Software-update: RouterOS 7.19
MikroTik heeft versie 7.19 van RouterOS uitgebracht, een besturingssysteem dat zich richt op het uitvoeren van routertaken en meer. Denk daarbij natuurlijk aan het routeren van netwerkverkeer, maar ook aan bandbreedtemanagement, een firewall, het aansturen van draadlozeaccesspoints, een hotspotgateway en een vpn-server. Het kan zowel op de hardware van MikroTik als op x86- of virtuele machines zijn werk doen. Voor het gebruik is een licentie nodig, die bij de aankoop van MikroTik-hardware is inbegrepen. De changelog voor deze uitgave kan hieronder worden gevonden.
arm64 - fixed possible transmit queue timeout on CCR2216, CCR2116, RDS2216arp - added warning, when "Published" ARP entry used on an interface with "reply-only" ARP mode enabledbgp - added input.filter-communitybgp - fixed excessive CPU usagebgp - fixed input.accept-communitybgp - fixed memory leak on receiving notify and closing sessionbgp - improved performance on BGP inputbonding - added setting for LACP active/passive modesbridge - added new STP monitoring fields for bridge and ports (Tx/Rx BPDU, Tx/Rx TC, forward/discard transitions, last topology change, message-age, max-age, remaining-hops, bridge-id)bridge - fixed bridge port hang when using invalid port IDsbridge - fixed dhcp-snooping in QinQ setupsbridge - fixed issue when local MACs were removed unnecessarilybridge - fixed minor memory leak on link downbridge - fixed multicast packet flow on hardware offloaded bridge which acts as "multicast-router"bridge - improved default bridge and port layout on console and GUIbridge - improved stability in case of configuration error (introduced in v7.15)bridge - moved "TCHANGE" logs from bridge,stp to bridge,stp,debugbridge - offload VXLAN only if another HW offloaded port exists in the bridgebridge - properly flush bridge hosts when bonding is used as bridge port and loses hw-offloading statusbridge - rename "ports" to "interface" under MDB table for configuration consistency with other menusbridge - renamed STP monitor fields (port-number to port-id, designated-port-number to designated-port-id, designated-bridge to designated-bridge-id)bridge - show designated-* monitor field for all port rolesbridge - show warning instead of causing error when using multicast MAC as admin-mac (introduced in v7.17)bth - properly specify "in-interface" when adding dynamic firewall NAT rulecapsman - fixed "undo" command for cap interfacescertificate - added built-in root certificate authorities storecertificate - do not include CA identity in SCEP POST requestscertificate - fixed cloud-dns challenge validation for sn.mynetname.net (CLI only)certificate - improve error message when trying to use certificatecertificate - optimize trust storecloud - fixed issues when BTH is toggled fast between enable/disablecloud - improved "BTH Files" web page designconntrack - improved stability on busy systemsconsole - added on-error to "for" and "foreach" loopsconsole - added proplist to monitor commandconsole - disallow incomplete double-quoted arguments (allows multiline string pasting)console - do not treat return values as errors in scripts run from schedulerconsole - enabled verbose error logging for non-scripted/non-verbose importsconsole - fixed issue with file-name completion (introduced in v7.18)console - fixed issue with files when using scripts (introduced in v7.18)console - fixed misaligned multiline in brief print modeconsole - improve time value handlingconsole - improved file add/remove process stabilityconsole - print large number argument values in proper format in export outputconsole - set "/system/note show-at-login=yes" the default value after configuration resetconsole - validate script arguments (do, on-error, etc.) and reject invalid valuescontainer - allow changing container namecontainer - fixed repository name handling to prevent redirect issues when basic authentication is usedcontainer - try to derive a user readable container name from remote image or filedefconf - added DHCP Client on RDS2216 MGMT interfacedefconf - increased PPP interface wait timedevice-mode - added new "rose" mode where "container" feature is enabled by defaultdhcpv4 - improved outgoing packet loggingdhcpv4-client/server - added support for DHCPv4 reconfigure messagesdhcpv4-server - "Relay-Agent-Information" (82) option moved at the end of option list in response packetsdhcpv4-server - accept packets with htype 6dhcpv4/v6-client - added check-gateway parameterdhcpv4/v6-client - fixed default route when DHCP client interface is in VRFdhcpv6-client - allow selecting to which routing tables add default routedhcpv6-relay - clear saved routes on DHCP releasedhcpv6-relay - show client addressdhcpv6-server - allow unsetting prefix-pool for static bindings and show warning if prefix is not in selected prefix-pooldhcpv6-server - change bound status to waiting on binding disabledhcpv6-server - change static binding bound status to waiting on server disabledhcpv6-server - fix when expired static binding is declined with false "binding belongs to another server" reasondhcpv6-server - improved stability when disabled server have static bindingsdhcpv6-server - improved stability when disabling server with active bindingsdisk - add "sector-size" property in print detaildisk - add reset-counters to /disk btrfs filesystemdisk - renamed "eject-drive" command to "eject" (CLI only)disk - renamed "format-drive" command to "format" (CLI only)dlna - improved folder indexing behaviordns - improved DNS server service stabilitydot1x - fixed dynamic switch ACL rules on boards with a lot of ports (e.g. CRS520)ethernet - improved Ethernet and PoE port mapping to ensure a consistent and reliable interface orderfetch - fixed false successful messages in FTP modefile - added show-hidden parameter to /file/print, allowing referencing and deleting hidden filesfile - fixed missing files from The Dude (introduced in v7.18)file - improved responsiveness on slow filesystemsfirewall - always show "passthrough" when exporting mangle tablefirewall - detect VRF addresses as localfirewall - fixed IP/Settings "ipv4-fasttrack-active" status showing as inactive when it is activehealth - hide settings in CLI if there is nothing to showhealth - improved performance on devices with simple voltage sensorshotspot - improvements to memory usageigmp-proxy - do not try to send leave message for multicast groups that the device itself has joined on the upstream interface (cosmetic fix for proxy error logs)ike2 - improved initial key exchange process on slow or unreliable connectionsiot - improvement to LoRa dev-addr-validation behavioriot - improvement to LoRa join eui/net id filtering behavioriot - improvement to LoRa stability and functionalityiot - improvement to LoRa whitelist/blacklist supportiot - iot-bt-extra package stability improvementip-service - show all TCP/UDP connections on the systemip-service - show all TCP/UDP ports on system, including ports in containersip-service - show error message when service enable failsippool6 - properly free IPv6 pool used prefix when it is not used any moreipsec - fixed system failure on MMIPS devices when using IPsec servicesipsec - lower standalone cipher, hash priority when using ctr aeadipv6 - avoid watchdog reboot due to link-local IPv6 address reconfiguration on thousand of interfaces at onceipv6 - fixed EUI-64 false error message on address update when "from-pool" option is usedisis - properly validate 3-way hello handshakel2tp-ether - improved stability when trying to connect to disabled L2TP server with IPsecl3hw - remove VLAN tag before VXLAN encapsulation (fixes pvid behavior for bridged VXLAN)log - added additional CEF fields from firewall and login logslog - fixed remote logging after reboot when hostname is forwarded to a DNS serverlog - populate in/out fields in firewall CEF logs with correct datalte - added UICC parameter in LTE monitor for R11e-4G modemlte - additional fixes for eSIM management supportlte - AT modems, improved redialing when modem lost connectivity without notifying host about APN status changelte - automatically enable roaming for known roaming only SIM/eSIM profileslte - Chateau 5G R16 fix DHCP relay packet forwarding using LTE interfacelte - deactivate current eSIM profile before activating new profilelte - fixed default APN for configless modemslte - fixed EC200A-EU APN authenticationlte - fixed initialization for Neoway N75 modemlte - fixed initialization for R11e-LTE6 modemlte - fixed LTE passthrough activation issue when IPv6 APN is usedlte - fixed LTE status update or possible crash when modem is unexpectedly removed from systemlte - fixed MBIM modem recovery after modem unexpected restartlte - fixed modem recovery after firmware upgrade for R11e-LTE modemlte - fixed possible crash or missing IPv6 address on first APN activation when IPv6 capable APN is usedlte - fixed Router Advertisement processing issue for AT modems when an APN with "ip-type=ipv6" was configuredlte - improved dialer for EC200A-EU modemlte - improved R11e-LTE6 link recovery delay time after unexpected modem registration status changeslte - initial support for user settable modem redial timerlte - initialize Quectel modems as soon as they are ready after unexpected restartlte - reset internal link-recovery-timer on sim slot changelte - set apn profile name the same as apn if no name specified when creating the profilelte - show correct value for 5G SA "current-cellid"net - remove support for automatic multicast tunneling (AMT) interface (introduced in v7.18)netinstall - improved network socket re-opening when NIC status changes while running the servernetinstall - provide warning if memory on installed router is full after installationnetinstall - show warning when network configuration on PC might not be appropriate for installationnetinstall-cli - check for other running Netinstall servers on startupnetinstall-cli - clear old configuration before user script using "-s"netinstall-cli - fixed issue with applying the branding packageospf - fixed "mismatch" typo in logsospf - make auth-key parameter sensitiveovpn - properly match GCM hardware acceleration capabilities (introduced in v7.17)ovpn-server - do not reset active connections when changing comment or nameovpn-server - fixed server start-up after a rebootovpn-server - properly show "username" in log when authentication failspimsm - fixed issue where own query caused querier detectionpoe-out - upgraded firmware for 802.3at/bt PSE controlled boards (the update will cause brief power interruption to PoE-out interfaces)port - added support for Huawei E3372-325 variant (vendor-id="0x3566" device-id="0x2001")port - added USB mode switch support for "huawei-alt-mode"port - fixed KNOT BG77 modem port lost after RouterOS upgrade from previous versionsport - improvements to KNOT BG77 modem port channel handlingppc - fixed VLAN TCP packet transmit on PPC devicesprofiler - improved process classificationptp - added "ptp" logging topicptp - allow multiple instancesptp - fixed PTP on 2.5G linksptp - fixed PTP on QSFP ports for CRS326, CRS510, CRS520, CCR2216 devicesqueue - fixed system failure when CAKE kind queue was configured but queue type definition does not exist anymore (introduced in v7.18)queue - speed-up queue addition/removal processquickset - improved system stabilityrose-storage - added Btrfs disk balance command (CLI only)rose-storage - added degraded Btrfs mount option (CLI only)rose-storage - fixed mounting Btrfs subvolumes using macOS SMB clientrose-storage - fixes for Btrfsrose-storage - improved system stability when removing NVMe disksrose-storage - rename default RAID device name from "raid" to "raid-array"rose-storage - show Btrfs balance and scrub errors if anyroute - added options to set dynamic-in and connected-in chains in /routing/settingsroute - fixed stuck output when calling prints from multiple routing menusroute - fixed route rule "min-prefix" unsetroute - improve stability on BGP reconnectroute - make AFI naming consistentroute - show "routing-table" by default on console print outputroute - show BGP session name instead of cache-idroute-filter - fixed the "blackhole" option setting processroute-filter - improved performancesfp - added sfp-encoding data output from EEPROMsfp - improved QSFP link stability for CRS354 devicessniffer - add max-packet-size (2k-64k) setting to be able to sniffer more than 2k data per packetsnmp - fixed v2 getnext noSuchName error when OID with requested key does not existssh - fixed authorization with SSH key when multiple user SSH public keys are importedssl/tls - respond with more precise alert error messagesssl/tls - send certificate authority in Certificate message even if it is not trustedswitch - do not count rx-too-long multiple times on 100Gbps QSFP28switch - fixed egress mirroring for packets coming from external CPU port (e.g. CRS520, CCR2216, CCR2116)switch - fixed switch name for hEX Refreshswitch - flush CPU port FDB entries on switch disableswitch - improve rate limit accuracy for MT7531, MT7621, EN7562CTswitch - improved boot stability on devices with Alpine CPU and switch chipswitch - improved stability when enabling IGMP snooping with VXLAN (introduced in v7.18)switch - properly match IPv6 packets with empty ACL rule on CRS3xx, CRS5xx, CCR2004, CCR2116, CCR2216, RDS devicessystem - fixed "/system reboot" when the system disk is completely fullsystem - improved internal "flash/" prefix handling for different file path related settingssystem - improved system stability when sending TCP data from the routersystem – added new "switch-marvell" and "wifi-mediatek" packages to support upcoming productstimezone - updated timezone information from "tzdata2025b" releasetorch - improved data reportingupgrade - improved free disk space calculationupgrade - improved upgrade procedure reliabilityvrrp - fixed detection of connection tracking after reboot (introduced in v7.17)vxlan -improved system stability when using IPv6 VTEPwebfig - allow table column resize over side toolbarwebfig - don't reorder rows when selecting header cells with Alt+clickwebfig - show IPv6 firewall connectionswebfig - show missing data in "IP/DNS/Cache" recordswifi - add channel.reselect-time parameter which allows to perform channel re-selection at given time of day (CLI only)wifi - add information on CAP uptime and connection uptime in "Remote CAP" listwifi - added "eap-identity" to registration tablewifi - added SSID to logswifi - display error when trying to run snooper on interface which does not support wireless packet capture (sniffer)wifi - fix authentication of clients which omit some RSN information at associationwifi - fix incorrect info about current channel for station interfaces after AP has switched channel (introduced in v7.17)wifi - fix possible snooper crash when parsing frames with malformed headerswifi - fixed 5GHz chain enumeration on Chateau PRO axwifi - implement WPA2 PSK authentication with key derivation using SHA256 (CLI only)wifi - improve parsing of captured frames which have nested flags in radiotap headerwifi - improved stability for wifi interfaceswifi - improved stability when doing SNMP querywifi - improved wifi connection stability when used as a station for "b" mode access pointwifi - re-word log entries about disconnections which are likely caused by peer using a wrong passphrasewifi - use at least TLS 1.2 for securing connection between CAPsMAN manager and CAPswifi-qcom - fix inability of interfaces in station mode to connect if they do not support full bandwidth of APwifi-qcom - fix OWE authentication for 802.11ac interfaces in station modewinbox - added "MAC Telnet" under "Wifi/Registration" menuwinbox - added "Multi Passphrase Group" for wifiwinbox - added "Reset MAC address" for legacy wireless and wifiwinbox - added comment fields for WiFi "Multi Passphrase Group" menuwinbox - added comment under "User Manager/Routers" menuwinbox - added country to wireless setup-repeaterwinbox - added missing "Switch" menu for RDSwinbox - added missing file systems for disk formattingwinbox - added missing parameters for BTRFS related action functionswinbox - added mount-point parameter under "Disk/Settings" menuwinbox - added netmask support for switch rule Src/Dst IPv6 Address settingswinbox - allow opening BTRFS menu entrieswinbox - changed default wireless wds-cost-range valueswinbox - do not show not relevant values for certificate templatewinbox - fixed "Multi Passphrase Group" setting for wifiwinbox - fixed "registry-url" field under "Containers" configuration menuwinbox - fixed missing SMB client on non-ROSE deviceswinbox - fixed several statistics counters not being read onlywinbox - fixed switch menu for Chateau 5Gwinbox - fixed time interval type fields precision under "Disks" menuwinbox - hide container File/Remote Image fields only when instance addedwinbox - improve graphing efficiency when communicating with WinBoxwinbox - make BTRFS "Parent" and "Send Parent" options optionalwinbox - properly show/hide OSPF, RIP and BGP tabs for IPv6 routeswinbox - renamed "raid-member" to "raid member" flag for consistencywinbox - show eSIM profiles under eSIM menu without manual refreshwireguard - add wg-import config-string parameter to import config directly from terminalwireguard - update peer info on "get" commandwireless - added "eap-identity" to registration tablewireless - implement handling of RADIUS disconnect messages by CAPsMANwireless - suggest all legitimate frequencies for interfaces with 20/40mhz-XX channel width in GUIx86 - added support for Emulex NICx86 - i40e updated driver to 2.27.8 versionx86 - remove unnecessary console output on shutdown
arm64 - fixed possible transmit queue timeout on CCR2216, CCR2116, RDS2216arp - added warning, when "Published" ARP entry used on an interface with "reply-only" ARP mode enabledbgp - added input.filter-communitybgp - fixed excessive CPU usagebgp - fixed input.accept-communitybgp - fixed memory leak on receiving notify and closing sessionbgp - improved performance on BGP inputbonding - added setting for LACP active/passive modesbridge - added new STP monitoring fields for bridge and ports (Tx/Rx BPDU, Tx/Rx TC, forward/discard transitions, last topology change, message-age, max-age, remaining-hops, bridge-id)bridge - fixed bridge port hang when using invalid port IDsbridge - fixed dhcp-snooping in QinQ setupsbridge - fixed issue when local MACs were removed unnecessarilybridge - fixed minor memory leak on link downbridge - fixed multicast packet flow on hardware offloaded bridge which acts as "multicast-router"bridge - improved default bridge and port layout on console and GUIbridge - improved stability in case of configuration error (introduced in v7.15)bridge - moved "TCHANGE" logs from bridge,stp to bridge,stp,debugbridge - offload VXLAN only if another HW offloaded port exists in the bridgebridge - properly flush bridge hosts when bonding is used as bridge port and loses hw-offloading statusbridge - rename "ports" to "interface" under MDB table for configuration consistency with other menusbridge - renamed STP monitor fields (port-number to port-id, designated-port-number to designated-port-id, designated-bridge to designated-bridge-id)bridge - show designated-* monitor field for all port rolesbridge - show warning instead of causing error when using multicast MAC as admin-mac (introduced in v7.17)bth - properly specify "in-interface" when adding dynamic firewall NAT rulecapsman - fixed "undo" command for cap interfacescertificate - added built-in root certificate authorities storecertificate - do not include CA identity in SCEP POST requestscertificate - fixed cloud-dns challenge validation for sn.mynetname.net (CLI only)certificate - improve error message when trying to use certificatecertificate - optimize trust storecloud - fixed issues when BTH is toggled fast between enable/disablecloud - improved "BTH Files" web page designconntrack - improved stability on busy systemsconsole - added on-error to "for" and "foreach" loopsconsole - added proplist to monitor commandconsole - disallow incomplete double-quoted arguments (allows multiline string pasting)console - do not treat return values as errors in scripts run from schedulerconsole - enabled verbose error logging for non-scripted/non-verbose importsconsole - fixed issue with file-name completion (introduced in v7.18)console - fixed issue with files when using scripts (introduced in v7.18)console - fixed misaligned multiline in brief print modeconsole - improve time value handlingconsole - improved file add/remove process stabilityconsole - print large number argument values in proper format in export outputconsole - set "/system/note show-at-login=yes" the default value after configuration resetconsole - validate script arguments (do, on-error, etc.) and reject invalid valuescontainer - allow changing container namecontainer - fixed repository name handling to prevent redirect issues when basic authentication is usedcontainer - try to derive a user readable container name from remote image or filedefconf - added DHCP Client on RDS2216 MGMT interfacedefconf - increased PPP interface wait timedevice-mode - added new "rose" mode where "container" feature is enabled by defaultdhcpv4 - improved outgoing packet loggingdhcpv4-client/server - added support for DHCPv4 reconfigure messagesdhcpv4-server - "Relay-Agent-Information" (82) option moved at the end of option list in response packetsdhcpv4-server - accept packets with htype 6dhcpv4/v6-client - added check-gateway parameterdhcpv4/v6-client - fixed default route when DHCP client interface is in VRFdhcpv6-client - allow selecting to which routing tables add default routedhcpv6-relay - clear saved routes on DHCP releasedhcpv6-relay - show client addressdhcpv6-server - allow unsetting prefix-pool for static bindings and show warning if prefix is not in selected prefix-pooldhcpv6-server - change bound status to waiting on binding disabledhcpv6-server - change static binding bound status to waiting on server disabledhcpv6-server - fix when expired static binding is declined with false "binding belongs to another server" reasondhcpv6-server - improved stability when disabled server have static bindingsdhcpv6-server - improved stability when disabling server with active bindingsdisk - add "sector-size" property in print detaildisk - add reset-counters to /disk btrfs filesystemdisk - renamed "eject-drive" command to "eject" (CLI only)disk - renamed "format-drive" command to "format" (CLI only)dlna - improved folder indexing behaviordns - improved DNS server service stabilitydot1x - fixed dynamic switch ACL rules on boards with a lot of ports (e.g. CRS520)ethernet - improved Ethernet and PoE port mapping to ensure a consistent and reliable interface orderfetch - fixed false successful messages in FTP modefile - added show-hidden parameter to /file/print, allowing referencing and deleting hidden filesfile - fixed missing files from The Dude (introduced in v7.18)file - improved responsiveness on slow filesystemsfirewall - always show "passthrough" when exporting mangle tablefirewall - detect VRF addresses as localfirewall - fixed IP/Settings "ipv4-fasttrack-active" status showing as inactive when it is activehealth - hide settings in CLI if there is nothing to showhealth - improved performance on devices with simple voltage sensorshotspot - improvements to memory usageigmp-proxy - do not try to send leave message for multicast groups that the device itself has joined on the upstream interface (cosmetic fix for proxy error logs)ike2 - improved initial key exchange process on slow or unreliable connectionsiot - improvement to LoRa dev-addr-validation behavioriot - improvement to LoRa join eui/net id filtering behavioriot - improvement to LoRa stability and functionalityiot - improvement to LoRa whitelist/blacklist supportiot - iot-bt-extra package stability improvementip-service - show all TCP/UDP connections on the systemip-service - show all TCP/UDP ports on system, including ports in containersip-service - show error message when service enable failsippool6 - properly free IPv6 pool used prefix when it is not used any moreipsec - fixed system failure on MMIPS devices when using IPsec servicesipsec - lower standalone cipher, hash priority when using ctr aeadipv6 - avoid watchdog reboot due to link-local IPv6 address reconfiguration on thousand of interfaces at onceipv6 - fixed EUI-64 false error message on address update when "from-pool" option is usedisis - properly validate 3-way hello handshakel2tp-ether - improved stability when trying to connect to disabled L2TP server with IPsecl3hw - remove VLAN tag before VXLAN encapsulation (fixes pvid behavior for bridged VXLAN)log - added additional CEF fields from firewall and login logslog - fixed remote logging after reboot when hostname is forwarded to a DNS serverlog - populate in/out fields in firewall CEF logs with correct datalte - added UICC parameter in LTE monitor for R11e-4G modemlte - additional fixes for eSIM management supportlte - AT modems, improved redialing when modem lost connectivity without notifying host about APN status changelte - automatically enable roaming for known roaming only SIM/eSIM profileslte - Chateau 5G R16 fix DHCP relay packet forwarding using LTE interfacelte - deactivate current eSIM profile before activating new profilelte - fixed default APN for configless modemslte - fixed EC200A-EU APN authenticationlte - fixed initialization for Neoway N75 modemlte - fixed initialization for R11e-LTE6 modemlte - fixed LTE passthrough activation issue when IPv6 APN is usedlte - fixed LTE status update or possible crash when modem is unexpectedly removed from systemlte - fixed MBIM modem recovery after modem unexpected restartlte - fixed modem recovery after firmware upgrade for R11e-LTE modemlte - fixed possible crash or missing IPv6 address on first APN activation when IPv6 capable APN is usedlte - fixed Router Advertisement processing issue for AT modems when an APN with "ip-type=ipv6" was configuredlte - improved dialer for EC200A-EU modemlte - improved R11e-LTE6 link recovery delay time after unexpected modem registration status changeslte - initial support for user settable modem redial timerlte - initialize Quectel modems as soon as they are ready after unexpected restartlte - reset internal link-recovery-timer on sim slot changelte - set apn profile name the same as apn if no name specified when creating the profilelte - show correct value for 5G SA "current-cellid"net - remove support for automatic multicast tunneling (AMT) interface (introduced in v7.18)netinstall - improved network socket re-opening when NIC status changes while running the servernetinstall - provide warning if memory on installed router is full after installationnetinstall - show warning when network configuration on PC might not be appropriate for installationnetinstall-cli - check for other running Netinstall servers on startupnetinstall-cli - clear old configuration before user script using "-s"netinstall-cli - fixed issue with applying the branding packageospf - fixed "mismatch" typo in logsospf - make auth-key parameter sensitiveovpn - properly match GCM hardware acceleration capabilities (introduced in v7.17)ovpn-server - do not reset active connections when changing comment or nameovpn-server - fixed server start-up after a rebootovpn-server - properly show "username" in log when authentication failspimsm - fixed issue where own query caused querier detectionpoe-out - upgraded firmware for 802.3at/bt PSE controlled boards (the update will cause brief power interruption to PoE-out interfaces)port - added support for Huawei E3372-325 variant (vendor-id="0x3566" device-id="0x2001")port - added USB mode switch support for "huawei-alt-mode"port - fixed KNOT BG77 modem port lost after RouterOS upgrade from previous versionsport - improvements to KNOT BG77 modem port channel handlingppc - fixed VLAN TCP packet transmit on PPC devicesprofiler - improved process classificationptp - added "ptp" logging topicptp - allow multiple instancesptp - fixed PTP on 2.5G linksptp - fixed PTP on QSFP ports for CRS326, CRS510, CRS520, CCR2216 devicesqueue - fixed system failure when CAKE kind queue was configured but queue type definition does not exist anymore (introduced in v7.18)queue - speed-up queue addition/removal processquickset - improved system stabilityrose-storage - added Btrfs disk balance command (CLI only)rose-storage - added degraded Btrfs mount option (CLI only)rose-storage - fixed mounting Btrfs subvolumes using macOS SMB clientrose-storage - fixes for Btrfsrose-storage - improved system stability when removing NVMe disksrose-storage - rename default RAID device name from "raid" to "raid-array"rose-storage - show Btrfs balance and scrub errors if anyroute - added options to set dynamic-in and connected-in chains in /routing/settingsroute - fixed stuck output when calling prints from multiple routing menusroute - fixed route rule "min-prefix" unsetroute - improve stability on BGP reconnectroute - make AFI naming consistentroute - show "routing-table" by default on console print outputroute - show BGP session name instead of cache-idroute-filter - fixed the "blackhole" option setting processroute-filter - improved performancesfp - added sfp-encoding data output from EEPROMsfp - improved QSFP link stability for CRS354 devicessniffer - add max-packet-size (2k-64k) setting to be able to sniffer more than 2k data per packetsnmp - fixed v2 getnext noSuchName error when OID with requested key does not existssh - fixed authorization with SSH key when multiple user SSH public keys are importedssl/tls - respond with more precise alert error messagesssl/tls - send certificate authority in Certificate message even if it is not trustedswitch - do not count rx-too-long multiple times on 100Gbps QSFP28switch - fixed egress mirroring for packets coming from external CPU port (e.g. CRS520, CCR2216, CCR2116)switch - fixed switch name for hEX Refreshswitch - flush CPU port FDB entries on switch disableswitch - improve rate limit accuracy for MT7531, MT7621, EN7562CTswitch - improved boot stability on devices with Alpine CPU and switch chipswitch - improved stability when enabling IGMP snooping with VXLAN (introduced in v7.18)switch - properly match IPv6 packets with empty ACL rule on CRS3xx, CRS5xx, CCR2004, CCR2116, CCR2216, RDS devicessystem - fixed "/system reboot" when the system disk is completely fullsystem - improved internal "flash/" prefix handling for different file path related settingssystem - improved system stability when sending TCP data from the routersystem – added new "switch-marvell" and "wifi-mediatek" packages to support upcoming productstimezone - updated timezone information from "tzdata2025b" releasetorch - improved data reportingupgrade - improved free disk space calculationupgrade - improved upgrade procedure reliabilityvrrp - fixed detection of connection tracking after reboot (introduced in v7.17)vxlan -improved system stability when using IPv6 VTEPwebfig - allow table column resize over side toolbarwebfig - don't reorder rows when selecting header cells with Alt+clickwebfig - show IPv6 firewall connectionswebfig - show missing data in "IP/DNS/Cache" recordswifi - add channel.reselect-time parameter which allows to perform channel re-selection at given time of day (CLI only)wifi - add information on CAP uptime and connection uptime in "Remote CAP" listwifi - added "eap-identity" to registration tablewifi - added SSID to logswifi - display error when trying to run snooper on interface which does not support wireless packet capture (sniffer)wifi - fix authentication of clients which omit some RSN information at associationwifi - fix incorrect info about current channel for station interfaces after AP has switched channel (introduced in v7.17)wifi - fix possible snooper crash when parsing frames with malformed headerswifi - fixed 5GHz chain enumeration on Chateau PRO axwifi - implement WPA2 PSK authentication with key derivation using SHA256 (CLI only)wifi - improve parsing of captured frames which have nested flags in radiotap headerwifi - improved stability for wifi interfaceswifi - improved stability when doing SNMP querywifi - improved wifi connection stability when used as a station for "b" mode access pointwifi - re-word log entries about disconnections which are likely caused by peer using a wrong passphrasewifi - use at least TLS 1.2 for securing connection between CAPsMAN manager and CAPswifi-qcom - fix inability of interfaces in station mode to connect if they do not support full bandwidth of APwifi-qcom - fix OWE authentication for 802.11ac interfaces in station modewinbox - added "MAC Telnet" under "Wifi/Registration" menuwinbox - added "Multi Passphrase Group" for wifiwinbox - added "Reset MAC address" for legacy wireless and wifiwinbox - added comment fields for WiFi "Multi Passphrase Group" menuwinbox - added comment under "User Manager/Routers" menuwinbox - added country to wireless setup-repeaterwinbox - added missing "Switch" menu for RDSwinbox - added missing file systems for disk formattingwinbox - added missing parameters for BTRFS related action functionswinbox - added mount-point parameter under "Disk/Settings" menuwinbox - added netmask support for switch rule Src/Dst IPv6 Address settingswinbox - allow opening BTRFS menu entrieswinbox - changed default wireless wds-cost-range valueswinbox - do not show not relevant values for certificate templatewinbox - fixed "Multi Passphrase Group" setting for wifiwinbox - fixed "registry-url" field under "Containers" configuration menuwinbox - fixed missing SMB client on non-ROSE deviceswinbox - fixed several statistics counters not being read onlywinbox - fixed switch menu for Chateau 5Gwinbox - fixed time interval type fields precision under "Disks" menuwinbox - hide container File/Remote Image fields only when instance addedwinbox - improve graphing efficiency when communicating with WinBoxwinbox - make BTRFS "Parent" and "Send Parent" options optionalwinbox - properly show/hide OSPF, RIP and BGP tabs for IPv6 routeswinbox - renamed "raid-member" to "raid member" flag for consistencywinbox - show eSIM profiles under eSIM menu without manual refreshwireguard - add wg-import config-string parameter to import config directly from terminalwireguard - update peer info on "get" commandwireless - added "eap-identity" to registration tablewireless - implement handling of RADIUS disconnect messages by CAPsMANwireless - suggest all legitimate frequencies for interfaces with 20/40mhz-XX channel width in GUIx86 - added support for Emulex NICx86 - i40e updated driver to 2.27.8 versionx86 - remove unnecessary console output on shutdown
Source:
Tweakers.net