Search changelog entries
| Component | Change |
|---|---|
| api | added ECDHE cipher support for "api-ssl" service; |
| bonding | fixed ALB and TLB bonding modes after interface disable/enable (introduced in v6.47beta19); |
| bonding | fixed packet receiving on bonding slave ports (introduced in v6.47beta19); |
| bridge | added warning message when a bridge port gets dynamically added to VLAN range; |
| chr | added support for hardware watchdog on ESXI; |
| crs3xx | fixed tagged VLAN packet receiving on Ethernet interfaces for CRS354 devices (introduced in v6.47beta49); |
| crs3xx | improved 10G interface initialization on CRS312 devices; |
| dhcpv4-server | disallow zero lease-time setting; |
| dhcpv6-server | do not require "server" parameter for bindings; |
| dns | added support for multiple type static entries; |
| dot1x | added "radius-mac-format" parameter; |
| dot1x | improved Dot1X service stability when receiving bogus packets; |
| dot1x | improved value validation for dynamically created switch rules; |
| added support for multiple "to" recipients; | |
| ethernet | fixed interface stopping responding after blink command execution on CCR2004-1G-12S+2XS; |
| filesystem | fixed NAND memory going into read-only mode or becoming unstable over time; |
| health | improved stability for system health monitor on CCR2004-1G-12S+2XS; |
| ike2 | added support for RFC8598; |
| ike2 | allow initiator address change before authentication; |
| ike2 | fixed authentication handling when initiator disconnects before RADIUS response; |
| interface | improved system stability when receiving bogus packets; |
| ipsec | added "split-dns" parameter support for mode configuration; |
| ipsec | added "use-responder-dns" parameter support; |
| ipsec | allow specifying two peers for a single policy for failover; |
| ipsec | place dynamically created IPsec policies at the begining of the table; |
| l2tp | added "src-address" parameter for L2TP client; |
| l2tp | added "use-peer-dns" parameter for L2TP client; |
| l2tp | improved dynamically created IPsec configuration updating; |
| l2tp | use L2TP interface when adding dynamic IPsec peer; |
| lcd | improved general system stability when LCD is not present; |
| log | added logging entry when changing user's password; |
| log | added tunnel endpoint address to establishment and disconnect logging entries; |
| log | fixed logging topic for MAC address learning on a different bridge port events; |
| log | made startup script failures log as critical errors; |
| lte | fixed "band" parameter persistence after disable/enable; |
| lte | fixed "ecno" and "rscp" value reporting on R11e-LTE6; |
| lte | fixed VLAN interface passthrough support; |
| lte | improved stability during firmware upgrade; |
| netwatch | improved Netwatch service stability when invalid configuration values are passed; |
| ovpn | added "use-peer-dns" parameter for OVPN client; |
| poe | fixed missing PoE out settings on CRS354-48P-4S+2Q (introduced in v6.47beta49); |
| port | removed serial console port on hEX S; |
| ppp | removed "comment", "set" and "edit" commands from "PPP->Active" menu; |
| pptp | added "use-peer-dns" parameter for PPTP client; |
| profile | added support for CCR2004-1G-12S+2XS; |
| qsfp | added support for FEC mode (fec74), with the FEC mode disabled by default |
| quickset | fixed invalid configuration applying when performing changes during LTE modem initialization process; |
| routerboard | added "hold-time" parameter to mode-button menu; |
| routerboard | added "reset-button" menu - custom command execution with reset button; |
| routing | improved routing service stability when receiving bogus packets; |
| sfp28 | added support for FEC modes (fec74 and fec91), with fec91 mode already enabled by default; |
| sfp28 | fixed interface linking after power cycle on CCR2004-1G-12S+2XS (introduced in v6.47beta49); |
| switch | correctly enable and disable CPU Flow Control on RB3011UiAS; |
| tr069-client | added LTE firmware update functionality support; |
| tr069-client | added additional LTE information parameters; |
| tr069-client | added additional wireless registration table parameters; |
| tr069-client | added interface type parameter support; |
| tr069-client | added multiple simultaneous session support for diagnostics test; |
| tr069-client | added total connection tracking entries parameter; |
| ups | added battery info for APC SmartUPS 2200; |
| webfig | fixed 5GHz wireless interface "frequency" parameter value list on Audience; |
| winbox | added "auth-info" parameter under "Dot1X->Active" menu; |
| winbox | added "auth-types", "comment", "mac-auth-mode" and "reject-vlan-id" parameters for Dot1X server; |
| winbox | added "bus" parameter for "USB Power Reset" command on NetMetal ac^2; |
| winbox | added "comment" parameter and "dynamic" flag support under "Switch->Rule" table; |
| winbox | added "comment" parameter for Dot1X client; |
| winbox | added "region" parameter for W60G interfaces; |
| winbox | added "skip-dfs-channels" parameter to wireless interface menu; |
| winbox | added enable and disable buttons for "MPLS->MPLS Interface" table; |
| winbox | do not allow to enter empty strings in "caps-man-names" and "common-name" parameters; |
| winbox | fixed WDS usage when connecting to RouterOS access point using QuickSet; |
| winbox | fixed dates and times in interface link up/down properties (WinBox v3.24 required); |
| winbox | fixed wireless sniffer parameter setting; |
| wireless | fixed Nstreme wireless protocol performance decrease; |
| wireless | updated "egypt" regulatory domain information; |
| Component | Change |
|---|---|
| arm | improved watchdog and kernel panic reporting in log after reboots on RB3011 and IPQ4018/IPQ4019 devices ("/system routerboard upgrade" required); |
| capsman | fixed "certificate" parameter updating on CAP; |
| certificate | fixed certificate verification when flushing CRL's; |
| chr | added support for file system quiescing; |
| chr | enabled support for VMBus protocol version 4.1; |
| chr | improved system stability when running CHR on Hyper-V; |
| console | prevent incorrect type interfaces appearing in command hints; |
| crs3xx | fixed frame forwarding after disabling/enabling bridge hardware offloading for CRS354-48G-4S+2Q+ device; |
| crs3xx | fixed interface statistics for CRS354-48G-4S+2Q+ and CRS354-48P-4S+2Q+ devices; |
| crs3xx | fixed switch rule "dst-port" parameter for IPv6 traffic on CRS305-1G-4S+, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, netPower 15FR devices; |
| crs3xx | improved SFP+ DAC cable initialization for CRS326-24S+2Q+ device; |
| defconf | added welcome note with common first steps for new users; |
| discovery | do not send CDP and LLDP packets on interfaces that does not have MAC address; |
| health | fixed maximum SFP temperature reading under '/system health' menu; |
| hotspot | fixed redirect to log in page (introduced in v6.45); |
| ike1 | rekey phase 1 rekeying as responder for Windows initiators; |
| ipsec | improved system stability when handling fragmented packets; |
| led | added "dark-mode" functionality for CRS105-5S-FB; |
| lte | added "phy-cellid" value support for LTE-US; |
| lte | fixed IP type selection from APN on RBSXTLTE3-7; |
| lte | improved system stability when performing firmware update on R11e-LTE6; |
| sniffer | fixed minor typo in "host" menu; |
| snmp | fixed "ifSpeed" reporting for tunnel interfaces; |
| snmp | fixed "routeros-version" value returning from registration table; |
| snmp | fixed UPS battery voltage value scaling; |
| ssh | added support for RSA keys with SHA256 hash (RFC8332); |
| system | correctly handle Generic Receive Offloading (GRO) for MPLS traffic; |
| system | improved system stability when forwarding traffic from switch chip to CPU (introduced in v6.43); |
| system | improved system stability when receiving/sending TCP traffic on multicore devices; |
| traceroute | improved stability when invalid packet is received; |
| webfig | added default configuration confirmation window to WebFig; |
| webfig | allow skin designing without "ftp" and "sensitive" policies; |
| webfig | do not show WebFig menu when opening 'Check For Updates' in Quick Set; |
| winbox | added "Options" parameter support for DHCPv6 client and server; |
| winbox | added 160Mhz extension channel support for CAPsMAN; |
| winbox | added support for "Tools->WoL" menu; |
| winbox | do not show "Revision" parameter under "System/RouterBOARD" menu on devices that have only one revision; |
| winbox | fixed "ARP" parameter inheritance from "CAPs Configuration" configuration; |
| winbox | fixed "Bands" parameter display for LTE interfaces; |
| winbox | fixed "DSCP" parameter value setting; |
| winbox | fixed "Frequency" and "Secondary Frequency" parameter inheritance from "CAPs Channel" configuration; |
| winbox | fixed "Passthr. MAC Address" parameter display "LTE APNs" menu; |
| winbox | fixed "Switch" menu on CRS354-48P-4S+2Q+; |
| winbox | fixed "dst-port" unsetting in "IP->Hotspot->Walled Garden" menu; |
| winbox | fixed "invalid" flag presence under "System/Certificates/CRL" menu; |
| winbox | fixed automatic "IPv6->Firewall->Address List" table update; |
| winbox | increased limit of multi-entry fields to 100; |
| winbox | made "none" the default value for "Security Profile" parameter when creating a new "Wirelees->Connect list" entry; |
| winbox | renamed "Memory used" to "HDD used" for HDD type under "Tools->Graphing->Resource Graphs"; |
| winbox | renamed "Routerboard" to "RouterBOARD" under "System/RouterBOARD" menu; |
| winbox | show "System/RouterBOARD/Mode Button" on devices that have such feature; |
| wireless | added "skip-dfs-channels" parameter; |
| wireless | allow using FCC "U-NII-2" frequency range for hAP ac2 and RBwAPGR series devices; |
| wireless | fixed default "antenna-gain" setting on SXT 2 devices; |
| wireless | improved 5GHz interface stability on RB4011iGS+5HacQ2HnD and Audience; |
| wireless | improved compatibility for "ETSI" wireless country profile; |
| wireless | improved system stability on hAP ac^2; |
| wireless | updated "bangladesh" regulatory domain information; |
| wireless | updated "indonesia4" regulatory domain information; |
| wireless | updated "south africa" regulatory domain information; |
| Component | Change |
|---|---|
| crs3xx | fixed switch rule "dst-port" parameter for IPv6 traffic on CRS305-1G-4S+, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, netPower 15FR devices; |
| defconf | fixed default IP address assigning on non-paired 60 GHz devices; |
| lora | added "altitude", "latitude" and "longitude" to stat json if GPS is available; |
| lte | fixed "band" value setting when configuration is reset on R11e-4G; |
| snmp | fixed "ifSpeed" reporting for tunnel interfaces; |
| snmp | fixed multiple LTE interface OID reporting; |
| ssh | fixed SHA256 user authentication algorithm checking (introduced in v6.46.4); |
| winbox | fixed memory leak (introduced in v6.46.4); |
| winbox | increased limit of multi-entry fields to 100; |
| wireless | improved 5GHz interface stability on RB4011iGS+5HacQ2HnD and Audience; |
| wireless | improved system stability on hAP ac^2; |
| wireless | updated "south africa" regulatory domain information; |
| Component | Change |
|---|---|
| branding | improved branding package installation process when another branding package is already installed; |
| chr | enabled support for VMBus protocol version 4.1; |
| chr | improved system stability when running CHR on Hyper-V; |
| crs3xx | fixed hardware offloaded bonding on Ethernet interfaces for CRS354 devices; |
| crs3xx | fixed switch rule "dst-port" parameter for IPv6 traffic on CRS305-1G-4S+, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, netPower 15FR devices; |
| crs3xx | improved system stability when creating multiple hardware offloaded bonding interfaces (introduced in v6.47beta49); |
| crs3xx | show correct switch model for netPower 15FR device; |
| defconf | fixed default IP address assigning on non-paired 60 GHz devices; |
| disk | improved disk management service stability when receiving bogus packets; |
| dns | added support for forwarding DNS queries of static entries to specific server (CLI only); |
| dns | added support for multiple type static entries (CLI only); |
| added support for multiple "to" recipients (CLI only); | |
| graphing | improved graphing service stability when receiving bogus packets; |
| ike1 | do not try to keep phase 2 when purging phase 1; |
| ike2 | added support for RADIUS Disconnect-Request message handling; |
| interface | increased loopback interface MTU to 65536; |
| ipsec | allow specifying two peers for a single policy for failover (CLI only); |
| lora | added "altitude", "latitude" and "longitude" to stat json if GPS is available; |
| lte | improved stability during firmware upgrade process; |
| routerboard | added "hold-time" parameter to mode-button menu (CLI only); |
| routerboard | added "reset-button" menu - custom command execution with reset button (CLI only); |
| snmp | fixed "ifSpeed" reporting for tunnel interfaces; |
| ssh | improved SSH service stability when receiving bogus packets; |
| switch | correctly display switch statistics when all switch ports are disabled on RTL8367 switch chip; |
| switch | fixed missing switch statistics (introduced in v6.47beta49); |
| user | improved user management service stability when receiving bogus packets; |
| webfig | fixed WinBox download link; |
| webfig | fixed skin usage from branding package; |
| winbox | added "bus" parameter for "USB Power Reset" command on RBM33G; |
| winbox | allow to specify any ethernet like interface under "Tool/WoL" menu; |
| winbox | fixed "Tx/Rx Signal Strength" value presence for 4 chain interfaces; |
| winbox | fixed memory leak (introduced in v6.46.4); |
| winbox | fixed wireless interface "HT" tab setting presence when "band=5ghz-n/ac"; |
| winbox | increased limit of multi-entry fields to 100; |
| winbox | limit number of simultaneous WinBox sessions to 5 for users without "write" permission; |
| wireless | improved management service stability when receiving bogus packets; |
| wireless | updated "south africa" regulatory domain information; |
| Component | Change |
|---|---|
| capsman | fixed "certificate" parameter updating on CAP; |
| console | prevent incorrect type interfaces appearing in command hints; |
| crs3xx | fixed interface statistics for CRS354-48G-4S+2Q+ and CRS354-48P-4S+2Q+ devices; |
| crs3xx | fixed traffic forwarding after disabling/enabling bridge hardware offloading for CRS354-48G-4S+2Q+ and CRS354-48P-4S+2Q+ devices; |
| crs3xx | improved SFP+ DAC cable initialization for CRS326-24S+2Q+ device; |
| discovery | do not send CDP and LLDP packets on interfaces that does not have MAC address; |
| dude | fixed connection to other RouterOS type devices through The Dude agents (introduced in v6.46.4); |
| ike1 | rekey phase 1 rekeying as responder for Windows initiators; |
| ipsec | improved system stability when handling fragmented packets; |
| led | added "dark-mode" functionality for CRS105-5S-FB; |
| lora | added IPv6 support for LoRa packet forwarder; |
| lora | added UTC timestamp for RX events in "rxpk" json; |
| lora | added value limits for "freq-off" parameter; |
| lora | properly update source address for packets when routing table is changed; |
| lte | fixed IP type selection from APN on RBSXTLTE3-7; |
| sniffer | fixed minor typo in "host" menu; |
| supout | added "gps" section to supout files; |
| supout | improved PoE-out information reporting; |
| system | improved kernel panic reporting in logs after reboot; |
| system | improved system stability when forwarding traffic from switch chip to CPU (introduced in v6.43); |
| traceroute | improved stability when invalid packet is received; |
| traffic-generator | improved statistics reporting; |
| w60g | improved stability after multiple disconnections; |
| winbox | added "Options" parameter support for DHCPv6 client and server; |
| winbox | added 160Mhz extension channel support for CAPsMAN; |
| winbox | added support for "Tools->WoL" menu; |
| winbox | allow setting "20/40/80/160Mhz-eeeeeeCe" channel under "Channel Width" parameter; |
| winbox | do not show "Revision" parameter under "System/RouterBOARD" menu on devices that have only one revision; |
| winbox | fixed "ARP" parameter inheritance from "CAPs Configuration" configuration; |
| winbox | fixed "Bands" parameter display for LTE interfaces; |
| winbox | fixed "DSCP" parameter value setting; |
| winbox | fixed "Frequency" and "Secondary Frequency" parameter inheritance from "CAPs Channel" configuration; |
| winbox | fixed "Passthr. MAC Address" parameter display "LTE APNs" menu; |
| winbox | fixed "Switch" menu on CRS354-48P-4S+2Q+; |
| winbox | fixed "dst-port" unsetting in "IP->Hotspot->Walled Garden" menu; |
| winbox | fixed automatic "IPv6->Firewall->Address List" table update; |
| winbox | made "none" the default value for "Security Profile" parameter when creating a new "Wirelees->Connect list" entry; |
| winbox | properly show "Hw. Offload Group" value for each interface under "Bridge->Ports" menu; |
| winbox | renamed "Memory used" to "HDD used" for HDD type under "Tools->Graphing->Resource Graphs"; |
| winbox | show "System/RouterBOARD/Mode Button" on devices that have such feature; |
| wireless | added "U-NII-2" support for hAP ac2 and RBwAPGR series devices; |
| wireless | added "skip-dfs-channels" parameter; |
| wireless | fixed default "antenna-gain" setting on SXT 2 and LtAP series devices; |
| wireless | updated "bangladesh" regulatory domain information; |
| wireless | updated "indonesia4" regulatory domain information; |