Search changelog entries
| Component | Change |
|---|---|
| arp | added "local-proxy-arp" feature; |
| bonding | added "forced-mac-address" option; |
| bonding | fixed "tx-drop" on VLAN over bonding on x86; |
| bridge | fixed rare crash on bridge port removal; |
| bridge | fixed VLAN BPDU rx and tx when connected to non-RouterOS device with STP functionality; |
| bridge | require admin-mac to be specified if auto-mac is disabled; |
| bridge | show bridge port name in port monitor; |
| capsman | added "group-key-update" parameter; |
| capsman | added possibility to change arp, mtu, l2mtu values in datapath configuration; |
| capsman | fixed CAP upgrade when separate wireless package is used (introduced in 6.37); |
| capsman | use correct source address in reply to unicast discovery requests; |
| ccr | added AHCI driver for Samsung XP941 128GB AHCI M.2; |
| certificates | added support for PKCS#12 export; |
| certificates | allow import multiple certs with the same key; |
| certificates | fixed crash when crl is removed while it is being fetched; |
| certificates | fixed trust chain update on local certificate revocation in programs using ssl; |
| certificates | if no name provided create certificate name automatically from certificate fields; |
| console | fixed multi argument value unset; |
| crs | added comment ability in more switch menus; |
| crs | fixed rare kernel failure on switch reset (for example, reboot); |
| dhcp | fixed DNS server assignment to client if dynamic server exists and is from another IP family; |
| dhcp | fixed issue when dhcp-client was still possible on interfaces with "slave" flag and using slave interface MAC address; |
| dhcp | show dhcp server as invalid and log an error when interface becomes a slave; |
| dhcp-server | fixed when wizard was unable to create pool >dhcp_pool99; |
| discovery | added LLDP support; |
| discovery | removed 6to4 tunnels from "/ip neighbor discovery menu"; |
| dns | added "max-concurrent-queries" and "max-concurrent-tcp-sessions" settings; |
| dude | (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112599); |
| ethernet | added "k" and "M" unit support to Ethernet Bandwidth setting; |
| ethernet | fixed "tx-fcs-error" on SFP+ interfaces when loop-protect is enabled; |
| export | do not show interface comment in "/ip neighbor discovery" menu; |
| export | updated default values to clean up export compact; |
| fastpath | fixed rare crash; |
| fastpath | fixed x86 bridge fast-path status shown as active even if it is manually disabled; |
| file | fixed file manager crash when file transfer gets cancelled; |
| firewall | added "creation-time" to address list entries; |
| firewall | added sctp/dccp/udp-lite support for "src-port", "dst-port", "port" and "to-ports" firewall options; |
| firewall | do not defragment packets which are marked with "notrack" in raw firewall; |
| firewall | fixed "time" option by recognizing weekday properly (introduced in v6.37.2); |
| firewall | fixed dynamic raw rule behaviour; |
| firewall | fixed rule activation if "time" option is used and no other active rules are present; |
| firewall | increased max size of connection tracking table to 1048576; |
| firewall | new faster "connection-limit" option implementation; |
| firewall | significantly improved large firewall rule set import performance; |
| graphing | fixed queue graphs showing up in web interface if aggregate name size >57840 symbols; |
| health | show power consumption on devices which has voltage and current monitor; |
| hotspot | fixed nat rule port setting in "hs-unauth-to" chain by changing it from "dst-port" to "src-port" on Walled Garden ip "return" rules; |
| interface | changed loopback interface mtu to 1500; |
| interface | do not treat multiple zeros as single zero on name comparison; |
| interface | show link stats in "/interface print stats-detail" output; |
| ipsec | added ability to specify static IP address at "send-dns" option; |
| ipsec | added ph2 accounting for each policy "/ip ipsec policy ph2-count"; |
| ipsec | allow to specify explicit split dns address; |
| ipsec | changed logging topic from error to debug when empty pfkey messages are received; |
| ipsec | do not auto-negotiate more SAs than needed; |
| ipsec | ensure generated policy refers to valid proposal; |
| ipsec | fixed camellia crypto algorithm module loading; |
| ipsec | fixed IPv6 remote prefix; |
| ipsec | fixed kernel failure on tile with sha256 when hardware encryption is not being used; |
| ipsec | fixed peer configuration my-id IPv4 address endianness; |
| ipsec | fixed ph2 auto-negotiation by checking policies in correct order; |
| ipsec | load ipv6 related modules only when ipv6 package is enabled; |
| ipsec | make generated policies always as unique; |
| ipsec | non passive peers will also establish SAs from policy without waiting for the first packet; |
| ipsec | optimized logging under ipsec topic; |
| ipsec | show active flag when policy has active SA; |
| ipsec | show SA "enc-key-size"; |
| ipsec | split "mode-config" and "send-dns" arguments; |
| ipv6 | added "no-dad" setting to ipv6 addresses; |
| ipv6 | fixed "accept-router-advertisements" behaviour; |
| ipv6 | moved empty IPv6 pool error message to error topic; |
| lcd | improved performance, causes less cpu load; |
| led | fixed dark mode for cAP 2nD (http://wiki.mikrotik.com/wiki/Manual:System/LEDS#Leds_Setting); |
| log | fixed "System rebooted because of kernel failure" message to show after 1st crash reboot; |
| lte | added support for more Vodafone K4201-Z, Novatel USB620L, PANTECH UML295 and ZTE MF90 modems; |
| lte | allow to execute concurrent info commands; |
| lte | fixed dwm-222, Pantech UML296 support; |
| lte | fixed init delay after power reset; |
| lte | increased delay when setting sms send mode; |
| lte | return info data when all the fields are populated; |
| metarouter | fixed startup process (introduced in 6.37.2); |
| mmips | fixed traffic accounting in "/interface" menu; |
| ospf | fixed route crash caused by memory corruption when there are multiple active interfaces; |
| ppp | fixed packet size calculation when MRRU is set (was 2 bytes bigger than MTU allows); |
| ppp | significantly improved shutdown speed on servers with many active tunnels; |
| ppp | significantly improved tunnel termination process on servers with many active tunnels; |
| profile | added "bfd" and "remote-access" processes; |
| profile | added ability to monitor cpu usage per core; |
| profile | make profile work on mmips devices; |
| profile | properly classify "wireless" processes; |
| queue | fixed "time" option by recognizing weekday properly (introduced in v6.37.2); |
| radius | added IPSec service (cli only); |
| rb750Gr3 | fixed ipsec with 3des+md5 to work on this board; |
| rb850Gx2 | fixed pcb temperature monitor if temperature was above 60C; |
| resolver | ignore cache entries if specific server is used; |
| routerboot | show log message if router CPU/RAM is overclocked; |
| script | increment run count value when script is executed from snmp; |
| snmp | always report bonding speed as speed from first bonding slave; |
| snmp | fixed rare crash when incorrectly formatted packet was received; |
| snmp | provide sinr in lte table; |
| ssh | added routing-table setting (cli only); |
| ssh | fixed lost "/ip ssh" settings on upgrade from version older than 5.15; |
| system | reboot device on critical program crash; |
| tile | fixed kernel failure when when IPv6 ICMP packet is sent through PPP interface; |
| time | updated time zones; |
| traceroute | fixed memory leak; |
| traffic-flow | fixed flow sequence counter and length; |
| trafficgen | fixed compact export when "header-stack" includes tcp; |
| trafficgen | fixed crash when IPv6 traffic is processed; |
| trafficgen | fixed potential crash when very big frame is generated; |
| trafficgen | improved fastpath support; |
| tunnel | fixed transmit packets occasionally not going through fastpath; |
| tunnel | properly export keepalive value; |
| usb | fixed kernel failure when Nexus 6P device is removed; |
| users | added minimal required permission set for full user group; |
| users | added TikApp policy; |
| vlan | allow to add multiple VLANs which name starts with same number and has same length; |
| vrrp | do not show unrelated log warning messages about version mismatch; |
| watchdog | do not send supout file if "auto-send-supout" is disabled; |
| webfig | added extra protection against XSS exploits; |
| webfig | show ipv6 addresses correctly; |
| webfig | show properly interface last-link-up/down times; |
| winbox | added "Complete" flag to arp table; |
| winbox | added "untracked" option to firewall "connection-state" setting; |
| winbox | added Dude icon to Dude menu; |
| winbox | allow to enable/disable traffic flow targets; |
| winbox | allow to run profile from "/system resources" menu; |
| winbox | allow to specify interface for leds with "interface-speed" trigger; |
| winbox | do not allow to set "loop-protect-send-interval" to 0s; |
| winbox | do not show hotspot user profile incoming and outgoing filters and marks as set if there is no value specified; |
| winbox | fixed crash when legacy Winbox version was used; |
| winbox | fixed default values for interface "loop-protect-disable-time" and "loop-protect-send-interval"; |
| winbox | fixed missing "IPv6/Settings" menu; |
| winbox | fixed typo in "propagate-ttl" setting; |
| winbox | make cert signing include provided ca-crl-host; |
| winbox | moved ipsec peer "exchange-mode" to General tab; |
| winbox | properly show VHT basic and supported rates in CAPsMAN; |
| winbox | removed spare values from loop-protect menu; |
| winbox | show all related HT tab settings in 2GHz-g/n mode; |
| winbox | show primary and secondary ntp addresses as 0.0.0.0 if none are set; |
| winbox | show proper ipv6 connection timeout; |
| wireless | added API command to report country-list (/interface/wireless/info/country-list); |
| wireless | added CRL checking for eap-tls; |
| wireless | fixed action frame handling for WDS nodes; |
| wireless | fixed custom channel extension-channel appearance in console; |
| wireless | fixed full "spectral-history" header print on AP modes; |
| wireless | fixed rare kernel failure when connecting to nv2 access point with legacy rate select; |
| wireless | fixed upgrade from older wireless packages when AP interface had empty SSID; |
| wireless | take in account channel width when returning supported channels; |
| wireless | use VLAN ID 0 in RADIUS message to disable VLAN tagging; |
| Component | Change |
|---|---|
| bgp | do not match all prefixes tagged with community 0:0 by routing filters; |
| bridge | fixed filter Ingress Priority option (broken in 6.36rc8); |
| chr | fixed crash on "/interface print" (introduced in 6.36.4); |
| chr | fixed crash on "/system reboot" and "/system shutdown"; |
| crs226 | fixed sfp-sfpplus1 link re-negotiation (broken in 6.37rc28/v6.37.1); |
| disk | fixed issue when disk was renamed after reboot on devices with flash disks; |
| dns | do not resolve incorrect addresses after changes made in static dns entries; |
| dns | improved static dns entry add speed when regexp is being used; |
| dude | (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112598); |
| firewall | fixed filter rule "limit" parameter by making it visible again; |
| firewall | fixed interface slave state recognition (broken in 6.37.2); |
| firewall | fixed timeout option on address lists with domain name; |
| log | ignore email topic if action is email; |
| mipsbe | improved memory allocation on devices with nand when file transfer and tcp traffic processing is on progress; |
| route | fixed memory leak when route cache is disabled; |
| tile | fixed rare kernel failure when IPv6 neighbor discovery packet is received; |
| traceroute | fixed crash when too many sessions are active; |
| tunnel | allow to force mtu value when actual-mtu is already the same; |
| winbox | recognize properly tcp in traffic-generator packet-template header type; |
| winbox | show HT MCS tab if 2GHz-G/N band is used; |
| Component | Change |
|---|---|
| arm | improved watchdog reliability; |
| bonding | fixed 802.3ad load balancing over routed VLANs with fastpath enabled; |
| bonding | fixed mac address selection after upgrade; |
| crs | fixed port mirroring halt after L2MTU change; |
| dhcp | do not allow to create dhcp-server on slave interface; |
| ethernet | fixed interface speed reporting for x86 in log after reboot or if "disable-running-check=yes"; |
| ethernet | fixed potential loopprotect crash; |
| export | fixed "/interface ethernet switch export" on some boards; |
| export | fixed CRS switch egress-vlan-tag export; |
| fastpath | fixed kernel failure when fastpath traffic goes into loop; |
| fastpath | improved connection tracking timeout updates; |
| firewall | do not allow to increase/decrease ttl and hop-limit by 0; |
| firewall | fixed "connection-state" value disappearance in rules that were created before v6.22; |
| firewall | fixed compact export (introduced in 6.37rc14); |
| firewall | improved "time" option (ranges like 22h-10h now are acceptable); |
| hotspot | fixed nat rule dst-port by making it visible again for Walled Garden ip return rules; |
| ipsec | changed logging topic from error to debug for ph2 transform mismatch messages; |
| ipv6 | increased default max-neighbor-entries value to 8192, same as ipv4; |
| mmips | improved watchdog reliability; |
| package | show minimal supported RouterOS version under "/system resource" menu if it is specified; |
| queue | fixed rare crash on statistic gathering in "/queue tree"; |
| queue | improved "time" option (ranges like 22h-10h are now usable); |
| rb2011 | fixed crash on l2mtu changes; |
| sms | fixed crash after modem has failed to start; |
| ssl | fixed potential memory leak ( when using dude for example); |
| torch | fixed aggregate statistics appearance; |
| traffic-flow | fixed dst-port reporting if connection is not maintained by connection tracking; |
| userman | fixed memory leak on user limitation calculations; |
| winbox | added led settings menu; |
| winbox | fixed missing switch menu for mmips devices; |
| Component | Change |
|---|---|
| console | fixed typo in web-proxy (passthru to passhtrough); |
| dude | (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112599); |
| export | do not show mac-address in export when it is not necessary; |
| firewall | fixed dynamic dummy firewall rules appearance in raw tables; |
| hotspot | fixed nat rule dst-port by making it visible again; |
| led | fixed default led settings for wAP2nDr2; |
| snmp | do not allow to execute script if user does not have write permission; |
| tile | do not reboot device after watchdog disable/enable; |
| userman | always re-fetch table data when switching between different menus; |
| userman | fixed timezone adjustment in reports; |
| webfig | fixed channel selection in check-for-update menu in Firefox; |
| winbox | added loop-protect settings; |
| winbox | added passthrough state to web-proxy; |
| winbox | allow to unset http-proxy field for sstp client; |
| winbox | do not show health menu on RB951-2n; |
| winbox | fixed typo in dhcpv6 relay (DCHP to DHCP); |
| winbox | show address expiration time in dhcp client list; |
| wireless | show DFS flag in country-info command output; |
| Component | Change |
|---|---|
| capsman | fixed kernel crash on cap while changing client-to-client forwarding; |
| capsman | report radio-name in registration table; |
| certificate | do not allow to remove certificate template while signing certificate; |
| console | hotspot setup show wrong certificate name; |
| defconf | fixed default configuration restore if virtual wireless interface were present; |
| defconf | fixed default configuration when wireless package is used; |
| defconf | using caps button now forces all wireless interfaces in caps mode; |
| dhcpv6 | improved interface status tracking; |
| dhcpv6 | reworked DHCP-PD server interface and route management; |
| dhcpv6 | update DUID when system-id changes (solves problem when cloned VM retains the same DUID); |
| dns | fixed crash when using regexp static dns entries; |
| ethernet | added support for LAN9514 ethernet dongle; |
| ethernet | allow to force mtu value when actual-mtu is already the same; |
| ethernet | fixed loop-protect on bridged ports; |
| ethernet | fixed never ending loop in CDP packet processing; |
| ethernet | fixed rare kernel failure on non-switch ethernet reset; |
| ethernet | rb44ge now have disabled-running-check=no by default; |
| firewall | added additional matchers for firewall raw rules; |
| firewall | fixed time based rules on time/timezone changes (again); |
| gps | always check NMEA checksum if available; |
| health | do not show psu and fan information for passive cooling devices; |
| hotspot | show comments from user menu also in active menu; |
| ipsec | fixed crash with enabled fragmentation; |
| ipsec | fixed dynamic policy not deleted on disconnect for nat-t peers; |
| ipsec | fixed fragmentation use negotiation; |
| ipsec | fixed kernel crash when sha512 was used; |
| ipv6 | fixed RA and RS processing on new interfaces after many interfaces have lost link during prolonged operation; |
| ipv6 | improved system responsiveness when ipv6 routes are frequently modified; |
| ipv6 | show multiple neighbors with the same address; |
| kvm | fix add/remove of disabled interfaces; |
| kvm | fixed guest crashing when using mtu bigger than 1504; |
| l2tp | fixed kernel failure when fastpath handles l2tp packets; |
| leds | added option to disable all leds on RBcAP2n; |
| lte | added ability to send/receive sms using '/tool sms'; |
| lte | added dlink dwm-157 D, dwm-222 support; |
| lte | added huawei me909s variant; |
| lte | added initial deregistration only for bandrich modems; |
| lte | added logging for usb config switching; |
| lte | added Pantech UML295, Vodafone K4201-Z, ZTE MF823/MF831 support; |
| lte | added rndis for ZTE MF8xx; |
| lte | added support for more dlink dwm-222 configurations; |
| lte | added switch for Huawei K5160; |
| lte | added zte K5008-Z back; |
| lte | adjusted usb config for dlink dwm-157 D; |
| lte | fixed at chat condition storage; |
| lte | fixed band setting for sxt lte; |
| lte | fixed band unsetting; |
| lte | fixed default channels for dlink dwm-157; |
| lte | fixed ip activation when CREG (circuit switched) state remains in not registered state; |
| lte | fixed setting correct lte band for sxt lte; |
| lte | process initial state change to deregistred, when lockup occurs; |
| lte | reset if sms storage set fails; |
| mpls | fixed memory leak; |
| mpls | fixed vpls throughput issues caused by out-of-order packets; |
| ntp | fixed ntp server when local-clock used (like usb gps module); |
| partitions | added ability to add comments; |
| ppp | use default-route-distance when adding ipv6 default route; |
| ppp,lte | pin is now converted to string argument; |
| pppoe | fixed disconnects by idle timeout when fastpath is used; |
| quickset | added 2GHz-g/n band support; |
| quickset | fixed guest reporting in "home ap dual" mode; |
| quickset | fixed wireless frequency fields in "home ap dual" mode; |
| rb3011 | fixed rare occasions when router would hang while loading kernel; |
| routing | improved kernel performance in setups with large routing tables; |
| sfp | enabled eeprom printout in /interface ethernet monitor; |
| sfp | fixed initial eeprom reading on CCR1036-8G-2S+ and CCR1072-1G-8S+; |
| sfp | removed "sfp-rate-select" as command was not relevant to currently supported hardware; |
| sms | moved incorrectly logged message from async to gsm topic; |
| sms | report error when unsupported modem is being used; |
| snmp | added script table which executes script and returns it's output on get request; |
| snmp | require write permitions for script run table access; |
| snmp | skip forbidden oids on getnext completion; |
| sstp | allow to specify proxy by dns name; |
| sstp | now supports TLS_ECDHE algorithms; |
| supout | fixed bug that could cause enormous size supout.rif files; |
| supout | improved crash report generation for tile architecture; |
| switch | added comment field for CRS switch VLANs; |
| traffic-flow | allow ipv6 src address to be optional; |
| traffic-flow | fixed IPFIX packet timestamp; |
| traffic-flow | fixed IPFIX wrong flow sequence; |
| trafficgen | add per stream packet count setting; |
| trafficgen | show out-of-order packet counters in stats printouts; |
| tunnel | fixed communication via tunnel to router itself if fastpath was active; |
| tunnel | fixed ipv6 link-local address adding for gre; |
| tunnel | increased minimal MRRU to 1500 for PPP interfaces; |
| tunnel | ipv6 link-local address is now generated from tunnel local-address; |
| usb | added support for SMSC95XX USB Ethernet dongle on mipsbe; |
| usermanager | fixed rare crash on paypal payment; |
| users | fixed script policy checking against user policies when running scripts; |
| webfig | do not crash if radius server does not give out encryption keys; |
| webfig | fixed certificate signing; |
| winbox | added auto refresh for BFD neighbors; |
| winbox | added comment field support for switch vlan menu; |
| winbox | added default-authentication parameter for wireless station modes; |
| winbox | added src-address field for traffic-flow target; |
| winbox | adjust on-event field dynamically depending on window size; |
| winbox | adjusted allowed values for http-proxy field; |
| winbox | disabled MRRU by default for PPP interfaces; |
| winbox | display actual-mtu for tunnels in interfaces window; |
| winbox | fixed disconnect when no windows were opened for a while in unsecure mode; |
| winbox | fixed multiline read only fields not displaying new line characters; |
| winbox | fixed raw firewall showing jump targets from filter chains; |
| winbox | hide ethernet flow control settings for interfaces which does not support them; |
| winbox | removed health menu from devices that do not support it; |
| winbox | removed L2MTU field for PPP interfaces; |
| winbox | removed L2MTU field from PPP server binding settings; |
| winbox | removed unset button for L2MTU field; |
| winbox | show firmware-type in routerboard window; |
| wireless | display DFS flag in country info; |
| wireless | improved driver support for RB953, hAP ac, wAP ac; |
| wireless | send deauth to data frames in scan mode. |
| wireless | updated brazil country settings; |