Search changelog entries
| Component | Change |
|---|---|
| bonding | improved system stability when disabling/enabling bonding ports; |
| branding | added option to upload custom files (newly generated branding package required); |
| capsman | use proper units for "ap-tx-limit" and "client-tx-limit" parameters; |
| console | do not clear environment values if any global variable is set; |
| console | require "write+ftp" permissions for exporting configuration to file; |
| console | updated copyright notice; |
| crs3xx | added "/system swos" menu for CRS354 devices, should only be used after SwOS 2.13 release; |
| crs3xx | fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices; |
| crs3xx | improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| defconf | fixed default configuration loading on LHG R; |
| defconf | fixed default configuration loading on RBOmniTikPG-5HacD; |
| dhcp | fixed link state checking for DHCP client; |
| dude | fixed configuration menu presence on ARM64 devices; |
| ethernet | improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices; |
| ipsec | fixed SA address parameter exporting; |
| lte | fixed "earfcn" to band translation for "cell-monitor"; |
| ovpn | fixed route cache entry leak when establishing a new session; |
| poe | do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out; |
| ppp | do not fail "at-chat" command when issued on disabled PPP interface; |
| ptp | improved management service stability when receiving bogus packets; |
| quickset | prefer 5GHz interface for WiFi scan in CPE mode; |
| rb4011 | fixed SFP+ port MTU setting after link state change; |
| rb4011 | improved SFP+ port stability after boot-up; |
| route | improved stability when connected route is modified; |
| sfp | improved cable length monitoring as defined per SFF-8472 and SFF-8636; |
| supout | fixed "topic" column presence in "Log" section; |
| switch | improved system stability with 98PX1012 switch chip for CCR2004-1G-12S+2XS device; |
| system | improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN); |
| telnet | do not send options if connecting to non standard port; |
| telnet | fixed server when run on non standard port; |
| tile | fixed bridge performance degradation (introduced in v6.47); |
| tr069-client | improved management service stability when receiving bogus packets; |
| upgrade | improved "long-term" upgrade procedure on SMIPS devices; |
| webfig | allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu; |
| webfig | do not corrupt settings when starting "Wireless Sniffer"; |
| webfig | do not move top right menu in opposite direction when scrolling horizontally; |
| webfig | show "network-mode" for LTE modems that support it; |
| winbox | do not show "network-mode" parameter for LTE interfaces that do not support it; |
| winbox | do not show empty "CPU Frequency" parameter under "System/Resources" menu; |
| winbox | fixed "reachable-time" value unit under "IPv6/ND" menu; |
| winbox | fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu; |
| winbox | fixed health reporting on RB960, hEX and hEX S devices; |
| winbox | hide "Allow Roaming" parameter on LTE modems that do not support it; |
| winbox | increased "target" field limit to 128 under "Queues" menu; |
| winbox | show "LCD" only on boards that have LCD; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| winbox | show "activity" column by default under "IP/Kid Control/Devices" menu; |
| wireless | fixed issue with multicast traffic delivery to client devices using power-save; |
| wireless | improved iOS compatibility with HotSpot 2.0 networks; |
| www | added "X-Frame-Options" header information to disallow website embedding in other pages; |
| Component | Change |
|---|---|
| branding | added option to upload custom files (newly generated branding package required); |
| console | do not clear environment values if any global variable is set; |
| crs3xx | fixed Ethernet LEDs after reboot for CRS354 devices; |
| crs3xx | fixed VLAN priority removal for CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed port-isolation on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | improved LACP linking between CRS3xx series switches; |
| crs3xx | improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| defconf | fixed default configuration loading on RBOmniTikPG-5HacD; |
| dot1x | fixed "reject-vlan-id" for MAC authentication (introduced in v6.48); |
| dot1x | fixed MAC authentication fallback (introduced in v6.48); |
| ipsec | fixed SA address parameter exporting; |
| lte | fixed "earfcn" to band translation for "cell-monitor"; |
| package | added new "iot" package with Bluetooth (KNOT only) and MQTT publisher support; |
| rb4011 | fixed SFP+ port MTU setting after link state change; |
| rb4011 | improved SFP+ port stability after boot-up; |
| route | improved stability when connected route is modified; |
| sfp | improved cable length monitoring as defined per SFF-8472 and SFF-8636; |
| ssh | return proper error code from executed command; |
| system | improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN); |
| tile | fixed bridge performance degradation (introduced in v6.47); |
| webfig | fixed "PortMapping" button (introduced in v6.48.2); |
| winbox | fixed health reporting on RB960, hEX and hEX S devices; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| wireless | fixed issue with multicast traffic delivery to client devices using power-save; |
| wireless | improved iOS compatibility with HotSpot 2.0 networks; |
| www | added "X-Frame-Options" header information to disallow website embedding in other pages; |
| Component | Change |
|---|---|
| bonding | improved system stability when disabling/enabling bonding ports; |
| bridge | improved bridge stability when host changes port (introduced in v6.47); |
| console | require "write+ftp" permissions for exporting configuration to file; |
| console | updated copyright notice; |
| crs3xx | added "/system swos" menu for CRS354 devices, should only be used after SwOS 2.13 release; |
| crs3xx | fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed packet transmit in 5Gbps link rate for CRS312 device; |
| crs3xx | improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices; |
| dhcp | fixed link state checking for DHCP client; |
| ethernet | fixed cable-test for some devices (e.g. RB2011, RB951G-2HnD); |
| ethernet | improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices; |
| fastpath | fixed IP packet receive on bridge and bonding interfaces when destination MAC address match with slave port MAC; |
| health | fixed voltage monitor on BaseBox5 devices; |
| ike2 | added "MS-CHAP-Domain" attribute to RADIUS requests; |
| ike2 | fixed DH group negotiation with EAP; |
| ike2 | fixed EAP MSK length validation (introduced in v6.48); |
| ike2 | fixed initial traffic selector's protocol and port in transport mode; |
| ipv6 | improved system stability when parsing IPv6 options; |
| lora | added additional predefined network servers; |
| lora | added option to hide CRC error messages in monitor; |
| lora | improved downlink transmission; |
| ospf | fixed type-7 LSA translation to type-5; |
| ovpn | fixed route cache entry leak when establishing a new session; |
| poe | do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out; |
| ppp | do not fail "at-chat" command when issued on disabled PPP interface; |
| ptp | improved management service stability when receiving bogus packets; |
| quickset | prefer 5GHz interface for WiFi scan in CPE mode; |
| rb3011 | improved system stability when changing RouterBOARD settings (introduced in v6.48); |
| snmp | fixed SNMP trap agent address; |
| supout | fixed "topic" column presence in "Log" section; |
| switch | improved resource allocation on 98PX1012 switch chip for CCR2004-1G-12S+2XS device; |
| switch | improved system stability with 98PX1012 switch chip for CCR2004-1G-12S+2XS device; |
| telnet | do not send options if connecting to non standard port; |
| telnet | fixed server when run on non standard port; |
| tr069-client | improved management service stability when receiving bogus packets; |
| upgrade | fixed upgrade procedure on 16MB devices; |
| upgrade | improved "long-term" upgrade procedure on SMIPS devices; |
| user | fixed "skin" configuration for user groups (introduced in v6.48); |
| webfig | allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu; |
| webfig | do not corrupt settings when starting "Wireless Sniffer"; |
| webfig | do not move top right menu in opposite direction when scrolling horizontally; |
| webfig | do not show newly created SMB shares as invalid; |
| webfig | fixed new interface addition; |
| webfig | show "Interfaces" menu by default after logging in; |
| webfig | show "network-mode" for LTE modems that support it; |
| winbox | added "Channel" parameter under "System/Console" menu; |
| winbox | do not show empty "CPU Frequency" parameter under "System/Resources" menu; |
| winbox | fixed "reachable-time" value unit under "IPv6/ND" menu; |
| winbox | fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu; |
| winbox | fixed duplicate "Trusted" setting under "Interface/Bridge/Ports" menu; |
| winbox | hide "Allow Roaming" parameter on LTE modems that do not support it; |
| winbox | increased "target" field limit to 128 under "Queues" menu; |
| winbox | renamed IP protocol 41 to "ipv6-encap"; |
| winbox | show "LCD" only on boards that have LCD; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| winbox | show "activity" column by default under "IP/Kid Control/Devices" menu; |
| Component | Change |
|---|---|
| bgp | fixed VPNV4 RD byte order; |
| branding | fixed LCD logo loading from new style branding package; |
| crs312 | fixed missing SwOS firmware on revision 2 devices; |
| crs3xx | correctly filter packets by L2MTU size; |
| crs3xx | improved system stability when receiving large frames for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v6.47.5); |
| defconf | fixed default configuration loading on RBcAP-2nD and RBwAP-2nD; |
| hotspot | fixed "idle-timeout" usage with RADIUS authentication; |
| hotspot | fixed special character parsing in "target" variable (CVE-2021-3014); |
| package | do not include multiple The Dude packages in HDD installer; |
| snmp | fixed "send-trap" functionality; |
| webfig | fixed new interface addition; |
| winbox | fixed enable/disable button presence for "Bridge/Hosts" menu; |
| winbox | renamed IP protocol 41 to "ipv6-encap"; |
| winbox | show "System/Health" only on boards that have health monitoring; |
| winbox | use health values reported by gauges for "System/Health" menu; |
| wireless | renamed "macedonia" regulatory domain information to "north macedonia"; |
| wireless | updated "indonesia5" regulatory domain information; |
| Component | Change |
|---|---|
| crs312 | fixed missing SwOS firmware on revision 2 devices; |
| crs3xx | fixed packet duplication when multiple bonding interfaces are created for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed port-isolation on ether37-ether48 ports for CRS354 device; |
| crs3xx | improved load balancing on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | improved system stability when bonding and IGMP snooping is used (introduced in v6.48); |
| hotspot | fixed "idle-timeout" usage with RADIUS authentication; |
| hotspot | fixed special character parsing in "target" variable (CVE-2021-3014); |
| ike2 | fixed phase 2 rekeying with enabled PFS (introduced in v6.48); |
| ike2 | improved stability when invalid certificate is configured (introduced in v6.48); |
| ike2 | properly register packet time after expensive CPU operations; |
| interface | fixed pwr-line interface linking (introduced in v6.48); |
| ipsec | improved stability when processing IPv6 packets larger than interface MTU; |
| led | fixed default LED configuration for RB911-5HnD; |
| package | do not include multiple The Dude packages in HDD installer; |
| snmp | fixed "send-trap" functionality (introduced in v6.48); |
| switch | fixed interface toggling for devices with multiple QCA8337, Atheros8327 or RTL8367 switch chips (introduced in v6.48); |
| winbox | fixed enable/disable button presence for "Bridge/Hosts" menu; |
| wireless | renamed "macedonia" regulatory domain information to "north macedonia"; |