT 5 ac; |
| wireless | fixed frequency range information on IPQ4019; |
| Component | Change |
|---|---|
| bgp | fixed connection establishment if peer is in VRF; |
| bgp | fixed interface addition to "link-local" nexthops; |
| capsman | fixed CAP upgrade process when upgrading from RouterOS v6; |
| certificate | improved stability when sending bogus SCEP message; |
| certificate | resolveed issue with public key generation when digest algorithm is unspecified and processing certificate signing requests; |
| l3hw | fixed HW offloading for connected bridge routes; |
| l3hw | fixed source MAC address usage for routed packets for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| lte | added AT chat support for Telit LN960; |
| lte | do not allow to run "scan" and "cell-monitor" commands if SIM is not present; |
| lte | fixed modem port initialization on KNOT; |
| ospf | properly set instance after upgrade from RouterOS v6; |
| route-filters | added "suppress-hw-offload" parameter; |
| route-filters | fixed "as-path" regexp matcher; |
| ssh | made SSH work in VRF's; |
| system | improved system stability if device is upgraded from RouterOS and/or RouterBOOT v6.41.4 or older; |
| tile | improved system stability when sending EoIP packet over interface that is being disabled; |
| wifiwave2 | fixed assignment of channel profiles to interfaces; |
| wifiwave2 | fixed interface list matching in "access-list"; |
| Component | Change |
|---|---|
| arm64 | fixed "total-sector-writes" resetting on each startup; |
| bgp | fixed IBGP nexthop selection; |
| bgp | fixed binding to IPv6 "link-local" address; |
| bgp | fixed missing default "local-pref" on selection; |
| bgp | fixed stability when appending extended communities; |
| bgp | improved stability and other minor fixes; |
| bonding | added warning when using 802.3ad mode without MII link monitoring; |
| bridge | added HW offload support for vlan-filtering on MT7621 switch chip (hEX, hEX S, RBM33G, RBM11G, LtAP); |
| bridge | fixed incorrect "hw=no" setting after reboot in rare cases; |
| bridge | improved MLAG stability; |
| capsman | do not include "access-list" passphrases in the output of export command by default; |
| certificate | added ability to choose the digest algorithm when generating a certificate; |
| chr | fixed FastPath support for VMXNET3 drivers; |
| dhcpv4 | fixed backslash prefix for packet logging; |
| dhcpv6-client | show correct DUID in print; |
| dhcpv6-server | fixed "address-pool" default value; |
| dhcpv6-server | fixed DUID generation with timestamp; |
| dns | fixed memory leak caused by large DNS replies; |
| gps | fixed built-in GPS functionality for LtAP; |
| health | fixed health value reporting on RB5009; |
| ipsec | enabled hardware acceleration support for ARM and ARM64 devices; |
| ipsec | fixed hardware acceleration support for CHR; |
| l3hw | fixed MTU on receive; |
| l3hw | fixed source MAC address usage for routed packets; |
| leds | adjust "system-led" color based on cellular connection technology on Chateau devices; |
| leds | fixed LED configuration on RB4011; |
| ltap | improved PCIe card support; |
| lte | added "at-chat" support in MBIM mode for Simcom modems in USB composition mode 9003; |
| lte | improved APN re-connection on non LTE networks; |
| lte | improved modem signal monitoring on Chateau 5G; |
| lte | moved notifications about incorrect responses from modem to 'lte' topic; |
| lte | properly show antenna selection on Chateau devices; |
| lte | request modem to restart registration process if timeout detected; |
| mpls | added ICMP handler (send ICMP ttl exceed on MPLS ttl expiry); |
| ospf | accept LA prefixes from intra-area router's LSA to the routing table; |
| ospf | allow to set IPv6 networks for "interface-template"; |
| ospf | disable areas with no interface configuration; |
| ospf | do not allow to set "ptp-unnumbered" on IPv6 interfaces; |
| ospf | do not set empty filter chains when upgrading from v6; |
| ospf | improved stability and other minor fixes; |
| ospf | show interface's hello, re-transmit and dead intervals; |
| package | uninstall "container" package when downgrading to v6; |
| pppoe | fixed DHCPv6 PD; |
| quickset | added 5G signal quality information; |
| quickset | made "Password..." button work in Basic AP mode; |
| route | improved stability and other minor fixes; |
| route-filters | fixed "<=" and ">="; |
| route-filters | fixed "ext-community" problems; |
| route-filters | fixed "num range" matchers; |
| route-filters | fixed "route origin" matcher; |
| route-filters | improved completion; |
| route-filters | improved stability and other minor fixes; |
| rpki | added "rpki-query" command; |
| rpki | other minor fixes; |
| snmp | fixed IPsec-SA stats counter reporting; |
| snmp | fixed bulk get/walk with large neighbor version strings; |
| ssl | added support for additional GCM_SHA384 ciphers; |
| ssl | fixed x509 chain validation; |
| switch | fixed bogus statistics after RTL8367 switch reset; |
| system | improved DHCP and HotSpot service stability when shutting down; |
| system | improved system stability when downgrading to v6 with external disks attached; |
| tr069-client | improved compatibility for 5G; |
| traffic-flow | added systematic count-based packet sampling support; |
| user-manager | fixed "rate-limit-priority" parameter; |
| user-manager | fixed PEAP server authentication for Windows clients; |
| vrf | allow to assign interfaces directly along with interface lists; |
| vxlan | added default L2MTU value for improved connectivity in bridged setups; |
| vxlan | improved speed on MIPSBE devices; |
| wifiwave2 | fixed configuration profile renaming; |
| wifiwave2 | moved RADIUS accounting parameters to a separate configuration profile; |
| winbox | added "netmap" action to IPv6 NAT rules; |
| winbox | added IPv6 support for "Network" parameter under "Routing/OSFP/Interface Templates" menu; |
| winbox | added missing IPv6 mangle actions - "mark-routing", "sniff-tzsp", "sniff-pc", "snpt" and "dnpt"; |
| winbox | added option to upgrade LTE firmware; |
| winbox | changed extension channel symbol to lower case for WifiWave2; |
| winbox | do not allow to set "memory-lines" parameter out of bounds under "System/Logging/Action" menu; |
| winbox | fixed "routing-mark" and "routing-table" selection in IPv4 and IPv6 firewall and route rules; |
| winbox | fixed private SSH key import; |
| winbox | made "0" the default value for GPS "init-channel" parameter; |
| winbox | made SSID field collapsible for WifiWave2; |
| winbox | moved "RPKI" tab from "Routing/BGP" to "Routing/RPKI" menu; |
| winbox | moved "Tables" tab from "IP/Route" to "Routing" menu; |
| winbox | moved all interface stats columns to the right; |
| winbox | properly load all backups stored in Cloud; |
| winbox | properly show "value" parameter for FWD type entries; |
| winbox | renamed "Backlight" to "OK" under "LCD/Backlight" menu; |
| winbox | renamed "Dst. Address" to "Route Dst." under "IP/Firewall/Mangle" menu; |
| winbox | replaced "routing-table" with VRF in traceroute; |
| winbox | show "External Antenna" parameter on all Chateau devices; |
| winbox | updated WifiWave2 interface fields and tabs; |
| wireguard | do not consider WireGuard interface as ethernet; |
| wireguard | improved system stability when sending WireGuard packets over EoIP; |
| wireless | adjusted antenna gain on Chateau devices; |
| wireless | improved system stability when changing L2MTU for wireless interfaces; |
| wireless | improved system stability when limiting link throughput via "ap-tx-limit" and "client-tx-limit" parameters; |
| wireless | improved system stability when using nv2 protocol on ipq4019 interfaces; |
| Component | Change |
|---|---|
| branding | fixed LCD logo loading from branding package when installed via Netinstall; |
| branding | properly clean up old branding files before installing a new one; |
| bridge | added IGMP and MLD querier monitoring; |
| bridge | added IGMP snooping log when multicast table gets full; |
| bridge | fixed external flag in the host table for wireless clients; |
| bridge | improved controller bridge stability when adding RouterOS v7 port extender; |
| bridge | improved port extender stability when creating bond interfaces on excluded ports; |
| bridge | improved stability when quickly adding and removing bridge interface; |
| certificate | improved stability when removing dynamic CRL entries; |
| chr | fixed OS provisioning on Azure; |
| chr | improved stability when changing "flow-control" settings on interfaces with e1000 drivers; |
| conntrack | increased total connection tracking table size based on installed RAM size; |
| console | require "write+ftp" permissions for executing script to file; |
| console | require "write+ftp" permissions for printing to file; |
| crs3xx | correctly filter packets by L2MTU on 1Gbps Ethernet interfaces for CRS354 devices; |
| crs3xx | fixed LEDs for QSFP+ interface on CRS326-24S+2Q+ device; |
| crs3xx | fixed SFP and SFP+ link rate reporting (introduced in v6.48beta11); |
| crs3xx | fixed bridge controller and extender packet forwarding for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed default MAC address calculation on management Ethernet for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed interface flow control; |
| crs3xx | improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | improved packet transmit on SFP+ interfaces; |
| crs3xx | improved switch resource allocation for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| defconf | apply default configuration from branding package when performing reset with button; |
| defconf | removed overlapping IPv6 firewall rules; |
| defconf | use router as DNS server for DHCP hosts; |
| dhcp-server | fixed DHCP Option decimal value parsing; |
| dhcpv4-server | reset dynamic "bcast" flag when receiving offer from DHCP relay; |
| dhcpv4-server | reset lease's dynamic "bcast" flag on packets from relay; |
| dhcpv6-server | check if pool name has changed from RADIUS on renew; |
| dhcpv6-server | improved dynamic server entry update; |
| discovery | do not send discovery packets on interfaces that are blocked by STP (introduced in v6.48); |
| dns | fixed memory leak caused by large DNS replies; |
| firewall | fixed "ingress-priority" matcher; |
| firewall | fixed GRE protocol packets considered invalid when PPTP helper is disabled; |
| gps | improved interface monitoring; |
| health | added "phy-temperature" sensor monitoring for CRS312 device; |
| health | improved temperature readings on hEX S; |
| health | improved temperature reporting; |
| ike2 | added support for ASN.1 DN "my-id" value setting for initiators; |
| ike2 | check if TS is still valid after obtaining SPI; |
| ike2 | fixed initiator packet retransmit with DDOS cookie; |
| ipsec | fixed memory leak when processing DHCP packets; |
| ipsec | improved SA update by SPI; |
| ipsec | improved system stability on CHR; |
| ipsec | improved system stability on MMIPS devices; |
| kid-control | improved IPv6 firewall rule generation; |
| led | added LTE LED support for LHGGR; |
| leds | fixed LTE LED default mapping for wAP R ac LTE kit; |
| lora | added additional predefined network servers; |
| lora | added channel plan "il-917" for Israel; |
| lora | fixed "PULL_DATA" token generation; |
| m33g | improved support for "/system gpio" menu ("/system routerboard upgrade" required); |
| m33g | removed 12..16 pins from "/system gpio" menu; |
| mipsbe | improved booting speed on non-NAND devices ("/system routerboard upgrade" required); |
| mpls | allow to disable FastPath (CLI only); |
| mqtt | added server name indication; |
| netinstall | fixed lock file persistence after reinstall; |
| netinstall | improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present; |
| netinstall | require Netinstall version to be the same or newer as "factory-software"; |
| ntp | use correct IPv6 multicast group for SNTP client; |
| package | always allow to uninstall package even if there is no free disk space left; |
| poe | update PoE firmware only on devices that supports it; |
| ppp | improved stability when receiving bogus response on modem channel; |
| qsfp | improved system stability when setting unsupported link rates; |
| quickset | use 5GHz interface's country for "Home AP Dual" configuration; |
| routerboard | fixed "reformat-hold-button-max" validation for values below 10s; |
| sfp | added "sfp-rate-select" setting; |
| sfp | fixed GPON module linking (introduced in v6.47); |
| sfp | improved 25Gbps optical module stability and linking; |
| sfp | improved SFP, SFP+, SFP28 and QSFP+ interface stability for CRS3xx and CCR2004 devices; |
| sfp | improved link stability for 10G, 25G and 40G modules on CRS309, CRS312, CRS326-24S+2Q+ CRS354 and CCR2004 devices; |
| sfp28 | changed FEC auto mode to disabled; |
| snmp | added "engine-id" OID support; |
| snmp | fixed "ipNetToMediaType" OID for incomplete entries; |
| ssh | fixed "undo" functionality; |
| supout | added controller bridge section; |
| supout | print detailed list of active user sessions; |
| switch | fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings); |
| switch | improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device; |
| swos | fixed "static-ip-address" parameter; |
| tr069-client | added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting; |
| tr069-client | added support for Ethernet link speed reporting; |
| tr069-client | added support for interface comment reporting and editing; |
| tr069-client | added support for supout file upload; |
| tr069-client | fixed traceroute diagnostics time values; |
| tr069-client | improved XML with new-lines for readable output; |
| tr069-client | improved stability for download/upload diagnostics; |
| upgrade | fixed free space checking on flash type memories when installing new packages; |
| ups | added battery info for APC Back-UPS BX750MI; |
| user | added "expired" user status with suggestion to change password (WinBox v3.29 required); |
| user | fixed active user session purging on disconnect; |
| user | show "expired password" prompt for users with blank password; |
| w60g | general stability and performance improvements; |
| w60g | limit power output when using region EU to match EN302567 on nRAY; |
| w60g | use EU region by default; |
| webfig | added support for logo image from branding package; |
| webfig | do not show value units twice; |
| webfig | fixed "Wireless/CAP" menu opening; |
| webfig | fixed interface sorting by name; |
| webfig | show only "Close" button under "Wireless/Wireless Sniffer/Sniffed Packets" menu; |
| winbox | added "dhcp" option to "multicast-helper" setting; |
| winbox | added "fec-mode" parameter under "Interface/Ethernet" menu; |
| winbox | added "interface-speed-100G" LED type to "System/LEDs" menu; |
| winbox | added "name" and "file-name" parameter when importing and exporting certificates; |
| winbox | added "sfp-shutdown-temperature" setting to SFP interfaces; |
| winbox | added SSH settings under "IP/SSH" menu; |
| winbox | added TFTP settings under "IP/TFTP/Settings" menu; |
| winbox | allow setting MCS (24-31) to 4x4 Wireless interfaces; |
| winbox | do not allow to add/remove W60G interfaces; |
| winbox | do not allow to set empty "init-string" field under "System/GPS" menu; |
| winbox | do not show "GPS antenna" selection for devices without selection support; |
| winbox | fixed "Secondary Frequency" parameter setting under "CAPsMAN/Channel" menu; |
| winbox | fixed DNS "cache-size" parameter setting; |
| winbox | fixed health reporting on RB960, hEX, hEX S and hAP ac3 devices; |
| winbox | fixed order of weekdays under "IP/Firewall" menu; |
| winbox | fixed support for "Delegated-IPv6-Prefix" for PPP services; |
| winbox | match "MAC Protocol-Num" predefined values under "Bridge/Filters" menu; |
| winbox | minimal required version is v3.30; |
| winbox | properly show "CRL Signature" field under "System/Certificate" menu; |
| winbox | separated CCQ Tx and Rx values in their own unique columns; |
| winbox | show "System/Health/Settings" only on boards that have configurable values; |
| winbox | show "current-channel" column by default for CAP interfaces; |
| winbox | show IPv6 address in separate field under "IP/Cloud" menu; |
| wireless | added U-NII-2 support for US and Canada country profiles for hAP ac lite; |
| wireless | added override for multicast-to-unicast translation of DHCP traffic; |
| wireless | do not remove channels >2462 MHz from "scanlist" if scanning for fixed channel; |
| wireless | do not send packet back to station-bridge it was received from; |
| wireless | fixed minor typo in debug logging messages; |
| wireless | improve WMM priority assignment for packets with internal priority greater than 7; |
| wireless | improve regulatory compliance with DFS requirements; |
| wireless | improve signaling of QCA9984 interface capabilities when using 160/80+80MHz channel width; |
| wireless | improved system stability when sending packets through interface after L2MTU is increased; |
| wireless | log client signal strength on disconnect; |
| wireless | renamed "secondary-channel" to "secondary-frequency"; |
| wireless | updated "israel" regulatory domain information; |
| wireless | updated "united kingdom" regulatory domain information; |
| Component | Change |
|---|---|
| bridge | improved controller bridge stability when adding RouterOS v7 port extender; |
| bridge | improved port extender stability when creating bond interfaces on excluded ports; |
| crs3xx | fixed bridge controller and extender packet forwarding for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| dhcp-server | fixed DHCP Option decimal value parsing; |
| discovery | do not send discovery packets on interfaces that are blocked by STP (introduced in v6.48); |
| sfp | added "sfp-rate-select" setting; |
| supout | added controller bridge section; |
| switch | fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings); |
| user | added "expired" user status with suggestion to change password (WinBox v3.29 required); |
| user | fixed active user session purging on disconnect; |
| user | show "expired password" prompt for users with blank password; |
| winbox | added "fec-mode" parameter under "Interface/Ethernet" menu; |
| winbox | minimal required version is v3.30; |
| wireless | improved system stability when sending packets through interface after L2MTU is increased; |