Software-update: RouterOS 7.23
MikroTik heeft versie 7.23 van RouterOS uitgebracht, een besturingssysteem dat zich richt op het uitvoeren van routertaken en meer. Denk daarbij natuurlijk aan het routeren van netwerkverkeer, maar ook aan bandbreedtemanagement, een firewall, het aansturen van draadlozeaccesspoints, een hotspotgateway en een vpn-server. Het kan zowel op de hardware van MikroTik als op x86- of virtuele machines zijn werk doen. Voor het gebruik is een licentie nodig, die bij de aankoop van MikroTik-hardware is inbegrepen. De changelog voor deze uitgave kan hieronder worden gevonden.
What's new in 7.23:upgrade - use HTTPS by default when connecting to MikroTik upgrade serversapp - added "network-outgoing-access=yes/no" setting to prevent containers from initiating outbound trafficapp - added birdnet-go, cryptpad, diagrams-net, lorawan-stack, metube, mikrodash, nextcloud-whiteboard, paperless-ngx, wbo, zulip appsapp - added docker-with-dockge, docker-with-komodo, docker-with-portainer, HA-otbr-matter, odoo, otbr, stalwart, trip appsapp - added possibility to set app command-line parameter from CLIapp - added restart commandapp - allow apps on XFS file systemsapp - allow filtering by installed appsapp - allow overriding default stop signalapp - allow parsing DNS in YAMLapp - allow passing stop signal from YAML and passing it to container as defaultapp - allow picking app category from drop-downapp - allow updating name parameter from YAML for custom appsapp - allow updating YAML for existing custom app, forces cleanupapp - apps now check for port availability, apps will not start on "internal" if app masks existing serviceapp - automatically pass any required devices to container, such as otbrapp - automatically restart app when required hardware device is changedapp - bundled ollama with openwebuiapp - check if certificate already exists before creating a new oneapp - disabled PiHole syncing NTP to hostapp - fixed issue where XFS disks did not appear in the app disk drop-downapp - fixed saving custom appsapp - fixed showing ui-url for appsapp - fixed some apps not containing the full repository URLapp - fixed stability issue when running cleanup on many appsapp - fixed store issue when adding a custom appapp - fixed YAML not exported for custom appsapp - improved app network and port behaviorapp - improved automatic hardware device passing to containerapp - improved YAML error messageapp - make sure all layer .tar.gz files are deleted after extraction finishesapp - on file-based devices, swap is enabled on the file itself instead of creating another and enabling it on thatapp - stability fixes for the "/app" menuapp - swap file is now created based on the mount-point it is attached toapp - updated uptime-kuma imagearm64,x86 - updated Broadcom bnxt Ethernet driver for 200G supportbfd - fixed source address selection for IPv6 multihop sessionsbridge - added ability to set custom Option 82 with dhcp-agent-circuit-id, dhcp-agent-remote-id settings (replaces add-dhcp-option82 setting; configuration is automatically updated after upgrade)bridge - added DHCPv6 snooping feature with ability to set custom Option 18 and Option 37bridge - fixed dynamic VLAN update for WiFi interfacesbridge - improved MAC synchronization for MLAGbridge - recognize more DHCP message types when dhcp-snooping is enabledbth - fixed WireGuard client config IP address netmaskcertificate - added "ISRG Root X1" and "DigiCert Global Root G2" to SMIPS built-in root certificate authorities storecertificate - allow deleting ACME certificate that failed to generatecertificate - improved ACME loggingcertificate - improved ACME status reportingcertificate - set Let's Encrypt as default ACME directorychr - improved guest tool config for arm64 CHRcloud - cloud backup file management now requires "policy" policycloud - show error if cloud services are not supported on the deviceconsole - added comment in "/ip/dhcp-server/option/sets" and "/ipv6/dhcp-server/option/sets" menusconsole - added path parameter to exportconsole - added syntax highlight for script properties in some menus (e.g. dhcp-client, dhcp-server, ppp/profile, interface/vrrp)console - export mentions custom defconf script presence in headerconsole - fixed "/log/print follow on-event" to work with "where" (introduced in v7.22)console - fixed output when oversized completion presentconsole - removed redundant keepalive for the serial-terminal, ensure that the device no longer periodically outputs /0 while using "/system/serial-terminal"console - show "/system/resource/hardware/usb-power-reset" only on x86console - show warning in print header when terminal is too narrow to show any columnsconsole - treat non-existent command parameters as runtime errorscontainer - added restart-policy=no/always/on-failure, stop-on-unhealthy, restart-count, restart-interval, restart-max-count propertiescontainer - added support for noexec option to mountscontainer - added support for USB audio devices for containerscontainer - allow disabling individual container environment variables without deleting themcontainer - allow picking mount source directories with the file picker in WinBoxcontainer - allow setting memory-max globally and per containercontainer - allow user-defined mounts overriding /sys and /devcontainer - check if root-dir does not exist before adding a containercontainer - clean up layers of non-existing containerscontainer - detect and show containers killed by out-of-memory killercontainer - do not allow starting container/shell with non-existing user or groupcontainer - draw graphs in container statscontainer - fixed container entrypoint and shell override by usercontainer - fixed container layer size calculationcontainer - fixed container shell not working with multi-arg commandscontainer - fixed repull if root-dir of container was in tmpfscontainer - fixed running "/container shell" with the correct user, if container user is set or overriddencontainer - improved errors at container startcontainer - improved running container instance memory usagecontainer - layers are now accessible under "Layers" tabcontainer - pass any container startup error message back to "run" and make it exit immediatelycontainer - remove container backup directory if import failscontainer - removed "Layers" buttoncontainer - show container size and container data sizecontainer - show default DNS serverscontainer - show layer size calculation statuscontainer - updated /dev/net/tun permissionscrypto - fixed fallback flag loss in qcryptocrypto - fixed stability issuecrypto - improved safexcel driver with upstream changes and patchesdhcpv4-server - added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entriesdhcpv4-server - changed lease agent-circuit-id and agent-remote-id format to hexdhcpv4-server - do not raise an alert when receiving a packet originating from the same devicedhcpv4-server - do not suggest bogus pools when using setup command (e.g. when address is /31 or /32)dhcpv4-server - fixed an issue where renew packets without giaddr were sometimes not processeddiscovery - added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entriesdiscovery - added option to disable/enable LLDP MEDdiscovery - added separate read-only menu "/ip/neighbor/lldp" for neighbors discovered by LLDP (CLI only)discovery - dynamically update advertised "interface-name"discovery - fixed LLDP MAC/PHY TLVdisk - added "/disk" smart-infodisk - added disk check and repair for ext4, Btrfs and XFS file systemsdisk - improved device name tracking in "/system/resource/hardware" menudisk - show disk io errors in "/disk" menudns - added HTTP/2 support to DoH on ARM64 and x86/CHR devicesethernet - improved system stability for RB3011, L009, NetMetal ax, hAP ax lite devicesethernet - improved system stability on devices with Alpine CPUsfetch - fixed non-working idle-timeout in some casesfile - added copy, tail, head commands (CLI only)firewall - added "action=drop" to manglefirewall - improved stability for SIP helperfirewall - matcher "in-bridge-port" does not require "use-ip-firewall=yes"graphing - improved service stability when storing datahardware - report the correct state of PCI devices in "/system/resource/hardware" menuhealth - hide health menu for RB951ui-2nDike2 - fixed child SA cleanup during flush operationike2 - fixed pending responder connection cleanup after peer removalike2 - fixed SA delete handling on initiator during rekeyike2 - improved HMAC size validation checksinterface - show warning when same MAC address is used on more than one virtual interfaceiot - added LoRa Tx delay settingiot - added MQTT subscribe message real-time monitoring optioniot - added Wiliot supportiot - fixed LoRa LBT issues, which caused Tx packets not getting deliverediot - fixed LoRa lockpack preventing lock from applyingiot - improved LoRa stabilityiot - improved LoRa Tx handlingiot - improved LoRa Tx schedulingip - added IPv6 and VRF support for reverse-proxyip - added SNI logging for reverse-proxyip - fixed hanging connections for reverse-proxyip-settings - added ipv4-fragment-time and ipv4-high-fragment-thresh settings, use default values based on total device memoryipip - disabled IPv6 link-local address generationippool - fixed issue when changing pool with already used addressesippool6 - allow variable length poolippool6 - properly follow pool changes for already used prefixesipsec - added netlink-based SA and policy handlingipsec - fixed SA proto parameter conversion and policy "none" type handlingipsec - improved NAT encapsulation parameter forwardingipsec – fixed expired SA handling to prevent “no such item” errors during listingipv6 - added from-pool-policy address property that controls how address is acquired from the poolipv6 - added without-acquire address propertyipv6 - always ensure that prefix length matches the one given by the pool even if address was set to 0ipv6,ra - added option to ignore MTU and DNS serversipv6,ra - added router-advertisement-route-distance settingipv6,ra - allow receiving DNS servers over multiple interfacesipv6,ra - clamp valid-lifetime to minimum of 2h on deprecationipv6,ra - extend processed RA loggingipv6,ra - fixed advertised DNS parameter loggingipv6,ra - fixed changing default "all" interface configurationipv6,ra - fixed DNS and pref64 property unsetipv6,ra - fixed sending only DNS or MTU when prefix is set to "none"ipv6,ra - improved service stabilityipv6,ra - warn when interface is under the bridgeisis - allow to configure metric-typel3hw - added HW offloaded VRF support on CRS8xx switchesl3hw - added VRF assignment via switch ACL rules on CRS8xx switches (CLI only)l3hw - fixed VXLAN packet matching by local IPleds - added new PoE fault LED cases (bad fw, PoE card power cable disconnected, PoE card not inserted)leds - fixed power LED turning off while LTE interface is inactive (introduced in v7.22)log - added "discover" topic and log events for discovered local DNS entrieslog - added CC option for e-mail actionlog - added ssld error logginglog - added TLS supportlte - added fast SIM switchover support using AT channel for MBIM modems without MBIM_CID_MS_UICC_RESET firmware supportlte - configure IP address for AT modems even if no DNS is received from the networklte - delete CID profiles one by one instead of "delete all" for QMI modems, as command does not work for all modemslte - do not duplicate primary-band also in ca-band for QMI modems in 5G SA networklte - do not reconfigure modem in passthrough mode if passthrough cannot be activated because of slave interfacelte - emit RS every 60s on LTE interfacelte - filter packets by MAC in multi-apn setup for EC200A-EU modemlte - fixed automatic modeswitch for "Chateau 5G R16" and "Chateau 5G"lte - fixed broken network scan after being interrupted by reconfigurationlte - fixed operator setting for QMI modemslte - fixed rare cases where the Tx queue could stop and never wake up on multi-core CPU deviceslte - fixed RSSI signal monitor for 3rd party modems where AT+CSQ responses are not parsedlte - fixed user set MTU not applied to LTE interfacelte - improved system stability for devices with QMI modemslte - improved system stability when modem configured in passthrough mode with VLANs for "Chateau 5G R16" and "Chateau 5G"lte - improved system stabilitylte - improvements for passthrough mode in IPv6 only setuplte - keep MAC persistent across reboots for QMI modemslte - read subscriber number also for QMI modemslte - removed LTE external-antenna scanlte - set SMS send timeout to 180slte - show external-antenna as "none" before actual scan is done instead of empty valuelte - show MTU as "auto" also on interface level if "auto" usedlte - SIMCom modems, skip error state when modem sends improperly formatted CREG response/URClte - stop network scan on interruption for QMI modemslte - unify "modem-init" for all driver typesmacsec - added aes-gcm-xpn-128 cipher supportnetwatch - fixed memory leak when using HTTP/HTTPS GET probe with invalid src-addressospf - allow adding interface configuration manually, bypassing interface-templateospf - change virtual link configuration to use OSPF interface directlyospf - fixed missing interface-template configuration which previously was converted by upgrading from RouterOS v6ospf - fixed nssa bit checkospf - fixed routes not being installed on ABRspimsm - do not ignore priority when selecting RP from BSRpimsm - fixed possible BSR looppimsm - improved stabilityping - resolve domain name to IPv6 if src-address is IPv6 addressping - show time in microseconds for flood-pingpoe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces)port - added support for "tcp-client" and "udp" modes for "remote-access"port - expose RG650E-EU diagnostics channelport - remove unused serial port on RB1100AHx4pppoe - do not reset pppoe-client interface when adding a commentptp - added support for CRS812, CRS804ptp - fixed crash during initialization on some devicesqos-hw - added automap setting to QoS Profiles (enabled by default)qos-hw - added ECN and PFC support on CRS8xxqos-hw - added new default "auto" value to mirror-buffers, multicast-buffers, shared-buffers QoS Settings (old defaults are shown in export after upgrade)qos-hw - added queueX-byte-max stats to port usage on CRS8xxqos-hw - fixed CPU traffic mapping to queues on CRS8xx switchesqos-hw - introduced lossless-traffic-class and lossless-buffers settingsqos-hw - removed shared-pool-index settingroute - fixed link-local interface check when resolving IPv6 nexthopsroute - revert to old routing rule priorities for containers (introduced in v7.22)routerboot - fixed Netinstall failure when using multiple partitions on AL73400, AL52400, AL32400 CPUs ("/system routerboard upgrade" required)sftp - fixed path canonicalization requestsmb - do not start /ip smb server on container interfacessniffer - added IP ECN fieldsniffer - fixed missing VLAN tag in the TZSP packetssnmp - added missing BRIDGE-MIB OIDs (dot1dBaseNumPorts, dot1dBaseType, dot1dStpDesignatedRoot, dot1dStpPortDesignatedBridge, dot1dStpRootCost, dot1dStpRootPort, dot1dStpHoldTime, dot1dStpBridgeMaxAge, dot1dStpBridgeHelloTime, dot1dStpBridgeForwardDelay, dot1dStpPortForwardTransitions, dot1dTpAgingTime)snmp - added missing LLDP-MIB OIDs (lldpMessageTxInterval, lldpMessageTxHoldMultiplier, lldpLocManAddrTable)snmp - enforce minimum password lengthsnmp - fixed compliance of LLDP-MIB lldpRemManAddrTablesnmp - fixed connection tracking counter OIDsnmp - fixed dot1dStpPortDesignatedPort, dot1dStpPortDesignatedRoot OIDssnmp - fixed ifSpeed and ifHighSpeed OIDs for 802.3ad and balance-xor bonding interfacessnmp - fixed lldpLocSysDesc OIDsnmp - implemented LTE firmware upgrade optionsnmp - use "/ip/neighbor/lldp" for lldpRemTable and lldpRemManAddrTable (fixes lldpRemTable showing neighbors discovered by MNCP or CDP)ssh - do not advertise password login method when it is disabledssh - improved host resolve error loggingswitch - fixed issue with MAC table for RB2011 (introduced in v7.21)switch - fixed missing ethernet counters for non-running interfaces on CRS8xx switches (introduced in v7.22)switch - improved FDB operations on QCA8337, Atheros8327switch - rework how IEEE reserved MAC addresses are handled on QCA8337, Atheros8327switch - updated switch-marvell.npk driverswitch - use names instead of numbers in switch menu configuration exportsystem - improved handling of HTTP/2 connection closuresystem - improved RouterOS package download over slow connectionsystem - improved switching to HTTP/1 if HTTP/2 is not supported by remote hostsystem - keep HTTP/2 connection open if it is not closed by system or serversystem - make default identity based on board nametimezone - updated timezone information from "tzdata2026b" releaseupgrade - added the option to configure HTTP/HTTPS modes when connecting to MikroTik upgrade serversupgrade - changed status message for scheduled installsupgrade - check for available packages when opening System/Packages in GUIusb - added ax88179_178a driverusb - improved USB Ethernet adapter recognitionusb - show USB device reported maximum poweruser-manager - improved stability when removing user-profile while session updates countersveth - fixed link-local address not being configurable as a gatewayvxlan - fixed fast-path when using "checksum=no" (introduced in v7.20)vxlan - improved system stabilitywebfig - added postfix byte value support (e.g. "/ip/settings/ipv4-high-fragment-thresh")webfig - added support for filter in tableswifi - improved interface provisioning for WiFi 7 access pointswifi - improved on-capsman traffic processingwifi-mediatek - fixed multicast-enhance functionalitywifi-mediatek - fixed stability issue getting regulatory information and during initializationwifi-qcom-be - fixed incorrect channel info for punctured channelswifi-qcom-be - fixed stability issue during initializationwifi-qcom-be,mediatek - correctly advertise RRM capabilities when 802.11k neighbor reports are enabledwinbox - added "MLD Static" and "MLD Datapath" properties under the "WiFi/CAP" menuwinbox - added "Multipath" property under the "Routing/BGP/Instance" menuwinbox - added “Remove” action under "System/Certificates/Requests" menuwinbox - added comment for DHCPv6 relaywinbox - added group numbers for DH and PFS groups for IPsecwinbox - allow setting "CAPsMAN address" for CAP as domain namewinbox - do not accept interface without specifying IP or MAC in "Ping To" fieldwinbox - improved "External Antenna" property displaywinbox - improved Routing/PIM SM menuwinbox - move bridge IGMP Snooping checkbox to IGMP tabwinbox - rename DHCPv6 server binding "Peer Address" to "Client Address"winbox - show "Directory URL" field for ACME certificates in Certificate viewwinbox - show "IPv6 Address" property by default under the "IP/Neighbors" menuwinbox - show accepted connections in tree view under "IP/Services" menuwinbox - updated socksify icon for firewall NAT ruleswireguard - improved system stabilitywww - added partial content (HTTP 206) supportwww - improved REST API user cache processingwww - improved system stabilityzerotier - switch to 1.14.2 version
upgrade - use HTTPS by default when connecting to MikroTik upgrade serversapp - added "network-outgoing-access=yes/no" setting to prevent containers from initiating outbound trafficapp - added birdnet-go, cryptpad, diagrams-net, lorawan-stack, metube, mikrodash, nextcloud-whiteboard, paperless-ngx, wbo, zulip appsapp - added docker-with-dockge, docker-with-komodo, docker-with-portainer, HA-otbr-matter, odoo, otbr, stalwart, trip appsapp - added possibility to set app command-line parameter from CLIapp - added restart commandapp - allow apps on XFS file systemsapp - allow filtering by installed appsapp - allow overriding default stop signalapp - allow parsing DNS in YAMLapp - allow passing stop signal from YAML and passing it to container as defaultapp - allow picking app category from drop-downapp - allow updating name parameter from YAML for custom appsapp - allow updating YAML for existing custom app, forces cleanupapp - apps now check for port availability, apps will not start on "internal" if app masks existing serviceapp - automatically pass any required devices to container, such as otbrapp - automatically restart app when required hardware device is changedapp - bundled ollama with openwebuiapp - check if certificate already exists before creating a new oneapp - disabled PiHole syncing NTP to hostapp - fixed issue where XFS disks did not appear in the app disk drop-downapp - fixed saving custom appsapp - fixed showing ui-url for appsapp - fixed some apps not containing the full repository URLapp - fixed stability issue when running cleanup on many appsapp - fixed store issue when adding a custom appapp - fixed YAML not exported for custom appsapp - improved app network and port behaviorapp - improved automatic hardware device passing to containerapp - improved YAML error messageapp - make sure all layer .tar.gz files are deleted after extraction finishesapp - on file-based devices, swap is enabled on the file itself instead of creating another and enabling it on thatapp - stability fixes for the "/app" menuapp - swap file is now created based on the mount-point it is attached toapp - updated uptime-kuma imagearm64,x86 - updated Broadcom bnxt Ethernet driver for 200G supportbfd - fixed source address selection for IPv6 multihop sessionsbridge - added ability to set custom Option 82 with dhcp-agent-circuit-id, dhcp-agent-remote-id settings (replaces add-dhcp-option82 setting; configuration is automatically updated after upgrade)bridge - added DHCPv6 snooping feature with ability to set custom Option 18 and Option 37bridge - fixed dynamic VLAN update for WiFi interfacesbridge - improved MAC synchronization for MLAGbridge - recognize more DHCP message types when dhcp-snooping is enabledbth - fixed WireGuard client config IP address netmaskcertificate - added "ISRG Root X1" and "DigiCert Global Root G2" to SMIPS built-in root certificate authorities storecertificate - allow deleting ACME certificate that failed to generatecertificate - improved ACME loggingcertificate - improved ACME status reportingcertificate - set Let's Encrypt as default ACME directorychr - improved guest tool config for arm64 CHRcloud - cloud backup file management now requires "policy" policycloud - show error if cloud services are not supported on the deviceconsole - added comment in "/ip/dhcp-server/option/sets" and "/ipv6/dhcp-server/option/sets" menusconsole - added path parameter to exportconsole - added syntax highlight for script properties in some menus (e.g. dhcp-client, dhcp-server, ppp/profile, interface/vrrp)console - export mentions custom defconf script presence in headerconsole - fixed "/log/print follow on-event" to work with "where" (introduced in v7.22)console - fixed output when oversized completion presentconsole - removed redundant keepalive for the serial-terminal, ensure that the device no longer periodically outputs /0 while using "/system/serial-terminal"console - show "/system/resource/hardware/usb-power-reset" only on x86console - show warning in print header when terminal is too narrow to show any columnsconsole - treat non-existent command parameters as runtime errorscontainer - added restart-policy=no/always/on-failure, stop-on-unhealthy, restart-count, restart-interval, restart-max-count propertiescontainer - added support for noexec option to mountscontainer - added support for USB audio devices for containerscontainer - allow disabling individual container environment variables without deleting themcontainer - allow picking mount source directories with the file picker in WinBoxcontainer - allow setting memory-max globally and per containercontainer - allow user-defined mounts overriding /sys and /devcontainer - check if root-dir does not exist before adding a containercontainer - clean up layers of non-existing containerscontainer - detect and show containers killed by out-of-memory killercontainer - do not allow starting container/shell with non-existing user or groupcontainer - draw graphs in container statscontainer - fixed container entrypoint and shell override by usercontainer - fixed container layer size calculationcontainer - fixed container shell not working with multi-arg commandscontainer - fixed repull if root-dir of container was in tmpfscontainer - fixed running "/container shell" with the correct user, if container user is set or overriddencontainer - improved errors at container startcontainer - improved running container instance memory usagecontainer - layers are now accessible under "Layers" tabcontainer - pass any container startup error message back to "run" and make it exit immediatelycontainer - remove container backup directory if import failscontainer - removed "Layers" buttoncontainer - show container size and container data sizecontainer - show default DNS serverscontainer - show layer size calculation statuscontainer - updated /dev/net/tun permissionscrypto - fixed fallback flag loss in qcryptocrypto - fixed stability issuecrypto - improved safexcel driver with upstream changes and patchesdhcpv4-server - added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entriesdhcpv4-server - changed lease agent-circuit-id and agent-remote-id format to hexdhcpv4-server - do not raise an alert when receiving a packet originating from the same devicedhcpv4-server - do not suggest bogus pools when using setup command (e.g. when address is /31 or /32)dhcpv4-server - fixed an issue where renew packets without giaddr were sometimes not processeddiscovery - added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entriesdiscovery - added option to disable/enable LLDP MEDdiscovery - added separate read-only menu "/ip/neighbor/lldp" for neighbors discovered by LLDP (CLI only)discovery - dynamically update advertised "interface-name"discovery - fixed LLDP MAC/PHY TLVdisk - added "/disk" smart-infodisk - added disk check and repair for ext4, Btrfs and XFS file systemsdisk - improved device name tracking in "/system/resource/hardware" menudisk - show disk io errors in "/disk" menudns - added HTTP/2 support to DoH on ARM64 and x86/CHR devicesethernet - improved system stability for RB3011, L009, NetMetal ax, hAP ax lite devicesethernet - improved system stability on devices with Alpine CPUsfetch - fixed non-working idle-timeout in some casesfile - added copy, tail, head commands (CLI only)firewall - added "action=drop" to manglefirewall - improved stability for SIP helperfirewall - matcher "in-bridge-port" does not require "use-ip-firewall=yes"graphing - improved service stability when storing datahardware - report the correct state of PCI devices in "/system/resource/hardware" menuhealth - hide health menu for RB951ui-2nDike2 - fixed child SA cleanup during flush operationike2 - fixed pending responder connection cleanup after peer removalike2 - fixed SA delete handling on initiator during rekeyike2 - improved HMAC size validation checksinterface - show warning when same MAC address is used on more than one virtual interfaceiot - added LoRa Tx delay settingiot - added MQTT subscribe message real-time monitoring optioniot - added Wiliot supportiot - fixed LoRa LBT issues, which caused Tx packets not getting deliverediot - fixed LoRa lockpack preventing lock from applyingiot - improved LoRa stabilityiot - improved LoRa Tx handlingiot - improved LoRa Tx schedulingip - added IPv6 and VRF support for reverse-proxyip - added SNI logging for reverse-proxyip - fixed hanging connections for reverse-proxyip-settings - added ipv4-fragment-time and ipv4-high-fragment-thresh settings, use default values based on total device memoryipip - disabled IPv6 link-local address generationippool - fixed issue when changing pool with already used addressesippool6 - allow variable length poolippool6 - properly follow pool changes for already used prefixesipsec - added netlink-based SA and policy handlingipsec - fixed SA proto parameter conversion and policy "none" type handlingipsec - improved NAT encapsulation parameter forwardingipsec – fixed expired SA handling to prevent “no such item” errors during listingipv6 - added from-pool-policy address property that controls how address is acquired from the poolipv6 - added without-acquire address propertyipv6 - always ensure that prefix length matches the one given by the pool even if address was set to 0ipv6,ra - added option to ignore MTU and DNS serversipv6,ra - added router-advertisement-route-distance settingipv6,ra - allow receiving DNS servers over multiple interfacesipv6,ra - clamp valid-lifetime to minimum of 2h on deprecationipv6,ra - extend processed RA loggingipv6,ra - fixed advertised DNS parameter loggingipv6,ra - fixed changing default "all" interface configurationipv6,ra - fixed DNS and pref64 property unsetipv6,ra - fixed sending only DNS or MTU when prefix is set to "none"ipv6,ra - improved service stabilityipv6,ra - warn when interface is under the bridgeisis - allow to configure metric-typel3hw - added HW offloaded VRF support on CRS8xx switchesl3hw - added VRF assignment via switch ACL rules on CRS8xx switches (CLI only)l3hw - fixed VXLAN packet matching by local IPleds - added new PoE fault LED cases (bad fw, PoE card power cable disconnected, PoE card not inserted)leds - fixed power LED turning off while LTE interface is inactive (introduced in v7.22)log - added "discover" topic and log events for discovered local DNS entrieslog - added CC option for e-mail actionlog - added ssld error logginglog - added TLS supportlte - added fast SIM switchover support using AT channel for MBIM modems without MBIM_CID_MS_UICC_RESET firmware supportlte - configure IP address for AT modems even if no DNS is received from the networklte - delete CID profiles one by one instead of "delete all" for QMI modems, as command does not work for all modemslte - do not duplicate primary-band also in ca-band for QMI modems in 5G SA networklte - do not reconfigure modem in passthrough mode if passthrough cannot be activated because of slave interfacelte - emit RS every 60s on LTE interfacelte - filter packets by MAC in multi-apn setup for EC200A-EU modemlte - fixed automatic modeswitch for "Chateau 5G R16" and "Chateau 5G"lte - fixed broken network scan after being interrupted by reconfigurationlte - fixed operator setting for QMI modemslte - fixed rare cases where the Tx queue could stop and never wake up on multi-core CPU deviceslte - fixed RSSI signal monitor for 3rd party modems where AT+CSQ responses are not parsedlte - fixed user set MTU not applied to LTE interfacelte - improved system stability for devices with QMI modemslte - improved system stability when modem configured in passthrough mode with VLANs for "Chateau 5G R16" and "Chateau 5G"lte - improved system stabilitylte - improvements for passthrough mode in IPv6 only setuplte - keep MAC persistent across reboots for QMI modemslte - read subscriber number also for QMI modemslte - removed LTE external-antenna scanlte - set SMS send timeout to 180slte - show external-antenna as "none" before actual scan is done instead of empty valuelte - show MTU as "auto" also on interface level if "auto" usedlte - SIMCom modems, skip error state when modem sends improperly formatted CREG response/URClte - stop network scan on interruption for QMI modemslte - unify "modem-init" for all driver typesmacsec - added aes-gcm-xpn-128 cipher supportnetwatch - fixed memory leak when using HTTP/HTTPS GET probe with invalid src-addressospf - allow adding interface configuration manually, bypassing interface-templateospf - change virtual link configuration to use OSPF interface directlyospf - fixed missing interface-template configuration which previously was converted by upgrading from RouterOS v6ospf - fixed nssa bit checkospf - fixed routes not being installed on ABRspimsm - do not ignore priority when selecting RP from BSRpimsm - fixed possible BSR looppimsm - improved stabilityping - resolve domain name to IPv6 if src-address is IPv6 addressping - show time in microseconds for flood-pingpoe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces)port - added support for "tcp-client" and "udp" modes for "remote-access"port - expose RG650E-EU diagnostics channelport - remove unused serial port on RB1100AHx4pppoe - do not reset pppoe-client interface when adding a commentptp - added support for CRS812, CRS804ptp - fixed crash during initialization on some devicesqos-hw - added automap setting to QoS Profiles (enabled by default)qos-hw - added ECN and PFC support on CRS8xxqos-hw - added new default "auto" value to mirror-buffers, multicast-buffers, shared-buffers QoS Settings (old defaults are shown in export after upgrade)qos-hw - added queueX-byte-max stats to port usage on CRS8xxqos-hw - fixed CPU traffic mapping to queues on CRS8xx switchesqos-hw - introduced lossless-traffic-class and lossless-buffers settingsqos-hw - removed shared-pool-index settingroute - fixed link-local interface check when resolving IPv6 nexthopsroute - revert to old routing rule priorities for containers (introduced in v7.22)routerboot - fixed Netinstall failure when using multiple partitions on AL73400, AL52400, AL32400 CPUs ("/system routerboard upgrade" required)sftp - fixed path canonicalization requestsmb - do not start /ip smb server on container interfacessniffer - added IP ECN fieldsniffer - fixed missing VLAN tag in the TZSP packetssnmp - added missing BRIDGE-MIB OIDs (dot1dBaseNumPorts, dot1dBaseType, dot1dStpDesignatedRoot, dot1dStpPortDesignatedBridge, dot1dStpRootCost, dot1dStpRootPort, dot1dStpHoldTime, dot1dStpBridgeMaxAge, dot1dStpBridgeHelloTime, dot1dStpBridgeForwardDelay, dot1dStpPortForwardTransitions, dot1dTpAgingTime)snmp - added missing LLDP-MIB OIDs (lldpMessageTxInterval, lldpMessageTxHoldMultiplier, lldpLocManAddrTable)snmp - enforce minimum password lengthsnmp - fixed compliance of LLDP-MIB lldpRemManAddrTablesnmp - fixed connection tracking counter OIDsnmp - fixed dot1dStpPortDesignatedPort, dot1dStpPortDesignatedRoot OIDssnmp - fixed ifSpeed and ifHighSpeed OIDs for 802.3ad and balance-xor bonding interfacessnmp - fixed lldpLocSysDesc OIDsnmp - implemented LTE firmware upgrade optionsnmp - use "/ip/neighbor/lldp" for lldpRemTable and lldpRemManAddrTable (fixes lldpRemTable showing neighbors discovered by MNCP or CDP)ssh - do not advertise password login method when it is disabledssh - improved host resolve error loggingswitch - fixed issue with MAC table for RB2011 (introduced in v7.21)switch - fixed missing ethernet counters for non-running interfaces on CRS8xx switches (introduced in v7.22)switch - improved FDB operations on QCA8337, Atheros8327switch - rework how IEEE reserved MAC addresses are handled on QCA8337, Atheros8327switch - updated switch-marvell.npk driverswitch - use names instead of numbers in switch menu configuration exportsystem - improved handling of HTTP/2 connection closuresystem - improved RouterOS package download over slow connectionsystem - improved switching to HTTP/1 if HTTP/2 is not supported by remote hostsystem - keep HTTP/2 connection open if it is not closed by system or serversystem - make default identity based on board nametimezone - updated timezone information from "tzdata2026b" releaseupgrade - added the option to configure HTTP/HTTPS modes when connecting to MikroTik upgrade serversupgrade - changed status message for scheduled installsupgrade - check for available packages when opening System/Packages in GUIusb - added ax88179_178a driverusb - improved USB Ethernet adapter recognitionusb - show USB device reported maximum poweruser-manager - improved stability when removing user-profile while session updates countersveth - fixed link-local address not being configurable as a gatewayvxlan - fixed fast-path when using "checksum=no" (introduced in v7.20)vxlan - improved system stabilitywebfig - added postfix byte value support (e.g. "/ip/settings/ipv4-high-fragment-thresh")webfig - added support for filter in tableswifi - improved interface provisioning for WiFi 7 access pointswifi - improved on-capsman traffic processingwifi-mediatek - fixed multicast-enhance functionalitywifi-mediatek - fixed stability issue getting regulatory information and during initializationwifi-qcom-be - fixed incorrect channel info for punctured channelswifi-qcom-be - fixed stability issue during initializationwifi-qcom-be,mediatek - correctly advertise RRM capabilities when 802.11k neighbor reports are enabledwinbox - added "MLD Static" and "MLD Datapath" properties under the "WiFi/CAP" menuwinbox - added "Multipath" property under the "Routing/BGP/Instance" menuwinbox - added “Remove” action under "System/Certificates/Requests" menuwinbox - added comment for DHCPv6 relaywinbox - added group numbers for DH and PFS groups for IPsecwinbox - allow setting "CAPsMAN address" for CAP as domain namewinbox - do not accept interface without specifying IP or MAC in "Ping To" fieldwinbox - improved "External Antenna" property displaywinbox - improved Routing/PIM SM menuwinbox - move bridge IGMP Snooping checkbox to IGMP tabwinbox - rename DHCPv6 server binding "Peer Address" to "Client Address"winbox - show "Directory URL" field for ACME certificates in Certificate viewwinbox - show "IPv6 Address" property by default under the "IP/Neighbors" menuwinbox - show accepted connections in tree view under "IP/Services" menuwinbox - updated socksify icon for firewall NAT ruleswireguard - improved system stabilitywww - added partial content (HTTP 206) supportwww - improved REST API user cache processingwww - improved system stabilityzerotier - switch to 1.14.2 version
Source:
Tweakers.net