Search changelog entries
| Component | Change |
|---|---|
| bridge | automatically remove extended interfaces when deleting PE device from CB; |
| cap | fixed L2MTU path discovery; |
| cap | fixed L2MTU setting from CAPsMAN; |
| certificate | fixed private key verification for CA certificate during signing process; |
| cloud | improved backup generation process; |
| crs3xx | fixed CDP packet forwarding for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices; |
| crs3xx | fixed port-isolation for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices (introduced in v6.48beta35); |
| defconf | fixed default configuration loading on RBmAP-2nD; |
| dhcpv4-client | fixed DHCP offer packet parsing with overload option present; |
| discovery | fixed occasional wrong Chassis-ID for LLDP packets (introduced in v6.48beta35); |
| dot1x | accept priority tagged (VLAN 0) EAP packets on dot1x client; |
| fetch | improved SSL handshake processing; |
| filesystem | improved long-term filesystem stability and data integrity; |
| ike1 | fixed "my-id=address" parameter usage together with certificate authentication; |
| ike2 | added support for IKEv2 Message Fragmentation (RFC7383); |
| ike2 | fixed EAP MSK length validation; |
| ike2 | fixed too small payload parsing; |
| interface | added temperature warning and interface disable on overheat for SFP and SFP+ interfaces (CLI only); |
| led | fixed state persistence after device reboot on NetMetal 5 ac devices; |
| lora | fixed device going into "ERROR" state caused by FSK modulated downlinks; |
| lte | fixed "band" value reporting; |
| lte | fixed multiple APN passthrough on R11e-4G; |
| lte | improved EARFCN reporting in 3G and LTE modes on Sierra modems; |
| lte | limit allowed APN count to 3 on R11e-LTE; |
| m33g | added support for "/system gpio" menu (CLI only); |
| mpls | fixed duplicate "LabelRelease" message sending; |
| profile | improved idle process detection on x86 processors; |
| profile | improved process classification on ARM devices; |
| quickset | added "Port Mapping" to QuickSet; |
| quickset | fixed local IP address setting on master interface; |
| radius | added "Service-Type" attribute to Access-Request for IPv4 and IPv6 DHCP servers; |
| routerboard | fixed PCIe bus reset during power-on on MMIPS devices ("/system routerboard upgrade" required); |
| routerboard | force power-down on PCIe bus during reboot on LHGR devices ("/system routerboard upgrade" required); |
| script | added error message in the logs if startup script runtime limit was exceeded; |
| snmp | added information from IPsec "active-peers" menu to MIKROTIK-MIB; |
| snmp | added new LTE monitoring OID's to MIKROTIK-MIB; |
| switch | fixed Ethernet padding for small packets; |
| tr069-client | fixed RouterOS downgrade procedure; |
| traffic-flow | added NAT event logging support for IPFIX; |
| traffic-generator | fixed 32Gbps limitation; |
| user | improved WinBox and The Dude authenticated session handling; |
| user-manager | do not allow creating limitation that crosses midnight; |
| user-manager | updated PayPal's root certificate authorities; |
| vrrp | made "password" parameter sensitive; |
| w60g | general stability and performance improvements; |
| wireless | added support for US FCC UNII-2 and Canada country profiles for NetMetal series devices; |
| wireless | do not override MTU and ARP values from CAPsMAN with local forwarding; |
| wireless | fixed incorrect wireless capability information in association response frames; |
| wireless | updated "no_country_set" regulatory domain information; |
| Component | Change |
|---|---|
| bridge | fixed STP alternate and backup port states for devices with switch chip (introduced in v6.47); |
| crs3xx | fixed IGMP snooping for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| fetch | fixed "src-address" usage for SFTP; |
| filesystem | improved long-term filesystem stability and data integrity; |
| hotspot | ignore packets from host while MAC authentication is in progress; |
| kidcontrol | fixed "time-unlimited-rate" to engage in correct time; |
| smb | fixed possible memory leak (CVE-2020-11881); |
| sms | fixed SMS sending when both "interface" and "smsc" parameters are specified; |
| snmp | fixed "/tool snmp-get" functionality (introduced in v 6.46beta43); |
| user-manager | updated PayPal's root certificate authorities; |
| wireless | added support for U-NII-2 for wAP ac; |
| wireless | updated "canada" regulatory domain information; |
| wireless | updated "united states" regulatory domain information; |
| Component | Change |
|---|---|
| arm64 | improved reboot reason reporting in log; |
| bridge | added minor fixes and improvements for IGMP snooping with HW offloading; |
| bridge | fixed link-local multicast forwarding when IGMP snooping and HW offloading is enabled; |
| bridge | fixed MDB entry removal when using bridge port "fast-leave" property; |
| conntrack | automatically reduce connection tracking timeouts when table is full; |
| console | allow "once" parameter for bonding monitoring; |
| crs3xx | added initial Bridge Port Extender support (CLI only); |
| crs3xx | added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only); |
| crs3xx | added switch-cpu port VLAN filtering (switch-cpu port is now mapped with bridge interface VLAN membership when vlan-filtering is enabled); |
| crs3xx | fixed IGMP snooping for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch "copy-to-cpu" property for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices; |
| detnet | fixed malformed dummy DHCP User Class option; |
| detnet | use MAC address from bridge interface instead of slave port; |
| dhcpv4-server | improved "client-id" value parsing; |
| ipsec | refresh peer's DNS only when phase 1 is down; |
| leds | fixed LED type setting; |
| smb | fixed possible memory leak; |
| sms | fixed SMS sending when both "interface" and "smsc" parameters are specified; |
| snmp | added information from IPsec "active-peers" menu to MIKROTIK-MIB; |
| snmp | fixed "/tool snmp-get" functionality (introduced in v 6.46beta43); |
| snmp | fixed value types for "dot1qPvid"; |
| supout | added bonding interface monitor information; |
| switch | fixed Ethernet padding for small packets; |
| tr069-client | allow passing LTE firmware update URL as XML; |
| user-manager | do not allow creating limitation that crosses midnight; |
| user-manager | updated PayPal's root certificate authorities; |
| wireless | improved WPS process stability; |
| Component | Change |
|---|---|
| arm | improved stability when forcing 25G speed on unsupported interface; |
| bridge | fixed host table update on SNMP query; |
| bridge | fixed STP alternate and backup port states for devices with switch chip; |
| crs3xx | fixed hardware offloaded MPLS forwarding when using bonding interfaces; |
| crs3xx | fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+; |
| crs3xx | fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | improved 10G interface initialization on CRS312 devices; |
| crs3xx | improved Ethernet port group traffic forwarding on CRS354 devices; |
| crs3xx | improved system stability when using hardware offloaded MPLS; |
| defconf | fixed default configuration loading on RBmAPL-2nD; |
| dhcpv6-server | disallow changing binding's "prefix-pool"; |
| dhcpv6-server | do not require "server" parameter for bindings; |
| discovery | do not send discovery packets on inactive bonding slave interfaces; |
| discovery | do not send discovery packets on interfaces that are blocked by STP; |
| dot1x | fixed duplicate EAP request packets for server; |
| dot1x | fixed EAP packet version numbering; |
| added support for multiple "to" recipients; | |
| export | fixed HotSpot "address-per-mac" parameter export; |
| fetch | show status "uploaded" instead of "downloaded" when uploading a file; |
| ftp | fixed possible buffer overflow; |
| hotspot | ignore packets from host while MAC authentication is in progress; |
| ike1 | improved stability when performing policy lookup on non-existant peer; |
| ike2 | fixed local side NAT detection; |
| ike2 | fixed policy reference for pending acquire; |
| ike2 | retry RSA signature validation with deduced digest from certificate; |
| interface | added new builtin "static" interface list; |
| kidcontrol | fixed "time-unlimited-rate" to engage in correct time; |
| lcd | improved general system stability when LCD is not present; |
| lte | fixed modem initialization when multiple modems are used simultaneously; |
| lte | fixed PDP authentication configuration for SIM7600; |
| lte | improved stability during firmware upgrade; |
| metarouter | fixed image importing (introduced in v6.46); |
| ospf | fixed disappearing NSSA default route; |
| ospf | fixed processing of "unknown" LSA type; |
| ospf | improved route tag processing for OSPFv3; |
| poe | fixed "power-cycle" functionality on hEX PoE, PowerBox Pro and OmniTIK 5 PoE ac; |
| port | removed serial console port on hEX S; |
| ppp | removed "comment", "set" and "edit" commands from "PPP->Active" menu; |
| profile | added support for CCR2004-1G-12S+2XS; |
| qsfp | fixed auto-negotiation status; |
| quickset | fixed invalid configuration applying when performing changes during LTE modem initialization process; |
| quickset | show "Antenna Gain" setting on devices without built-in antennas; |
| route | improved stability when 6to4 interface is configured with disabled IPv6 package; |
| routerboard | fixed "reset-button" menu presence on all devices; |
| routerboot | fixed etherboot FCS errors with 100Mbps rate for CRS305, CRS309 and CRS317 devices ("/system routerboard upgrade" required); |
| sfp | stabilized CRS212 SFP port functionality and improved monitoring of optical modules; |
| smb | fixed file path validation (introduced in v6.46); |
| smb | fixed possible memory leak (CVE-2020-11881); |
| smb | limit active session count to 5 per connection; |
| sniffer | allow setting port for "streaming-server"; |
| snmp | added "dot1qTpFdbTable" OID reporting for Q-BRIDGE-MIB; |
| switch | correctly enable and disable CPU Flow Control on RB3011UiAS; |
| switch | fixed MAC address learning on switch-cpu port for Atheros8316, Atheros8227 and Atheros7240 switch chips; |
| upgrade | fixed space handling in package file names; |
| w60g | added "mdmg-fix" parameter for RBwAP60Gx3 (CLI only); |
| w60g | improved rate selection in low traffic conditions; |
| webfig | fixed 5 GHz wireless interface "frequency" parameter value list on Audience; |
| winbox | added "region" parameter for W60G interfaces; |
| winbox | allow to specify any Ethernet like interface under "Tool/WoL" menu; |
| winbox | do not allow to enter empty strings in "caps-man-names" and "common-name" parameters; |
| winbox | fixed "Tx/Rx Signal Strength" value presence for 4 chain interfaces; |
| winbox | fixed wireless interface "HT" tab setting presence when "band=5ghz-n/ac"; |
| winbox | fixed wireless sniffer parameter setting; |
| winbox | hide irrelevant switch port parameters; |
| wireless | added support for U-NII-2 for cAP ac; |
| wireless | added support for U-NII-2 for wAP ac; |
| wireless | allow setting "tx-power" up to 40; |
| wireless | changed "station-roaming" default setting from "enabled" to "disabled"; |
| wireless | fixed potential wireless driver issue related to CVE-2020-3702; |
| wireless | improved management service stability when receiving bogus packets; |
| wireless | updated "bangladesh" regulatory domain information; |
| wireless | updated "canada" regulatory domain information; |
| wireless | updated "egypt" regulatory domain information; |
| wireless | updated "indonesia5" regulatory domain information; |
| wireless | updated "united states" regulatory domain information; |
| www | added "tls-version" parameter in "IP->Services" menu; |
| Component | Change |
|---|---|
| bonding | removed "sys-id" and "sys-priority" from monitor-slaves command; |
| bridge | fixed BPDU guard port disable/enable on HW offloaded interfaces; |
| bridge | fixed host table update on SNMP query; |
| bridge | fixed multicast table printing; |
| bridge | fixed packet forwarding for CAP and BCP controlled interfaces (introduced in v6.48beta12); |
| bridge | fixed STP alternate and backup port states for devices with switch chip (introduced in v6.47); |
| bridge | increased multicast table size to 4K entries; |
| crs3xx | fixed "mirror-source" property on switch port disable for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | fixed port isolation for "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | fixed port isolation removal for "switch-cpu" port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed "storm-rate" traffic limiting for switch-cpu port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | fixed VLAN tagged packet forwarding on "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices (introduced in v6.48beta12); |
| defconf | improved CAP interface bridging; |
| defconf | improved default configuration generation on devices without wireless package installed; |
| discovery | added "lldp-med-net-policy-vlan" property for assigning VLAN ID (CLI only); |
| discovery | allow choosing which discovery protocol is used (CLI only); |
| discovery | fixed discovery on mesh ports; |
| discovery | fixed discovery packet sending on newly bridged port with "protocol-mode=none"; |
| discovery | fixed discovery when enabled only on master port; |
| discovery | use interface MAC address when sending MNDP from slave port; |
| dns | added IPv6 support for DoH; |
| dns | fixed multiple TXT string replies; |
| dns | hide default static entry "type" from export; |
| fetch | fixed "src-address" usage for SFTP; |
| filesystem | improved long-term filesystem stability and data integrity; |
| health | removed unused "heater-control" and "heater-threshold" parameters; |
| hotspot | added support for captive portal advertising using DHCP (RFC7710); |
| hotspot | improved management service stability when receiving bogus packets; |
| ike2 | fixed local side NAT detection; |
| ipsec | do not kill connection when peer's "name" or "comment" is changed; |
| ipsec | refresh peer's DNS only when phase 1 is down; |
| lte | added support for Alcatel IK41VE1; |
| snmp | fixed value types for "dot1dStp"; |
| tr069-client | send correct "ConnectionRequestURL" when using IPv6; |
| traffic-flow | added "sys-init-time" parameter support; |
| wireless | allow setting "tx-power" up to 40; |