Software-update: RouterOS 7.14
MikroTik heeft versie 7.14 van RouterOS uitgebracht. RouterOS is een besturingssysteem dat zich richt op het uitvoeren van routertaken. Denk daarbij natuurlijk aan het routeren van netwerkverkeer, maar ook aan bandbreedtemanagement, een firewall, het aansturen van draadloze accesspoints, een hotspotgateway en een vpn-server. Het kan zowel op de hardware van MikroTik als op x86- of virtuele machines zijn werk doen. Voor het gebruik is een licentie nodig, die bij de aankoop van MikroTik-hardware is inbegrepen. De changelog voor deze uitgave kan hieronder worden gevonden.
What's new in 7.14:rose-storage - moved SMB service to the RouterOS bundlesmb - removed legacy SMB service (replaced with newer and faster ROSE SMB service, compatible with SMB 2.1, SMB 3.0 and SMB 3.1.1)6to4 - make "ipsec-secret" sensitive parameterapi - improved REST API stability when processing invalid requestsapi - properly return SNMP OIDs when requestedarm - improved system stability when using microSD on RB1100Dx4arp - added ARP statusbgp - allow to leak routes between local VRFsbridge - added MLAG support for MSTP bridgesbridge - avoid per-VLAN host flushing on HW offloaded bridgebridge - fixed auto "path-cost" for bonding interfaces (introduced in v7.13)bridge - fixed MLAG connection after peer-link flap (introduced in v7.13)bridge - fixed packet forwarding after changing HW offloaded bridge interface settings in certain cases (introduced in v7.13)bridge - improved bridge VLAN configuration validationbridge - improved configuration speed on large VLAN setupsbridge - improved protocol-mode MSTP functionalitybridge - improved protocol-mode STP and RSTP functionalitybridge - make "point-to-point=yes" default value for non-wireless bridge portsbridge - removed "mst-config-digest" from MSTI menubridge - try to set wireless bridge ports as edge ports automaticallybth - added simple "Back To Home Users" manager under IP/Cloud menucalea - improved system stability when adding bridge rule without "calea" package installedcertificate - improved certificate validation performanceconsole - added ":tolf" and ":tocrlf" commands for converting line break to/from LF or CRLFconsole - added "show-at-cli-login" option to display a note before telnet loginconsole - added missing "where" clause for "/ipv6/firewall/filter" table print commandconsole - do not accept negative or too large values for ":delay" commandconsole - do not allow to use out-of-range values for time type fieldsconsole - fix configuration export when user does not have a "sniff" policyconsole - fixed delayed output from ":grep" command in certain casesconsole - fixed incorrect behavior of ":onerror" command in certain casesconsole - hint on reset command help that ".rsc file" is required for "run-after-reset" parameterconsole - improved editor functionality in full screen modeconsole - improved stability when using autocomplete with "export"console - increased maximum file content length that can be managed through command line to 60 KBconsole - updated copyright noticecontainer - improved VETH interface management responsiveness and reliabilitycontainer - restrict "/container/shell" menu for users without "write" permissionsdefconf - added log about configuration reset due to pressed reset buttondefconf - fixed Audience scanning-for-wps-ap timeoutdefconf - fixed configuration script on KNOT devices if "ppp-out" interface is removeddefconf - fixed firewall rule for IPv6 UDP traceroutedefconf - fixed wifi configuration if interface MAC address is changeddefconf - improved wifi interface detection after upgradedefconf - increased LTE interface wait timedefconf - updated health settings on configuration revertdefconf - use "fq_codel" queue as default interface queue for wired ports on LTE devicesdhcpv6-client - install dynamic IPv6 blackhole routes in corresponding routing-tabledhcpv6-client - updated error logging when multiple prefixes received on renewdisk - added exFAT and NTFS mount/read/write supportdisk - added global disk "settings" menudisk - fixed changing settings on some GPT formatted disksdisk - properly unmount disk when it is disconnecteddns - do not add new entries to cache if "cache-size" is reacheddns - fixed domain name lookup resolving for internal servicesethernet - fixed issue with default interface names for CRS310-8G+2S+ in rare casesethernet - improved cable-test reliability for hAP ax3 PoE out portethernet - resolved minor memory leak while processing packetsfetch - added "head" option for "http-method"fetch - added "patch" option for "http-method"fetch - allow specifying link-local address in FTP modefetch - allow to use certificate and check-certificate parameters only in HTTPS modefetch - do not require "content-length" for HTTP (introduced in v7.13)fetch - fixed DNS resolving when domain has only AAAA entries (introduced in v7.13)fetch - fixed fetch execution when unexpected data is received in HTTP payloadfetch - fixed fetch when using "src-path" with HTTP/HTTPS modes (introduced in v7.13)fetch - fixed fetch when using "src-path" with SFTP mode (introduced in v7.13)fetch - fixed incorrect "src-path" error message when "upload=yes"fetch - fixed IPv4 address logging (introduced in v7.13)fetch - improved fetch stability in SFTP modefetch - improved file download stability with HTTP/HTTPS modesfetch - less verbose loggingfetch - print all "Set-Cookies" headers in responsefetch - treat any 2xx HTTP return code as success (introduced in v7.13)filesystem - improved filesystem integrity for several RB3011 units with automatic firmware upgradefirewall - added "creation-time" parameter for IPv6 address list entriesfirewall - fixed underlying CAPsMAN tunnel reusing packet marks of encapsulated packetsfirewall - fixed underlying VXLAN/EoIP tunnel reusing packet marks of encapsulated packetsfirewall - increased default "udp-timeout" value from 10s to 30shealth - added limited manual control over fans for CCR1016r2, CCR1036r2 deviceshealth - changed default "fan-min-speed-percent" from 0% to 12%health - improved fan control on CRS3xx and CCR1016-12S-1S+r2health - show voltage when powering KNOT R through Micro-USBhealth - updated health properties for CCR1016r2, CCR1036r2 devicesiot - added bluetooth whitelist wildcard asterisk supportiot - added LoRa CUPs protocol supportiot - fixed modbus partial frame reception issueiot - improved LoRa LNSiot - improved modbus Tx/Rx switching behaviouriot - improvements to GPIO behavior on bootiot - improvements to LoRa CUPSiot - removed bluetooth whitelist maximum entry limit of 8ipv6 - made "valid" and "lifetime" parameters dynamic for SLAAC IPv6 addressesisis - show passive interface active levelsl3hw - fixed IPv6 host offloading in certain casesl3hw - fixed neighbor offloading after link flapl3hw - preserve offloading for VLANs when bridge ports are downleds - added "dark-mode" functionality for hAP ax3 and Chateau ax series devicesleds - do not show LTE connection state/mode using RGB power LED from configless LTE modemsleds - fixed "type=on" LED behaviour after rebootleds - fixed default LTE LED configuration for wAPR-2nDleds - fixed modem LED indication for SXT LTE 3-7leds - fixed wireless type of LED triggers for routers using WiFi packagelte - added "at-chat" support for Sierra Wireless EM9293 5G modemlte - added AT channel support for Quectel EM120K-GL modemlte - added redial timer when the MBIM modem fails to register or does not receive APN activation notificationlte - don't duplicate primary band in 5G SA mode for chateau 5Glte - fixed "use-peer-dns" setting for EC200A modemlte - fixed an issue for EC200A modem that IPv6 address could be added as IPv4 addresslte - fixed APN authentication for FG621-EA modemlte - fixed MBIM interface enabling for Quectel EC25 modem (introduced in v7.13)lte - fixed Simcom modem support in 0x9000; 0x9002, 0x9002; 0x901a and 0x901b USB compositionslte - fixed Simcom modem support in 0x9001 USB compositionlte - fixed support for config-less modem detection (introduced in v7.13)lte - fixed USB mode switch and initialization race condition for configless USB modemslte - improved FG621-EA modem firmware upgradelte - improved modem recovery after failed IPv4 configurationlte - improved support for "ACER" and "MSFT" branded EM12-G modemslte - optimized "at-chat" response readinglte - refactored AT command control for AT modemsmodem - fixed SMS removal (introduced in v7.13)modem - improved stability when performing modem FOTA upgradempls - fixed VPN fragmentation when forwarding IP trafficnetinstall-cli - check package and device architecture before formattingovpn - added support for pushing routesovpn - improved "push-routes" option handling when large amount of routes is specifiedovpn - improved key-renegotiation processovpn - improved OVPN configuration file import processovpn - improved system stability when using HW encryption on ARM64 devices (introduced in v7.13)ovpn - limit the maximum length for "push-routes" up to 1400 characterspackage - added "size" propertypackage - reduced "wireless" package size for ARM, ARM64, MIPSBE, MMIPS devicespackage - reduced package size for SMIPSpoe-out - driver optimization for AF/AT controlled boardspoe-out - fixed "power-cycle" for CRS354-48P-4S+2Q+ device (introduced in v7.13)poe-out - improved 802.3at classification and measurement accuracypoe-out - improved cable test for hAP ac3 and hAP ax3 devicespoe-out - improved PoE out reliability on routers with a single PoE out interfaceport - fixed support for USB/serial adapters (introduced in v7.13)port - removed bogus serial port on RB750Gr3, RB760iGS and RBM11G devicesppp - added support for "WISPr-Session-Terminate-Time" RADIUS attributeppp - log an error when IPv6 DHCP pool is exhaustedptp - added "aes67" and "smpte" profilesptp - added configurable "domain" and "priority2" parametersptp - added support for Management message forwarding in BCptp - fixed "default" and "g8275.1" profiles go into "slave" instead of "uncalibrated" stateptp - fixed default values for "802.1as" profileptp - fixed flags in Announce messageptp - fixed potential error in packet exchangeptp - make clock go into grandmaster state if slave port goes downqos-hw - fixed "tx-queue7-packet" counterroute - fixed gateways of locally imported vpnv4 routesroute - improved route print "count-only" process speedroute - improved stability on route table lookuproute-filter - added option to set "isis-ext-metric"route-filter - fixed AS path matchers when input and output chains are usedrouterboard - added "reset-button" support for RBwAPR-2nD devicesfp - added support for modules requiring single byte I2C read transactionssfp - fixed corrupted Tx traffic at 10Gbps rate on CCR2004-16G-2S+ in rare casessfp - fixed corrupted Tx traffic at 10Gbps rate on RB4011 in rare casessfp - improve high-power SFP module initializationsfp - improved combo-sfp handling for CRS328-4C-20S-4S+sfp - improved link establishment for RB4011 devicessmb - added option to specify SMB service mode as "auto"sms - fixed SMS inbox for FG621-EA modem (introduced in v7.13)sms - fixed SMS sending from WinBox and WebFig (introduced in v7.13)sms - improved system stability when working with SMSsms - increased SMS read timeoutsnmp - added "bgpLocalAs" and "bgpIdentifier" OID reportingsnmp - fixed "bgpPeerFsmEstablishedTime" OID reportingsnmp - hide "MikroTik" in LLDP MIB when branding with hide SNMP option is usedsnmp - updated timeout logssh - improved SSH performance on ARM, MIPS, MMIPS, SMIPS and TILE devicesssh - refactored SSH service internal processessstp - added support for "aes256-gcm-sha384" encryptionsstp - improved system stability for PPC devicessupout - added PTP sectionswitch - fixed Ethernet disable/enable for CRS310-8G+2S+ devicesswitch - fixed reserved multicast receive on Atheros-8327, QCA8337 switches for R/STP bridgeswitch - improved 100G interface stability for 98DX4310 and 98DX8525 switchesswitch - minimise potential packet overflows on CRS354system - changed build time format according to ISO standardsystem - expose "lo" and "vrf" interfacessystem - fixed "cpu-frequency" for CRS3xx ARM devicessystem - improved memory allocation for ARM64 devicessystem - improved RAM allocation for L009UiGS-RMsystem - improved system stability when processing packets in FastPath (introduced in v7.13)system - properly assign destination port for HTTP/S connections initiated by the router (introduced in v7.13)system - properly close HTTP/S connections initiated by the routersystem - provide more precise "total-memory" value for ARM devicessystem - provide more precise "total-memory" value under "System/Resources" menu for L009 and hAP ax lite routerstftp - improved invalid request processingtimezone - updated timezone information from "tzdata2023d" releasetr069 - don't duplicate cellular info in "X_MIKROTIK_5G" nodes when connected in NR SA modetr069 - fixed bandwidth testtr069-client - show 5G signal info in X_MIKROTIK_5G nodes only for 5G NSA bandstraffic-flow - use 64bit counters for v9 and IPFIX flowstraffic-generator - improved system stability when receiving bogus trafficusb - show "Supermicro CDC" adapter as Ethernet interfacevlan - fixed non-running VLAN interface after failed MTU changevrf - prevent VRF interface name collision with interface listsvxlan - fixed underlying tunnel reusing routing marks of encapsulated packetswebfig - fixed routing table filter under "IP/Routes" menuwebfig - fixed setting the user's passwordwebfig - fixed showing WireGuard peerswebfig - improved stability when adding new entries under "IP/Routes" menuwifi - added "station-pseudobridge" interface modewifi - fixed issue with setting country profile (introduced in v7.13.1)wifi - improved handling of CAP connections in dual CAPsMAN scenariowifi - increased value for SAE retransmit period to 3s to improve WPA3 compatibility with IoT client deviceswifi - use "Latvia" as the default value for "country" propertywifi - use correct CAP identity for interface name provisioning after it has been changed by remote-cap/set-identitywifi-qcom - enable display of regulatory information on L11,L22 deviceswifi-qcom - fixed new connections, when maximum supported number of MAC addresses behind connected station-bridges is reachedwifi-qcom - improve system stability for L11, L22 deviceswifi-qcom - improved memory allocating processwifi-qcom - improved regulatory compliance for L11, L22 deviceswifi-qcom - improved system stability when using FastPath (introduced in v7.13)winbox - added "accept-protocol-version" parameter to the L2TP server settingswinbox - added "mode-button" and "switch" menus for L41G-2axD&FG621-EAwinbox - added "Name" parameter under "Tools/Netwatch" menuwinbox - added "page-refresh" setting to the Graphing settingswinbox - added "Port Cost Mode" setting under "Bridge" menuwinbox - added "VRF" parameter under "Tools/Ping" menuwinbox - added "x25519" argument for "DH Group" parameter under "IP/IPsec/Profiles" menuwinbox - added missing "Protocol" arguments under "IPv6/Firewall" menuwinbox - added missing monitoring properties under "WireGuard/Peers" menuwinbox - added Preboot Etherboot settings to the System/RouterBOARD/Settings menuwinbox - do not show USB settings for CRS devices that does not need itwinbox - fixed "Bridge Cost" range under "Interfaces/VPLS" menuwinbox - fixed "Password" button under "Quick Set" menuwinbox - improved connection speed and reliabilitywinbox - improved route table automatic refresh process for static routeswinbox - improved status values under "System/PTP" menuwinbox - improved system stability with large packetswinbox - include "te-tunnel" parameter in VPLS interface monitorwinbox - properly validate "passthrough-subnet-size" in the LTE APN settingswinbox - remove "Root Bridge ID" property under "Bridge/MSTIs" menuwinbox - removed "sfp all" option from combo port settingswinbox - renamed "Wireless Table" menu to "Wifi"winbox - show "routing-table" column under IP/Route menu by defaultwinbox - show all columns under "Routing/PIM SM/Static RP" menu by defaultwireguard - do not allow to use multiple WireGuard interfaces on the same "listen-port"wireguard - optimised and improved WireGuard service loggingx86 - fixed VLAN tagged packet transmit for igb (introduced in v7.12)
rose-storage - moved SMB service to the RouterOS bundlesmb - removed legacy SMB service (replaced with newer and faster ROSE SMB service, compatible with SMB 2.1, SMB 3.0 and SMB 3.1.1)6to4 - make "ipsec-secret" sensitive parameterapi - improved REST API stability when processing invalid requestsapi - properly return SNMP OIDs when requestedarm - improved system stability when using microSD on RB1100Dx4arp - added ARP statusbgp - allow to leak routes between local VRFsbridge - added MLAG support for MSTP bridgesbridge - avoid per-VLAN host flushing on HW offloaded bridgebridge - fixed auto "path-cost" for bonding interfaces (introduced in v7.13)bridge - fixed MLAG connection after peer-link flap (introduced in v7.13)bridge - fixed packet forwarding after changing HW offloaded bridge interface settings in certain cases (introduced in v7.13)bridge - improved bridge VLAN configuration validationbridge - improved configuration speed on large VLAN setupsbridge - improved protocol-mode MSTP functionalitybridge - improved protocol-mode STP and RSTP functionalitybridge - make "point-to-point=yes" default value for non-wireless bridge portsbridge - removed "mst-config-digest" from MSTI menubridge - try to set wireless bridge ports as edge ports automaticallybth - added simple "Back To Home Users" manager under IP/Cloud menucalea - improved system stability when adding bridge rule without "calea" package installedcertificate - improved certificate validation performanceconsole - added ":tolf" and ":tocrlf" commands for converting line break to/from LF or CRLFconsole - added "show-at-cli-login" option to display a note before telnet loginconsole - added missing "where" clause for "/ipv6/firewall/filter" table print commandconsole - do not accept negative or too large values for ":delay" commandconsole - do not allow to use out-of-range values for time type fieldsconsole - fix configuration export when user does not have a "sniff" policyconsole - fixed delayed output from ":grep" command in certain casesconsole - fixed incorrect behavior of ":onerror" command in certain casesconsole - hint on reset command help that ".rsc file" is required for "run-after-reset" parameterconsole - improved editor functionality in full screen modeconsole - improved stability when using autocomplete with "export"console - increased maximum file content length that can be managed through command line to 60 KBconsole - updated copyright noticecontainer - improved VETH interface management responsiveness and reliabilitycontainer - restrict "/container/shell" menu for users without "write" permissionsdefconf - added log about configuration reset due to pressed reset buttondefconf - fixed Audience scanning-for-wps-ap timeoutdefconf - fixed configuration script on KNOT devices if "ppp-out" interface is removeddefconf - fixed firewall rule for IPv6 UDP traceroutedefconf - fixed wifi configuration if interface MAC address is changeddefconf - improved wifi interface detection after upgradedefconf - increased LTE interface wait timedefconf - updated health settings on configuration revertdefconf - use "fq_codel" queue as default interface queue for wired ports on LTE devicesdhcpv6-client - install dynamic IPv6 blackhole routes in corresponding routing-tabledhcpv6-client - updated error logging when multiple prefixes received on renewdisk - added exFAT and NTFS mount/read/write supportdisk - added global disk "settings" menudisk - fixed changing settings on some GPT formatted disksdisk - properly unmount disk when it is disconnecteddns - do not add new entries to cache if "cache-size" is reacheddns - fixed domain name lookup resolving for internal servicesethernet - fixed issue with default interface names for CRS310-8G+2S+ in rare casesethernet - improved cable-test reliability for hAP ax3 PoE out portethernet - resolved minor memory leak while processing packetsfetch - added "head" option for "http-method"fetch - added "patch" option for "http-method"fetch - allow specifying link-local address in FTP modefetch - allow to use certificate and check-certificate parameters only in HTTPS modefetch - do not require "content-length" for HTTP (introduced in v7.13)fetch - fixed DNS resolving when domain has only AAAA entries (introduced in v7.13)fetch - fixed fetch execution when unexpected data is received in HTTP payloadfetch - fixed fetch when using "src-path" with HTTP/HTTPS modes (introduced in v7.13)fetch - fixed fetch when using "src-path" with SFTP mode (introduced in v7.13)fetch - fixed incorrect "src-path" error message when "upload=yes"fetch - fixed IPv4 address logging (introduced in v7.13)fetch - improved fetch stability in SFTP modefetch - improved file download stability with HTTP/HTTPS modesfetch - less verbose loggingfetch - print all "Set-Cookies" headers in responsefetch - treat any 2xx HTTP return code as success (introduced in v7.13)filesystem - improved filesystem integrity for several RB3011 units with automatic firmware upgradefirewall - added "creation-time" parameter for IPv6 address list entriesfirewall - fixed underlying CAPsMAN tunnel reusing packet marks of encapsulated packetsfirewall - fixed underlying VXLAN/EoIP tunnel reusing packet marks of encapsulated packetsfirewall - increased default "udp-timeout" value from 10s to 30shealth - added limited manual control over fans for CCR1016r2, CCR1036r2 deviceshealth - changed default "fan-min-speed-percent" from 0% to 12%health - improved fan control on CRS3xx and CCR1016-12S-1S+r2health - show voltage when powering KNOT R through Micro-USBhealth - updated health properties for CCR1016r2, CCR1036r2 devicesiot - added bluetooth whitelist wildcard asterisk supportiot - added LoRa CUPs protocol supportiot - fixed modbus partial frame reception issueiot - improved LoRa LNSiot - improved modbus Tx/Rx switching behaviouriot - improvements to GPIO behavior on bootiot - improvements to LoRa CUPSiot - removed bluetooth whitelist maximum entry limit of 8ipv6 - made "valid" and "lifetime" parameters dynamic for SLAAC IPv6 addressesisis - show passive interface active levelsl3hw - fixed IPv6 host offloading in certain casesl3hw - fixed neighbor offloading after link flapl3hw - preserve offloading for VLANs when bridge ports are downleds - added "dark-mode" functionality for hAP ax3 and Chateau ax series devicesleds - do not show LTE connection state/mode using RGB power LED from configless LTE modemsleds - fixed "type=on" LED behaviour after rebootleds - fixed default LTE LED configuration for wAPR-2nDleds - fixed modem LED indication for SXT LTE 3-7leds - fixed wireless type of LED triggers for routers using WiFi packagelte - added "at-chat" support for Sierra Wireless EM9293 5G modemlte - added AT channel support for Quectel EM120K-GL modemlte - added redial timer when the MBIM modem fails to register or does not receive APN activation notificationlte - don't duplicate primary band in 5G SA mode for chateau 5Glte - fixed "use-peer-dns" setting for EC200A modemlte - fixed an issue for EC200A modem that IPv6 address could be added as IPv4 addresslte - fixed APN authentication for FG621-EA modemlte - fixed MBIM interface enabling for Quectel EC25 modem (introduced in v7.13)lte - fixed Simcom modem support in 0x9000; 0x9002, 0x9002; 0x901a and 0x901b USB compositionslte - fixed Simcom modem support in 0x9001 USB compositionlte - fixed support for config-less modem detection (introduced in v7.13)lte - fixed USB mode switch and initialization race condition for configless USB modemslte - improved FG621-EA modem firmware upgradelte - improved modem recovery after failed IPv4 configurationlte - improved support for "ACER" and "MSFT" branded EM12-G modemslte - optimized "at-chat" response readinglte - refactored AT command control for AT modemsmodem - fixed SMS removal (introduced in v7.13)modem - improved stability when performing modem FOTA upgradempls - fixed VPN fragmentation when forwarding IP trafficnetinstall-cli - check package and device architecture before formattingovpn - added support for pushing routesovpn - improved "push-routes" option handling when large amount of routes is specifiedovpn - improved key-renegotiation processovpn - improved OVPN configuration file import processovpn - improved system stability when using HW encryption on ARM64 devices (introduced in v7.13)ovpn - limit the maximum length for "push-routes" up to 1400 characterspackage - added "size" propertypackage - reduced "wireless" package size for ARM, ARM64, MIPSBE, MMIPS devicespackage - reduced package size for SMIPSpoe-out - driver optimization for AF/AT controlled boardspoe-out - fixed "power-cycle" for CRS354-48P-4S+2Q+ device (introduced in v7.13)poe-out - improved 802.3at classification and measurement accuracypoe-out - improved cable test for hAP ac3 and hAP ax3 devicespoe-out - improved PoE out reliability on routers with a single PoE out interfaceport - fixed support for USB/serial adapters (introduced in v7.13)port - removed bogus serial port on RB750Gr3, RB760iGS and RBM11G devicesppp - added support for "WISPr-Session-Terminate-Time" RADIUS attributeppp - log an error when IPv6 DHCP pool is exhaustedptp - added "aes67" and "smpte" profilesptp - added configurable "domain" and "priority2" parametersptp - added support for Management message forwarding in BCptp - fixed "default" and "g8275.1" profiles go into "slave" instead of "uncalibrated" stateptp - fixed default values for "802.1as" profileptp - fixed flags in Announce messageptp - fixed potential error in packet exchangeptp - make clock go into grandmaster state if slave port goes downqos-hw - fixed "tx-queue7-packet" counterroute - fixed gateways of locally imported vpnv4 routesroute - improved route print "count-only" process speedroute - improved stability on route table lookuproute-filter - added option to set "isis-ext-metric"route-filter - fixed AS path matchers when input and output chains are usedrouterboard - added "reset-button" support for RBwAPR-2nD devicesfp - added support for modules requiring single byte I2C read transactionssfp - fixed corrupted Tx traffic at 10Gbps rate on CCR2004-16G-2S+ in rare casessfp - fixed corrupted Tx traffic at 10Gbps rate on RB4011 in rare casessfp - improve high-power SFP module initializationsfp - improved combo-sfp handling for CRS328-4C-20S-4S+sfp - improved link establishment for RB4011 devicessmb - added option to specify SMB service mode as "auto"sms - fixed SMS inbox for FG621-EA modem (introduced in v7.13)sms - fixed SMS sending from WinBox and WebFig (introduced in v7.13)sms - improved system stability when working with SMSsms - increased SMS read timeoutsnmp - added "bgpLocalAs" and "bgpIdentifier" OID reportingsnmp - fixed "bgpPeerFsmEstablishedTime" OID reportingsnmp - hide "MikroTik" in LLDP MIB when branding with hide SNMP option is usedsnmp - updated timeout logssh - improved SSH performance on ARM, MIPS, MMIPS, SMIPS and TILE devicesssh - refactored SSH service internal processessstp - added support for "aes256-gcm-sha384" encryptionsstp - improved system stability for PPC devicessupout - added PTP sectionswitch - fixed Ethernet disable/enable for CRS310-8G+2S+ devicesswitch - fixed reserved multicast receive on Atheros-8327, QCA8337 switches for R/STP bridgeswitch - improved 100G interface stability for 98DX4310 and 98DX8525 switchesswitch - minimise potential packet overflows on CRS354system - changed build time format according to ISO standardsystem - expose "lo" and "vrf" interfacessystem - fixed "cpu-frequency" for CRS3xx ARM devicessystem - improved memory allocation for ARM64 devicessystem - improved RAM allocation for L009UiGS-RMsystem - improved system stability when processing packets in FastPath (introduced in v7.13)system - properly assign destination port for HTTP/S connections initiated by the router (introduced in v7.13)system - properly close HTTP/S connections initiated by the routersystem - provide more precise "total-memory" value for ARM devicessystem - provide more precise "total-memory" value under "System/Resources" menu for L009 and hAP ax lite routerstftp - improved invalid request processingtimezone - updated timezone information from "tzdata2023d" releasetr069 - don't duplicate cellular info in "X_MIKROTIK_5G" nodes when connected in NR SA modetr069 - fixed bandwidth testtr069-client - show 5G signal info in X_MIKROTIK_5G nodes only for 5G NSA bandstraffic-flow - use 64bit counters for v9 and IPFIX flowstraffic-generator - improved system stability when receiving bogus trafficusb - show "Supermicro CDC" adapter as Ethernet interfacevlan - fixed non-running VLAN interface after failed MTU changevrf - prevent VRF interface name collision with interface listsvxlan - fixed underlying tunnel reusing routing marks of encapsulated packetswebfig - fixed routing table filter under "IP/Routes" menuwebfig - fixed setting the user's passwordwebfig - fixed showing WireGuard peerswebfig - improved stability when adding new entries under "IP/Routes" menuwifi - added "station-pseudobridge" interface modewifi - fixed issue with setting country profile (introduced in v7.13.1)wifi - improved handling of CAP connections in dual CAPsMAN scenariowifi - increased value for SAE retransmit period to 3s to improve WPA3 compatibility with IoT client deviceswifi - use "Latvia" as the default value for "country" propertywifi - use correct CAP identity for interface name provisioning after it has been changed by remote-cap/set-identitywifi-qcom - enable display of regulatory information on L11,L22 deviceswifi-qcom - fixed new connections, when maximum supported number of MAC addresses behind connected station-bridges is reachedwifi-qcom - improve system stability for L11, L22 deviceswifi-qcom - improved memory allocating processwifi-qcom - improved regulatory compliance for L11, L22 deviceswifi-qcom - improved system stability when using FastPath (introduced in v7.13)winbox - added "accept-protocol-version" parameter to the L2TP server settingswinbox - added "mode-button" and "switch" menus for L41G-2axD&FG621-EAwinbox - added "Name" parameter under "Tools/Netwatch" menuwinbox - added "page-refresh" setting to the Graphing settingswinbox - added "Port Cost Mode" setting under "Bridge" menuwinbox - added "VRF" parameter under "Tools/Ping" menuwinbox - added "x25519" argument for "DH Group" parameter under "IP/IPsec/Profiles" menuwinbox - added missing "Protocol" arguments under "IPv6/Firewall" menuwinbox - added missing monitoring properties under "WireGuard/Peers" menuwinbox - added Preboot Etherboot settings to the System/RouterBOARD/Settings menuwinbox - do not show USB settings for CRS devices that does not need itwinbox - fixed "Bridge Cost" range under "Interfaces/VPLS" menuwinbox - fixed "Password" button under "Quick Set" menuwinbox - improved connection speed and reliabilitywinbox - improved route table automatic refresh process for static routeswinbox - improved status values under "System/PTP" menuwinbox - improved system stability with large packetswinbox - include "te-tunnel" parameter in VPLS interface monitorwinbox - properly validate "passthrough-subnet-size" in the LTE APN settingswinbox - remove "Root Bridge ID" property under "Bridge/MSTIs" menuwinbox - removed "sfp all" option from combo port settingswinbox - renamed "Wireless Table" menu to "Wifi"winbox - show "routing-table" column under IP/Route menu by defaultwinbox - show all columns under "Routing/PIM SM/Static RP" menu by defaultwireguard - do not allow to use multiple WireGuard interfaces on the same "listen-port"wireguard - optimised and improved WireGuard service loggingx86 - fixed VLAN tagged packet transmit for igb (introduced in v7.12)
Source:
Tweakers.net