|
bgp
|
fixed early-cut not working properly; |
|
bgp
|
implement multipath (ability for BGP best path to select ECMP routes); |
|
bgp
|
implement revised input error handling per RFC 7606; |
|
bridge
|
added local and static MAC synchronization for MLAG; |
|
bridge
|
added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically updated after upgrade; downgrading to an older version will result in MLAG configuration loss); |
|
bridge
|
added MLAG-specific aged and aged-peer flags to host table; |
|
bridge
|
added RA guard feature; |
|
bridge
|
fixed MAC moving between regular ports and bonds for MLAG; |
|
bridge
|
fixed MLAG state being permanently disabled when changing bridge interface settings; |
|
bridge
|
improved MAC synchronization for MLAG; |
|
certificate
|
improved certificate export process; |
|
certificate
|
improved logging; |
|
console
|
added :continue and :break commands for various loops; |
|
console
|
added :exit command to terminate scripts; |
|
console
|
added "comments" parameter to print command to control comment and error output; |
|
console
|
added comparison operators for ID values; |
|
console
|
added Ctrl+Left/Right word navigation; |
|
console
|
added Ctrl+w word deletion; |
|
console
|
added hint for dry-run import parameter; |
|
console
|
allow undefined variables in dry-run import; |
|
console
|
changed autocomplete expansion criteria; |
|
console
|
disable follow command in /ip/firewall/connection menu; |
|
console
|
fixed brief print for entries with multiple comments; |
|
console
|
fixed setting of /interface/wireless/scan-list; |
|
console
|
fixed value type names in comparison errors; |
|
console
|
implement string casting in :tobool command; |
|
console
|
improved error tracing when using find command; |
|
console
|
improved set/remove command handling in /file menu; |
|
console
|
look up variable in global scope if argument scope lookup failed; |
|
console
|
parse width parameter for non-interactive SSH commands; |
|
console
|
show smaller QR codes where possible; |
|
container
|
added jupyter-notebook, livebook and myip apps; |
|
container
|
added support for zstd extraction; |
|
container
|
internal stability improvements; |
|
detnet
|
added request-interval setting; |
|
detnet
|
changed default port from MNDP to a random unused UDP port; |
|
dhcp-server
|
improved failure/error logging for both IPv4 and IPv6; |
|
dhcpv4-client
|
fixed inability to reference disabled DHCP client by interface name; |
|
dhcpv4-client
|
request DOMAINNAME (15) option from the server; |
|
dhcpv4-server
|
improved DHCP option handling; |
|
dhcpv4-server
|
improved logging; |
|
dhcpv4-server
|
send all found lease options in reply to DHCPINFORM; |
|
dhcpv6-client
|
allow unsetting "pool-prefix-length" parameter; |
|
dhcpv6-client
|
improved log messages; |
|
dhcpv6-server
|
swap input and output RADIUS accounting statistics counters; |
|
disk
|
show if driver is encrypted and locked; |
|
fetch
|
added HTTP/2 support on ARM64 and x86/CHR devices; |
|
fetch
|
increased default maximum redirect count to 2; |
|
fetch
|
return error code and HTTP headers to :onerror script; |
|
fetch
|
treat HTTP 304 return code as success; |
|
firewall
|
clear relevant masqueraded connection tracking entries on WAN address change; |
|
hotspot
|
allow WireGuard interface type; |
|
hotspot
|
do not invalidate static ARP entries; |
|
hotspot
|
fixed www response after login by cookie; |
|
iot
|
improved LoRa FSK modulation downlinking; |
|
ipsec
|
added "none" option to IPsec key QKD certificate field; |
|
ipsec
|
added IKEv2 DDoS cookie activation setting; |
|
ipsec
|
added logging for IPsec policy template group; |
|
ipsec
|
added logging of IKEv2 connection SPI and initiator address; |
|
ipsec
|
adjusted minimum generated PSK key length; |
|
ipsec
|
fixed IKEv2 child policy reqid lost on rekey; |
|
ipsec
|
fixed IKEv2 child reqid handling on traffic selector update; |
|
ipv6
|
added dhcp6-pd-preferred to /ipv6/nd/prefix to control P flag in Prefix Info Option RFC 9762; |
|
ipv6
|
delete SLAAC default route if there are no active SLAAC prefixes present and no new RAs received; |
|
ipv6
|
enable IPv6 fast-path after removing firewall rules; |
|
log
|
added option to clear echo logs; |
|
log
|
added option to prepend topics to BSD syslog message; |
|
log
|
added script target for log actions; |
|
log
|
fixed incorrect log message shown after canceling supout.rif creation; |
|
log
|
fixed minor spelling issues; |
|
log
|
fixed missing ID in trace logs after removing logging rule; |
|
log
|
log "Secret must be set to run scripts from SMS" error only if ":cmd" prefix is used in SMS message; |
|
log
|
use uppercase MAC address in firewall logging; |
|
lte
|
added "auto" MTU option for LTE interfaces to use network-advertised MTU on supported devices; |
|
lte
|
added multi-apn and framed routing support for EC200A-EU modem (requires latest FW version); |
|
lte
|
added USB tethering support using iOS devices; |
|
lte
|
clear about field status on firmware upgrade; |
|
lte
|
do not flap LTE passthrough assigned interface on modem link state change; |
|
lte
|
do not reconfigure LTE interface on configuration change error; |
|
lte
|
fixed changing MAC address for EC200A-EU modem; |
|
lte
|
fixed eSIM errors appearing on devices without eSIM support; |
|
lte
|
fixed firmware update and status refresh for R11eL-EC200A-EU modem; |
|
lte
|
fixed LTE interface IPv6 address generation to use EUI-64 for EC25-EU&KNe; |
|
lte
|
improved APN IP type handling by enabling only the IP protocols defined in the assigned APN profile for config-less modems; |
|
lte
|
make inactive LTE interface settable, LTE interface settings can be set without waiting for modem initial initialization; |
|
lte
|
removed delay before querying modem status for config-less modems with info channel; |
|
mac-telnet
|
added interface property; |
|
macsec
|
fixed hardware offload on S53 and C53 devices; |
|
mesh
|
fixed missing S flag on interfaces after mesh disable/enable; |
|
ping
|
added IPv6 support for flood-ping; |
|
poe-out
|
added LLDP support for dual-signature PDs; |
|
poe-out
|
firmware update for 802.3at capable boards (the update will cause brief power interruption to poe-out interfaces); |
|
poe-out
|
firmware update for 802.3bt capable boards (the update will cause brief power interruption to poe-out interfaces); |
|
ppp
|
fixed Framed-Route attribute not being applied to correct VRF; |
|
ppp
|
fixed premature PPP client disconnect on BG77 modems during firmware update; |
|
rose-storage
|
added XFS support; |
|
route
|
added logs for check-gateway state changes; |
|
route
|
expose built-in routing rules and allow changing their order under the /routing/rule menu; |
|
route
|
fixed route removal after unexpected safe mode termination; |
|
routerboot
|
allow installing ARM64 on L009 device ("/system routerboard upgrade" required; configure "/system/routerboard/settings set preferred-architecture=arm64"; then install ARM64 with Netinstall; downgrading to older versions must be avoided); |
|
routerboot
|
fixed linking to 1000M-half for KNOT Embedded LTE4 ("/system routerboard upgrade" required); |
|
routerboot
|
fixed possible Netinstall failure for KNOT Embedded LTE4 ("/system routerboard upgrade" required); |
|
sfp
|
improved initialization and linking for some QSFP modules; |
|
smips
|
reduced package size and removed ip-scan, mac-scan, ping-speed, flood-ping features; |
|
snmp
|
fixed issue where bulk walk might skip the first OID; |
|
supout
|
wait up to 5 minutes for export to complete and show incomplete output in case of timeout; |
|
switch
|
fixed missing switch-cpu port counters; |
|
switch
|
updated switch-marvell.npk driver; |
|
undo
|
show user when configuring DHCP server or hotspot with setup command; |
|
upgrade
|
added "password" parameter to "local-upgrade" feature when configuring through CLI; |
|
upgrade
|
added IPv6 support for local package source and mirror; |
|
upgrade
|
fixed local package mirror check interval; |
|
upgrade
|
removed redundant commands from local package menu; |
|
usb
|
updated device ids for ax88179_178a driver; |
|
w60g
|
fixed possible memory leak when an interface is disabled; |
|
webfig
|
added new section "Common names" in skin designer; |
|
webfig
|
added support for collapsible tree view for menus like Interfaces, Files, Queues; |
|
webfig
|
added support for URL fields; |
|
webfig
|
fixed ability to set interworking.realms-raw WiFi interface attribute; |
|
webfig
|
fixed skin designer mobile view for QuickSet and Terminal; |
|
webfig
|
fixed Torch Filters default values; |
|
webfig
|
improved address type field input value validation; |
|
wifi
|
added keepalive message in CAPsMAN data channel; |
|
wifi
|
allow specifying hostname to caps-man-addresses; |
|
wifi
|
fixed channel switching for MediaTek access points; |
|
wifi
|
fixed FT support with wpa2-psk-sha2; |
|
wifi
|
fixed possible certificate failure after CAPsMAN disable/enable; |
|
wifi
|
improved spectral-history width for console; |
|
wifi
|
improved stability and fixed multiple issues; |
|
wifi
|
improved support for 802.11be access points; |
|
wifi
|
improved system stability when using spectral-scan; |
|
winbox
|
added "Force Check" for local upgrade; |
|
winbox
|
added comment in "System/Ports/Remote Access" menu; |
|
winbox
|
added GUI support for IPsec QDK; |
|
winbox
|
added missing LoRa channel fields; |
|
winbox
|
added warning when changing global script variables; |
|
winbox
|
allow using specified skin without the sensitive policy; |
|
winbox
|
fixed applying a skin to a user authenticated with RADIUS; |
|
winbox
|
fixed applying a skin to WinBox if it was uploaded via the branding package; |
|
winbox
|
fixed default flag in certain menus; |
|
winbox
|
fixed Preshared Key "auto" and "none" options for WireGuard Peer; |
|
winbox
|
make File Share URL field clickable; |
|
winbox
|
recognize imported certificate key size; |
|
winbox
|
rename "Change Now" to "Change" button in "System/Password" menu; |
|
winbox
|
replace "DHCP" with "DHCPv6" in IPv6 menus; |
|
winbox
|
show warnings in "MPLS/Traffic Eng/Tunnel" menu; |
|
winbox
|
updated various WiFi properties; |
|
wireguard
|
merged upstream fixes and improvements; |
|
wireless
|
avoid joining BSS that previously failed until all other options tried; |
|
wireless
|
improved system stability when changing nstreme mode; |
|
wireless
|
improved system stability when eap-method=passthrough configured for station; |
|
x86
|
added JME network driver; |
|
x86
|
fixed interface hang on RTL8125 when processing IP-fragmented UDP traffic; |
|
x86
|
improved link establishing on Intel X710 series NIC; |