Software-update: RouterOS 7.16
MikroTik heeft versie 7.15.3 van RouterOS uitgebracht, een besturingssysteem dat zich richt op het uitvoeren van routertaken. Denk daarbij natuurlijk aan het routeren van netwerkverkeer, maar ook aan bandbreedtemanagement, een firewall, het aansturen van draadloze accesspoints, een hotspotgateway en een vpn-server. Het kan zowel op de hardware van MikroTik als op x86- of virtuele machines zijn werk doen. Voor het gebruik is een licentie nodig, die bij de aankoop van MikroTik-hardware is inbegrepen. De changelog sinds versie 7.15.1 kan hieronder worden gevonden.
What's new in 7.16:6to4 - fixed 6to4 tunnel LL address generation after system reboot6to4 - improved system stability when using 6to4 tunnel without specified remote-address6to4 - limit keepalive timeout maximum valueaddress - added "S" flag for addresses that belong to a slave interfacearm64 - fixed "disable-running-check" for ARM64 UEFIarm64 - increased reserved storage space for bootloaderarm64/x86 - added rtl8111/8168/8411 firmwarearp - fixed possible issue with invalid entriesbgp - fixed BGP sessions missing vpnv6 afibgp - fixed cluster-list and originator-idbgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15)bgp - fixed minor logging typobgp - fixed vpnv6 safibgp - small logging improvementsbridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridgebridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade)bridge - added L2 MDB support for IGMP snoopingbridge - added max-learned-entries property for bridgebridge - added message about who created a dynamic VLAN entrybridge - added MVRP support for VLANs assigned to bridgebridge - do not allow duplicate portsbridge - fixed BPDU address when using "ether-type=0x88a8" configurationbridge - fixed MVRP leavebridge - fixed port "point-to-point" status after first link changebridge - fixed typo in filter and NAT error messagebridge - improved system stability when removing MLAG configurationbridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached)bth - improved stability on system time changecertificate - added no-key-export parameter for importcertificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only)certificate - automatically parse uppercase symbols to lowercase when registering domain on Let's Encryptcertificate - improved DNS challenge error reporting for Let's Encryptcertificate - improved RSA key signature processing speedcertificate - show validity beyond year 2038chr - added support for licensing over IPv6 networkchr - fixed incorrect disk size for ARM64console - added "about" filters for "find" and "print where" commandsconsole - added "verbose=progress" mode for import status updates, and verbose output only on failuresconsole - added additional byte-array option to :convert commandconsole - added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only)console - added limits for dst-start and dst-end clock propertiesconsole - added lock screen via :lock commandconsole - added uppercase and lowercase transform modes to :convert commandconsole - disallow ping command with empty addressconsole - display hint when requesting specific argument syntaxconsole - do not show default boot-os setting in exportconsole - fixed an issue where certain MAC address can be interpreted as time valueconsole - fixed negative values for gmt-offset clock propertyconsole - fixed output of ping command in certain casesconsole - fixed typo in firewall error messageconsole - improved :serialize and :deserialize commands and added support for DSV (delimiter separated values) formatconsole - improved large import file handling, error detection and stabilityconsole - improved stability when pasting a large inputconsole - improved stability when removing scriptconsole - increased default width for bitrate type of columnsconsole - removed follow-strict parameterconsole - show rest-api name for active user connectionscontainer - clear VETH address on container exit and mark interface as running only when VETH is in usedefconf - configure the default-route property for PPP clients only on devices with a built-in modemdetnet - properly detect "Internet" status when multiple detnet instances preset in networkdhcp - added comment property for matchers, options and option setsdhcp - improved DHCP IPv4 and IPv6 client/relay/server underlying interface state change handlingdhcp - improved insert-queue-before, parent-queue and allow-dual-stack-queue behaviordhcpv4-client - execute script on DNS server or gateway address changedhcpv4-server - added "class-id" parameter for DHCP server leasesdhcpv4-server - added matcher ability to match substringdhcpv4-server - added name for "User-Class" option (77), "Authentication" option (90), "SIP-Servers-DHCP-Option" option (120) and "Unassigned" option (163-174) in debug logsdhcpv4-server - fixed setting and getting "next-server" propertydhcpv4-server - increased lease offer timeout to 120 secondsdhcpv4-server - remove corresponding dynamic leases if their address-pool gets removeddhcpv4-server - show active-server and host-name in print active commanddhcpv6-client - do not add default gateway twice when both prefix and address is acquireddhcpv6-client - fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0dhcpv6-client - pause client and remove dynamically installed objects while it becomes invaliddhcpv6-client - release client on failed renew attemptdhcpv6-client - update gateway address for default route on renewdhcpv6-server - improved system stabilitydiscovery - added discover-interval settingdiscovery - added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs supportdiscovery - added LLDP-MED timeoutdiscovery - changed default discover-interval setting from 60s to 30sdiscovery - set unknown bit for any unspecified link type in MAC/PHY TLVdisk - added "wipe-quick" file-system option to format-drive command (CLI only)disk - added log message when disks get added or removeddisk - added simple test command to test device and filesystem speeds (CLI only)disk - improved system stabilitydisk - remove dummy "slot1" entries on CHRdns - added support for DoH with adlistdns - added support for DoH with static FWD entriesdns - added support for mDNS proxydns - improved imported adlist parsingdns - refactored adlist service internal processes and improved loggingdns - refactored DNS service internal processesdns - show static entry type "A" field in consoledude - fixed map element RouterOS package upgrade functionalityethernet - fixed port speed downshift functionality for CRS354 devicesethernet - improved system stability for Alpine CPUs when dealing with unexpected non-UDP/TCP packet transmitfetch - handle HTTP 401 status correctlyfetch - improved loggingfile - renamed "creation-time" to "last-modified"filesystem - improved boot speed after device is rebooted without proper shutdownfilesystem - refactored internal processes to minimize sector writesfirewall - added message when interface belonging to VRF is added in filter rulesfirewall - fixed an issue with unsetting src-address-typefirewall - fixed IPv6 "nth" matcher showing up twice in helpfirewall - fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo commandfirewall - removed unnecessary TLS host matcher from NAT tableshealth - fixed board-temperature for KNOT device (introduced in v7.15)health - fixed bogus CPU temperature spikes for CCR2216 devicehealth - fixed missing health for CRS112-8G-4S device (introduced in v7.15)health - improved voltage measurements for RB912UAG-6HPnD and RB912UAG-5HPnD deviceshealth - removed unnecessary health settings for RB921 and RB922 deviceshealth - upgraded fan controller firmware to latest versionhotspot - properly escape all reserved URI charactersike1 - removed unsupported NAT-D drafts with invalid payload numbersike2 - improved performance by balancing multicore CPU usage for key exchange calculationinstall - allow to save old configuration during cdrom installinstall - fixed ARM64 cdrom install (introduced in v7.15)iot - added an option to delete default LoRa servers and a button to recover them if needediot - added an option to log LoRa filtered packetsiot - added LoRa NetID and JoinEUI filtering for LNS and CUPS connectionsiot - added LoRa option to filter out proprietary packetsiot - fixed incorrect LoRa filter export behavioriot - fixed LoRa inability to set SSL for LoRa servers via command lineiot - fixed LoRa inability to use variables for GPS-spoofing settingip - added max-sessions property for servicesip/ipv6 - added multipath hash policy settingsipip6 - make IPv6 LL address randomipsec - changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4ipsec - improved installed SA statistics updateipv6 - added "d" deprecated flag for expired IPv6 SLAAC addressesipv6 - allow to properly disable address when it is generated from poolipv6 - allow to properly move IPv6 address from slave interface to a bridge interfaceipv6 - do not allow adding address with invalid prefix when using poolipv6 - do not allow to manually delete LL addressipv6 - fixed "no-dad" functionalityipv6 - fixed dynamic duplicate address showing when static address is already configuredipv6 - fixed pool allocated addresses missing after rebootipv6 - fixed SLAAC address dynamic appearanceipv6 - improved handling of IPv6 address informationipv6 - improved LL address generation processipv6 - properly initialize default ND "interface=all" entryipv6 - respect APN settings for "add-default-route" and "use-peer-dns" also when "accept-router-advertisements=yes"ipv6 - warn user that reboot is required in order to properly apply accept-router-advertisements changesisis - fixed filter-chain and filter-select settingsisis - install IPv6 link-local gateways correctlyl2tp - improved system stabilityl3hw - added per-VLAN packet and byte counters to compatible switchesl3hw - disable L3HW on bonding modes that do not support itlog - added basic validation for "disk-file-name" propertylte - added "sms-protocol" setting in "/interface lte" menu (CLI only)lte - fixed "at-chat" for DELL T99W175 (PID: 0x05c6 VID: 0x90d5)lte - fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15)lte - fixed cases where modem could be handled by multiple dialer instanceslte - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15)lte - fixed possible crash when enabling/disabling config-less modem interfacelte - fixed R11e-LTE no traffic flow when modem with older firmware version is usedlte - fixed support for Fibocom modem fm150-nalte - improved modem AT/modem port openlte - improvements to "/interface/lte/show-capabilities" commandmedia - improved file indexing for DLNAmodem - added authentication functionality to EC200Amodem - fixed PPP link recovery when port unexpectedly removed and returned due to modem firmware crashmodem - fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacitymodem - improved support for KNOT BG77 modem firmware updatemqtt - broker password is no longer exported unless "show-sensitive" flag is usednetinstall-cli - added check for device and package architectures matchnetinstall-cli - added support for multiple device installnetinstall-cli - allow mixed package architecturesnetwatch - added DNS probenetwatch - added ttl and accept-icmp-time-exceeded properties for ICMP probenetwatch - use time format according to ISO standardospf - improved system stability during LSA monitoringovpn - improved system stabilitypimsm - improved system stabilitypoe-out - fixed low-voltage detection while PD is connected for KNOT devicepoe-out - fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15)poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces)port - added IPv6 support for the "remote-access" featureppp - added SIM hot-plug enable command to default init-string for KNOT and CME gatewayppp - added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-clientppp - automatically generate IPv6 firewall rules when filter-id is specifiedppp - fixed dynamic queue default name (introduced in v7.15)ppp - fixed PPP info parser showing error for BG77 modem running on KNOT AUX AT/modem portprofiler - classify wifi processing as "wireless"ptp - added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devicesqos-hw - added H and I flags to queuesqos-hw - added new monitoring properties for ports and global QoS statsqos-hw - added queue-buffers property to tx-managerqos-hw - allow port print stats, usage and pfc while QoS is disabledqos-hw - allow to set queue-buffers in bytes, percent or autoqos-hw - enabling ECN forces WRED (unless share is disabled)qos-hw - fixed egress-rate limit validationqos-hw - fixed global buffer limits for 98DX8212 and 98DX8332 switchesqos-hw - fixed WRED thresholdsqos-hw - improved behavior when changing ports tx-mangerqos-hw - limit WRED to queues with enabled shared buffersqueue - improved system stabilityquickset - removed Basic AP moderose-storage - fixed "/file sysnc status" parameter to be read-onlyrose-storage - moved "/rsync-daemon" to "/file rsync-daemonrose-storage - renamed sync "remote-addr" property to "remote-address"route - added ability to redistribute isis routesroute - fixed incorrectly handled route distinguisher and route targets (introduced in v7.15)route - fixed memory leak (introduced in v7.15)route - fixed some missing route parameters when printing (introduced in v7.15)route - improved route attribute handling (may increase memory usage)route - improved routing table update performanceroute - improved stability when getting entries from large routing tablesroute - place static route in the correct VRF when vrf-interface parameter is usedroute - rename route type from is-is to isisrouterboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required)routerboard - improved Etherboot stability for IPQ-40xx devices ("/system routerboard upgrade" required)routerboot - improved boot process ("/system routerboard upgrade" required)rpki - fixed preference sortingsfp - fixed calculated link length based on EEPROM in certain casessfp - fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ devicesfp - fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe devicesfp - fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe devicesms - added polling setting so that RouterOS itself checks SMS instead of relying on URC messagessnmp - added support for KNOT BG77 modem cellular signal infosnmp - fixed LAST-UPDATED format in MIKROTIK-MIBssh - fixed SSH cryptographic accelerator selection for GCM cipher (introduced in v7.14)ssh - fixed unsupported user SSH public key import (introduced in v7.15)ssh - improved system stability when SSH tries to bind to non-existing interfacesupout - added detnet sectionsupout - added monitor command for all wifi interfacessupout - added netwatch sectionsupout - added user SSH keys sectionsupout - increased console output widthsupout - limit address-list and connection tracking entries to 999 in supout.rifsupout - rename "store" section to "disk"switch - fixed an issue where half-duplex links could occupy Tx resources for 98DX8xxx, 98DX4xxx, 98DX325x switch chipsswitch - fixed an issue with Ethernet port group hang for CRS354 devicesswitch - fixed Ethernet interface counter 32bit overflow for CRS354 devicesswitch - fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15)switch - improved switch resetswitch - improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devicessystem - added "clock" logging topic for time change related messagessystem - added critical log message when not enough space to store new configurationsystem - added log message if device failed to reboot gracefullysystem - added more details to user initiated reboot (reset, upgrade, downgrade)system - added support for upgrade over IPv6 networksystem - do not cancel package upgrade if another architecture packages found on the routersystem - do not download packages scheduled for uninstallsystem - do not start IPsec and certificate processes when not necessarysystem - fixed "free disk space" error message on system upgrade/downgradesystem - fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15)system - fixed empty logs after reboot in certain casessystem - improved internal system services messagingsystem - improved performance for TCP inputsystem - improved reporting of total memory sizesystem - improved system stability for CCR2004-1G-2XS-PCIe devicesystem - improved system stability for RBSXTsq5nD and RBLDF-5nDsystem - improved system stabilitysystem - improved watchdog and kernel panic reportingsystem - reduced RAM usage for ARM64 devicessystem - set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required)system - set flash-boot mode as "boot-device" after system reset initiated from softwaretraceroute - do not stop traceroute after 5 consecutive unreachable hopstunnel - allow specifying IPv6 LL address as "remote-address" for EoIPv6, GRE6 and IPIP6 tunnelsuser - added inactivity timeout for non-GUI sessionsuser-manager - updated logovxlan - added comment support to VTEPsvxlan - prevent creating multiple VTEPs with same IP/port combinationwebfig - allow to enter time that exceeds 23:59:59webfig - correctly display default value for number typewebfig - enabled hotlock mode for terminalwebfig - fixed an issue where wrong menu title was shownwebfig - fixed issue with incorrectly applying optional fieldswebfig - fixed sorting by datetimewebfig - use "any" argument by default for Torch "Port" propertywifi - added "slave-name-format"wifi - added interface provisioning logswifi - adjusted virtual interface naming when provisioning local radioswifi - do not allow frequency-scan on virtual interfaceswifi - do not unset radio-mac and master-interface properties on resetwifi - enable creating virtual wifi interfaces using "copy-from" settingwifi - fixed packet receive when having multiple station interfaceswifi - fixed signal strength reporting during association (introduced in v7.15)wifi - fixed typo in log messagewifi - improve regulatory compliance for Chateau ax deviceswifi - improved interface stability when receiving invalid FT authentication frameswifi - improved system stability after interface hangwifi - improved WPA3 PMKSA handling when access-lists with custom passphrases are usedwifi - make sniffer tool return an error when attempting to sniff with a radio which does not support itwifi - send channel switch announcements to clients when switching channels at requested re-select intervalswifi - use name-format also for local interfaces when provisioningwifi-qcom - add spectral-scan and spectral-history tools (CLI only)wifi-qcom-ac - count dropped packets to "tx-drop" instead of "tx-error"wifi-qcom-ac - improved memory allocating processwinbox - added "Import Router ID" parameter under "Routing/BGP/VPN" menuwinbox - added "Switch/QoS" menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 deviceswinbox - added "Trace" column under "System/History" menuwinbox - added configuration settings for ROSEwinbox - added extra "File System" under "Format Drive" buttonwinbox - added missing "Default Name" property for interfaceswinbox - do not show "Last Logged In" and "Expire Password" when creating new system userwinbox - fixed "Authority" property under "System/Certificates/Requests" menuwinbox - fixed duplicated "MVRP Attributes" tablewinbox - fixed false invalid flag under "System/Ports/Remote Access" menuwinbox - fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15)winbox - fixed signal bar "excellent" tooltipwinbox - fixed Switch menu for RB1100AHx4 devicewinbox - improved QR code displaywinbox - moved DHCPv6 Server "Allow Dual Stack Queue" property from General to Queues tabwinbox - moved Switch menu tabs to individual menuswinbox - properly display available address-pools for DHCPv6 server configurationwinbox - removed deprecated x86/CHR specific settings under "System/Resources" menuwinbox - removed spare argument for "PFS Group" property under "IP/IPsec/Proposals" menuwinbox - renamed configurable wifi property "Tx Power" to "Max Tx Power"winbox - separated different Watchdog settings into logical tabswinbox - use CAP serial number with "Set Identity" button under "WiFi/Remote CAP" menuwinbox - use correct default value for "Partition Offset" propertywinbox/webfig - fixed skins (introduced in v7.15)wireless - allow unsetting signal-range and ssid-regext properties for capsman access-listwireless - fixed dynamic VLAN assignments for vlan-filtering bridge in certain caseswireless - limit antenna-gain property to 100www - log out inactive REST API usersx86 - added missing PCI ids for bnx2x driverx86 - added RTL8156 driver supportx86 - fixed missing serial ports with MCS9900
6to4 - fixed 6to4 tunnel LL address generation after system reboot6to4 - improved system stability when using 6to4 tunnel without specified remote-address6to4 - limit keepalive timeout maximum valueaddress - added "S" flag for addresses that belong to a slave interfacearm64 - fixed "disable-running-check" for ARM64 UEFIarm64 - increased reserved storage space for bootloaderarm64/x86 - added rtl8111/8168/8411 firmwarearp - fixed possible issue with invalid entriesbgp - fixed BGP sessions missing vpnv6 afibgp - fixed cluster-list and originator-idbgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15)bgp - fixed minor logging typobgp - fixed vpnv6 safibgp - small logging improvementsbridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridgebridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade)bridge - added L2 MDB support for IGMP snoopingbridge - added max-learned-entries property for bridgebridge - added message about who created a dynamic VLAN entrybridge - added MVRP support for VLANs assigned to bridgebridge - do not allow duplicate portsbridge - fixed BPDU address when using "ether-type=0x88a8" configurationbridge - fixed MVRP leavebridge - fixed port "point-to-point" status after first link changebridge - fixed typo in filter and NAT error messagebridge - improved system stability when removing MLAG configurationbridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached)bth - improved stability on system time changecertificate - added no-key-export parameter for importcertificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only)certificate - automatically parse uppercase symbols to lowercase when registering domain on Let's Encryptcertificate - improved DNS challenge error reporting for Let's Encryptcertificate - improved RSA key signature processing speedcertificate - show validity beyond year 2038chr - added support for licensing over IPv6 networkchr - fixed incorrect disk size for ARM64console - added "about" filters for "find" and "print where" commandsconsole - added "verbose=progress" mode for import status updates, and verbose output only on failuresconsole - added additional byte-array option to :convert commandconsole - added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only)console - added limits for dst-start and dst-end clock propertiesconsole - added lock screen via :lock commandconsole - added uppercase and lowercase transform modes to :convert commandconsole - disallow ping command with empty addressconsole - display hint when requesting specific argument syntaxconsole - do not show default boot-os setting in exportconsole - fixed an issue where certain MAC address can be interpreted as time valueconsole - fixed negative values for gmt-offset clock propertyconsole - fixed output of ping command in certain casesconsole - fixed typo in firewall error messageconsole - improved :serialize and :deserialize commands and added support for DSV (delimiter separated values) formatconsole - improved large import file handling, error detection and stabilityconsole - improved stability when pasting a large inputconsole - improved stability when removing scriptconsole - increased default width for bitrate type of columnsconsole - removed follow-strict parameterconsole - show rest-api name for active user connectionscontainer - clear VETH address on container exit and mark interface as running only when VETH is in usedefconf - configure the default-route property for PPP clients only on devices with a built-in modemdetnet - properly detect "Internet" status when multiple detnet instances preset in networkdhcp - added comment property for matchers, options and option setsdhcp - improved DHCP IPv4 and IPv6 client/relay/server underlying interface state change handlingdhcp - improved insert-queue-before, parent-queue and allow-dual-stack-queue behaviordhcpv4-client - execute script on DNS server or gateway address changedhcpv4-server - added "class-id" parameter for DHCP server leasesdhcpv4-server - added matcher ability to match substringdhcpv4-server - added name for "User-Class" option (77), "Authentication" option (90), "SIP-Servers-DHCP-Option" option (120) and "Unassigned" option (163-174) in debug logsdhcpv4-server - fixed setting and getting "next-server" propertydhcpv4-server - increased lease offer timeout to 120 secondsdhcpv4-server - remove corresponding dynamic leases if their address-pool gets removeddhcpv4-server - show active-server and host-name in print active commanddhcpv6-client - do not add default gateway twice when both prefix and address is acquireddhcpv6-client - fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0dhcpv6-client - pause client and remove dynamically installed objects while it becomes invaliddhcpv6-client - release client on failed renew attemptdhcpv6-client - update gateway address for default route on renewdhcpv6-server - improved system stabilitydiscovery - added discover-interval settingdiscovery - added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs supportdiscovery - added LLDP-MED timeoutdiscovery - changed default discover-interval setting from 60s to 30sdiscovery - set unknown bit for any unspecified link type in MAC/PHY TLVdisk - added "wipe-quick" file-system option to format-drive command (CLI only)disk - added log message when disks get added or removeddisk - added simple test command to test device and filesystem speeds (CLI only)disk - improved system stabilitydisk - remove dummy "slot1" entries on CHRdns - added support for DoH with adlistdns - added support for DoH with static FWD entriesdns - added support for mDNS proxydns - improved imported adlist parsingdns - refactored adlist service internal processes and improved loggingdns - refactored DNS service internal processesdns - show static entry type "A" field in consoledude - fixed map element RouterOS package upgrade functionalityethernet - fixed port speed downshift functionality for CRS354 devicesethernet - improved system stability for Alpine CPUs when dealing with unexpected non-UDP/TCP packet transmitfetch - handle HTTP 401 status correctlyfetch - improved loggingfile - renamed "creation-time" to "last-modified"filesystem - improved boot speed after device is rebooted without proper shutdownfilesystem - refactored internal processes to minimize sector writesfirewall - added message when interface belonging to VRF is added in filter rulesfirewall - fixed an issue with unsetting src-address-typefirewall - fixed IPv6 "nth" matcher showing up twice in helpfirewall - fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo commandfirewall - removed unnecessary TLS host matcher from NAT tableshealth - fixed board-temperature for KNOT device (introduced in v7.15)health - fixed bogus CPU temperature spikes for CCR2216 devicehealth - fixed missing health for CRS112-8G-4S device (introduced in v7.15)health - improved voltage measurements for RB912UAG-6HPnD and RB912UAG-5HPnD deviceshealth - removed unnecessary health settings for RB921 and RB922 deviceshealth - upgraded fan controller firmware to latest versionhotspot - properly escape all reserved URI charactersike1 - removed unsupported NAT-D drafts with invalid payload numbersike2 - improved performance by balancing multicore CPU usage for key exchange calculationinstall - allow to save old configuration during cdrom installinstall - fixed ARM64 cdrom install (introduced in v7.15)iot - added an option to delete default LoRa servers and a button to recover them if needediot - added an option to log LoRa filtered packetsiot - added LoRa NetID and JoinEUI filtering for LNS and CUPS connectionsiot - added LoRa option to filter out proprietary packetsiot - fixed incorrect LoRa filter export behavioriot - fixed LoRa inability to set SSL for LoRa servers via command lineiot - fixed LoRa inability to use variables for GPS-spoofing settingip - added max-sessions property for servicesip/ipv6 - added multipath hash policy settingsipip6 - make IPv6 LL address randomipsec - changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4ipsec - improved installed SA statistics updateipv6 - added "d" deprecated flag for expired IPv6 SLAAC addressesipv6 - allow to properly disable address when it is generated from poolipv6 - allow to properly move IPv6 address from slave interface to a bridge interfaceipv6 - do not allow adding address with invalid prefix when using poolipv6 - do not allow to manually delete LL addressipv6 - fixed "no-dad" functionalityipv6 - fixed dynamic duplicate address showing when static address is already configuredipv6 - fixed pool allocated addresses missing after rebootipv6 - fixed SLAAC address dynamic appearanceipv6 - improved handling of IPv6 address informationipv6 - improved LL address generation processipv6 - properly initialize default ND "interface=all" entryipv6 - respect APN settings for "add-default-route" and "use-peer-dns" also when "accept-router-advertisements=yes"ipv6 - warn user that reboot is required in order to properly apply accept-router-advertisements changesisis - fixed filter-chain and filter-select settingsisis - install IPv6 link-local gateways correctlyl2tp - improved system stabilityl3hw - added per-VLAN packet and byte counters to compatible switchesl3hw - disable L3HW on bonding modes that do not support itlog - added basic validation for "disk-file-name" propertylte - added "sms-protocol" setting in "/interface lte" menu (CLI only)lte - fixed "at-chat" for DELL T99W175 (PID: 0x05c6 VID: 0x90d5)lte - fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15)lte - fixed cases where modem could be handled by multiple dialer instanceslte - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15)lte - fixed possible crash when enabling/disabling config-less modem interfacelte - fixed R11e-LTE no traffic flow when modem with older firmware version is usedlte - fixed support for Fibocom modem fm150-nalte - improved modem AT/modem port openlte - improvements to "/interface/lte/show-capabilities" commandmedia - improved file indexing for DLNAmodem - added authentication functionality to EC200Amodem - fixed PPP link recovery when port unexpectedly removed and returned due to modem firmware crashmodem - fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacitymodem - improved support for KNOT BG77 modem firmware updatemqtt - broker password is no longer exported unless "show-sensitive" flag is usednetinstall-cli - added check for device and package architectures matchnetinstall-cli - added support for multiple device installnetinstall-cli - allow mixed package architecturesnetwatch - added DNS probenetwatch - added ttl and accept-icmp-time-exceeded properties for ICMP probenetwatch - use time format according to ISO standardospf - improved system stability during LSA monitoringovpn - improved system stabilitypimsm - improved system stabilitypoe-out - fixed low-voltage detection while PD is connected for KNOT devicepoe-out - fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15)poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces)port - added IPv6 support for the "remote-access" featureppp - added SIM hot-plug enable command to default init-string for KNOT and CME gatewayppp - added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-clientppp - automatically generate IPv6 firewall rules when filter-id is specifiedppp - fixed dynamic queue default name (introduced in v7.15)ppp - fixed PPP info parser showing error for BG77 modem running on KNOT AUX AT/modem portprofiler - classify wifi processing as "wireless"ptp - added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devicesqos-hw - added H and I flags to queuesqos-hw - added new monitoring properties for ports and global QoS statsqos-hw - added queue-buffers property to tx-managerqos-hw - allow port print stats, usage and pfc while QoS is disabledqos-hw - allow to set queue-buffers in bytes, percent or autoqos-hw - enabling ECN forces WRED (unless share is disabled)qos-hw - fixed egress-rate limit validationqos-hw - fixed global buffer limits for 98DX8212 and 98DX8332 switchesqos-hw - fixed WRED thresholdsqos-hw - improved behavior when changing ports tx-mangerqos-hw - limit WRED to queues with enabled shared buffersqueue - improved system stabilityquickset - removed Basic AP moderose-storage - fixed "/file sysnc status" parameter to be read-onlyrose-storage - moved "/rsync-daemon" to "/file rsync-daemonrose-storage - renamed sync "remote-addr" property to "remote-address"route - added ability to redistribute isis routesroute - fixed incorrectly handled route distinguisher and route targets (introduced in v7.15)route - fixed memory leak (introduced in v7.15)route - fixed some missing route parameters when printing (introduced in v7.15)route - improved route attribute handling (may increase memory usage)route - improved routing table update performanceroute - improved stability when getting entries from large routing tablesroute - place static route in the correct VRF when vrf-interface parameter is usedroute - rename route type from is-is to isisrouterboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required)routerboard - improved Etherboot stability for IPQ-40xx devices ("/system routerboard upgrade" required)routerboot - improved boot process ("/system routerboard upgrade" required)rpki - fixed preference sortingsfp - fixed calculated link length based on EEPROM in certain casessfp - fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ devicesfp - fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe devicesfp - fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe devicesms - added polling setting so that RouterOS itself checks SMS instead of relying on URC messagessnmp - added support for KNOT BG77 modem cellular signal infosnmp - fixed LAST-UPDATED format in MIKROTIK-MIBssh - fixed SSH cryptographic accelerator selection for GCM cipher (introduced in v7.14)ssh - fixed unsupported user SSH public key import (introduced in v7.15)ssh - improved system stability when SSH tries to bind to non-existing interfacesupout - added detnet sectionsupout - added monitor command for all wifi interfacessupout - added netwatch sectionsupout - added user SSH keys sectionsupout - increased console output widthsupout - limit address-list and connection tracking entries to 999 in supout.rifsupout - rename "store" section to "disk"switch - fixed an issue where half-duplex links could occupy Tx resources for 98DX8xxx, 98DX4xxx, 98DX325x switch chipsswitch - fixed an issue with Ethernet port group hang for CRS354 devicesswitch - fixed Ethernet interface counter 32bit overflow for CRS354 devicesswitch - fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15)switch - improved switch resetswitch - improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devicessystem - added "clock" logging topic for time change related messagessystem - added critical log message when not enough space to store new configurationsystem - added log message if device failed to reboot gracefullysystem - added more details to user initiated reboot (reset, upgrade, downgrade)system - added support for upgrade over IPv6 networksystem - do not cancel package upgrade if another architecture packages found on the routersystem - do not download packages scheduled for uninstallsystem - do not start IPsec and certificate processes when not necessarysystem - fixed "free disk space" error message on system upgrade/downgradesystem - fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15)system - fixed empty logs after reboot in certain casessystem - improved internal system services messagingsystem - improved performance for TCP inputsystem - improved reporting of total memory sizesystem - improved system stability for CCR2004-1G-2XS-PCIe devicesystem - improved system stability for RBSXTsq5nD and RBLDF-5nDsystem - improved system stabilitysystem - improved watchdog and kernel panic reportingsystem - reduced RAM usage for ARM64 devicessystem - set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required)system - set flash-boot mode as "boot-device" after system reset initiated from softwaretraceroute - do not stop traceroute after 5 consecutive unreachable hopstunnel - allow specifying IPv6 LL address as "remote-address" for EoIPv6, GRE6 and IPIP6 tunnelsuser - added inactivity timeout for non-GUI sessionsuser-manager - updated logovxlan - added comment support to VTEPsvxlan - prevent creating multiple VTEPs with same IP/port combinationwebfig - allow to enter time that exceeds 23:59:59webfig - correctly display default value for number typewebfig - enabled hotlock mode for terminalwebfig - fixed an issue where wrong menu title was shownwebfig - fixed issue with incorrectly applying optional fieldswebfig - fixed sorting by datetimewebfig - use "any" argument by default for Torch "Port" propertywifi - added "slave-name-format"wifi - added interface provisioning logswifi - adjusted virtual interface naming when provisioning local radioswifi - do not allow frequency-scan on virtual interfaceswifi - do not unset radio-mac and master-interface properties on resetwifi - enable creating virtual wifi interfaces using "copy-from" settingwifi - fixed packet receive when having multiple station interfaceswifi - fixed signal strength reporting during association (introduced in v7.15)wifi - fixed typo in log messagewifi - improve regulatory compliance for Chateau ax deviceswifi - improved interface stability when receiving invalid FT authentication frameswifi - improved system stability after interface hangwifi - improved WPA3 PMKSA handling when access-lists with custom passphrases are usedwifi - make sniffer tool return an error when attempting to sniff with a radio which does not support itwifi - send channel switch announcements to clients when switching channels at requested re-select intervalswifi - use name-format also for local interfaces when provisioningwifi-qcom - add spectral-scan and spectral-history tools (CLI only)wifi-qcom-ac - count dropped packets to "tx-drop" instead of "tx-error"wifi-qcom-ac - improved memory allocating processwinbox - added "Import Router ID" parameter under "Routing/BGP/VPN" menuwinbox - added "Switch/QoS" menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 deviceswinbox - added "Trace" column under "System/History" menuwinbox - added configuration settings for ROSEwinbox - added extra "File System" under "Format Drive" buttonwinbox - added missing "Default Name" property for interfaceswinbox - do not show "Last Logged In" and "Expire Password" when creating new system userwinbox - fixed "Authority" property under "System/Certificates/Requests" menuwinbox - fixed duplicated "MVRP Attributes" tablewinbox - fixed false invalid flag under "System/Ports/Remote Access" menuwinbox - fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15)winbox - fixed signal bar "excellent" tooltipwinbox - fixed Switch menu for RB1100AHx4 devicewinbox - improved QR code displaywinbox - moved DHCPv6 Server "Allow Dual Stack Queue" property from General to Queues tabwinbox - moved Switch menu tabs to individual menuswinbox - properly display available address-pools for DHCPv6 server configurationwinbox - removed deprecated x86/CHR specific settings under "System/Resources" menuwinbox - removed spare argument for "PFS Group" property under "IP/IPsec/Proposals" menuwinbox - renamed configurable wifi property "Tx Power" to "Max Tx Power"winbox - separated different Watchdog settings into logical tabswinbox - use CAP serial number with "Set Identity" button under "WiFi/Remote CAP" menuwinbox - use correct default value for "Partition Offset" propertywinbox/webfig - fixed skins (introduced in v7.15)wireless - allow unsetting signal-range and ssid-regext properties for capsman access-listwireless - fixed dynamic VLAN assignments for vlan-filtering bridge in certain caseswireless - limit antenna-gain property to 100www - log out inactive REST API usersx86 - added missing PCI ids for bnx2x driverx86 - added RTL8156 driver supportx86 - fixed missing serial ports with MCS9900
Source:
Tweakers.net