MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| bgp | properly update keepalive time after peer restart; |
| bridge | fixed BOOTP packet forwarding when DHCP Snooping is enabled; |
| bridge | fixed IPv6 link-local address generation when auto-mac=yes; |
| capsman | always accept connections from loopback address; |
| certificate | added support for multiple "Subject Alt. Names"; |
| cloud | added "ddns-update-interval" parameter; |
| conntrack | added new "loose-tcp-tracking" parameter (equivalent to "nf_conntrack_tcp_loose" in netfilter); |
| console | properly remove system note after configuration reset; |
| crs3xx | improved fan control stability; |
| crs3xx | improved stability when adding ACL rules on CRS326 and CRS328 devices (introduced in 6.44beta39); |
| defconf | fixed default configuration loading on RB4011iGS+5HacQ2HnD-IN; |
| defconf | fixed IPv6 link-local address range in firewall rules; |
| dhcp | added "allow-dual-stack-queue" setting for IPv4/IPv6 DHCP servers to control dynamic lease/binding behaviour; |
| dhcpv4-server | added "parent-queue" parameter (CLI only); |
| dhcpv6-server | properly handle DHCP requests that include prefix hint; |
| discovery | detect proper slave interface on bounded interfaces; |
| discovery | fixed malformed neighbor information for routers that has incomplete IPv6 configuration; |
| discovery | send master port in "interface-name" parameter; |
| discovery | show neighbors on actual bridge port instead of bridge itself for LLDP; |
| ethernet | fixed VLAN1 forwarding on RB1100AHx4 and RB4011 devices; |
| export | fixed "silent-boot" compact export; |
| fetch | added "http-header-field" parameter; |
| gps | added "coordinate-format" parameter (CLI only); |
| ike2 | allow to match responder peer by "my-id=fqdn" field; |
| ipsec | improved invalid policy handling when a valid policy is uninstalled; |
| kidcontrol | added IPv6 support; |
| kidcontrol | added statistics web interface for kids (http://router.lan/kid-control); |
| led | fixed default LED configuration for RBMetalG-52SHPacn; |
| lte | added "ecno" field for "info" command; |
| lte | disallow setting LTE interface as passthrough target; |
| lte | fixed passthrough functionality when interface is removed; |
| lte | improved SimCom 7100e support; |
| lte | increased reported "rsrq" precision; |
| lte | reset USB when non-default slot is used; |
| package | use bundled package by default if standalone packages are installed as well; |
| ppp | added "at-chat" command; |
| resource | fixed "total-memory" reporting on ARM devices; |
| snmp | added "tx-ccq" ("mtxrWlStatTxCCQ") and "rx-ccq" ("mtxrWlStatRxCCQ") values; |
| snmp | changed fan speed value type to Gauge32; |
| snmp | removed "rx-sector" ("Wl60gRxSector") value; |
| ssh | fixed public key format compatibility with RFC4716; |
| switch | fixed MAC learning when disabling interfaces on devices with Atheros8327 and QCA8337 switch chips; |
| system | fixed situation when all configuration was not properly loaded on bootup; |
| timezone | fixed "Europe/Dublin" time zone; |
| traceroute | improved stability when sending large ping amounts; |
| upgrade | automatically uninstall standalone package if already installed in bundle; |
| user | require "write" permissions for LTE firmware update; |
| watchdog | allow specifying DNS name for "send-smtp-server" parameter; |
| webfig | do not show bogus VHT field in wireless interface advanced mode; |
| winbox | added "allow-roaming" parameter in "Interface/LTE" menu; |
| winbox | added "challenge-password" field when signing certificate with SCEP; |
| winbox | added "conflict-detection" parameter in "IP/DHCP server" menu; |
| winbox | added src/dst address and in/out interface list columns to default firewall menu view; |
| winbox | added support for dynamic devices in "IP/Kid Control/Devices" tab; |
| winbox | allow to change VHT rates when 5ghz-n/ac band is used; |
| winbox | fixed missing w60g interface status values; |
| winbox | renamed "Radius" to "RADIUS"; |
| winbox | show "R" flag under "IPv6/DHCP Server/Bindings" tab; |
| winbox | show "Switch" menu on RB4011iGS+5HacQ2HnD; |
| wireless | improvements in wireless frequency selection; |
| wireless | improved system stability for all ARM devices with wireless; |
| Component | Change |
|---|---|
| bridge | properly disable dynamic CAP interfaces; |
| certificate | fixed "expires-after" parameter calculation; |
| certificate | fixed time zone adjustment for SCEP requests; |
| certificate | properly flush old CRLs when changing store location; |
| chr | fixed possible memory allocation failure when using multiple CPUs or interfaces on Xen installations; |
| crs328 | fixed SFP ports not reporting auto-negotiation status; |
| crs328 | improved link status update on disabled SFP and SFP+ interfaces; |
| defconf | automatically accept default configuration if reset done by holding button; |
| defconf | fixed default configuration loading on RB4011iGS+5HacQ2HnD-IN; |
| discovery | fixed malformed neighbor information for routers that has incomplete IPv6 configuration; |
| discovery | fixed neighbor discovery for PPP interfaces; |
| discovery | properly use System ID for "software-id" value on CHR; |
| export | fixed "silent-boot" compact export; |
| health | fixed bad voltage readings on RB493G; |
| interface | improved system stability when including/excluding a list to itself; |
| ipsec | fixed hw-aead (H) flag presence under Installed SAs on startup; |
| ipsec | improved stability when uninstalling multiple SAs at once; |
| ipsec | properly handle peer profiles on downgrade; |
| ipsec | properly update warnings under peer menu; |
| kidcontrol | do not allow users with "read" policy to pause and resume kids; |
| log | properly handle long echo messages; |
| lte | added support for more ZTE MF90 modems; |
| ospf | improved stability while handling type-5 LSAs; |
| routerboard | renamed SIM slots to "a" and "b" on SXT LTE kit; |
| routerboard | show "boot-os" and "force-backup-booter" options only on devices that have such feature; |
| snmp | do not initialise interface traps on bootup if they are not enabled; |
| timezone | updated timezone information from tzdata2018g release; |
| traffic-flow | fixed post NAT port reporting; |
| traffic-flow | fixed "src-mac-address" and added "post-src-mac-address" fields; |
| tunnel | made "ipsec-secret" parameter sensitive; |
| usb | fixed power-reset for hAP ac^2 devices; |
| user | speed up first time login process after upgrade from version older than v6.43; |
| winbox | allow to specify SIM slot on LtAP mini; |
| winbox | enabled "fast-forward" by default when adding new bridge; |
| winbox | fixed neighbor discovery for IPv6 neighbors; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| Component | Change |
|---|---|
| capsman | fixed "group-key-update" parameter not using correct units; |
| certificate | fixed certificate signing by SCEP client if multiple CA certificates are provided; |
| crs317 | fixed TX not working on sfp-sfpplus9 interface (introduced in v6.40beta12); |
| dhcpv6-client | use default route distance also for unreachable route added by DHCPv6 client; |
| discovery | fixed malformed neighbor information for routers that has incomplete IPv6 configuration; |
| discovery | fixed neighbor discovery for PPP interfaces; |
| ipsec | fixed active connection killing when changing peer configuration; |
| ipsec | made peers autosort themselves based on reachability status; |
| ipsec | moved "profile" menu outside "peer" menu (CLI only); |
| Component | Change |
|---|---|
| bridge | properly disable dynamic CAP interfaces; |
| btest | added multithreading support for both UDP and TCP tests; |
| btest | added warning message when CPU load exceeds 90% (CLI only); |
| certificate | fixed "expires-after" parameter calculation; |
| certificate | properly flush old CRLs when changing store location; |
| certificate | added support for multiple "Subject Alt. Names" (CLI only); |
| chr | correctly initialize grant table version 1; |
| cloud | added "ddns-update-interval" parameter (CLI only); |
| cloud | do not reuse old UDP socket if routing changes are detected; |
| cloud | made address updating faster when new public address detected; |
| conntrack | added new "loose-tcp-tracking" parameter (equivalent to "nf_conntrack_tcp_loose" in netfilter) (CLI only); |
| console | renamed IP protocol 41 to "ipv6-encap"; |
| dhcpv4-server | added "User-Name" attribute to RADIUS accounting messages; |
| ethernet | fixed IPv4 and IPv6 packet forwarding on IPQ4018 devices; |
| ethernet | improved per core ethernet traffic classificator on mmips devices; |
| gps | added "coordinate-format" parameter (CLI only); |
| ike2 | added peer identity validation for RSA auth (disabled after upgrade); |
| ike2 | allow to match responder peer by "my-id=fqdn" field; |
| ike2 | properly handle certificates with empty "Subject"; |
| ike2 | send split networks over DHCP (option 249) to Windows initiators if DHCP Inform is received; |
| interface | improved system stability when including/excluding a list to itself; |
| ipsec | added new "remote-id" peer matcher (CLI only); |
| ipsec | allow to specify single address instead of IP pool under "mode-config"; |
| ipsec | hide empty prefixes on "peer" menu; |
| ipsec | made dynamic "src-nat" rule more specific; |
| ipsec | made peers autosort themselves based on reachability status; |
| ipsec | properly detect AES-NI extension as hardware AEAD; |
| ipsec | properly handle peer profiles on downgrade; |
| ipsec | removed limitation that allowed only single "auth-method" with the same "exchange-mode" as responder; |
| kidcontrol | added statistics web interface for kids (http://router.lan/kid-control); |
| kidcontrol | do not allow users with "read" policy to pause and resume kids; |
| kidcontrol | properly detect time zone changes; |
| led | fixed default LED configuration for wAP 60G AP devices; |
| log | properly handle long echo messages; |
| lte | added "ecno" field for "info" command; |
| lte | added "firmware-upgrade" command for R11e-LTE international modems (CLI only); |
| lte | added support for more ZTE MF90 modems; |
| lte | improved compatibility for Alt38xx modems; |
| lte | increased reported "rsrq" precision (CLI only); |
| profiler | classify kernel crypto processing as "encrypting"; |
| routerboard | renamed SIM slots to "a" and "b" on SXT LTE kit; |
| sniffer | save packet capture in "802.11" type when sniffing on w60g interface in "sniff" mode; |
| snmp | do not initialise interface traps on bootup if they are not enabled; |
| ssh | added "allow-none-crypto" parameter to disable "none" encryption usage (CLI only); |
| timezone | updated timezone information from tzdata2018g release; |
| traffic-flow | fixed "src-mac-address" and added "post-src-mac-address" fields; |
| traffic-flow | reduced minimal value of "active-flow-timeout" parameter to 1s; |
| tunnel | properly clear dynamic IPsec configuration when removing/disabling EoIP with DNS as "remote-address"; |
| upgrade | made security package depend on DHCP package; |
| usb | fixed power-reset for hAP ac^2 devices; |
| user | speed up first time login process after upgrade from version older than v6.43; |
| userman | show redirect location in error messages; |
| w60g | added "10s-average-rssi" parameter to align mode (CLI only); |
| w60g | improved reconnection detection; |
| w60g | improved "tx-packet-error-rate" reading; |
| winbox | allow to specify SIM slot on LtAP mini; |
| winbox | enabled "fast-forward" by default when adding new bridge; |
| winbox | show "Switch" menu on RB4011iGS+5HacQ2HnD; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| winbox | show "W60G" wireless tab on wAP 60G AP; |
| wireless | improved system stability for all ARM devices with wireless; |
| wireless | report last seen IP address in RADIUS accounting messages; |
| Component | Change |
|---|---|
| bridge | do not learn untagged frames when filtering only tagged packets; |
| bridge | fixed possible memory leak when VLAN filtering is used; |
| bridge | improved packet handling when hardware offloading is being disabled; |
| bridge | properly disable dynamic CAP interfaces; |
| certificate | fixed time zone adjustment for SCEP requests; |
| crs328 | improved link status update on disabled SFP and SFP+ interfaces; |
| crs328 | improved link status update on disabled SFP+ interface when using DAC; |
| crs3xx | fixed possible memory leak when disabling bridge interface; |
| defconf | automatically accept default configuration if reset done by holding button; |
| defconf | properly load default configuration after reset (introduced in v6.42.9); |
| health | fixed bad voltage readings on RB493G; |
| ipsec | fixed hw-aead (H) flag presence under Installed SAs on startup; |
| ipsec | improved stability when uninstalling multiple SAs at once; |
| ipsec | properly update warnings under peer menu; |
| led | added "dark-mode" functionality for LHG and LDF series devices; |
| led | fixed default LED configuration for SXT LTE kit and wAP 60G AP devices; |
| led | fixed power LED turning on after reboot when "dark-mode" is used; |
| ntp | fixed possible NTP server stuck in "started" state; |
| ospf | improved stability while handling type-5 LSAs; |
| romon | improved packet processing when MTU in path is lower than 1500; |
| routerboard | renamed SIM slots to "a" and "b" on SXT LTE kit; |
| routerboard | show "boot-os" and "force-backup-booter" options only on devices that have such feature; |
| timezone | updated timezone information from tzdata2018g release; |
| traffic-flow | fixed post NAT port reporting; |
| traffic-flow | fixed "src-mac-address" and added "post-src-mac-address" fields; |
| tunnel | made "ipsec-secret" parameter sensitive; |
| usb | fixed power-reset for hAP ac^2 devices; |
| w60g | fixed misleading license level requirement log message; |
| w60g | fixed "scan" functionality when in bridge mode; |
| w60g | renamed "frequency-list" to "scan-list"; |
| winbox | allow to specify SIM slot on LtAP mini; |
| winbox | enabled "fast-forward" by default when adding new bridge; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| winbox | show "W60G" wireless tab on wAP 60G AP; |