Version: 6.38
Stable150 changelog entries across 57 component(s)
2016-Dec-30 (9 years ago)
| Component | Change |
|---|---|
| arp | added "local-proxy-arp" feature; |
| bonding | added "forced-mac-address" option; |
| bonding | fixed "tx-drop" on VLAN over bonding on x86; |
| bridge | fixed rare crash on bridge port removal; |
| bridge | fixed VLAN BPDU rx and tx when connected to non-RouterOS device with STP functionality; |
| bridge | require admin-mac to be specified if auto-mac is disabled; |
| bridge | show bridge port name in port monitor; |
| capsman | added "group-key-update" parameter; |
| capsman | added possibility to change arp, mtu, l2mtu values in datapath configuration; |
| capsman | fixed CAP upgrade when separate wireless package is used (introduced in 6.37); |
| capsman | use correct source address in reply to unicast discovery requests; |
| ccr | added AHCI driver for Samsung XP941 128GB AHCI M.2; |
| certificates | added support for PKCS#12 export; |
| certificates | allow import multiple certs with the same key; |
| certificates | fixed crash when crl is removed while it is being fetched; |
| certificates | fixed trust chain update on local certificate revocation in programs using ssl; |
| certificates | if no name provided create certificate name automatically from certificate fields; |
| console | fixed multi argument value unset; |
| crs | added comment ability in more switch menus; |
| crs | fixed rare kernel failure on switch reset (for example, reboot); |
| dhcp | fixed DNS server assignment to client if dynamic server exists and is from another IP family; |
| dhcp | fixed issue when dhcp-client was still possible on interfaces with "slave" flag and using slave interface MAC address; |
| dhcp | show dhcp server as invalid and log an error when interface becomes a slave; |
| dhcp-server | fixed when wizard was unable to create pool >dhcp_pool99; |
| discovery | added LLDP support; |
| discovery | removed 6to4 tunnels from "/ip neighbor discovery menu"; |
| dns | added "max-concurrent-queries" and "max-concurrent-tcp-sessions" settings; |
| dude | (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112599); |
| ethernet | added "k" and "M" unit support to Ethernet Bandwidth setting; |
| ethernet | fixed "tx-fcs-error" on SFP+ interfaces when loop-protect is enabled; |
| export | do not show interface comment in "/ip neighbor discovery" menu; |
| export | updated default values to clean up export compact; |
| fastpath | fixed rare crash; |
| fastpath | fixed x86 bridge fast-path status shown as active even if it is manually disabled; |
| file | fixed file manager crash when file transfer gets cancelled; |
| firewall | added "creation-time" to address list entries; |
| firewall | added sctp/dccp/udp-lite support for "src-port", "dst-port", "port" and "to-ports" firewall options; |
| firewall | do not defragment packets which are marked with "notrack" in raw firewall; |
| firewall | fixed "time" option by recognizing weekday properly (introduced in v6.37.2); |
| firewall | fixed dynamic raw rule behaviour; |
| firewall | fixed rule activation if "time" option is used and no other active rules are present; |
| firewall | increased max size of connection tracking table to 1048576; |
| firewall | new faster "connection-limit" option implementation; |
| firewall | significantly improved large firewall rule set import performance; |
| graphing | fixed queue graphs showing up in web interface if aggregate name size >57840 symbols; |
| health | show power consumption on devices which has voltage and current monitor; |
| hotspot | fixed nat rule port setting in "hs-unauth-to" chain by changing it from "dst-port" to "src-port" on Walled Garden ip "return" rules; |
| interface | changed loopback interface mtu to 1500; |
| interface | do not treat multiple zeros as single zero on name comparison; |
| interface | show link stats in "/interface print stats-detail" output; |
| ipsec | added ability to specify static IP address at "send-dns" option; |
| ipsec | added ph2 accounting for each policy "/ip ipsec policy ph2-count"; |
| ipsec | allow to specify explicit split dns address; |
| ipsec | changed logging topic from error to debug when empty pfkey messages are received; |
| ipsec | do not auto-negotiate more SAs than needed; |
| ipsec | ensure generated policy refers to valid proposal; |
| ipsec | fixed camellia crypto algorithm module loading; |
| ipsec | fixed IPv6 remote prefix; |
| ipsec | fixed kernel failure on tile with sha256 when hardware encryption is not being used; |
| ipsec | fixed peer configuration my-id IPv4 address endianness; |
| ipsec | fixed ph2 auto-negotiation by checking policies in correct order; |
| ipsec | load ipv6 related modules only when ipv6 package is enabled; |
| ipsec | make generated policies always as unique; |
| ipsec | non passive peers will also establish SAs from policy without waiting for the first packet; |
| ipsec | optimized logging under ipsec topic; |
| ipsec | show active flag when policy has active SA; |
| ipsec | show SA "enc-key-size"; |
| ipsec | split "mode-config" and "send-dns" arguments; |
| ipv6 | added "no-dad" setting to ipv6 addresses; |
| ipv6 | fixed "accept-router-advertisements" behaviour; |
| ipv6 | moved empty IPv6 pool error message to error topic; |
| lcd | improved performance, causes less cpu load; |
| led | fixed dark mode for cAP 2nD (http://wiki.mikrotik.com/wiki/Manual:System/LEDS#Leds_Setting); |
| log | fixed "System rebooted because of kernel failure" message to show after 1st crash reboot; |
| lte | added support for more Vodafone K4201-Z, Novatel USB620L, PANTECH UML295 and ZTE MF90 modems; |
| lte | allow to execute concurrent info commands; |
| lte | fixed dwm-222, Pantech UML296 support; |
| lte | fixed init delay after power reset; |
| lte | increased delay when setting sms send mode; |
| lte | return info data when all the fields are populated; |
| metarouter | fixed startup process (introduced in 6.37.2); |
| mmips | fixed traffic accounting in "/interface" menu; |
| ospf | fixed route crash caused by memory corruption when there are multiple active interfaces; |
| ppp | fixed packet size calculation when MRRU is set (was 2 bytes bigger than MTU allows); |
| ppp | significantly improved shutdown speed on servers with many active tunnels; |
| ppp | significantly improved tunnel termination process on servers with many active tunnels; |
| profile | added "bfd" and "remote-access" processes; |
| profile | added ability to monitor cpu usage per core; |
| profile | make profile work on mmips devices; |
| profile | properly classify "wireless" processes; |
| queue | fixed "time" option by recognizing weekday properly (introduced in v6.37.2); |
| radius | added IPSec service (cli only); |
| rb750Gr3 | fixed ipsec with 3des+md5 to work on this board; |
| rb850Gx2 | fixed pcb temperature monitor if temperature was above 60C; |
| resolver | ignore cache entries if specific server is used; |
| routerboot | show log message if router CPU/RAM is overclocked; |
| script | increment run count value when script is executed from snmp; |
| snmp | always report bonding speed as speed from first bonding slave; |
| snmp | fixed rare crash when incorrectly formatted packet was received; |
| snmp | provide sinr in lte table; |
| ssh | added routing-table setting (cli only); |
| ssh | fixed lost "/ip ssh" settings on upgrade from version older than 5.15; |
| system | reboot device on critical program crash; |
| tile | fixed kernel failure when when IPv6 ICMP packet is sent through PPP interface; |
| time | updated time zones; |
| traceroute | fixed memory leak; |
| traffic-flow | fixed flow sequence counter and length; |
| trafficgen | fixed compact export when "header-stack" includes tcp; |
| trafficgen | fixed crash when IPv6 traffic is processed; |
| trafficgen | fixed potential crash when very big frame is generated; |
| trafficgen | improved fastpath support; |
| tunnel | fixed transmit packets occasionally not going through fastpath; |
| tunnel | properly export keepalive value; |
| usb | fixed kernel failure when Nexus 6P device is removed; |
| users | added minimal required permission set for full user group; |
| users | added TikApp policy; |
| vlan | allow to add multiple VLANs which name starts with same number and has same length; |
| vrrp | do not show unrelated log warning messages about version mismatch; |
| watchdog | do not send supout file if "auto-send-supout" is disabled; |
| webfig | added extra protection against XSS exploits; |
| webfig | show ipv6 addresses correctly; |
| webfig | show properly interface last-link-up/down times; |
| winbox | added "Complete" flag to arp table; |
| winbox | added "untracked" option to firewall "connection-state" setting; |
| winbox | added Dude icon to Dude menu; |
| winbox | allow to enable/disable traffic flow targets; |
| winbox | allow to run profile from "/system resources" menu; |
| winbox | allow to specify interface for leds with "interface-speed" trigger; |
| winbox | do not allow to set "loop-protect-send-interval" to 0s; |
| winbox | do not show hotspot user profile incoming and outgoing filters and marks as set if there is no value specified; |
| winbox | fixed crash when legacy Winbox version was used; |
| winbox | fixed default values for interface "loop-protect-disable-time" and "loop-protect-send-interval"; |
| winbox | fixed missing "IPv6/Settings" menu; |
| winbox | fixed typo in "propagate-ttl" setting; |
| winbox | make cert signing include provided ca-crl-host; |
| winbox | moved ipsec peer "exchange-mode" to General tab; |
| winbox | properly show VHT basic and supported rates in CAPsMAN; |
| winbox | removed spare values from loop-protect menu; |
| winbox | show all related HT tab settings in 2GHz-g/n mode; |
| winbox | show primary and secondary ntp addresses as 0.0.0.0 if none are set; |
| winbox | show proper ipv6 connection timeout; |
| wireless | added API command to report country-list (/interface/wireless/info/country-list); |
| wireless | added CRL checking for eap-tls; |
| wireless | fixed action frame handling for WDS nodes; |
| wireless | fixed custom channel extension-channel appearance in console; |
| wireless | fixed full "spectral-history" header print on AP modes; |
| wireless | fixed rare kernel failure when connecting to nv2 access point with legacy rate select; |
| wireless | fixed upgrade from older wireless packages when AP interface had empty SSID; |
| wireless | take in account channel width when returning supported channels; |
| wireless | use VLAN ID 0 in RADIUS message to disable VLAN tagging; |