Software-update: RouterOS 7.11

MikroTik heeft versie 7.11 van RouterOS uitgebracht. RouterOS is een besturingssysteem dat zich richt op het uitvoeren van routertaken. Denk daarbij natuurlijk aan het routeren van netwerkverkeer, maar ook aan bandbreedtemanagement, een firewall, het aansturen van draadloze accesspoints, een hotspotgateway en een vpn-server. Het kan zowel op de hardware van MikroTik als op x86- of virtuele machines zijn werk doen. Voor het gebruik is een licentie nodig, die bij de aankoop van MikroTik-hardware is inbegrepen. De changelog voor deze uitgave kan hieronder worden gevonden.

api - disallow executing commands without required parametersbfd - fixed "actual-tx-interval" value and added "remote-min-tx" (CLI only)bfd - improved system stabilitybluetooth - added "decode-ad" command for decoding raw Bluetooth payloads (CLI only)bluetooth - added "Peripheral devices" section which displays decoded Eddystone TLM and UID, iBeacon and MikroTik Bluetooth payloadsbluetooth - added new AD structure type "service-data" for Bluetooth advertisementbridge - added more STP-related loggingbridge - added warning when VLAN interface list contains ports that are not bridgedbridge - fixed MAC learning on "switch-cpu" port with enabled FastPathbridge - fixed MSTP BPDU agingbridge - fixed MSTP synchronization after link downbridge - prevent bridging the VLAN interface created on the same bridgecertificate - allow to import certificate with DNS name constraintcertificate - fixed PEM importcertificate - fixed trust store CRL link if generated on an older version (introduced in v7.7)certificate - improved CRL download retry handlingcertificate - removed request for "passphrase" property on importcertificate - require CRL presence when using "crl-use=yes" settingcertificate - restored RSA with SHA512 supportconntrack - fixed "active-ipv4" propertyconsole - added ":convert" commandconsole - added default value for "rndstr" command (16 characters from 0-9a-zA-Z)console - fixed incorrect date when printing "value-list" with multiple entriesconsole - fixed minor typosconsole - fixed missing "parent" for script jobs (introduced in v7.9)console - fixed missing return value for ping command in certain casesconsole - fixed printing interval when resizing terminalconsole - improved flag printing in certain menusconsole - improved stability and responsivenessconsole - improved stability when canceling console actionsconsole - improved stability when using fullscreen editorconsole - improved timeout for certain commands and menusconsole - improved VPLS "cisco-id" argument validationcontainer - added IPv6 support for VETH interfacecontainer - added option to use overlayfs layerscontainer - adjust the ownership of volume mounts that fall outside the container's UID rangecontainer - fixed duplicate image namecontainer - fixed IP address in container host filedefconf - do not change admin password if resetting with "keep-users=yes"dhcp-server - fixed setting "bootp-lease-time=lease-time"discovery - fixed "lldp-med-net-policy-vlan" (introduced in v7.8 )dns - improved system stability when processing static DNS entries with specified address-listethernet - fixed forced half-duplex 10/100 Mbps link speeds on CRS312 deviceethernet - improved interface stability for CRS312 devicefetch - improved timeout detectionfirewall - added warning when PCC divider argument is smaller than remainderfirewall - fixed mangle "mark-connection" with "passthrough=yes" rule for TCP RST packetsfirewall - improved system stability when using "endpoint-independent-nat"graphing - added paging supporthealth - added more gradual control over fans for CRS3xx, CRS5xx, CCR2xxx deviceshealth - fixed configuration export for "/system/health/settings" menuhotspot - allow number as a first symbol in the Hotspot server DNS nameike1 - fixed Phase 1 when using aggressive exchange mode (introduced in v7.10)ike2 - improved SA rekeying reply processike2 - improved system stability when closing phase1ike2 - improved system stability when making configuration changes on active setupike2 - log "reply ignored" as non-debug log messageipsec - fixed public key export (introduced in v7.10)ipsec - fixed signature authentication using secp521r1 certificate (introduced in v7.10)ipsec - improved IKE2 rekey processipsec - properly check ph2 approval validity when using IKE1 exchange model3hw - changed minimal supported values for "neigh-discovery-interval" and "neigh-keepalive-interval" propertiesl3hw - fixed /32 and /128 route offloading after nexthop changel3hw - fixed incorrect source MAC usage for offloaded bonding interfacel3hw - improved system responsiveness during partial offloadingl3hw - improved system stability during IPv6 route offloadingl3hw - improved system stabilityled - fixed manually configured user LED for RB2011leds - blink red system-led when LTE is not connected to the network on D53 devicesleds - fixed system-led color for "GSM EGPRS" RAT on D53 deviceslora - added new EUI fieldlora - added uplink message filtering option using NetID or JoinEUIlora - moved LoRa service to IoT packagelora - properly apply configuration changes when multiple LoRa cards are usedlora - updated LoRa firmware for R11e-LR8, R11e-LR9 and R11e-LR2 cardslte - added "at-chat" support for Dell DW5821e-eSIM modemlte - added "at-chat" support for Dell DW5829 modemlte - added "at-chat" support for Fibocom L850-GL modemlte - added "at-chat" support for SIMCom 8202G modemlte - added "band" info to the "monitor" command for MBIM modems that support serving cell info reporting over MBIMlte - added extended support for Neoway N75 modemlte - fixed Dell DW5221E "at-chat" supportlte - fixed LtAP mini default SIM slot "down" changeover to "up" after an upgrade (introduced in v7.10beta1)lte - fixed NR SINR reporting for Chateau 5Glte - fixed R11e-LTE, R11e-LTE6 legacy 2G/3G RAT mode selectionlte - fixed Telit LE910C4 "at-chat" supportlte - improved initial interface startup time for SXT LTE 3-7lte - improved system stability when changing the "radio" state for MBIM modemslte - only listen to DHCP packets for LTE passtrough interface in auto mode when looking for the hostmodem - added initial support for BG77 modem DFOTA firmware updatemodem - changed Quectel EC25 portmap to expose DM (diag port), DM channel=0, GPS channel=1modem - fixed missing sender's last symbol in SMS inbox if the sender is an alphabetic stringmpls - improved MPLS TCP performancemqtt - added more MQTT publish configuration optionsmqtt - added new MQTT subscribe featurenetwatch - added "src-address" propertynetwatch - changed "thr-tcp-conn-time" argument to time intervalovpn - do not try to use the "bridge" setting from PPP/Profile, if the OVPN server is used in IP mode (introduced in v7.10)ovpn - fixed OVPN server peer-id negotiationovpn - fixed session-timeout when using UDP modeovpn - improved key renegotiation processovpn - include "connect-retry 1" and "reneg-sec" parameters into the OVPN configuration export fileovpn - properly close OVPN session on the server when client gets disconnectedpackage - treat disabled packages as enabled during upgradepoe - fixed missing PoE configuration section under specific conditionspoe-out - advertise LLDP power-mdi-long even if no power allocation was requested (introduced in v7.7)pppoe - fixed PPPoE client trying to establish connection when parent interface is inactiveprofile - added "container" process classifierprofile - properly classify "console" related processesqos-hw - keep VLAN priority in packets that are sent from CPUquickset - correctly apply configuration when using "DHCP Server Range" propertyresource - fixed erroneous CPU usage valuesrose-storage - added "scsi-scan" command (CLI only)rose-storage - added disk stats for ramdisksrose-storage - fixed RAID 0 creationrose-storage - limit striped RAID element size to smallest disk sizeroute - added comment for BFD configuration (CLI only)route - convert BFD timers from milliseconds to microseconds after upgraderouterboard - fixed "gpio-function" setting on RBM33G ("/system routerboard upgrade" required)routerboard - improved RouterBOOT stability for Alpine CPUs ("/system routerboard upgrade" required)routerboard - removed unnecessary serial port for netPower16P and hAP ax lite devices ("/system routerboard upgrade" required)routerboot - increased etherboot bootp timeout to 40s on MIPSBE and MMIPS devices ("/system routerboard upgrade" required)sfp - fixed incorrect optical SFP temperature readings (introduced in v7.10)sfp - improved interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 based switchessfp - improved optical QSFP interface handling for 98DX8332, 98DX3257, 98DX4310, 98DX8525 switchessfp - improved Q/SFP interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switchessfp - reduce CPU load due to SFP interface handling for CCR2116, CCR2216, CCR2004-12S+2XS, CRS312, CRS518 devices (introduced in v7.9)sms - increased wait time for modem startupssh - fixed host public key export (introduced in v7.9)ssh - fixed private key import (introduced in v7.9)ssh - fixed SSH key agreement on the client side when ed25519 used under server settingsssh - fixed user RSA private key importswitch - fixed "reset-counters" for "switch-cpu"switch - fixed BPDU packet processing on MT7621, MT7531 with HW offloaded vlan-filteringswitch - improved multicast packet forwarding on MT7621system - disallow setting a non-existing CPU core number for system IRQsystem - increased maximum supported CPU core count to 512 on CHR and x86system - reduced RAM usage for SMIPS devicestftp - improved file name matchinguser - added "sensitive" policy requirement for SSH key and certificate exportw60g - improved stability for Cube 60Pro ac and CubeSA 60Pro ac deviceswebfig - added Source: Tweakers.net