Version: 6.48
Stable189 changelog entries across 56 component(s)
2020-Dec-22 (5 years ago)
| Component | Change |
|---|---|
| arm | added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices; |
| arm | improved system stability; |
| arm | improved watchdog and kernel panic reporting in log after reboots on IPQ4018/IPQ4019 devices; |
| arm64 | improved reboot reason reporting in log; |
| bgp | fixed VPNV4 RD byte order; |
| bonding | added LACP monitoring; |
| branding | fixed LCD logo loading from new style branding package; |
| bridge | added "multicast-router" monitoring value for bridge interface; |
| bridge | added fixes and improvements for IGMP and MLD snooping; |
| bridge | added minor fixes and improvements for IGMP snooping with HW offloading; |
| bridge | added warning message when port is disabled by the BPDU guard; |
| bridge | allow to exclude interfaces from extended ports; |
| bridge | automatically remove extended interfaces when deleting PE device from CB; |
| bridge | correctly filter packets by L2MTU size; |
| bridge | correctly remove dynamic VLAN assignment for bridge ports; |
| bridge | fixed "multicast-router" setting on bridge enable; |
| bridge | fixed MDB entry removal when using bridge port "fast-leave" property; |
| bridge | fixed dynamic VLAN assignment when changing port "frame-type" property (introduced in v6.46); |
| bridge | fixed dynamic VLAN assignment when changing port to tagged VLAN member; |
| bridge | fixed link-local multicast forwarding when IGMP snooping and HW offloading is enabled; |
| bridge | fixed local MAC address removal from host table when deleting bridge interface; |
| bridge | fixed multicast table printing; |
| bridge | improved BPDU guard logging; |
| bridge | increased multicast table size to 4K entries; |
| bridge | show "H" flag for extended bridge ports; |
| bridge | show error when switch do not support controlling bridge or port extension; |
| bridge | use "frame-types=admit-all" by default for extended bridge ports; |
| cap | fixed L2MTU setting from CAPsMAN; |
| certificate | clear challenge password on renew; |
| certificate | fixed CRL URL length limit; |
| certificate | fixed private key verification for CA certificate during signing process; |
| certificate | generate CRL even when CRL URL not specified; |
| certificate | properly flush expired SCEP OTP entries; |
| chr | fixed SSH key import on Azure; |
| chr | fixed VLAN tagged packet transmit on bridge for Hyper-V installations; |
| chr | improved interface loading on startup on XEN; |
| chr | improved system stability when changing flow control settings on e1000; |
| cloud | improved backup generation process; |
| conntrack | automatically reduce connection tracking timeouts when table is full; |
| console | allow "once" parameter for bonding monitoring; |
| crs3xx | added initial Bridge Port Extender support; |
| crs3xx | added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | added switch-cpu port VLAN filtering (switch-cpu port is now mapped with bridge interface VLAN membership when vlan-filtering is enabled); |
| crs3xx | correctly filter packets by L2MTU size; |
| crs3xx | fixed "custom-drop-packet" and "not-learned" switch stats for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed "mirror-source" property on switch port disable for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | fixed "storm-rate" traffic limiting for switch-cpu port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed "switch-cpu" VLAN membership on bridge disable; |
| crs3xx | fixed CDP packet forwarding for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices; |
| crs3xx | fixed duplicate host entries when creating static switch hosts; |
| crs3xx | fixed port isolation for "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices; |
| crs3xx | fixed port isolation removal for "switch-cpu" port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices; |
| crs3xx | fixed switch "copy-to-cpu" property for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices; |
| crs3xx | fixed switch "not-learned" stats for CRS305, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, CRS318 devices; |
| crs3xx | improved system stability on CRS354 devices; |
| crs3xx | improved system stability when receiving large frames for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v6.47.5); |
| defconf | fixed default configuration loading on RBcAP-2nD and RBwAP-2nD; |
| defconf | fixed static IP address setting in case default configuration loading fails; |
| defconf | improved CAP interface bridging; |
| defconf | improved default configuration generation on devices with non-default wireless interface names; |
| detnet | fixed malformed dummy DHCP User Class option; |
| detnet | use MAC address from bridge interface instead of slave port; |
| dhcp | fixed DHCP packet forwarding to IPsec policies; |
| dhcpv4-server | improved "client-id" value parsing; |
| dhcpv6 server | added support for "Delegated-IPv6-Prefix" for PPP services; |
| dhcpv6-server | added ability to generate binding on first request; |
| dhcpv6-server | added support for "option18" and "option37" for RADIUS managed clients; |
| dhcpv6-server | allow loose static binding "pool" parameter (introduced in v6.46.8); |
| dhcpv6-server | make sure that calling station ID always contains DUID; |
| discovery | added "lldp-med-net-policy-vlan" property for assigning VLAN ID; |
| discovery | allow choosing which discovery protocol is used; |
| discovery | fixed discovery on mesh ports; |
| discovery | fixed discovery packet sending on newly bridged port with "protocol-mode=none"; |
| discovery | fixed discovery when enabled only on master port; |
| discovery | send the same "Chassis ID" on all interfaces for LLDP packets; |
| discovery | use interface MAC address when sending MNDP from slave port; |
| disk | fixed external EXT3 disk mounting on x86 systems; |
| dns | added IPv6 support for DoH; |
| dns | do not use type "A" for static entries with unspecified type; |
| dns | end ongoing queries when changing DoH configuration; |
| dns | fixed listening for DNS queries when only dynamic static entries exist (introduced in v6.47); |
| dot1x | accept priority tagged (VLAN 0) EAP packets on dot1x client; |
| dot1x | fixed reauthentication after server rejects a client into VLAN; |
| dot1x | fixed unicast destination EAP packet receiving when a client is running on a bridge port; |
| dude | fixed configuration menu presence on ARM64 devices; |
| export | fixed RouterBOARD USB "type" parameter export; |
| filesystem | fixed repartition on RB4011 series devices; |
| filesystem | fixed repartition on non-first partition; |
| filesystem | improved long-term filesystem stability and data integrity; |
| gps | fixed "init-channel" release when not used; |
| health | changed PSU state parameter type to read-only; |
| health | removed unused "heater-control" and "heater-threshold" parameters; |
| hotspot | fixed "html-directory" parameter export; |
| hotspot | improved management service stability when receiving bogus packets; |
| hotspot | added "vlan-id" parameter support for hosts and HTML pages; |
| hotspot | added support for captive portal advertising using DHCP (RFC7710); |
| ike1 | fixed "my-id=address" parameter usage together with certificate authentication; |
| ike1 | fixed 'rsa-signature-hybrid' authentication method; |
| ike1 | fixed memory leak on multiple CR payloads; |
| ike1 | fixed policy update with and without mode configuration; |
| ike1 | rekey phase 1 as responder for Windows initiators; |
| ike2 | added "prf-algorithm" support for phase 1; |
| ike2 | added support for IKEv2 Message Fragmentation (RFC7383); |
| ike2 | fixed EAP MSK length validation; |
| ike2 | fixed too small payload parsing; |
| ike2 | improved EAP message integrity checking; |
| ike2 | improved child SA rekeying process; |
| interface | added temperature warning and interface disable on overheat for SFP and SFP+ interfaces (CLI only); |
| interface | fixed pwr-line running state (introduced in v6.45); |
| ipsec | added SHA384 hash algorithm support for phase 1; |
| ipsec | do not kill connection when peer's "name" or "comment" is changed; |
| ipsec | fixed client certificate usage when certificate is renewed with SCEP; |
| ipsec | fixed multiple warning message display for peers; |
| ipsec | inactivate peer's policy on disconnect; |
| ipsec | refresh peer's DNS only when phase 1 is down; |
| kidcontrol | allow creating static device entries without assigned user; |
| led | fixed state persistence after device reboot on NetMetal 5 ac devices; |
| lora | fixed device going into "ERROR" state caused by FSK modulated downlinks; |
| lora | limited output power in RU region for range 868.7 MHz - 869.2 MHz according to regulations; |
| lte | added "age" column and "max-age" parameter to "cell-monitor" (CLI only); |
| lte | added "comment" parameter for APN profiles; |
| lte | added support for Alcatel IK41VE1; |
| lte | fixed "band" value reporting; |
| lte | increased "at+cops" reply timeout to 90 seconds; |
| m33g | added support for "/system gpio" menu (CLI only); |
| metarouter | allow creating RouterOS metarouter instances on devices with 16MB flash storage; |
| metarouter | fixed memory leak when tearing down metarouter instance; |
| ppp | added "bridge-learning" parameter support; |
| ppp | added "ipv6-routes" parameter to "secrets" menu; |
| ppp | added support for "Framed-IPv6-Route" RADIUS attribute; |
| ppp | store "last-caller-id" for PPP secrets; |
| ppp | store "last-disconnect-reason" for PPP secrets; |
| profile | added "lcd" process classificator; |
| profile | improved idle process detection on x86 processors; |
| profile | improved process classification on ARM devices; |
| quickset | added "Port Mapping" to QuickSet; |
| quickset | fixed local IP address setting on master interface; |
| route | improved stability when 6to4 interface is configured with disabled IPv6 package; |
| routerboard | fixed PCIe bus reset during power-on on MMIPS devices ("/system routerboard upgrade" required); |
| routerboard | force power-down on PCIe bus during reboot on LHGR devices ("/system routerboard upgrade" required); |
| script | added error message in the logs if startup script runtime limit was exceeded; |
| snmp | added information from IPsec "active-peers" menu to MIKROTIK-MIB; |
| snmp | added new LTE monitoring OID's to MIKROTIK-MIB; |
| snmp | fixed value types for "dot1dStp"; |
| snmp | fixed value types for "dot1qPvid"; |
| ssh | fixed returned output saving to file when "output-to-file" parameter is used; |
| ssh | skip interactive authentication when not running in interactive mode; |
| supout | added bonding interface monitor information; |
| supout | improved autosupout.rif file generation process; |
| timezone | updated timezone information from "tzdata2020d" release; |
| tr069-client | added "X_MIKROTIK_MimoRSRP" parameter for LTE RSRP value reporting; |
| tr069-client | added LTE model and revision parameters; |
| tr069-client | added additional wireless registration table parameters; |
| tr069-client | added branding package build time parameter; |
| tr069-client | added wireless "noise-floor" and "overall-tx-ccq" information parameters; |
| tr069-client | allow passing LTE firmware update URL as XML; |
| tr069-client | fixed RouterOS downgrade procedure; |
| tr069-client | fixed TotalBytesReceived parameter value; |
| tr069-client | send correct "ConnectionRequestURL" when using IPv6; |
| traffic-flow | added "sys-init-time" parameter support; |
| traffic-flow | added NAT event logging support for IPFIX; |
| traffic-generator | fixed 32Gbps limitation; |
| user-manager | do not allow creating limitation that crosses midnight; |
| user-manager | updated PayPal's root certificate authorities; |
| webfig | allow hiding QuickSet mode selector; |
| webfig | allow hiding and renaming inline buttons; |
| webfig | fixed default value presence when creating new entries under "IP/Kid Control"; |
| webfig | properly stop background processes when switching away from QuickSet tab; |
| winbox | added "src-mac-address" parameter under "IP/DHCP-Server/Leases" menu; |
| winbox | added missing IGMP Snooping settings to "Bridge" menu; |
| winbox | added missing MSTP settings to "Bridge" menu; |
| winbox | added support for LTE Cell Monitor; |
| winbox | allow adding bonding interface with one slave interface; |
| winbox | allow performing "USB Power Reset" on "0" bus on RBM33G; |
| winbox | do not show "network-mode" parameter for LTE interfaces that do not support it; |
| winbox | fixed "IP->Kid Control->Devices" table automatic refreshing; |
| winbox | fixed "interface" and "on-interface" parameter presence under "Bridge/Hosts" menu; |
| winbox | fixed "receive-errors" setting persistence under "Wireless/Wireless Sniffer/Settings" menu; |
| winbox | fixed "tls-version" parameter setting under "IP/Services" menu; |
| winbox | fixed minor typo in "Users" menu; |
| winbox | provide sane default values for bridge "VLAN IDs" parameter; |
| winbox | use health values reported by gauges for "System/Health" menu; |
| wireless | added U-NII-2 support for US and Canada country profiles for mANTBox series devices; |
| wireless | create "connect-list" rule when address specified for "setup-repeater"; |
| wireless | do not override MTU and ARP values from CAPsMAN with local forwarding; |
| wireless | improved WPS process stability; |
| wireless | increased "group-key-update" maximum value to 1 day; |
| wireless | updated "indonesia5" regulatory domain information; |
| wireless | updated "no_country_set" regulatory domain information; |