Search changelog entries
| Component | Change |
|---|---|
| arm | improved stability when forcing 25G speed on unsupported interface; |
| bridge | fixed host table update on SNMP query; |
| bridge | fixed STP alternate and backup port states for devices with switch chip; |
| crs3xx | fixed hardware offloaded MPLS forwarding when using bonding interfaces; |
| crs3xx | fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+; |
| crs3xx | fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | improved 10G interface initialization on CRS312 devices; |
| crs3xx | improved Ethernet port group traffic forwarding on CRS354 devices; |
| crs3xx | improved system stability when using hardware offloaded MPLS; |
| defconf | fixed default configuration loading on RBmAPL-2nD; |
| dhcpv6-server | disallow changing binding's "prefix-pool"; |
| dhcpv6-server | do not require "server" parameter for bindings; |
| discovery | do not send discovery packets on inactive bonding slave interfaces; |
| discovery | do not send discovery packets on interfaces that are blocked by STP; |
| dot1x | fixed duplicate EAP request packets for server; |
| dot1x | fixed EAP packet version numbering; |
| added support for multiple "to" recipients; | |
| export | fixed HotSpot "address-per-mac" parameter export; |
| fetch | show status "uploaded" instead of "downloaded" when uploading a file; |
| ftp | fixed possible buffer overflow; |
| hotspot | ignore packets from host while MAC authentication is in progress; |
| ike1 | improved stability when performing policy lookup on non-existant peer; |
| ike2 | fixed local side NAT detection; |
| ike2 | fixed policy reference for pending acquire; |
| ike2 | retry RSA signature validation with deduced digest from certificate; |
| interface | added new builtin "static" interface list; |
| kidcontrol | fixed "time-unlimited-rate" to engage in correct time; |
| lcd | improved general system stability when LCD is not present; |
| lte | fixed modem initialization when multiple modems are used simultaneously; |
| lte | fixed PDP authentication configuration for SIM7600; |
| lte | improved stability during firmware upgrade; |
| metarouter | fixed image importing (introduced in v6.46); |
| ospf | fixed disappearing NSSA default route; |
| ospf | fixed processing of "unknown" LSA type; |
| ospf | improved route tag processing for OSPFv3; |
| poe | fixed "power-cycle" functionality on hEX PoE, PowerBox Pro and OmniTIK 5 PoE ac; |
| port | removed serial console port on hEX S; |
| ppp | removed "comment", "set" and "edit" commands from "PPP->Active" menu; |
| profile | added support for CCR2004-1G-12S+2XS; |
| qsfp | fixed auto-negotiation status; |
| quickset | fixed invalid configuration applying when performing changes during LTE modem initialization process; |
| quickset | show "Antenna Gain" setting on devices without built-in antennas; |
| route | improved stability when 6to4 interface is configured with disabled IPv6 package; |
| routerboard | fixed "reset-button" menu presence on all devices; |
| routerboot | fixed etherboot FCS errors with 100Mbps rate for CRS305, CRS309 and CRS317 devices ("/system routerboard upgrade" required); |
| sfp | stabilized CRS212 SFP port functionality and improved monitoring of optical modules; |
| smb | fixed file path validation (introduced in v6.46); |
| smb | fixed possible memory leak (CVE-2020-11881); |
| smb | limit active session count to 5 per connection; |
| sniffer | allow setting port for "streaming-server"; |
| snmp | added "dot1qTpFdbTable" OID reporting for Q-BRIDGE-MIB; |
| switch | correctly enable and disable CPU Flow Control on RB3011UiAS; |
| switch | fixed MAC address learning on switch-cpu port for Atheros8316, Atheros8227 and Atheros7240 switch chips; |
| upgrade | fixed space handling in package file names; |
| w60g | added "mdmg-fix" parameter for RBwAP60Gx3 (CLI only); |
| w60g | improved rate selection in low traffic conditions; |
| webfig | fixed 5 GHz wireless interface "frequency" parameter value list on Audience; |
| winbox | added "region" parameter for W60G interfaces; |
| winbox | allow to specify any Ethernet like interface under "Tool/WoL" menu; |
| winbox | do not allow to enter empty strings in "caps-man-names" and "common-name" parameters; |
| winbox | fixed "Tx/Rx Signal Strength" value presence for 4 chain interfaces; |
| winbox | fixed wireless interface "HT" tab setting presence when "band=5ghz-n/ac"; |
| winbox | fixed wireless sniffer parameter setting; |
| winbox | hide irrelevant switch port parameters; |
| wireless | added support for U-NII-2 for cAP ac; |
| wireless | added support for U-NII-2 for wAP ac; |
| wireless | allow setting "tx-power" up to 40; |
| wireless | changed "station-roaming" default setting from "enabled" to "disabled"; |
| wireless | fixed potential wireless driver issue related to CVE-2020-3702; |
| wireless | improved management service stability when receiving bogus packets; |
| wireless | updated "bangladesh" regulatory domain information; |
| wireless | updated "canada" regulatory domain information; |
| wireless | updated "egypt" regulatory domain information; |
| wireless | updated "indonesia5" regulatory domain information; |
| wireless | updated "united states" regulatory domain information; |
| www | added "tls-version" parameter in "IP->Services" menu; |
| Component | Change |
|---|---|
| bonding | removed "sys-id" and "sys-priority" from monitor-slaves command; |
| bridge | fixed BPDU guard port disable/enable on HW offloaded interfaces; |
| bridge | fixed host table update on SNMP query; |
| bridge | fixed multicast table printing; |
| bridge | fixed packet forwarding for CAP and BCP controlled interfaces (introduced in v6.48beta12); |
| bridge | fixed STP alternate and backup port states for devices with switch chip (introduced in v6.47); |
| bridge | increased multicast table size to 4K entries; |
| crs3xx | fixed "mirror-source" property on switch port disable for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | fixed port isolation for "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | fixed port isolation removal for "switch-cpu" port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed "storm-rate" traffic limiting for switch-cpu port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | fixed VLAN tagged packet forwarding on "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices (introduced in v6.48beta12); |
| defconf | improved CAP interface bridging; |
| defconf | improved default configuration generation on devices without wireless package installed; |
| discovery | added "lldp-med-net-policy-vlan" property for assigning VLAN ID (CLI only); |
| discovery | allow choosing which discovery protocol is used (CLI only); |
| discovery | fixed discovery on mesh ports; |
| discovery | fixed discovery packet sending on newly bridged port with "protocol-mode=none"; |
| discovery | fixed discovery when enabled only on master port; |
| discovery | use interface MAC address when sending MNDP from slave port; |
| dns | added IPv6 support for DoH; |
| dns | fixed multiple TXT string replies; |
| dns | hide default static entry "type" from export; |
| fetch | fixed "src-address" usage for SFTP; |
| filesystem | improved long-term filesystem stability and data integrity; |
| health | removed unused "heater-control" and "heater-threshold" parameters; |
| hotspot | added support for captive portal advertising using DHCP (RFC7710); |
| hotspot | improved management service stability when receiving bogus packets; |
| ike2 | fixed local side NAT detection; |
| ipsec | do not kill connection when peer's "name" or "comment" is changed; |
| ipsec | refresh peer's DNS only when phase 1 is down; |
| lte | added support for Alcatel IK41VE1; |
| snmp | fixed value types for "dot1dStp"; |
| tr069-client | send correct "ConnectionRequestURL" when using IPv6; |
| traffic-flow | added "sys-init-time" parameter support; |
| wireless | allow setting "tx-power" up to 40; |
| Component | Change |
|---|---|
| bridge | fixed host table update on SNMP query; |
| crs3xx | fixed hardware offloaded bonding on Ethernet interfaces for CRS354 devices; |
| crs3xx | fixed hardware offloaded MPLS forwarding when using bonding interfaces; |
| crs3xx | fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | improved Ethernet port group traffic forwarding for CRS354 devices; |
| crs3xx | improved system stability when using hardware offloaded MPLS; |
| dns | fixed multiple TXT string replies; |
| dns | hide default static entry "type" from export; |
| dot1x | fixed duplicate EAP request packets for server; |
| dot1x | fixed EAP packet version numbering; |
| ike2 | fixed local side NAT detection; |
| lte | fixed multiple passthrough APN default route installation; |
| lte | fixed RSCP value reporting; |
| lte | validate interface existence on initiation; |
| ospf | fixed disappearing NSSA default route; |
| ospf | fixed processing of "unknown" LSA type; |
| poe | fixed "power-cycle" functionality on RB960GSP; |
| routerboot | fixed etherboot FCS errors with 100Mbps rate for CRS305, CRS309 and CRS317 devices ("/system routerboard upgrade" required); |
| webfig | fixed negative value usage in "spoof-gps" parameter (introduced in v6.47.1); |
| wireless | allow setting "tx-power" up to 40; |
| wireless | fixed potential wireless driver issue related to CVE-2020-3702; |
| Component | Change |
|---|---|
| arm | added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices; |
| arm | improved stability when forcing 25G speed on unsupported interface; |
| bridge | allow to exclude interfaces from extended ports (CLI only); |
| bridge | fixed host table update on SNMP query; |
| bridge | show error when switch do not support controlling bridge or port extension (CLI only); |
| bridge | show "H" flag for extended bridge ports; |
| certificate | clear challenge password on renew; |
| crs3xx | added initial Bridge Port Extender support (CLI only); |
| crs3xx | added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only); |
| crs3xx | fixed "custom-drop-packet" and "not-learned" switch stats for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed hardware offloaded MPLS forwarding when using bonding interfaces; |
| crs3xx | fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+; |
| crs3xx | fixed QSFP+ interface linking after reboot for CRS326-24S+2Q+ (introduced in v6.47); |
| crs3xx | fixed switch "not-learned" stats for CRS305, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, CRS318 devices; |
| crs3xx | improved Ethernet port group traffic forwarding for CRS354 devices; |
| crs3xx | improved system stability when using hardware offloaded MPLS; |
| defconf | improved default configuration generation on devices with non-default wireless interface names; |
| discovery | send the same "Chassis ID" on all interfaces for LLDP packets; |
| discovery | use "static" interface list by default instead of "!dynamic"; |
| dot1x | fixed duplicate EAP request packets for server; |
| dot1x | fixed EAP packet version numbering; |
| fetch | show status "uploaded" instead of "downloaded" when uploading a file; |
| filesystem | fixed repartition on non-first partition; |
| filesystem | fixed repartition on RB4011 series devices; |
| filesystem | improved long-term filesystem stability and data integrity; |
| gps | fixed "init-channel" release when not used; |
| health | changed PSU state parameter type to read-only; |
| health | removed unused "heater-control" and "heater-threshold" parameters; |
| hotspot | added "vlan-id" parameter support for hosts and HTML pages; |
| hotspot | do not verify Hotspot interface status when detecting if HTTP/HTTPS login method is allowed; |
| hotspot | ignore packets from host while MAC authentication is in progress; |
| interface | added new builtin "static" interface list; |
| ipsec | fixed client certificate usage when certificate is renewed with SCEP; |
| kidcontrol | fixed "time-unlimited-rate" to engage in correct time; |
| l2tp | fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47); |
| lora | expose "joinEui" un "devEui" values in the log; |
| lora | fixed "spoof-gps" parameter padding (introduced in v6.47.1); |
| lte | added "comment" parameter for APN profiles; |
| lte | fixed dynamic DHCP client creation when editing APN profile; |
| lte | fixed multiple passthrough APN default route installation; |
| lte | fixed RSCP value reporting; |
| lte | validate interface existence on initiation; |
| ospf | fixed case when changing one distribution metric changed metrics for other distribution options; |
| ospf | fixed disappearing NSSA default route; |
| ospf | fixed processing of "unknown" LSA type; |
| ospf | optimized LSA printing for smaller message sizes; |
| poe | fixed "power-cycle" functionality on RB960GSP; |
| ppp | fixed PPP interface editing for the first time after reboot or after 20 seconds; |
| routerboot | fixed etherboot FCS errors with 100Mbps rate for CRS309, CRS317 devices ("/system routerboard upgrade" required); |
| routerboot | fixed memory test on CCR2004-1G-12S+2XS ("/system routerboard upgrade" required); |
| sfp | stabilized CRS212 SFP port functionality and improved monitoring of optical modules; |
| sftp | fixed "flash" directory access (introduced in v6.46); |
| smb | fixed file path validation (introduced in v6.46); |
| snmp | fixed "current" value reporting on CCR series devices; |
| snmp | fixed "fan-speed" value reporting on CCR series devices; |
| ssh | skip interactive authentication when not running in interactive mode; |
| tr069-client | added additional wireless registration table parameters; |
| tr069-client | added wireless "noise-floor" and "overall-tx-ccq" information parameters; |
| traffic-flow | added NAT event logging support for IPFIX; |
| webfig | fixed default value presence when creating new entries under "IP->Kid Control"; |
| webfig | fixed negative value usage in "spoof-gps" parameter (introduced in v6.47.1); |
| wireless | added support for U-NII-2 for cAP ac; |
| wireless | added support for U-NII-2 for wAP ac; |
| wireless | updated "canada" regulatory domain information; |
| wireless | updated "indonesia5" regulatory domain information; |
| wireless | updated "no_country_set" regulatory domain information; |
| wireless | updated "united states" regulatory domain information; |
| www | improved WWW service stability when receiving bogus packets; |