Version: 7.12
Stable227 changelog entries across 63 component(s)
2023-Nov-09 (2 years ago)
| Component | Change |
|---|---|
| api | fixed fetching objects with warning option from REST API; |
| bfd | fixed sessions when setting VRF; |
| bfd | improved system stability; |
| bgp | fixed "atomic-aggregate" always set in output; |
| bgp | fixed "input.filter-chain" argument selection in VPN configuration; |
| bgp | fixed local and remote port settings for BGP connections; |
| bgp | fixed typos and missing spaces in log messages; |
| bgp | implemented IGP metric sending in BGP messages; |
| bgp | improved logging; |
| bgp | increase "hold-time" limit to 65000; |
| bluetooth | added basic support for connecting to BLE peripheral devices; |
| bluetooth | use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu; |
| bridge | fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11); |
| bridge | fixed untagged VLAN entry disable; |
| bridge | fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10); |
| bridge | improved system stability; |
| bridge | improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11); |
| bth | added "Back To Home" VPN service for ARM, ARM64, and TILE devices; |
| calea | improved system stability when trying to add rules without the CALEA package; |
| certificate | allow to get and maintain Let's Encrypt certificate in IPv6 environment; |
| certificate | allow to remove issued certificates when CRL is not used; |
| certificate | fixed "subject-alt-name" duplicating itself when SCEP is used; |
| certificate | fixed certificate auto renewal via SCEP; |
| certificate | improved certificate validation logging error messages; |
| certificate | log CRL HTTP errors under the "error" logging topic; |
| chr | iavf updated driver to 4.9.1 version; |
| chr | increased OVA default RAM amount from 160MB to 256MB; |
| console | added ":jobname" command; |
| console | added "as-string" and "as-string-value" properties for "get" command; |
| console | added "terminal/ask" command; |
| console | added "transform" property for ":convert" command; |
| console | display "End-User License Agreement" prompt after configuration reset; |
| console | export required properties with default values; |
| console | fixed scheduler "on-event" script highlighting when editing; |
| console | improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation; |
| console | improved multi-argument property parsing into array; |
| console | improved randomness for ":rndstr" and ":rndnum" commands; |
| console | improved stability and responsiveness; |
| console | improved stability when editing long scripts; |
| console | improved stability when using "special-login"; |
| console | improved system stability through RoMON session; |
| console | improved system stability when using autocomplete; |
| console | improved system stability; |
| console | restrict permissions to "read,write,reboot,ftp,romon,test" for scripts executed by DHCP, Hotspot, PPP and Traffic-Monitor services; |
| console | show full date and time in scheduler "next-run" property; |
| dhcp | fixed DHCP server and relay related response delays; |
| rename "address" property to "server"; | |
| ethernet | added "supported" and "sfp-supported" values for "monitor" command; |
| firewall | added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules; |
| flash | show more accurate "total-hdd-space" resource property; |
| gps | expose GPS port for Quectel EM12-G (vendor-id="0x2c7c", device-id="0x0512"); |
| ike1 | fixed invalid key length on phase1 negotiation; |
| ike1 | log an error when non-RSA keys are being used; |
| ike2 | improved rekey collision handling; |
| interface | added "macvlan" interface support; |
| iot | fixed an issue where applying a script to GPIO pin caused GPIO to stop working; |
| iot | fixed behavior where GPIO output state would change on boot; |
| ipsec | fixed Diffie-Hellman public value encoding size; |
| ipsec | fixed IPSec policy when using modp3072; |
| ipsec | fixed minor typo in logs; |
| ipsec | reduce disk writes when started without active configuration; |
| ipv6 | fixed IPv6 RA delay time from 5s to 500ms according to RFC; |
| ipv6 | send RA and RA deprecate messages out three times instead of just once; |
| l3hw | fixed IPv6 route suppression; |
| l3hw | improved system stability during IPv6 route offloading; |
| l3hw | prioritize local IP addresses over the respective /32 and /128 routes; |
| led | fixed "interface-status" configuration for virtual interfaces; |
| led | fixed 5G modem mobile network category LED colours; |
| leds | added "dark-mode" functionality for RBwAPG-5HacD2HnD; |
| leds | added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces; |
| log | improved logging for user actions; |
| lora | added LNS protocol support; |
| lte | added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM; |
| lte | added SINR reporting for FG621-EA modem; |
| lte | changed R11e-LTE ARP behavior to NoArp; |
| lte | fixed 5G data-class reporting for Chateau 5G; |
| lte | fixed APN authentification in multi APN setup for R11e-LTE6; |
| lte | fixed FG621-EA possible timeouts during firmware upgrade; |
| lte | fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN; |
| lte | fixed RSSI for FG621-EA modem to show the correct value; |
| lte | fixed Sierra modem detection for modems with vendor-specific USB descriptors; |
| lte | fixed Sierra modem initialization; |
| lte | fixed startup race condition when SIM card is in "up" slot for LtAP mini; |
| lte | fixed sub-interface auto-removal in multiple APN setups; |
| lte | show correct data class when connected to 5G SA network; |
| lte | use more compact logging messages; |
| modbus | added additional security settings for Modbus TCP; |
| mpls | added option to match and set MPLS EXP with bridge and mangle rules; |
| mpls | fixed "propagate-ttl=no" setting; |
| mpls | improved FastPath next-hop selection hash algorithm; |
| mqtt | added on-message feature for subscribed topics; |
| mqtt | added parallel-scripts-limit parameter to set maximum allowed number of scripts executed at the same time; |
| mqtt | added wildcard topic subscription support; |
| netinstall | added option to discard branding package; |
| netinstall | display package filename in GUI Description column if package description is not specified; |
| netinstall-cli | added empty configuration option "-e"; |
| netinstall-cli | added option to discard branding package; |
| netinstall-cli | allow ".rsc" script filenames; |
| netinstall-cli | prioritise interface option over address option; |
| netinstall-cli | updated configuration option description; |
| netwatch | decreased "thr-tcp-conn-time" maximum limit to 30 seconds; |
| ospf | fixed adding ECMP routes; |
| ospf | fixed BFD on virtual-link with configured VRF; |
| ospf | fixed OSPFv3 authentication header length calculation; |
| ospf | fixed OSPFv3 not working with NSSA areas; |
| ospf | fixed parsing of opaque LSAs used by TE; |
| ospf | fixed translated NSSA routes not showing in backbone; |
| ovpn | added "tls-auth" option support for imported .ovpn profiles; |
| ovpn | improved system stability; |
| pimsm | fixed BSR update process; |
| pimsm | fixed UIB update process; |
| pimsm | improved system stability; |
| poe-out | driver optimization for AF/AT controlled boards; |
| poe-out | fixed rare CRS328 poe-out menu and poe-out port config loss after reboot; |
| poe-out | improved "auto" mode for devices with single PoE-out port; |
| poe-out | removed "auto" mode support for L009 devices; |
| port | add support for Huawei MS237h-517; |
| port | expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM; |
| qsfp | added 50Gbps rate support for QSFP28 interfaces; |
| qsfp | fixed incorrect QSFP temperature readings in negative temperature; |
| qsfp | improved auto link detection for AOC cables; |
| qsfp | use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled); |
| quickset | fixed "LAN" interface list members if configuration does not contain bridge; |
| rip | added BFD support; |
| rip | fixed session not working in VRF; |
| route | added "single-process" configuration setting, enabled by default on devices with 64MB or less RAM memory; |
| route | added "suppress-hw-offload" setting for IPv6 routes; |
| route | fixed gateway after link restart; |
| route | removed deprecated "received-from" property; |
| route | reverse community "delete" and "filter" command behavior; |
| routerboard | added "reset-button" support for RB800, RB1100 and RB1100AHx2 devices; |
| routerboard | fixed "reset-button" support for wAP ac and wAP R ac devices; |
| sfp | added 5Gbps rate for SFP+ interface on 98DX224S, 98DX226S, and 98DX3236 switch chips; |
| sfp | fixed missing "rx-power" monitor with certain modules (introduced in v7.10); |
| sfp | fixed occasional bad EEPROM data reading for L009 devices; |
| sfp | improved interface stability for SFP and QSFP types of interfaces; |
| sfp | improved system stability with certain modules for 98DX224S, 98DX226S, 98DX3236, 98DX8216 and 98DX8208 switch chips; |
| snmp | changed "mtxrGaugeValue" type to integer; |
| ssh | added support for user ed25519 public keys; |
| ssh | allow to specify key owner on import; |
| ssh | fixed SSH tunnel performance (introduced in v7.10); |
| ssh | improved connection stability when pasting large chunks of text into console; |
| supout | added interface list members section; |
| supout | added LLDP power to supout.rif; |
| supout | fixed BFD section; |
| switch | improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips; |
| switch | improved switch chip stability for CCR2004-16g-2s+ devices; |
| system | fixed process multithreading (introduced in v7.9); |
| system | improved system stability during booting for L009 devices; |
| system | improved system stability when MD5 checksums are used; |
| tftp | fixed empty file name matching; |
| tile | improved system stability when using queues; |
| traffic-generator | added "priority" property for "inject" command; |
| traffic-generator | fixed traffic-generator on CHR and x86; |
| usb | added support for RTL8153 USB ethernet on ARM, ARM64 and x86; |
| vrf | limit maximum VRFs to 1024; |
| vxlan | improved system stability for Tile devices; |
| webfig | fixed "Days" property configuration change under "IP/Firewall" menu; |
| webfig | fixed timezone for interface "Last Link Down/Up Time"; |
| webfig | improved Webfig performance and responsiveness; |
| webfig | try to re-establish connection after disconnect; |
| wifiwave2 | added an alternative QoS priority assignment mechanism based on IP DSCP; |
| wifiwave2 | added comment property for registration-table; |
| wifiwave2 | added station-bridge interface mode; |
| wifiwave2 | correctly add interface to specified "datapath.interface-list"; |
| wifiwave2 | do not show default "l2mtu" on compact export; |
| wifiwave2 | enable changing interface MTU and L2MTU; |
| wifiwave2 | fixed malformed Interworking packet elements; |
| wifiwave2 | fixed PTK renewal for interfaces in station mode; |
| wifiwave2 | fixed re-connection failures for 802.11ax interfaces in station mode; |
| wifiwave2 | fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios; |
| wifiwave2 | fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge; |
| wifiwave2 | fixed warning on CAP devices when radar detected; |
| wifiwave2 | implemented an option to transmit IP multicast packets as unicasts; |
| wifiwave2 | improved compliance with regulatory requirements; |
| wifiwave2 | limit L2MTU to 1560 until a fix is available for a bug causing interfaces to fail transmitting larger frames than that; |
| wifiwave2 | list APs with a higher maximum data rate as more preferable roaming candidates; |
| wifiwave2 | log more information regarding authentication failures; |
| wifiwave2 | make 4-way handshake procedure more robust when acting as supplicant (client); |
| wifiwave2 | use CAPsMAN's "datapath.vlan-id" on CAP for bridge port "pvid"; |
| winbox | added "Addresses" property under "Routing/BFD/Configuration" menu; |
| winbox | added "BUS" property for USB Power Reset button for LtAP-2HnD and CCR1072; |
| winbox | added "Comment" under "Routing/BFD/Configuration" menu; |
| winbox | added "g" flag under "IPv6/Routes" menu; |
| winbox | added "Host Key Type" setting under "IP/SSH" menu; |
| winbox | added "Key Owner" setting under "System/User/SSH Keys" and "System/User/SSH Private Keys" menus; |
| winbox | added "Name Format" property under "WifiWave2/Provisioning" menu; |
| winbox | added "Remote Min Tx" parameter under "Routing/BFD/Session" menu; |
| winbox | added "Startup Delay" setting under "Tools/Netwatch" menu; |
| winbox | added "USB" button under "System/RouterBOARD" menu for LtAP-2HnD; |
| winbox | added "Use BFD" setting under "Routing/RIP/Interface-Template" menu; |
| winbox | added Enable/Disable button under "Routing/RIP/Static Neighbors" menu; |
| winbox | added missing properties under "WifiWave2" menu; |
| winbox | added MQTT subscription menu; |
| winbox | allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus; |
| winbox | allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu; |
| winbox | allow to specify server as DNS name under "Tools/Email" menu; |
| winbox | changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu; |
| winbox | do not show "F" flag for disabled entries under "IP/Routes" menu; |
| winbox | fixed "Address" property under "WifiWave2/Remote-CAP" menu; |
| winbox | fixed "Do" property under "Routing/Filters/Select Rule" menu; |
| winbox | fixed "Group Key Update" maximum value under "WifiWave2/Security" menu; |
| winbox | fixed "Range" property under "Routing/Filters/Num Set" menu; |
| winbox | fixed "Switch" menu for CCR2004-16G-2S+; |
| winbox | fixed entry numbering and ordering under "WifiWave2/Provisioning" menu; |
| winbox | fixed minor typos; |
| winbox | improved support for certain properties under "WifiWave2/Interworking Profiles" menu; |
| winbox | rename "DSCP" setting to "DSCP (+ECN)" under "Tools/Traffic-Generator/Packet-Templates" menu; |
| winbox | rename "Name" setting to "List" under "IP,IPv6/Firewall/Address-List" menu; |
| winbox | rename "Password" button to "Change Now" under "System/Password" menu; |
| winbox | show "unknown" value for "FS" property under "System/Disks" menu if the data is not available; |
| wireguard | added "auto" and "none" parameter for "private-key" and "presharde-key" parameters; |
| wireguard | added "wg-export" and "wg-import" functionality (CLI only); |
| wireguard | allow to specify client settings under peer menu which will be included in configuration file and QR code; |
| wireguard | request public or private key to be specified in order to create peer; |
| wireless | added more "radius-mac-format" options (CLI only); |
| wireless | fixed malformed Interworking packet elements; |
| www | fixed allowed address setting for REST API users; |
| www | fixed fragmented POST data for SCEP service; |
| x86 | added support for Mellanox ConnectX-6 Dx NIC; |
| x86 | i40e updated driver to 2.23.17 version; |
| x86 | igb updated driver to 5.14.16 version; |
| x86 | igbvf updated driver from in-tree Linux kernel; |
| x86 | igc updated driver to 5.10.194 version; |
| x86 | ixgbe updated driver to 5.19.6 version; |
| x86 | Realtek r8169 updated driver; |
| x86 | updated latest available pci.ids; |