MikroTik RouterOS changelogs
| Component | Change |
|---|---|
| app | added "network-outgoing-access=yes/no" setting to prevent containers from initiating outbound traffic; |
| bridge | fixed dynamic VLAN update for WiFi interfaces; |
| bridge | improved MAC synchronization for MLAG (additional fixes); |
| certificate | improved ACME logging (additional fixes); |
| certificate | improved ACME status reporting (additional fixes); |
| cloud | cloud backup file management now requires "policy" policy; |
| container | updated /dev/net/tun permission; |
| crypto | fixed stability issue; |
| dhcpv4-server | added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entries (additional fixes); |
| discovery | added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entries (additional fixes); |
| firewall | added "action=drop" to mangle; |
| firewall | matcher "in-bridge-port" does not require "use-ip-firewall=yes"; |
| ike2 | fixed child SA cleanup during flush operation; |
| ike2 | fixed pending responder connection cleanup after peer removal; |
| ike2 | fixed SA delete handling on initiator during rekey; |
| ike2 | improved HMAC size validation checks; |
| iot | fixed LoRa lockpack preventing lock from applying; |
| ipv6,ra | improved service stability (additional fixes); |
| isis | allow to configure metric-type; |
| leds | fixed power LED turning off while LTE interface is inactive (introduced in v7.22); |
| lte | fixed rare cases where the Tx queue could stop and never wake up on multi-core CPU devices; |
| switch | fixed issue with MAC table for RB2011 (introduced in v7.21); |
| switch | fixed missing ethernet counters for non-running interfaces on CRS8xx switches (introduced in v7.22); |
| system | improved switching to HTTP/1 if HTTP/2 is not supported by remote host (additional fixes); |
| timezone | updated timezone information from "tzdata2026b" release; |
| vrrp | fixed stability issue when using VRRP with a hardware-offloaded bridge (additional fixes); |
| vxlan | fixed fast-path when using "checksum=no" (introduced in v7.20); |
| wifi | improved on-capsman traffic processing; |
| www | improved REST API user cache processing; |
| www | properly respond with custom HTTP response code instead of replying always with 200 (introduced in v7.23rc1); |
| Component | Change |
|---|---|
| console | fixed unresponsiveness when entering safe-mode through the Windows 11 terminal; |
| ethernet | fixed stability issue after switch reset on devices with IPQ-40xx, IPQ-60xx CPUs (introduced in v7.22); |
| vrrp | fixed stability issue when using VRRP with a hardware-offloaded bridge for Marvell Prestera switch chip; |
| Component | Change |
|---|---|
| console | fixed unresponsiveness when entering safe-mode through the Windows 11 terminal; |
| discovery | added separate read-only menu "/ip/neighbor/lldp" for neighbors discovered by the LLDP (CLI only) (additional fixes); |
| ethernet | fixed stability issue after switch reset on devices with IPQ-40xx, IPQ-60xx CPUs (introduced in v7.22); |
| ip | added IPv6 and VRF support for reverse-proxy; |
| netwatch | fixed memory leak when using HTTP/HTTPS GET probe with invalid src-address; |
| sniffer | fixed missing VLAN tag in the TZSP packets (additional fixes); |
| system | improved switching to HTTP/1 if HTTP/2 is not supported by remote host; |
| upgrade | added the option to configure HTTP/HTTPS modes when connecting to MikroTik upgrade servers (additional fixes); |
| vrrp | fixed stability issue when using VRRP with a hardware-offloaded bridge for Marvell Prestera switch chip; |
| wifi | improved interface provisioning for WiFi 7 access points; |
| Component | Change |
|---|---|
| app | fixed uptime-kuma and jupyter-notebook; |
| bgp | fixed stability issue when non-existent output select-chain was specified; |
| bridge | fixed missing dynamic "switch-cpu" VLAN entry in WiFi setup; |
| bridge | synchronize only local bridge MAC addresses for MLAG (introduced in v7.22); |
| console | rename "cpu-used-per-cpu" to "cpe-used-per-core" in "/system/resource/monitor"; |
| container | fixed losing container after reboot; |
| ethernet | fixed false excessive broadcast warning (introduced in v7.20); |
| firewall | improved system stability; |
| ipsec | fixed expired SA handling to prevent “no such item” errors during listing; |
| ipv6,ra | use received prefix when RA on-link flag is 0 (introduced in v7.22); |
| isis | improved stability with fragmented CSNP; |
| leds | fixed default LED configuration for CCR2004-1G-12S+2XS; |
| leds | fixed LED dark mode for RB5009; |
| lte | fixed missing automatic redial when cellular connectivity is lost for R11e-LTE; |
| ospf | improved stability on configuration change; |
| ovpn | fixed OVPN push routes; |
| poe-out | firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed occasional detection issue when using auto-on mode; |
| ptp | allow manual domain configuration for 802.1AS profile; |
| ptp | set DSCP (EF) for the default profile when using IPv4; |
| route | improved service stability when removing routes; |
| routerboard | fixed applying settings via WinBox on devices with fixed CPU frequency; |
| system | added FCC Part 15 Compliance label to "System/Regulatory" menu; |
| system | improved stability for internal RouterOS service communication; |
| system | improved system stability; |
| system | included full certificate chain to Windows executables; |
| usb | fixed crash when using Ethernet adapter (introduced in v7.22); |
| vrrp | fixed packet drop in CHR (introduced in v7.22); |
| wifi | improved authentication stability for WiFi 7 access points; |
| wifi-mediatek | fixed communication issues on 802.11ax access points with Intel clients; |
| wifi-mediatek | fixed HE capabilities IE on 2GHz band; |
| wifi-qcom-be | fixed forwarding of 4-address data from station to station; |
| winbox | added option to configure built-in trust store for all services; |
| www | improved service stability when cancelling REST API sessions; |
| Component | Change |
|---|---|
| bgp | fixed stability issue when non-existent output select-chain was specified; |
| bgp-vpn | allow modifying scopes with routing filters; |
| bgp-vpn | fixed non-working import filter after reboot; |
| bgp-vpn | use target scope for imported route; |
| bridge | fixed missing dynamic "switch-cpu" VLAN entry in WiFi setup; |
| bridge | fixed performance regression in complex setups with vlan-filtering (introduced in v7.20); |
| console | removed the "reset" command from shared settings menus (IP/IPv6/Bridge/L3HW/Neighbor-Discovery/Connection-Tracking); |
| container | fixed issue where the container might not start after upgrading if root-dir was not set; |
| container | improved error message if a container fails to start; |
| defconf | fixed L009 configuration (introduced in v7.21); |
| ethernet | fixed false excessive broadcast warning (introduced in v7.20); |
| firewall | improved system stability; |
| ipsec | improved aes256-ctr stability on L009; |
| ipsec | removed modp8192 proposal on MIPS architectures; |
| ipv6,ra | use received prefix when RA on-link flag is 0; |
| isis | improved stability with fragmented CSNP; |
| l2tp | improved system stability on TILE architecture; |
| l3hw | fixed missing VLAN counters after reboot (introduced in v7.21); |
| l3hw | fixed stability issue (introduced in v7.21); |
| leds | fixed default LED configuration for CCR2004-1G-12S+2XS; |
| log | do not provide non-existent logging topics for configuration; |
| lte | fixed framed route support for the first APN; |
| lte | fixed missing automatic redial when cellular connectivity is lost for R11e-LTE; |
| lte | fixed user set MTU not applied to LTE interface; |
| lte | override the "auto" or 0 MTU in "interface" menu to 1500; |
| ospf | fixed typos in log messages; |
| ospf | improved stability on configuration change; |
| ovpn | fixed OVPN push routes; |
| poe-out | firmware update for CRS354-48P-4S+2Q+ (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed rare PoE-Out firmware upgrade failure on CRS354-48P-4S+2Q+; |
| ptp | allow manual domain configuration for 802.1AS profile; |
| ptp | set DSCP (EF) for the default profile when using IPv4; |
| qos-hw | display queue0 limits for CPU port; |
| qos-hw | fixed "offline" tx-manager ability to queue at least one packet (introduced in v7.21); |
| qos-hw | prohibit setting CPU port with "offline" tx-manager; |
| route | added SLAAC route redistribution for IPv6 capable routing protocols; |
| route | do not set blackhole flag for synthetic routes; |
| route | improved service stability when removing routes; |
| routerboard | fixed applying settings via WinBox on devices with fixed CPU frequency; |
| routing-filter | added possibility to match SLAAC and bgp-mpls-vpn route types; |
| ssh | make login process asynchronous; |
| switch | fixed stability issue when changing bridge multicast-router property on CRS1xx/2xx (introduced in v7.19); |
| system | added FCC Part 15 Compliance label to "System/Regulatory" menu; |
| system | improved stability for internal RouterOS service communication; |
| system | improved system stability; |
| system | improved upgrade service stability when the server is unreachable; |
| system | included full certificate chain to Windows executables; |
| user | properly apply login delay (introduced in v7.20); |
| wifi-mediatek | fixed communication issues on 802.11ax access points with Intel clients; |
| wifi-mediatek | fixed HE capabilities IE on 2GHz band; |
| winbox | fixed "Remote AS" setting under the "Routing/BGP/Connections" menu; |
| winbox | fixed "Src/Dst Address Type" under the "IP/Firewall/NAT" menu; |
| winbox | fixed L3HW default value for VLAN interface (introduced in v7.21); |
| winbox | properly display multiple bands for multi-link interface clients under registration table; |
| winbox | rearrange filter wizard parameters in tabs; |
| www | improved service stability when cancelling REST API sessions; |