MikroTik Changelogs
← Back to search All versions

Version: 7.21.4

Long-term

56 changelog entries across 31 component(s)

2026-Apr-21 (1 week ago)

Component Change
bgp fixed stability issue when non-existent output select-chain was specified;
bgp-vpn allow modifying scopes with routing filters;
bgp-vpn fixed non-working import filter after reboot;
bgp-vpn use target scope for imported route;
bridge fixed missing dynamic "switch-cpu" VLAN entry in WiFi setup;
bridge fixed performance regression in complex setups with vlan-filtering (introduced in v7.20);
console removed the "reset" command from shared settings menus (IP/IPv6/Bridge/L3HW/Neighbor-Discovery/Connection-Tracking);
container fixed issue where the container might not start after upgrading if root-dir was not set;
container improved error message if a container fails to start;
defconf fixed L009 configuration (introduced in v7.21);
ethernet fixed false excessive broadcast warning (introduced in v7.20);
firewall improved system stability;
ipsec improved aes256-ctr stability on L009;
ipsec removed modp8192 proposal on MIPS architectures;
ipv6,ra use received prefix when RA on-link flag is 0;
isis improved stability with fragmented CSNP;
l2tp improved system stability on TILE architecture;
l3hw fixed missing VLAN counters after reboot (introduced in v7.21);
l3hw fixed stability issue (introduced in v7.21);
leds fixed default LED configuration for CCR2004-1G-12S+2XS;
log do not provide non-existent logging topics for configuration;
lte fixed framed route support for the first APN;
lte fixed missing automatic redial when cellular connectivity is lost for R11e-LTE;
lte fixed user set MTU not applied to LTE interface;
lte override the "auto" or 0 MTU in "interface" menu to 1500;
ospf fixed typos in log messages;
ospf improved stability on configuration change;
ovpn fixed OVPN push routes;
poe-out firmware update for CRS354-48P-4S+2Q+ (the update will cause a brief power interruption to poe-out interfaces);
poe-out fixed rare PoE-Out firmware upgrade failure on CRS354-48P-4S+2Q+;
ptp allow manual domain configuration for 802.1AS profile;
ptp set DSCP (EF) for the default profile when using IPv4;
qos-hw display queue0 limits for CPU port;
qos-hw fixed "offline" tx-manager ability to queue at least one packet (introduced in v7.21);
qos-hw prohibit setting CPU port with "offline" tx-manager;
route added SLAAC route redistribution for IPv6 capable routing protocols;
route do not set blackhole flag for synthetic routes;
route improved service stability when removing routes;
routerboard fixed applying settings via WinBox on devices with fixed CPU frequency;
routing-filter added possibility to match SLAAC and bgp-mpls-vpn route types;
ssh make login process asynchronous;
switch fixed stability issue when changing bridge multicast-router property on CRS1xx/2xx (introduced in v7.19);
system added FCC Part 15 Compliance label to "System/Regulatory" menu;
system improved stability for internal RouterOS service communication;
system improved system stability;
system improved upgrade service stability when the server is unreachable;
system included full certificate chain to Windows executables;
user properly apply login delay (introduced in v7.20);
wifi-mediatek fixed communication issues on 802.11ax access points with Intel clients;
wifi-mediatek fixed HE capabilities IE on 2GHz band;
winbox fixed "Remote AS" setting under the "Routing/BGP/Connections" menu;
winbox fixed "Src/Dst Address Type" under the "IP/Firewall/NAT" menu;
winbox fixed L3HW default value for VLAN interface (introduced in v7.21);
winbox properly display multiple bands for multi-link interface clients under registration table;
winbox rearrange filter wizard parameters in tabs;
www improved service stability when cancelling REST API sessions;