MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| bridge | added IGMP and MLD querier monitoring (CLI only); |
| bridge | added IGMP snooping log when multicast table gets full; |
| bridge | added MAC and IP source addresses information for DHCP snooping log; |
| bridge | improved bridge stability when host changes port (introduced in v6.47); |
| conntrack | increased total connection tracking table size based on installed RAM size; |
| console | require "write+ftp" permissions for executing script to file; |
| console | require "write+ftp" permissions for exporting configuration to file; |
| console | require "write+ftp" permissions for printing to file; |
| console | updated copyright notice; |
| crs3xx | correctly filter packets by L2MTU on 1Gbps Ethernet interfaces for CRS354 devices; |
| crs3xx | fixed interface flow control; |
| crs3xx | fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed SFP and SFP+ link rate reporting (introduced in v6.48beta11); |
| crs3xx | improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices; |
| crs3xx | improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| defconf | removed overlapping IPv6 firewall rules; |
| dhcp | fixed link state checking for DHCP client; |
| dhcpv6-server | check if pool name has changed from RADIUS on renew; |
| ethernet | improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices; |
| firewall | fixed GRE protocol packets considered invalid when PPTP helper is disabled; |
| health | fixed voltage monitor on BaseBox5 devices; |
| ike2 | fixed DH group negotiation with EAP; |
| ike2 | fixed initial traffic selector's protocol and port in transport mode; |
| ipv6 | improved system stability when parsing IPv6 options; |
| lora | added additional predefined network servers; |
| m33g | removed 12..16 pins from "/system gpio" menu; |
| netinstall | fixed lock file persistence after reinstall; |
| poe | do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out; |
| ppp | do not fail "at-chat" command when issued on disabled PPP interface; |
| quickset | prefer 5GHz interface for WiFi scan in CPE mode; |
| rb922 | fixed miniPCI-e card detection (introduced in v6.49beta11); |
| supout | fixed "topic" column presence in "Log" section; |
| supout | print detailed list of active user sessions; |
| switch | improved resource allocation on 98PX1012 switch chip for CCR2004-1G-12S+2XS device; |
| swos | fixed "static-ip-address" parameter; |
| telnet | do not send options if connecting to non standard port; |
| telnet | fixed server when run on non standard port; |
| upgrade | improved "long-term" upgrade procedure on SMIPS devices; |
| user | fixed "skin" configuration for user groups (introduced in v6.48); |
| webfig | allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu; |
| webfig | do not corrupt settings when starting "Wireless Sniffer"; |
| webfig | do not move top right menu in opposite direction when scrolling horizontally; |
| webfig | do not show newly created SMB shares as invalid; |
| webfig | do not show value units twice; |
| webfig | fixed interface sorting by name; |
| webfig | fixed new interface addition; |
| webfig | fixed "Wireless/CAP" menu opening; |
| webfig | show "Interfaces" menu by default after logging in; |
| webfig | show "network-mode" for LTE modems that support it; |
| webfig | show only "Close" button under "Wireless/Wireless Sniffer/Sniffed Packets" menu; |
| winbox | added "Channel" parameter under "System/Console" menu; |
| winbox | added "interface-speed-100G" LED type to "System/LEDs" menu; |
| winbox | fixed duplicate "Trusted" setting under "Interface/Bridge/Ports" menu; |
| winbox | fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu; |
| winbox | fixed "reachable-time" value unit under "IPv6/ND" menu; |
| winbox | fixed support for "Delegated-IPv6-Prefix" for PPP services; |
| winbox | increased "target" field limit to 128 under "Queues" menu; |
| winbox | show "activity" column by default under "IP/Kid Control/Devices" menu; |
| winbox | show "LCD" only on boards that have LCD; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| wireless | fixed minor typo in debug logging messages; |
| wireless | renamed "secondary-channel" to "secondary-frequency"; |
| wireless | updated "united kingdom" regulatory domain information; |
| Component | Change |
|---|---|
| bgp | fixed VPNV4 RD byte order; |
| branding | fixed LCD logo loading from new style branding package; |
| crs312 | fixed missing SwOS firmware on revision 2 devices; |
| crs3xx | correctly filter packets by L2MTU size; |
| crs3xx | improved system stability when receiving large frames for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v6.47.5); |
| defconf | fixed default configuration loading on RBcAP-2nD and RBwAP-2nD; |
| hotspot | fixed "idle-timeout" usage with RADIUS authentication; |
| hotspot | fixed special character parsing in "target" variable (CVE-2021-3014); |
| package | do not include multiple The Dude packages in HDD installer; |
| snmp | fixed "send-trap" functionality; |
| webfig | fixed new interface addition; |
| winbox | fixed enable/disable button presence for "Bridge/Hosts" menu; |
| winbox | renamed IP protocol 41 to "ipv6-encap"; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| winbox | use health values reported by gauges for "System/Health" menu; |
| wireless | renamed "macedonia" regulatory domain information to "north macedonia"; |
| wireless | updated "indonesia5" regulatory domain information; |
| Component | Change |
|---|---|
| api | added support for REST API; |
| crs3xx | fixed Layer3 hardware offloading; |
| general | other fixes and improvements; |
| route | routing rules improvements; |
| wifiwave2 | authentication and functionality improvements; |
| winbox | added support for wifiwave2; |
| winbox | updated User Manager, OSPF and BGP menus; |
| Component | Change |
|---|---|
| crs312 | fixed missing SwOS firmware on revision 2 devices; |
| crs3xx | fixed packet duplication when multiple bonding interfaces are created for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed port-isolation on ether37-ether48 ports for CRS354 device; |
| crs3xx | improved load balancing on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | improved system stability when bonding and IGMP snooping is used (introduced in v6.48); |
| hotspot | fixed "idle-timeout" usage with RADIUS authentication; |
| hotspot | fixed special character parsing in "target" variable (CVE-2021-3014); |
| ike2 | fixed phase 2 rekeying with enabled PFS (introduced in v6.48); |
| ike2 | improved stability when invalid certificate is configured (introduced in v6.48); |
| ike2 | properly register packet time after expensive CPU operations; |
| interface | fixed pwr-line interface linking (introduced in v6.48); |
| ipsec | improved stability when processing IPv6 packets larger than interface MTU; |
| led | fixed default LED configuration for RB911-5HnD; |
| package | do not include multiple The Dude packages in HDD installer; |
| snmp | fixed "send-trap" functionality (introduced in v6.48); |
| switch | fixed interface toggling for devices with multiple QCA8337, Atheros8327 or RTL8367 switch chips (introduced in v6.48); |
| winbox | fixed enable/disable button presence for "Bridge/Hosts" menu; |
| wireless | renamed "macedonia" regulatory domain information to "north macedonia"; |
| Component | Change |
|---|---|
| chr | improved stability when changing "flow-control" settings on interfaces with e1000 drivers; |
| crs312 | fixed missing SwOS firmware on revision 2 devices; |
| crs3xx | fixed packet duplication when multiple bonding interfaces are created for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed packet transmit in 5Gbps link rate for CRS312 device; |
| crs3xx | fixed port-isolation on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed port-isolation on ether37-ether48 ports for CRS354 device; |
| crs3xx | improved LACP linking between CRS3xx series switches; |
| crs3xx | improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | improved load balancing on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | improved packet transmit on SFP+ interfaces; |
| crs3xx | improved system stability when bonding and IGMP snooping is used (introduced in v6.48); |
| defconf | fixed minor typo in configuration description; |
| dot1x | fixed "reject-vlan-id" for MAC authentication (introduced in v6.48); |
| dot1x | fixed MAC authentication fallback (introduced in v6.48); |
| ethernet | fixed cable-test for some devices (e.g. RB2011, RB951G-2HnD); |
| fastpath | fixed IP packet receive on bridge and bonding interfaces when destination MAC address match with slave port MAC; |
| hotspot | fixed "idle-timeout" usage with RADIUS authentication; |
| hotspot | fixed special character parsing in "target" variable (CVE-2021-3014); |
| ike2 | added support for ASN.1 DN "my-id" value setting for initiators; |
| ike2 | fixed EAP MSK length validation (introduced in v6.48); |
| ike2 | fixed phase 2 rekeying with enabled PFS (introduced in v6.48); |
| ike2 | improved stability when invalid certificate is configured (introduced in v6.48); |
| ike2 | properly register packet time after expensive CPU operations; |
| interface | fixed pwr-line interface linking (introduced in v6.48); |
| ipsec | improved stability when processing IPv6 packets larger than interface MTU; |
| led | fixed default LED configuration for RB911-5HnD; |
| netinstall | improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present; |
| ntp | use correct IPv6 multicast group for SNTP client; |
| package | always allow to uninstall package even if there is no free disk space left; |
| package | do not include multiple The Dude packages in HDD installer; |
| sfp | added "sfp-rate-select" setting (CLI only); |
| sfp | fixed GPON module linking (introduced in v6.47); |
| sfp | improved cable length monitoring as defined per SFF-8472 and SFF-8636; |
| snmp | fixed "send-trap" functionality (introduced in v6.48); |
| snmp | fixed SNMP trap agent address; |
| switch | fixed interface toggling for devices with multiple QCA8337, Atheros8327 or RTL8367 switch chips (introduced in v6.48); |
| switch | improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device; |
| tr069-client | added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting; |
| upgrade | fixed free space checking on flash type memories when installing new packages; |
| webfig | fixed new interface addition; |
| winbox | do not show empty "CPU Frequency" parameter under "System/Resources" menu; |
| winbox | fixed enable/disable button presence for "Bridge/Hosts" menu; |
| winbox | renamed IP protocol 41 to "ipv6-encap"; |
| wireless | renamed "macedonia" regulatory domain information to "north macedonia"; |