Component: bridge
356 changelog entries across 76 version(s)
Activity over time (changelog entries per month)
- fixed dynamic switch-cpu VLAN creation (introduced in v7.20.7);
- fixed dynamic switch-cpu VLAN creation (introduced in v7.21);
- improved stability when using MVRP (introduced in v7.21);
- expose more DHCP snooping warning logs;
- fixed dynamic switch-cpu VLAN creation (introduced in v7.20);
- fixed filter and NAT matching with "mac-protocol=length";
- fixed missing local MAC after changing protocol-mode setting;
- fixed multicast packet receiving on bridge as multicast-router when HW offloading is used;
- fixed possible DHCP packet drop caused by the add-dhcp-option82;
- fixed possible MVRP issues when STP topology changes;
- fixed static host and MDB entry updates on VLAN add/remove;
- improved DHCP Option 82 values (circuit-id:"interface-name:vid", remote-id:"bridge MAC address");
- improved stability after failed protocol-mode=mstp change;
- improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20);
- properly apply bridge MVRP settings on the fly;
- fixed dynamic switch-cpu VLAN creation (introduced in v7.20);
- improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20);
- fixed incorrectly blocked ports by STP (introduced in v7.20);
- added dynamic tagged entry named "switch-cpu" in scenarios where the same VLAN spans multiple switch chips or is used on both HW and SW ports;
- added verbose STP debug logging (rx/tx BPDU, edge-port and port-role transitions, FDB flush);
- added warning log when all MACs cannot be displayed under the host table;
- disable/enable HW offload on bonding slave disable/enable (fixes potential MAC learning issue);
- fixed MVRP leave indication;
- fixed port-id when adding a new port in non-primary MLAG;
- improved stability when disabling bridge with dynamic VLANs in MSTI;
- refactored host learning logic in MLAG setups in order to make it more robust and predictable;
- improved system stability with IGMP snooping;
- allow IPv6 FastPath when dhcp-snooping is enabled;
- added new STP monitoring fields for bridge and ports (Tx/Rx BPDU, Tx/Rx TC, forward/discard transitions, last topology change, message-age, max-age, remaining-hops, bridge-id);
- fixed bridge port hang when using invalid port IDs;
- fixed dhcp-snooping in QinQ setups;
- fixed issue when local MACs were removed unnecessarily;
- fixed minor memory leak on link down;
- fixed multicast packet flow on hardware offloaded bridge which acts as "multicast-router";
- improved default bridge and port layout on console and GUI;
- improved stability in case of configuration error (introduced in v7.15);
- moved "TCHANGE" logs from bridge,stp to bridge,stp,debug;
- offload VXLAN only if another HW offloaded port exists in the bridge;
- properly flush bridge hosts when bonding is used as bridge port and loses hw-offloading status;
- rename "ports" to "interface" under MDB table for configuration consistency with other menus;
- renamed STP monitor fields (port-number to port-id, designated-port-number to designated-port-id, designated-bridge to designated-bridge-id);
- show designated-* monitor field for all port roles;
- show warning instead of causing error when using multicast MAC as admin-mac (introduced in v7.17);
- improved stability in case of configuration error (introduced in v7.15);
- show warning instead of causing error when using multicast MAC as admin-mac (introduced in v7.17);
- added MLAG heartbeat property;
- avoid duplicate VLAN entries with dynamic wifi VLANs;
- do not reset MLAG peer port on heartbeat timeout (log warning instead);
- fixed endless MAC update loop (introduced in v7.17);
- fixed missing S flag on interface configuration changes;
- improved stability when using MLAG with MSTP (introduced in v7.17);
- improvements to MLAG host table updates;
- process more DHCP message types (decline, NAK, inform);
- removed controller-bridge (CB) and port-extender (PE) support;
- show VXLAN remote-ip in host table;
- fixed endless MAC update loop (introduced in v7.17);
- add HW offload support for active-backup bonds on 98DXxxxx, 88E6393X, 88E6191X and88E6190 switches;
- added interface-list support for VLANs;
- added message for inactive port reason;
- added priority setting to manually elect primary MLAG peer;
- correctly display PPP interfaces in VLAN menu;
- disallow duplicate static VLAN entries;
- disallow multicast MAC address as admin-mac;
- enable faster HW offloading when detect-internet is disabled;
- fixed first host table response for SNMP;
- fixed incorrect HW offloaded port state in certain cases on MSTI add;
- fixed missing slave flag on port in certain cases;
- fixed MVRP registrar and applicant port options;
- fixed port monitor with interface-lists;
- fixed port move command;
- fixed setting bridge MTU to L2MTU value;
- fixed VLAN overlap check;
- ignore disabled interfaces when calculating bridge L2MTU;
- improved port handling;
- improved stability;
- prioritize MAC selection from Ethernet interfaces when using auto-mac feature;
- re-synchronize MLAG system-id when bridge MAC changes;
- removed support for master port config conversion (used before version 6.41);
- update dynamic MSTI priority value when changing configuration;
- added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge;
- added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade);
- added L2 MDB support for IGMP snooping;
- added max-learned-entries property for bridge;
- added message about who created a dynamic VLAN entry;
- added MVRP support for VLANs assigned to bridge;
- do not allow duplicate ports;
- fixed BPDU address when using "ether-type=0x88a8" configuration;
- fixed MVRP leave;
- fixed port "point-to-point" status after first link change;
- fixed typo in filter and NAT error message;
- improved system stability when removing MLAG configuration;
- show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached);
- added error message if MLAG peer-port is configured with "mlag-id";
- added MLAG peer-port events to logs;
- added MVRP support;
- do not allow multiple bonds with same "mlag-id";
- improved protocol-mode STP, RSTP and MSTP stability;
- rename monitor property "path-cost" to "actual-path-cost";
- reworked dynamic VLAN creation;
- use default "edge=auto" for dynamically bridged interfaces (PPP, VPLS, WDS);
- use default "edge=auto" for dynamically bridged interfaces (PPP, VPLS, WDS);
- added MLAG support for MSTP bridges;
- avoid per-VLAN host flushing on HW offloaded bridge;
- fixed auto "path-cost" for bonding interfaces (introduced in v7.13);
- fixed MLAG connection after peer-link flap (introduced in v7.13);
- fixed packet forwarding after changing HW offloaded bridge interface settings in certain cases (introduced in v7.13);
- improved bridge VLAN configuration validation;
- improved configuration speed on large VLAN setups;
- improved protocol-mode MSTP functionality;
- improved protocol-mode STP and RSTP functionality;
- make "point-to-point=yes" default value for non-wireless bridge ports;
- removed "mst-config-digest" from MSTI menu;
- try to set wireless bridge ports as edge ports automatically;
- fixed MLAG connection after peer-link flap (introduced in v7.13);
- fixed packet forwarding after changing HW offloaded bridge interface settings in certain cases (introduced in v7.13);
- avoid per-VLAN host flushing on HW offloaded bridge (introduced in v7.13);
- fixed auto "path-cost" for bonding interfaces (introduced in v7.13);
- added automatic "path-cost" values depending on interface rate;
- added bridge interface property "port-cost-mode" with "short" and "long" arguments;
- fixed bogus VLAN entries from wifi when vlan-filtering is not enabled;
- improved HW offload enable;
- improved host flush when removing VLAN on HW offloaded bridge;
- fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
- fixed untagged VLAN entry disable;
- fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
- improved system stability;
- improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
- fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
- fixed untagged VLAN entry disable;
- fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
- improved system stability;
- improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
- added more STP-related logging;
- added warning when VLAN interface list contains ports that are not bridged;
- fixed MAC learning on "switch-cpu" port with enabled FastPath;
- fixed MSTP BPDU aging;
- fixed MSTP synchronization after link down;
- prevent bridging the VLAN interface created on the same bridge;
- fixed HW offloaded STP state on port disable;
- fixed HW offloading for vlan-filtered bridge on devices with multiple switches (introduced in v7.8);
- fixed incorrect host moving between ports with enabled FastPath;
- added warning log when "ageing-time" exceeds supported hardware limit for 98DX224S, 98DX226S, and 98DX3236 switch chips;
- fixed FastPath when setting "use-ip-firewall-for-vlan" or "use-ip-firewall-for-pppoe" without enabled "use-ip-firewall";
- fixed adding disabled MSTI;
- fixed DHCP packet flow when using DHCP snooping, HW offloading and "use-ip-firewall";
- fixed possible DHCP packet corruption when using DHCP snooping;
- fixed PVID warning typo;
- improved HW offloading logic;
- added support for static MDB entries;
- disallow port-controller while the bridge has MSTP enabled;
- fixed "edge=yes" setting for MSTP;
- fixed MSTP compatibility with STP;
- fixed R/M/STP bridge identifier on protocol-mode change;
- fixed RSTP BCP with bridged PPP interfaces;
- fixed STP blocking state on port-controller;
- fixed host moving with fast-path;
- fixed incorrect root port blocking for MSTP;
- fixed master port conversion;
- fixed mst-override port priority for MSTP;
- fixed port priority for STP and RSTP;
- improved port-controller system stability;
- improved system stability when using MSTP and many VLAN mappings;
- removed "age" monitoring property from the host table;
- fixed "new-priority" value validation for NAT rules;
- properly process IPsec decapsulated packets through the firewall when the "use-ip-firewall" option is enabled;
- added more details for loop detection warning;
- do not set VLAN on inactive port with a "set" command;
- fixed TCP, UDP port parsing for loop detect warning;
- fixed packet marking for IP/IPv6 firewall;
- ignore VLAN tagged BPDU;
- added fast-path and inter-VLAN routing FastTrack support when vlan-filtering is enabled;
- fixed FastPath when using "frame-types=admit-only-untagged-and-priority-tagged" setting;
- fixed PPPoE packet forwarding when using "use-ip-firewall-for-pppoe" setting;
- fixed bridge filter and NAT rules on ARM64 and TILE devices;
- fixed destination NAT when using "use-ip-firewall" setting;
- fixed filter and NAT "set-priority" action;
- fixed filter and NAT "set-priority" on ARM64 devices;
- fixed filter rules when using interface lists;
- fixed firewall "ingress-priority" matcher and "new-priority=from-ingress" action settings from VLAN tagged frames;
- fixed priority tagged frame forwarding when using "frame-types=admit-only-untagged-and-priority-tagged" setting;
- fixed destination NAT when using "use-ip-firewall" setting;
- fixed filter rules when using interface lists;
- fixed priority tagged frame forwarding when using "frame-types=admit-only-untagged-and-priority-tagged" setting;
- fixed PPPoE packet forwarding when using "use-ip-firewall-for-pppoe" setting;
- fixed bridge filter and NAT rules on ARM64 and TILE devices;
- fixed filter and NAT "set-priority" action;
- improved system stability when initialising bridge interface
- added IGMP and MLD querier monitoring;
- added IGMP snooping log when multicast table gets full;
- fixed external flag in the host table for wireless clients;
- improved controller bridge stability when adding RouterOS v7 port extender;
- improved port extender stability when creating bond interfaces on excluded ports;
- improved stability when quickly adding and removing bridge interface;
- added MAC and IP source addresses information for DHCP snooping log;
- fixed "vlan-encap" setting for filter and NAT rules;
- improved system stability when using IGMP snooping and changing bridge MAC address;
- improved bridge stability when host changes port (introduced in v6.47);
- added "multicast-router" monitoring value for bridge interface;
- added fixes and improvements for IGMP and MLD snooping;
- added minor fixes and improvements for IGMP snooping with HW offloading;
- added warning message when port is disabled by the BPDU guard;
- allow to exclude interfaces from extended ports;
- automatically remove extended interfaces when deleting PE device from CB;
- correctly filter packets by L2MTU size;
- correctly remove dynamic VLAN assignment for bridge ports;
- fixed "multicast-router" setting on bridge enable;
- fixed MDB entry removal when using bridge port "fast-leave" property;
- fixed dynamic VLAN assignment when changing port "frame-type" property (introduced in v6.46);
- fixed dynamic VLAN assignment when changing port to tagged VLAN member;
- fixed link-local multicast forwarding when IGMP snooping and HW offloading is enabled;
- fixed local MAC address removal from host table when deleting bridge interface;
- fixed multicast table printing;
- improved BPDU guard logging;
- increased multicast table size to 4K entries;
- show "H" flag for extended bridge ports;
- show error when switch do not support controlling bridge or port extension;
- use "frame-types=admit-all" by default for extended bridge ports;
- fixed BPDU guard port disable/enable on HW offloaded interfaces;
- fixed STP alternate and backup port states for devices with switch chip (introduced in v6.47);
- fixed host table update on SNMP query;
- fixed STP alternate and backup port states for devices with switch chip;
- fixed host table update on SNMP query;
- added logging debug message when a host MAC address is learned on a different bridge port;
- added warning message when a bridge port gets dynamically added to VLAN range;
- correctly remove disabled MSTI;
- improved hardware offloading enabling/disabling;
- disable/enable bridge port when setting bpdu-guard;
- do not add bridge as untagged VLAN member when frame-types=admit-only-vlan-tagged;
- do not add dynamically VLAN entry when changing "pvid" property for non-vlan aware bridge;
- include whole VLAN-id in DHCP Option 82 message;
- correctly handle bridge host table;
- correctly display bridge FastPath status when vlan-filtering or dhcp-snooping is used;
- correctly handle bridge host table;
- fixed log message when hardware offloading is being enabled;
- improved stability when receiving traffic over USB modem with bridge firewall enabled;
- fixed possible memory leak when using "ingress-filtering=yes" on bridge interface;
- count routed FastPath packets between bridge ports under FastPath bridge statistics;
- fixed BOOTP packet forwarding when DHCP Snooping is enabled;
- fixed packet forwarding with enabled DHCP Snooping and Option 82;
- fixed possible memory leak when using "ingress-filtering=yes" on bridge interface;
- fixed system's identity change when DHCP Snooping is enabled (introduced in v6.43);
- added option to monitor fast-forward status;
- count routed FastPath packets between bridge ports under FastPath bridge statistics;
- disable fast-forward when using SlowPath features;
- fixed BOOTP packet forwarding when DHCP Snooping is enabled;
- fixed DHCP Option 82 parsing when using DHCP Snooping;
- fixed log message when hardware offloading is being enabled;
- fixed packet forwarding when changing MSTI VLAN mappings;
- fixed packet forwarding with enabled DHCP Snooping and Option 82;
- fixed possible memory leak when using MSTP;
- fixed system's identity change when DHCP Snooping is enabled (introduced in v6.43);
- improved packet handling when hardware offloading is being disabled;
- improved packet processing when bridge port changes states;
- fixed IPv6 link-local address generation when auto-mac=yes;
- properly disable dynamic CAP interfaces;
- do not learn untagged frames when filtering only tagged packets;
- fixed possible memory leak when VLAN filtering is used;
- improved packet handling when hardware offloading is being disabled;
- properly disable dynamic CAP interfaces;
- do not learn untagged frames when filtering only tagged packets;
- fixed possible memory leak when VLAN filtering is used;
- improved packet handling when hardware offloading is being disabled;
- properly forward unicast DHCP messages when using DHCP Snooping with hardware offloading;
- ignore tagged BPDUs when bridge VLAN filtering is used;
- improved packet handling when hardware offloading is being disabled;
- add dynamic CAP interface to tagged ports if "vlan-mode=use-tag" is enabled;
- added an option to manually specify ports that have a multicast router (CLI only);
- added a warning when untrusted port receives a DHCP Server message when DCHP Snooping is enabled;
- added ingress filtering options to bridge interface;
- added initial Q-in-Q support;
- added more options to fine-tune IGMP Snooping enabled bridges (CLI only);
- added per-port based "tag-stacking" feature;
- added support for BPDU Guard;
- added support for DHCP Option 82;
- added support for DHCP Snooping;
- added support for IGMP Snooping fast-leave feature (CLI only);
- fixed dynamic VLAN table entries when using ingress filtering;
- fixed "ingress-filtering", "frame-types" and "tag-stacking" value storing;
- forward LACPDUs when "protocol-mode=none";
- ignore tagged BPDUs when bridge VLAN filtering is used;
- improved packet handling;
- improved packet processing when bridge port changes states;
- improved performance when bridge VLAN filtering is used without hardware offloading;
- renamed option "vlan-protocol" to "ether-type";
- improved bridge port state changing process;
- improved packets processing when bridge port changes states;
- allow to make changes for bridge port when it is interface list;
- fixed FastPath for bridge master interfaces (introduced in v6.42);
- do not allow to add same interface list to bridge more than once;
- fixed LLDP packet receiving;
- fixed processing of fragmented packets when hardware offloading is enabled;
- fixed hardware offloading for MMIPS and PPC devices;
- fixed LLDP packet receiving;
- added host aging timer for CRS3xx and Atheros hw-bridges;
- added per-port forwarding options for broadcasts, unknown-multicasts and unknown-unicasts;
- added per-port learning options;
- added support for static hosts;
- fixed "master-port" configuration conversion from pre-v6.41 RouterOS versions;
- fixed bridge port interface parameter under "/interface bridge host print detail";
- fixed false MAC address learning on hAP ac^2 and cAP ac devices;
- fixed incorrect "fast-forward" enabling when ports were switched;
- fixed MAC learning for VRRP interfaces on bridge;
- fixed reliability on software bridges when used on devices without switch chip;
- hide options for disabled bridge features in CLI;
- show "hw" flags only on Ethernet interfaces and interface lists;
- fixed ARP settings on bridge interfaces (introduced v6.41);
- fixed "mst-override" export;
- fixed allowed MSTI priority values;
- fixed ARP option changing on bridge (introduced v6.41);
- fixed hw-offload disabling for Mediatek and Realtek switches when STP/RSTP configured;
- fixed hw-offload disabling when adding a port with "horizon" set;
- fixed IGMP Snooping after disabling/enabling bridge;
- fixed interface list moving in "/interface bridge port" menu;
- fixed repetitive port "priority" set;
- fixed situation when packet could be sent with local MAC as dst-mac;
- fixed VLAN filtering when "use-ip-firewall" is enabled (introduced in v6.41);
- properly update "actual-mtu" after MTU value changes (introduced v6.41);
- added comment support for VLANs;
- added initial support for hardware "igmp-snooping" on CRS1xx/2xx;
- added support for "/interface list" as a bridge port;
- assume "point-to-point=yes" for all Full Duplex Ethernet interfaces when STP is used (as per standard);
- automatically turn off "fast-forward" feature if both bridge ports have "H" flag;
- changed "Host" and "MDB" table column order;
- disable "hw-offload" when "horizon" or "external-fdb" is set;
- fixed "fast-forward" counters;
- fixed ARP setting (introduced in v6.40rc36);
- fixed connectivity issues when there are multiple VLAN interfaces on bridge;
- fixed hw-offloaded IGMP Snooping service getting stopped;
- fixed multicast forwarding (introduced in v6.40rc36);
- implemented dynamic entries for active MST port overrides;
- implemented software based "igmp-snooping";
- implemented software based MSTP;
- removed "frame-types" and "ingress-filtering" for bridge interfaces (introduced in v6.40rc36);
- set "igmp-snooping=no" by default on new bridges;
- show "admin-mac" only if "auto-mac=no";
- show bridge interface local addresses in the host table;
- fixed connectivity between bridges when "fast-forward" feature is enabled;
- do not add dynamic hardware STP ports if “master-port” is not capable of hardware STP;
- fixed rare crash when hardware STP capable interface gets new “master-port” which already is in bridge;
- fixed rare situation when port flapping occurs on bridge ports;
- fixed STP/RSTP packet receive on all types of bridge ports;
- minor improvements in performance when "master-port" is bridge port;
- disallow manual removal of dynamic bridge ports;
- fixed MAC address learning from switch master-port;
- fixed access loss to device through bridge if master port had a loop (introduced in v6.38);
- fixed rare crash on bridge port removal;
- fixed VLAN BPDU rx and tx when connected to non-RouterOS device with STP functionality;
- require admin-mac to be specified if auto-mac is disabled;
- show bridge port name in port monitor;
- fixed filter Ingress Priority option (broken in 6.36rc8);
- fixed kernel failure when set-priority action was used in bridge firewall;
- fixed power-cycle-ping for bridge ports (was affecting all bridge);
- fixed power-cycle-ping for bridge ports (was affecting all bridge);
- fixed use-ip-firewall-for-vlan in setups with multiple bridges;
- added "Auto Isolate" stp enhancement (802.1q-2011, 13.25.6)
- fixed problem where arp reply-only or disabled mode didn't work and