What's new in 6.46.7 (2020-Sep-07 07:38):

Important note!!!

- The Dude server must be updated to monitor v6.46.4+ and v6.47beta30+ RouterOS type devices.
- The Dude client must be manually upgraded after upgrading The Dude server.
- The Dude requires "winbox" policy instead of "dude" to monitor v6.46.4+ and v6.47beta30+ RouterOS type devices.

Changes since 6.46.6:

*) arm - improved stability when forcing 25G speed on unsupported interface;
*) bridge - fixed host table update on SNMP query;
*) bridge - fixed STP alternate and backup port states for devices with switch chip;
*) crs3xx - fixed hardware offloaded MPLS forwarding when using bonding interfaces;
*) crs3xx - fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+;
*) crs3xx - fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
*) crs3xx - improved 10G interface initialization on CRS312 devices;
*) crs3xx - improved Ethernet port group traffic forwarding on CRS354 devices;
*) crs3xx - improved system stability when using hardware offloaded MPLS;
*) defconf - fixed default configuration loading on RBmAPL-2nD;
*) dhcpv6-server - disallow changing binding's "prefix-pool";
*) dhcpv6-server - do not require "server" parameter for bindings;
*) discovery - do not send discovery packets on inactive bonding slave interfaces;
*) discovery - do not send discovery packets on interfaces that are blocked by STP;
*) dot1x - fixed duplicate EAP request packets for server;
*) dot1x - fixed EAP packet version numbering;
*) email - added support for multiple "to" recipients;
*) export - fixed HotSpot "address-per-mac" parameter export;
*) fetch - show status "uploaded" instead of "downloaded" when uploading a file;
*) ftp - fixed possible buffer overflow;
*) hotspot - ignore packets from host while MAC authentication is in progress;
*) ike1 - improved stability when performing policy lookup on non-existant peer;
*) ike2 - fixed local side NAT detection;
*) ike2 - fixed policy reference for pending acquire;
*) ike2 - retry RSA signature validation with deduced digest from certificate;
*) interface - added new builtin "static" interface list;
*) kidcontrol - fixed "time-unlimited-rate" to engage in correct time;
*) lcd - improved general system stability when LCD is not present;
*) lte - fixed modem initialization when multiple modems are used simultaneously;
*) lte - fixed PDP authentication configuration for SIM7600;
*) lte - improved stability during firmware upgrade;
*) metarouter - fixed image importing (introduced in v6.46);
*) ospf - fixed disappearing NSSA default route;
*) ospf - fixed processing of "unknown" LSA type;
*) ospf - improved route tag processing for OSPFv3;
*) poe - fixed "power-cycle" functionality on hEX PoE, PowerBox Pro and OmniTIK 5 PoE ac;
*) port - removed serial console port on hEX S;
*) ppp - removed "comment", "set" and "edit" commands from "PPP->Active" menu;
*) profile - added support for CCR2004-1G-12S+2XS;
*) qsfp - fixed auto-negotiation status;
*) quickset - fixed invalid configuration applying when performing changes during LTE modem initialization process;
*) quickset - show "Antenna Gain" setting on devices without built-in antennas;
*) route - improved stability when 6to4 interface is configured with disabled IPv6 package;
*) routerboard - fixed "reset-button" menu presence on all devices;
*) routerboot - fixed etherboot FCS errors with 100Mbps rate for CRS305, CRS309 and CRS317 devices ("/system routerboard upgrade" required);
*) sfp - stabilized CRS212 SFP port functionality and improved monitoring of optical modules;
*) smb - fixed file path validation (introduced in v6.46);
*) smb - fixed possible memory leak (CVE-2020-11881);
*) smb - limit active session count to 5 per connection;
*) sniffer - allow setting port for "streaming-server";
*) snmp - added "dot1qTpFdbTable" OID reporting for Q-BRIDGE-MIB;
*) switch - correctly enable and disable CPU Flow Control on RB3011UiAS;
*) switch - fixed MAC address learning on switch-cpu port for Atheros8316, Atheros8227 and Atheros7240 switch chips;
*) upgrade - fixed space handling in package file names;
*) w60g - added "mdmg-fix" parameter for RBwAP60Gx3 (CLI only);
*) w60g - improved rate selection in low traffic conditions;
*) webfig - fixed 5 GHz wireless interface "frequency" parameter value list on Audience;
*) winbox - added "region" parameter for W60G interfaces;
*) winbox - allow to specify any Ethernet like interface under "Tool/WoL" menu;
*) winbox - do not allow to enter empty strings in "caps-man-names" and "common-name" parameters;
*) winbox - fixed "Tx/Rx Signal Strength" value presence for 4 chain interfaces;
*) winbox - fixed wireless interface "HT" tab setting presence when "band=5ghz-n/ac";
*) winbox - fixed wireless sniffer parameter setting;
*) winbox - hide irrelevant switch port parameters;
*) wireless - added support for U-NII-2 for cAP ac;
*) wireless - added support for U-NII-2 for wAP ac;
*) wireless - allow setting "tx-power" up to 40;
*) wireless - changed "station-roaming" default setting from "enabled" to "disabled";
*) wireless - fixed potential wireless driver issue related to CVE-2020-3702;
*) wireless - improved management service stability when receiving bogus packets;
*) wireless - updated "bangladesh" regulatory domain information;
*) wireless - updated "canada" regulatory domain information;
*) wireless - updated "egypt" regulatory domain information;
*) wireless - updated "indonesia5" regulatory domain information;
*) wireless - updated "united states" regulatory domain information;
*) www - added "tls-version" parameter in "IP->Services" menu;

Changelog archive ×

What's new in 6.47.6 (2020-Oct-21 10:41):

*) cap - fixed L2MTU path discovery;
*) crs3xx - fixed hardware offloaded LACP bonding on Ethernet interfaces for CRS354 devices;
*) crs3xx - fixed switch rules for CRS309 and CRS317 devices (introduced in v6.47.3);
*) defconf - fixed default configuration loading on RBmAP-2nD;
*) dhcpv4-client - fixed DHCP offer packet parsing with overload option present;
*) dhcpv6-server - properly save bindings when executing "make-static" command;
*) fetch - improved SSL handshake processing;
*) ike1 - allow using "my-id" parameter with XAuth;
*) leds - fixed LED type setting;
*) lora - expose "joinEui" un "devEui" values in the log;
*) lte - fixed multiple APN passthrough on R11e-4G;
*) lte - improved EARFCN reporting in 3G and LTE modes on Sierra modems;
*) lte - limit allowed APN count to 3 on R11e-LTE;
*) mpls - fixed duplicate "LabelRelease" message sending;
*) ospf - optimized LSA printing for smaller message sizes;
*) radius - added "Service-Type" attribute to Access-Request for IPv4 and IPv6 DHCP servers;
*) smips - reduced RouterOS main package size;
*) switch - fixed Ethernet padding for small packets;
*) user - improved WinBox and The Dude authenticated session handling;
*) vrrp - made "password" parameter sensitive;
*) w60g - general stability and performance improvements;
*) wireless - added support for US FCC UNII-2 and Canada country profiles for NetMetal series devices;
*) wireless - fixed incorrect wireless capability information in association response frames;

Changelog archive ×

What's new in 6.48beta48 (2020-Oct-14 10:26):

Important note!!!

Using this version on CRS354-48G-4S+2Q+RM or CRS354-48P-4S+2Q+RM will cause booting issues and device may need to be reinstalled.

Changes in this release:

*) bridge - automatically remove extended interfaces when deleting PE device from CB;
*) cap - fixed L2MTU path discovery;
*) cap - fixed L2MTU setting from CAPsMAN;
*) certificate - fixed private key verification for CA certificate during signing process;
*) cloud - improved backup generation process;
*) crs3xx - fixed CDP packet forwarding for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices;
*) crs3xx - fixed port-isolation for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices (introduced in v6.48beta35);
*) defconf - fixed default configuration loading on RBmAP-2nD;
*) dhcpv4-client - fixed DHCP offer packet parsing with overload option present;
*) discovery - fixed occasional wrong Chassis-ID for LLDP packets (introduced in v6.48beta35);
*) dot1x - accept priority tagged (VLAN 0) EAP packets on dot1x client;
*) fetch - improved SSL handshake processing;
*) filesystem - improved long-term filesystem stability and data integrity;
*) ike1 - fixed "my-id=address" parameter usage together with certificate authentication;
*) ike2 - added support for IKEv2 Message Fragmentation (RFC7383);
*) ike2 - fixed EAP MSK length validation;
*) ike2 - fixed too small payload parsing;
*) interface - added temperature warning and interface disable on overheat for SFP and SFP+ interfaces (CLI only);
*) led - fixed state persistence after device reboot on NetMetal 5 ac devices;
*) lora - fixed device going into "ERROR" state caused by FSK modulated downlinks;
*) lte - fixed "band" value reporting;
*) lte - fixed multiple APN passthrough on R11e-4G;
*) lte - improved EARFCN reporting in 3G and LTE modes on Sierra modems;
*) lte - limit allowed APN count to 3 on R11e-LTE;
*) m33g - added support for "/system gpio" menu (CLI only);
*) mpls - fixed duplicate "LabelRelease" message sending;
*) profile - improved idle process detection on x86 processors;
*) profile - improved process classification on ARM devices;
*) quickset - added "Port Mapping" to QuickSet;
*) quickset - fixed local IP address setting on master interface;
*) radius - added "Service-Type" attribute to Access-Request for IPv4 and IPv6 DHCP servers;
*) routerboard - fixed PCIe bus reset during power-on on MMIPS devices ("/system routerboard upgrade" required);
*) routerboard - force power-down on PCIe bus during reboot on LHGR devices ("/system routerboard upgrade" required);
*) script - added error message in the logs if startup script runtime limit was exceeded;
*) snmp - added information from IPsec "active-peers" menu to MIKROTIK-MIB;
*) snmp - added new LTE monitoring OID's to MIKROTIK-MIB;
*) switch - fixed Ethernet padding for small packets;
*) tr069-client - fixed RouterOS downgrade procedure;
*) traffic-flow - added NAT event logging support for IPFIX;
*) traffic-generator - fixed 32Gbps limitation;
*) user - improved WinBox and The Dude authenticated session handling;
*) user-manager - do not allow creating limitation that crosses midnight;
*) user-manager - updated PayPal's root certificate authorities;
*) vrrp - made "password" parameter sensitive;
*) w60g - general stability and performance improvements;
*) wireless - added support for US FCC UNII-2 and Canada country profiles for NetMetal series devices;
*) wireless - do not override MTU and ARP values from CAPsMAN with local forwarding;
*) wireless - fixed incorrect wireless capability information in association response frames;
*) wireless - updated "no_country_set" regulatory domain information;

Other changes since v6.47.4:

*) arm64 - improved reboot reason reporting in log;
*) arm - added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices;
*) arm - improved watchdog and kernel panic reporting in log after reboots on IPQ4018/IPQ4019 devices;
*) bonding - added LACP monitoring (CLI only);
*) bonding - removed "sys-id" and "sys-priority" from monitor-slaves command;
*) bridge - added minor fixes and improvements for IGMP snooping with HW offloading;
*) bridge - added warning message when port is disabled by the BPDU guard;
*) bridge - allow to exclude interfaces from extended ports (CLI only);
*) bridge - correctly remove dynamic VLAN assignment for bridge ports;
*) bridge - fixed BPDU guard port disable/enable on HW offloaded interfaces;
*) bridge - fixed dynamic VLAN assignment when changing port "frame-type" property (introduced in v6.46);
*) bridge - fixed dynamic VLAN assignment when changing port to tagged VLAN member;
*) bridge - fixed link-local multicast forwarding when IGMP snooping and HW offloading is enabled;
*) bridge - fixed local MAC address removal from host table when deleting bridge interface;
*) bridge - fixed MDB entry removal when using bridge port "fast-leave" property;
*) bridge - fixed multicast table printing;
*) bridge - fixed packet forwarding for CAP and BCP controlled interfaces (introduced in v6.48beta12);
*) bridge - improved BPDU guard logging;
*) bridge - increased multicast table size to 4K entries;
*) bridge - show error when switch do not support controlling bridge or port extension (CLI only);
*) bridge - show "H" flag for extended bridge ports;
*) certificate - clear challenge password on renew;
*) chr - improved interface loading on startup on XEN;
*) chr - improved system stability when changing flow control settings on e1000;
*) conntrack - automatically reduce connection tracking timeouts when table is full;
*) console - allow "once" parameter for bonding monitoring;
*) crs3xx - added initial Bridge Port Extender support (CLI only);
*) crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only);
*) crs3xx - added switch-cpu port VLAN filtering (switch-cpu port is now mapped with bridge interface VLAN membership when vlan-filtering is enabled);
*) crs3xx - fixed "custom-drop-packet" and "not-learned" switch stats for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed duplicate host entries when creating static switch hosts;
*) crs3xx - fixed "mirror-source" property on switch port disable for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
*) crs3xx - fixed port isolation for "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
*) crs3xx - fixed port isolation removal for "switch-cpu" port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed "storm-rate" traffic limiting for switch-cpu port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed switch "copy-to-cpu" property for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices;
*) crs3xx - fixed switch "not-learned" stats for CRS305, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, CRS318 devices;
*) crs3xx - fixed VLAN tagged packet forwarding on "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices (introduced in v6.48beta12);
*) defconf - improved CAP interface bridging;
*) defconf - improved default configuration generation on devices with non-default wireless interface names;
*) defconf - improved default configuration generation on devices without wireless package installed;
*) detnet - fixed malformed dummy DHCP User Class option;
*) detnet - use MAC address from bridge interface instead of slave port;
*) dhcpv4-server - improved "client-id" value parsing;
*) dhcpv6-server - added ability to generate binding on first request;
*) discovery - added "lldp-med-net-policy-vlan" property for assigning VLAN ID (CLI only);
*) discovery - allow choosing which discovery protocol is used (CLI only);
*) discovery - fixed discovery on mesh ports;
*) discovery - fixed discovery packet sending on newly bridged port with "protocol-mode=none";
*) discovery - fixed discovery when enabled only on master port;
*) discovery - send the same "Chassis ID" on all interfaces for LLDP packets;
*) discovery - use interface MAC address when sending MNDP from slave port;
*) dns - added IPv6 support for DoH;
*) dns - do not use type "A" for static entries with unspecified type;
*) dns - fixed listening for DNS queries when only dynamic static entries exist (introduced in v6.47);
*) export - fixed RouterBOARD USB "type" parameter export;
*) filesystem - fixed repartition on non-first partition;
*) filesystem - fixed repartition on RB4011 series devices;
*) gps - fixed "init-channel" release when not used;
*) health - changed PSU state parameter type to read-only;
*) health - removed unused "heater-control" and "heater-threshold" parameters;
*) hotspot - added support for captive portal advertising using DHCP (RFC7710);
*) hotspot - added "vlan-id" parameter support for hosts and HTML pages;
*) hotspot - improved management service stability when receiving bogus packets;
*) ike1 - allow using "my-id" parameter with XAuth;
*) ike1 - fixed policy update with and without mode configuration;
*) ike1 - rekey phase 1 as responder for Windows initiators;
*) ike2 - added "prf-algorithm" support for phase 1;
*) ike2 - improved child SA rekeying process;
*) ipsec - added SHA384 hash algorithm support for phase 1 (CLI only);
*) ipsec - do not kill connection when peer's "name" or "comment" is changed;
*) ipsec - fixed client certificate usage when certificate is renewed with SCEP;
*) ipsec - fixed multiple warning message display for peers;
*) ipsec - inactivate peer's policy on disconnect;
*) ipsec - refresh peer's DNS only when phase 1 is down;
*) kidcontrol - allow creating static device entries without assigned user;
*) leds - fixed LED type setting;
*) lora - expose "joinEui" un "devEui" values in the log;
*) lte - added "age" column and "max-age" parameter to "cell-monitor" (CLI only);
*) lte - added "comment" parameter for APN profiles;
*) lte - added support for Alcatel IK41VE1;
*) ospf - optimized LSA printing for smaller message sizes;
*) ppp - added "ipv6-routes" parameter to "secrets" menu;
*) ppp - added support for "Framed-IPv6-Route" RADIUS attribute;
*) route - improved stability when 6to4 interface is configured with disabled IPv6 package;
*) snmp - added information from IPsec "active-peers" menu to MIKROTIK-MIB;
*) snmp - fixed value types for "dot1dStp";
*) snmp - fixed value types for "dot1qPvid";
*) ssh - fixed returned output saving to file when "output-to-file" parameter is used;
*) ssh - skip interactive authentication when not running in interactive mode;
*) supout - added bonding interface monitor information;
*) switch - fixed Ethernet padding for small packets;
*) system - replace "3" in superscript to "^3" on RBD53GR devices;
*) tr069-client - added additional wireless registration table parameters;
*) tr069-client - added LTE model and revision parameters;
*) tr069-client - added wireless "noise-floor" and "overall-tx-ccq" information parameters;
*) tr069-client - added "X_MIKROTIK_MimoRSRP" parameter for LTE RSRP value reporting;
*) tr069-client - allow passing LTE firmware update URL as XML;
*) tr069-client - send correct "ConnectionRequestURL" when using IPv6;
*) traffic-flow - added NAT event logging support for IPFIX;
*) traffic-flow - added "sys-init-time" parameter support;
*) user-manager - do not allow creating limitation that crosses midnight;
*) webfig - fixed default value presence when creating new entries under "IP->Kid Control";
*) winbox - allow performing "USB Power Reset" on "0" bus on RBM33G;
*) winbox - fixed "IP->Kid Control->Devices" table automatic refreshing;
*) winbox - fixed minor typo in "Users" menu;
*) winbox - fixed "receive-errors" setting persistence under "Wireless/Wireless Sniffer/Settings" menu;
*) winbox - fixed "tls-version" parameter setting under "IP/Services" menu;
*) winbox - use health values reported by gauges for "System/Health" menu;
*) wireless - create "connect-list" rule when address specified for "setup-repeater";
*) wireless - improved WPS process stability;
*) wireless - updated "no_country_set" regulatory domain information;

Changelog archive ×

What's new in 7.1beta2 (2020-Aug-21 12:29):

!) added "bgp-network" output filter flag;
!) added bonding interface support for Layer3 hardware offloading;
!) added IPv6 nexthop support for IPv4 routes;
!) added Layer3 hardware offloading support for CRS309-1G-8S+IN, CRS312-4C+8XG-RM and CRS326-24S+2Q+RM;
!) added WireGuard support;
*) disk - improved external disk read/write speed;
*) ospf - fixed point to point routes becoming inactive;
*) route - fixed source address selection of outgoing packets;
*) other minor fixes and improvements;


Changelog archive ×