• 0 800 357272
  • Адрес электронной почты защищен от спам-ботов. Для просмотра адреса в вашем браузере должен быть включен Javascript.
  • Пн-Пт 09:00-18:00

Mikrotik Firmware Updates

Feed for newest RouterOS updates.
  1. 6.49.2 changelog:

    *) device-mode - improved flagged router configuration detection;

    Download the new 'RouterOS 6.49.2' version here: https://mikrotik.com/download

  2. 7.1 changelog:

    MAJOR CHANGES
    ----------------------
    !) updated Linux Kernel based on version 5.6.3;
    !) completely new NTP client and server implementation;
    !) completely new User Manager implementation;
    !) merged individual packages, only bundle and a few extra packages remain;
    !) new Command Line Interface (CLI) style (RouterOS v6 commands are still supported);
    !) support for Let's Encrypt certificate generation;
    !) support for REST API;
    !) support for UEFI boot mode on x86;
    ----------------------

    NETWORKING
    ----------------------
    !) CHR FastPath support for "vmxnet3" and "virtio-net" drivers;
    !) support for "Cake" and "FQ_Codel" type queues;
    !) support for IPv6 NAT;
    !) support for Layer 3 hardware acceleration on all CRS3xx devices;
    !) support for MBIM driver with basic functionality support for all modems with MBIM mode;
    !) support for MLAG on CRS3xx devices;
    !) support for VRRP grouping and connection tracking data synchronization between nodes;
    !) support for Virtual eXtensible Local Area Network (VXLAN);
    ----------------------

    ROUTING
    ----------------------
    !) completely new BGP implementation with performance improvements;
    !) completely new IPv6 stack;
    !) completely new MPLS implementation with interface lists, multipath and LDPv6 support;
    !) completely new OSPF implementation with performance improvements;
    !) completely new routing filtering with script-like rule syntax, RPKI support and large and extended community filtering;
    !) support for IPv6 ECMP and VRF (including VRF-lite);
    !) support for IPv6 recursive routing and policy routing;
    ----------------------

    VPN
    ----------------------
    !) support for L2TPv3;
    !) support for OpenVPN UDP transport protocol;
    !) support for WireGuard;
    !) support for ZeroTier on ARM and ARM64 devices;
    ----------------------

    WIRELESS
    ----------------------
    !) completely new alternative wireless package "wifiwave2" with 802.11ac Wave2, WPA3 and 802.11w management frame protection support (requires ARM CPU and 256MB RAM);
    ----------------------

    Download the new 'RouterOS 7.1' version here: https://mikrotik.com/download

  3. 7.1rc7 changelog:

    !) device-mode - added feature locking mechanism;
    *) arp - limit total ARP table size based on installed RAM size;
    *) bgp - fixed "nexthop-choice" selection;
    *) bgp - fixed peer handling on point-to-point addresses;
    *) bgp - ignore empty filter names on upgrade;
    *) bgp - implemented BGP VPN configuration upgrade and other configuration upgrade fixes;
    *) conntrack - limit total connection tracking table size based on installed RAM size;
    *) crs3xx - fixed interface linking for some optical QSFP+ modules on CRS354 devices;
    *) health - improved temperature reporting;
    *) ipsec - fixed hardware acceleration support for ARM and ARM64 devices;
    *) ipsec - fixed software fallback mode for AES-192 on IPQ4018/IPQ4019;
    *) led - added "dark-mode" functionality control with Mode button for cAP XL ac;
    *) lte - added "cell-monitor" support for Chateau 5G;
    *) lte - improved LTE setting reporting to supout file;
    *) ospf - fixed MD5 authentication with large packets;
    *) ospf - fixed OSPFv3 interface configuration;
    *) ospf - improved DB exchange speeds;
    *) ospf - improved stability with large LS update packets;
    *) route - fixed "Route Target" byte order;
    *) route - fixed unreachable routed networks on VRFs;
    *) route - fixed route rule upgrade;
    *) route - fixed situation when routes with unequal distances got treated as ECMP routes;
    *) route - improvements on VRF isolation;
    *) route-filters - added "as-path" regexp testing tool;
    *) route-filters - added "as-path-slow-legacy" to support old style "as-path" filtering;
    *) route-filters - fixed "as-path" bracket parsing and 4byte ASN usage;
    *) routerboard - fixed "mode-button" functionality on devices that have such feature;
    *) upgrade - improved major version upgrade process on hAP ac2 and cAP ac;
    *) wifiwave2 - fixed enforcement of access list rules which only checks client signal strength for new connections;
    *) wifiwave2 - removed non-functioning VLAN configuration parameters from access list;

    Download the new 'RouterOS 7.1rc7' version here: https://mikrotik.com/download

  4. 6.49.1 changelog:

    MAJOR CHANGES IN v6.49.1:
    ----------------------
    !) device-mode - added feature locking mechanism;
    ----------------------

    Changes in this release:

    *) certificate - improved stability when sending bogus SCEP message;
    *) conntrack - limit total connection tracking table size based on installed RAM size;
    *) crs3xx - fixed interface linking for some optical QSFP+ modules on CRS354 devices;
    *) dhcpv6-server - fixed DUID generation with timestamp;
    *) health - improved temperature reporting;
    *) led - added "dark-mode" functionality control with Mode button for cAP XL ac;
    *) leds - fixed LTE LED default mapping for LHGG;
    *) lte - improved RSSI reporting on R11e-LTE6;
    *) routerboot - enabling "protected-routerboot" feature requires a press of a button;
    *) snmp - fixed IPsec-SA byte and packet counter reporting;
    *) sstp - fixed client stuck in "nonce matching" state;
    *) system - improved system stability if device is upgraded from RouterOS and/or RouterBOOT v6.41.4 or older;
    *) traffic-flow - added systematic count-based packet sampling support;
    *) upgrade - added new "upgrade" channel for upgrades between major versions;
    *) winbox - added "Modbus" menu support;
    *) wireless - added U-NII-2 support for US and Canada country profiles for cAP ac XL and QRT 5 ac;
    *) wireless - fixed frequency range information on IPQ4019;

    Download the new 'RouterOS 6.49.1' version here: https://mikrotik.com/download

  5. 7.1rc6 changelog:

    *) bgp - fixed connection establishment if peer is in VRF;
    *) bgp - fixed interface addition to "link-local" nexthops;
    *) capsman - fixed CAP upgrade process when upgrading from RouterOS v6;
    *) certificate - improved stability when sending bogus SCEP message;
    *) certificate - resolveed issue with public key generation when digest algorithm is unspecified and processing certificate signing requests;
    *) l3hw - fixed HW offloading for connected bridge routes;
    *) l3hw - fixed source MAC address usage for routed packets for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) lte - added AT chat support for Telit LN960;
    *) lte - do not allow to run "scan" and "cell-monitor" commands if SIM is not present;
    *) lte - fixed modem port initialization on KNOT;
    *) ospf - properly set instance after upgrade from RouterOS v6;
    *) route-filters - added "suppress-hw-offload" parameter;
    *) route-filters - fixed "as-path" regexp matcher;
    *) ssh - made SSH work in VRF's;
    *) system - improved system stability if device is upgraded from RouterOS and/or RouterBOOT v6.41.4 or older;
    *) tile - improved system stability when sending EoIP packet over interface that is being disabled;
    *) wifiwave2 - fixed assignment of channel profiles to interfaces;
    *) wifiwave2 - fixed interface list matching in "access-list";

    Download the new 'RouterOS 7.1rc6' version here: https://mikrotik.com/download

  6. 7.0.9 changelog:

    (factory only release)

    Download the new 'RouterOS 7.0.9' version here: https://mikrotik.com/download

  7. 7.1rc5 changelog:

    !) container - package is getting updated and will be made available in future, if interested in container feature please use 7.1rc4;
    *) arm64 - fixed "total-sector-writes" resetting on each startup;
    *) bgp - fixed IBGP nexthop selection;
    *) bgp - fixed binding to IPv6 "link-local" address;
    *) bgp - fixed missing default "local-pref" on selection;
    *) bgp - fixed stability when appending extended communities;
    *) bgp - improved stability and other minor fixes;
    *) bonding - added warning when using 802.3ad mode without MII link monitoring;
    *) bridge - added HW offload support for vlan-filtering on MT7621 switch chip (hEX, hEX S, RBM33G, RBM11G, LtAP);
    *) bridge - fixed incorrect "hw=no" setting after reboot in rare cases;
    *) bridge - improved MLAG stability;
    *) capsman - do not include "access-list" passphrases in the output of export command by default;
    *) certificate - added ability to choose the digest algorithm when generating a certificate;
    *) chr - fixed FastPath support for VMXNET3 drivers;
    *) dhcpv4 - fixed backslash prefix for packet logging;
    *) dhcpv6-client - show correct DUID in print;
    *) dhcpv6-server - fixed "address-pool" default value;
    *) dhcpv6-server - fixed DUID generation with timestamp;
    *) dns - fixed memory leak caused by large DNS replies;
    *) gps - fixed built-in GPS functionality for LtAP;
    *) health - fixed health value reporting on RB5009;
    *) ipsec - enabled hardware acceleration support for ARM and ARM64 devices;
    *) ipsec - fixed hardware acceleration support for CHR;
    *) l3hw - fixed MTU on receive;
    *) l3hw - fixed source MAC address usage for routed packets;
    *) leds - adjust "system-led" color based on cellular connection technology on Chateau devices;
    *) leds - fixed LED configuration on RB4011;
    *) ltap - improved PCIe card support;
    *) lte - added "at-chat" support in MBIM mode for Simcom modems in USB composition mode 9003;
    *) lte - improved APN re-connection on non LTE networks;
    *) lte - improved modem signal monitoring on Chateau 5G;
    *) lte - moved notifications about incorrect responses from modem to 'lte' topic;
    *) lte - properly show antenna selection on Chateau devices;
    *) lte - request modem to restart registration process if timeout detected;
    *) ospf - accept LA prefixes from intra-area router's LSA to the routing table;
    *) mpls - added ICMP handler (send ICMP ttl exceed on MPLS ttl expiry);
    *) ospf - allow to set IPv6 networks for "interface-template";
    *) ospf - disable areas with no interface configuration;
    *) ospf - do not allow to set "ptp-unnumbered" on IPv6 interfaces;
    *) ospf - do not set empty filter chains when upgrading from v6;
    *) ospf - improved stability and other minor fixes;
    *) ospf - show interface's hello, re-transmit and dead intervals;
    *) package - uninstall "container" package when downgrading to v6;
    *) pppoe - fixed DHCPv6 PD;
    *) quickset - added 5G signal quality information;
    *) quickset - made "Password..." button work in Basic AP mode;
    *) route - improved stability and other minor fixes;
    *) route-filters - fixed "=";
    *) route-filters - fixed "ext-community" problems;
    *) route-filters - fixed "num range" matchers;
    *) route-filters - fixed "route origin" matcher;
    *) route-filters - improved completion;
    *) route-filters - improved stability and other minor fixes;
    *) rpki - added "rpki-query" command;
    *) rpki - other minor fixes;
    *) snmp - fixed IPsec-SA stats counter reporting;
    *) snmp - fixed bulk get/walk with large neighbor version strings;
    *) ssl - added support for additional GCM_SHA384 ciphers;
    *) ssl - fixed x509 chain validation;
    *) switch - fixed bogus statistics after RTL8367 switch reset;
    *) system - improved DHCP and HotSpot service stability when shutting down;
    *) system - improved system stability when downgrading to v6 with external disks attached;
    *) tr069-client - improved compatibility for 5G;
    *) traffic-flow - added systematic count-based packet sampling support;
    *) user-manager - fixed "rate-limit-priority" parameter;
    *) user-manager - fixed PEAP server authentication for Windows clients;
    *) vrf - allow to assign interfaces directly along with interface lists;
    *) vxlan - added default L2MTU value for improved connectivity in bridged setups;
    *) vxlan - improved speed on MIPSBE devices;
    *) wifiwave2 - fixed configuration profile renaming;
    *) wifiwave2 - moved RADIUS accounting parameters to a separate configuration profile;
    *) winbox - added "netmap" action to IPv6 NAT rules;
    *) winbox - added IPv6 support for "Network" parameter under "Routing/OSFP/Interface Templates" menu;
    *) winbox - added missing IPv6 mangle actions - "mark-routing", "sniff-tzsp", "sniff-pc", "snpt" and "dnpt";
    *) winbox - added option to upgrade LTE firmware;
    *) winbox - changed extension channel symbol to lower case for WifiWave2;
    *) winbox - do not allow to set "memory-lines" parameter out of bounds under "System/Logging/Action" menu;
    *) winbox - fixed "routing-mark" and "routing-table" selection in IPv4 and IPv6 firewall and route rules;
    *) winbox - fixed private SSH key import;
    *) winbox - made "0" the default value for GPS "init-channel" parameter;
    *) winbox - made SSID field collapsible for WifiWave2;
    *) winbox - moved "RPKI" tab from "Routing/BGP" to "Routing/RPKI" menu;
    *) winbox - moved "Tables" tab from "IP/Route" to "Routing" menu;
    *) winbox - moved all interface stats columns to the right;
    *) winbox - properly load all backups stored in Cloud;
    *) winbox - properly show "value" parameter for FWD type entries;
    *) winbox - renamed "Backlight" to "OK" under "LCD/Backlight" menu;
    *) winbox - renamed "Dst. Address" to "Route Dst." under "IP/Firewall/Mangle" menu;
    *) winbox - replaced "routing-table" with VRF in traceroute;
    *) winbox - show "External Antenna" parameter on all Chateau devices;
    *) winbox - updated WifiWave2 interface fields and tabs;
    *) wireguard - do not consider WireGuard interface as ethernet;
    *) wireguard - improved system stability when sending WireGuard packets over EoIP;
    *) wireless - adjusted antenna gain on Chateau devices;
    *) wireless - improved system stability when changing L2MTU for wireless interfaces;
    *) wireless - improved system stability when limiting link throughput via "ap-tx-limit" and "client-tx-limit" parameters;
    *) wireless - improved system stability when using nv2 protocol on ipq4019 interfaces;

    Download the new 'RouterOS 7.1rc5' version here: https://mikrotik.com/download

  8. 6.48.5 changelog:

    Changes since 6.48.4:

    *) branding - properly clean up old branding files before installing a new one;
    *) crs3xx - fixed default MAC address calculation on management Ethernet for CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) gps - improved interface monitoring;
    *) health - improved temperature reporting;
    *) ike2 - check if TS is still valid after obtaining SPI;
    *) ipsec - improved SA update by SPI;
    *) netinstall - require Netinstall version to be the same or newer as "factory-software";
    *) poe - update PoE firmware only on devices that supports it;
    *) ppp - improved stability when receiving bogus response on modem channel;
    *) qsfp - improved system stability when setting unsupported link rates;
    *) sfp - added "sfp-rate-select" setting (CLI only);
    *) sfp - improved SFP, SFP+, SFP28 and QSFP+ interface stability for CRS3xx and CCR2004 devices;
    *) sfp28 - changed FEC auto mode to disabled;
    *) w60g - limit power output when using region EU to match EN302567 on nRAY;
    *) w60g - use EU region by default;
    *) winbox - added "name" and "file-name" parameter when importing and exporting certificates;
    *) winbox - allow setting MCS (24-31) to 4x4 Wireless interfaces;
    *) winbox - do not allow to set empty "init-string" field under "System/GPS" menu;
    *) winbox - do not show "GPS antenna" selection for devices without selection support;
    *) winbox - show "System/Health/Settings" only on boards that have configurable values;
    *) winbox - show "current-channel" column by default for CAP interfaces;
    *) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac lite;

    Download the new 'RouterOS 6.48.5' version here: https://mikrotik.com/download

  9. 6.49 changelog:

    *) branding - fixed LCD logo loading from branding package when installed via Netinstall;
    *) branding - properly clean up old branding files before installing a new one;
    *) bridge - added IGMP and MLD querier monitoring;
    *) bridge - added IGMP snooping log when multicast table gets full;
    *) bridge - fixed external flag in the host table for wireless clients;
    *) bridge - improved controller bridge stability when adding RouterOS v7 port extender;
    *) bridge - improved port extender stability when creating bond interfaces on excluded ports;
    *) bridge - improved stability when quickly adding and removing bridge interface;
    *) certificate - improved stability when removing dynamic CRL entries;
    *) chr - fixed OS provisioning on Azure;
    *) chr - improved stability when changing "flow-control" settings on interfaces with e1000 drivers;
    *) conntrack - increased total connection tracking table size based on installed RAM size;
    *) console - require "write+ftp" permissions for executing script to file;
    *) console - require "write+ftp" permissions for printing to file;
    *) crs3xx - correctly filter packets by L2MTU on 1Gbps Ethernet interfaces for CRS354 devices;
    *) crs3xx - fixed LEDs for QSFP+ interface on CRS326-24S+2Q+ device;
    *) crs3xx - fixed SFP and SFP+ link rate reporting (introduced in v6.48beta11);
    *) crs3xx - fixed bridge controller and extender packet forwarding for CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - fixed default MAC address calculation on management Ethernet for CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - fixed interface flow control;
    *) crs3xx - improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - improved packet transmit on SFP+ interfaces;
    *) crs3xx - improved switch resource allocation for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) defconf - apply default configuration from branding package when performing reset with button;
    *) defconf - removed overlapping IPv6 firewall rules;
    *) defconf - use router as DNS server for DHCP hosts;
    *) dhcp-server - fixed DHCP Option decimal value parsing;
    *) dhcpv4-server - reset dynamic "bcast" flag when receiving offer from DHCP relay;
    *) dhcpv4-server - reset lease's dynamic "bcast" flag on packets from relay;
    *) dhcpv6-server - check if pool name has changed from RADIUS on renew;
    *) dhcpv6-server - improved dynamic server entry update;
    *) discovery - do not send discovery packets on interfaces that are blocked by STP (introduced in v6.48);
    *) dns - fixed memory leak caused by large DNS replies;
    *) firewall - fixed "ingress-priority" matcher;
    *) firewall - fixed GRE protocol packets considered invalid when PPTP helper is disabled;
    *) gps - improved interface monitoring;
    *) health - added "phy-temperature" sensor monitoring for CRS312 device;
    *) health - improved temperature readings on hEX S;
    *) health - improved temperature reporting;
    *) ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
    *) ike2 - check if TS is still valid after obtaining SPI;
    *) ike2 - fixed initiator packet retransmit with DDOS cookie;
    *) ipsec - fixed memory leak when processing DHCP packets;
    *) ipsec - improved SA update by SPI;
    *) ipsec - improved system stability on CHR;
    *) ipsec - improved system stability on MMIPS devices;
    *) kid-control - improved IPv6 firewall rule generation;
    *) led - added LTE LED support for LHGGR;
    *) leds - fixed LTE LED default mapping for wAP R ac LTE kit;
    *) lora - added additional predefined network servers;
    *) lora - added channel plan "il-917" for Israel;
    *) lora - fixed "PULL_DATA" token generation;
    *) m33g - improved support for "/system gpio" menu ("/system routerboard upgrade" required);
    *) m33g - removed 12..16 pins from "/system gpio" menu;
    *) mipsbe - improved booting speed on non-NAND devices ("/system routerboard upgrade" required);
    *) mpls - allow to disable FastPath (CLI only);
    *) mqtt - added server name indication;
    *) netinstall - fixed lock file persistence after reinstall;
    *) netinstall - improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present;
    *) netinstall - require Netinstall version to be the same or newer as "factory-software";
    *) ntp - use correct IPv6 multicast group for SNTP client;
    *) package - always allow to uninstall package even if there is no free disk space left;
    *) poe - update PoE firmware only on devices that supports it;
    *) ppp - improved stability when receiving bogus response on modem channel;
    *) qsfp - improved system stability when setting unsupported link rates;
    *) quickset - use 5GHz interface's country for "Home AP Dual" configuration;
    *) routerboard - fixed "reformat-hold-button-max" validation for values below 10s;
    *) sfp - added "sfp-rate-select" setting;
    *) sfp - fixed GPON module linking (introduced in v6.47);
    *) sfp - improved 25Gbps optical module stability and linking;
    *) sfp - improved SFP, SFP+, SFP28 and QSFP+ interface stability for CRS3xx and CCR2004 devices;
    *) sfp - improved link stability for 10G, 25G and 40G modules on CRS309, CRS312, CRS326-24S+2Q+ CRS354 and CCR2004 devices;
    *) sfp28 - changed FEC auto mode to disabled;
    *) snmp - added "engine-id" OID support;
    *) snmp - fixed "ipNetToMediaType" OID for incomplete entries;
    *) ssh - fixed "undo" functionality;
    *) supout - added controller bridge section;
    *) supout - print detailed list of active user sessions;
    *) switch - fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings);
    *) switch - improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device;
    *) swos - fixed "static-ip-address" parameter;
    *) tr069-client - added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting;
    *) tr069-client - added support for Ethernet link speed reporting;
    *) tr069-client - added support for interface comment reporting and editing;
    *) tr069-client - added support for supout file upload;
    *) tr069-client - fixed traceroute diagnostics time values;
    *) tr069-client - improved XML with new-lines for readable output;
    *) tr069-client - improved stability for download/upload diagnostics;
    *) upgrade - fixed free space checking on flash type memories when installing new packages;
    *) ups - added battery info for APC Back-UPS BX750MI;
    *) user - added "expired" user status with suggestion to change password (WinBox v3.29 required);
    *) user - fixed active user session purging on disconnect;
    *) user - show "expired password" prompt for users with blank password;
    *) w60g - general stability and performance improvements;
    *) w60g - limit power output when using region EU to match EN302567 on nRAY;
    *) w60g - use EU region by default;
    *) webfig - added support for logo image from branding package;
    *) webfig - do not show value units twice;
    *) webfig - fixed "Wireless/CAP" menu opening;
    *) webfig - fixed interface sorting by name;
    *) webfig - show only "Close" button under "Wireless/Wireless Sniffer/Sniffed Packets" menu;
    *) winbox - added "dhcp" option to "multicast-helper" setting;
    *) winbox - added "fec-mode" parameter under "Interface/Ethernet" menu;
    *) winbox - added "interface-speed-100G" LED type to "System/LEDs" menu;
    *) winbox - added "name" and "file-name" parameter when importing and exporting certificates;
    *) winbox - added "sfp-shutdown-temperature" setting to SFP interfaces;
    *) winbox - added SSH settings under "IP/SSH" menu;
    *) winbox - added TFTP settings under "IP/TFTP/Settings" menu;
    *) winbox - allow setting MCS (24-31) to 4x4 Wireless interfaces;
    *) winbox - do not allow to add/remove W60G interfaces;
    *) winbox - do not allow to set empty "init-string" field under "System/GPS" menu;
    *) winbox - do not show "GPS antenna" selection for devices without selection support;
    *) winbox - fixed "Secondary Frequency" parameter setting under "CAPsMAN/Channel" menu;
    *) winbox - fixed DNS "cache-size" parameter setting;
    *) winbox - fixed health reporting on RB960, hEX, hEX S and hAP ac3 devices;
    *) winbox - fixed order of weekdays under "IP/Firewall" menu;
    *) winbox - fixed support for "Delegated-IPv6-Prefix" for PPP services;
    *) winbox - match "MAC Protocol-Num" predefined values under "Bridge/Filters" menu;
    *) winbox - minimal required version is v3.30;
    *) winbox - properly show "CRL Signature" field under "System/Certificate" menu;
    *) winbox - separated CCQ Tx and Rx values in their own unique columns;
    *) winbox - show "System/Health/Settings" only on boards that have configurable values;
    *) winbox - show "current-channel" column by default for CAP interfaces;
    *) winbox - show IPv6 address in separate field under "IP/Cloud" menu;
    *) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac lite;
    *) wireless - added override for multicast-to-unicast translation of DHCP traffic;
    *) wireless - do not remove channels >2462 MHz from "scanlist" if scanning for fixed channel;
    *) wireless - do not send packet back to station-bridge it was received from;
    *) wireless - fixed minor typo in debug logging messages;
    *) wireless - improve WMM priority assignment for packets with internal priority greater than 7;
    *) wireless - improve regulatory compliance with DFS requirements;
    *) wireless - improve signaling of QCA9984 interface capabilities when using 160/80+80MHz channel width;
    *) wireless - improved system stability when sending packets through interface after L2MTU is increased;
    *) wireless - log client signal strength on disconnect;
    *) wireless - renamed "secondary-channel" to "secondary-frequency";
    *) wireless - updated "israel" regulatory domain information;
    *) wireless - updated "united kingdom" regulatory domain information;

    Download the new 'RouterOS 6.49' version here: https://mikrotik.com/download

  10. 6.49rc2 changelog:

    Changes in this release:

    *) bridge - improved controller bridge stability when adding RouterOS v7 port extender;
    *) bridge - improved port extender stability when creating bond interfaces on excluded ports;
    *) crs3xx - fixed bridge controller and extender packet forwarding for CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) dhcp-server - fixed DHCP Option decimal value parsing;
    *) discovery - do not send discovery packets on interfaces that are blocked by STP (introduced in v6.48);
    *) sfp - added "sfp-rate-select" setting;
    *) supout - added controller bridge section;
    *) switch - fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings);
    *) user - added "expired" user status with suggestion to change password (WinBox v3.29 required);
    *) user - fixed active user session purging on disconnect;
    *) user - show "expired password" prompt for users with blank password;
    *) winbox - added "fec-mode" parameter under "Interface/Ethernet" menu;
    *) winbox - minimal required version is v3.30;
    *) wireless - improved system stability when sending packets through interface after L2MTU is increased;

    Other changes since v6.48.4:

    *) backup - fixed backup file restore (introduced in v6.49beta);
    *) branding - fixed LCD logo loading from branding package when installed via Netinstall;
    *) branding - properly clean up old branding files before installing a new one;
    *) bridge - added IGMP and MLD querier monitoring;
    *) bridge - added IGMP snooping log when multicast table gets full;
    *) bridge - fixed external flag in the host table for wireless clients;
    *) bridge - improved stability when quickly adding and removing bridge interface;
    *) bridge - improved system stability when disabling IGMP/MLD querier port (introduced in v6.49beta22);
    *) chr - fixed OS provisioning on Azure;
    *) chr - improved stability when changing "flow-control" settings on interfaces with e1000 drivers;
    *) conntrack - increased total connection tracking table size based on installed RAM size;
    *) console - require "write+ftp" permissions for executing script to file;
    *) console - require "write+ftp" permissions for printing to file;
    *) crs3xx - correctly filter packets by L2MTU on 1Gbps Ethernet interfaces for CRS354 devices;
    *) crs3xx - fixed LEDs for QSFP+ interface on CRS326-24S+2Q+ device;
    *) crs3xx - fixed SFP and SFP+ link rate reporting (introduced in v6.48beta11);
    *) crs3xx - fixed default MAC address calculation on management Ethernet for CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - fixed interface flow control;
    *) crs3xx - fixed jumbo frame forwarding for CRS354 devices (introduced in v6.49beta36);
    *) crs3xx - fixed packet forwarding on 1Gbps Ethernet interfaces for CRS354 devices (introduced in v6.49beta44);
    *) crs3xx - improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - improved packet transmit on SFP+ interfaces;
    *) crs3xx - improved switch resource allocation for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - improved system stability when learning MDB and FBD entries for CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v6.49beta44);
    *) defconf - apply default configuration from branding package when performing reset with button;
    *) defconf - removed overlapping IPv6 firewall rules;
    *) defconf - use router as DNS server for DHCP hosts;
    *) dhcpv4-server - reset lease's dynamic "bcast" flag on packets from relay;
    *) dhcpv6-server - check if pool name has changed from RADIUS on renew;
    *) dhcpv6-server - improved dynamic server entry update;
    *) firewall - fixed "ingress-priority" matcher;
    *) firewall - fixed GRE protocol packets considered invalid when PPTP helper is disabled;
    *) gps - improved interface monitoring;
    *) health - added "phy-temperature" sensor monitoring for CRS312 device;
    *) health - improved temperature reporting;
    *) ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
    *) ike2 - check if TS is still valid after obtaining SPI;
    *) ike2 - fixed initiator packet retransmit with DDOS cookie;
    *) ipsec - improved SA update by SPI;
    *) ipsec - improved system stability on CHR;
    *) ipsec - improved system stability on MMIPS devices;
    *) kid-control - improved IPv6 firewall rule generation;
    *) leds - fixed LTE LED default mapping for wAP R ac LTE kit;
    *) lora - added additional predefined network servers;
    *) lora - added channel plan "il-917" for Israel;
    *) lora - fixed "PULL_DATA" token generation;
    *) m33g - improved support for "/system gpio" menu ("/system routerboard upgrade" required);
    *) m33g - removed 12..16 pins from "/system gpio" menu;
    *) mipsbe - improved booting speed on non-NAND devices ("/system routerboard upgrade" required);
    *) mpls - allow to disable FastPath (CLI only);
    *) mqtt - added server name indication;
    *) netinstall - fixed lock file persistence after reinstall;
    *) netinstall - improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present;
    *) netinstall - require Netinstall version to be the same or newer as "factory-software";
    *) ntp - use correct IPv6 multicast group for SNTP client;
    *) package - always allow to uninstall package even if there is no free disk space left;
    *) poe - fixed PoE out functionality on CRS354 (introduced in v6.49beta22);
    *) poe - update PoE firmware only on devices that supports it;
    *) ppp - improved stability when receiving bogus response on modem channel;
    *) qsfp - improved system stability when setting unsupported link rates;
    *) rb922 - fixed miniPCI-e card detection (introduced in v6.49beta11);
    *) routerboard - fixed "reformat-hold-button-max" validation for values below 10s;
    *) sfp - added "sfp-rate-select" setting (CLI only);
    *) sfp - fixed GPON module linking (introduced in v6.47);
    *) sfp - improved 25Gbps optical module stability and linking;
    *) sfp - improved SFP, SFP+, SFP28 and QSFP+ interface stability for CRS3xx and CCR2004 devices;
    *) sfp - improved link stability for 10G, 25G and 40G modules on CRS309, CRS312, CRS326-24S+2Q+ CRS354 and CCR2004 devices;
    *) sfp28 - changed FEC auto mode to disabled;
    *) snmp - added "engine-id" OID support;
    *) snmp - fixed "ipNetToMediaType" OID for incomplete entries;
    *) ssh - fixed "undo" functionality;
    *) supout - print detailed list of active user sessions;
    *) switch - fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings);
    *) switch - improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device;
    *) swos - fixed "static-ip-address" parameter;
    *) tr069-client - added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting;
    *) tr069-client - added support for Ethernet link speed reporting;
    *) tr069-client - added support for interface comment reporting and editing;
    *) tr069-client - added support for supout file upload;
    *) tr069-client - fixed traceroute diagnostics time values;
    *) tr069-client - improved XML with new-lines for readable output;
    *) tr069-client - improved stability for download/upload diagnostics;
    *) upgrade - fixed free space checking on flash type memories when installing new packages;
    *) ups - added battery info for APC Back-UPS BX750MI;
    *) w60g - general stability and performance improvements;
    *) w60g - limit power output when using region EU to match EN302567 on nRAY;
    *) w60g - use EU region by default;
    *) webfig - added support for logo image from branding package;
    *) webfig - do not show value units twice;
    *) webfig - fixed "Wireless/CAP" menu opening;
    *) webfig - fixed interface sorting by name;
    *) webfig - show only "Close" button under "Wireless/Wireless Sniffer/Sniffed Packets" menu;
    *) winbox - added "dhcp" option to "multicast-helper" setting;
    *) winbox - added "interface-speed-100G" LED type to "System/LEDs" menu;
    *) winbox - added "name" and "file-name" parameter when importing and exporting certificates;
    *) winbox - added "sfp-shutdown-temperature" setting to SFP interfaces;
    *) winbox - added SSH settings under "IP/SSH" menu;
    *) winbox - added TFTP settings under "IP/TFTP/Settings" menu;
    *) winbox - allow setting MCS (24-31) to 4x4 Wireless interfaces;
    *) winbox - do not allow to add/remove W60G interfaces;
    *) winbox - do not allow to set empty "init-string" field under "System/GPS" menu;
    *) winbox - do not show "GPS antenna" selection for devices without selection support;
    *) winbox - fixed "Secondary Frequency" parameter setting under "CAPsMAN/Channel" menu;
    *) winbox - fixed DNS "cache-size" parameter setting;
    *) winbox - fixed health reporting on RB960, hEX, hEX S and hAP ac3 devices;
    *) winbox - fixed order of weekdays under "IP/Firewall" menu;
    *) winbox - fixed support for "Delegated-IPv6-Prefix" for PPP services;
    *) winbox - match "MAC Protocol-Num" predefined values under "Bridge/Filters" menu;
    *) winbox - properly show "CRL Signature" field under "System/Certificate" menu;
    *) winbox - separated CCQ Tx and Rx values in their own unique columns;
    *) winbox - show "System/Health/Settings" only on boards that have configurable values;
    *) winbox - show "current-channel" column by default for CAP interfaces;
    *) winbox - show IPv6 address in separate field under "IP/Cloud" menu;
    *) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac lite;
    *) wireless - added override for multicast-to-unicast translation of DHCP traffic;
    *) wireless - do not remove channels >2462 MHz from "scanlist" if scanning for fixed channel;
    *) wireless - do not send packet back to station-bridge it was received from;
    *) wireless - fixed minor typo in debug logging messages;
    *) wireless - improve WMM priority assignment for packets with internal priority greater than 7;
    *) wireless - improve regulatory compliance with DFS requirements;
    *) wireless - improve signaling of QCA9984 interface capabilities when using 160/80+80MHz channel width;
    *) wireless - improved system stability on several 802.11ac devices (introduced in v6.49beta36);
    *) wireless - log client signal strength on disconnect;
    *) wireless - renamed "secondary-channel" to "secondary-frequency";
    *) wireless - updated "israel" regulatory domain information;
    *) wireless - updated "united kingdom" regulatory domain information;

    Download the new 'RouterOS 6.49rc2' version here: https://mikrotik.com/download

  11. 6.49rc1 changelog:

    Changes in this release:

    *) backup - fixed backup file restore (introduced in v6.49beta);
    *) branding - fixed LCD logo loading from branding package when installed via Netinstall;
    *) branding - properly clean up old branding files before installing a new one;
    *) bridge - added IGMP and MLD querier monitoring;
    *) bridge - improved stability when quickly adding and removing bridge interface;
    *) crs3xx - fixed default MAC address calculation on management Ethernet for CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - improved system stability when learning MDB and FBD entries for CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v6.49beta44);
    *) dhcpv4-server - reset lease's dynamic "bcast" flag on packets from relay;
    *) gps - improved interface monitoring;
    *) health - improved temperature reporting;
    *) kid-control - improved IPv6 firewall rule generation;
    *) leds - fixed LTE LED default mapping for wAP R ac LTE kit;
    *) lora - added additional predefined network servers;
    *) lora - fixed "PULL_DATA" token generation;
    *) mpls - allow to disable FastPath (CLI only);
    *) mqtt - added server name indication;
    *) netinstall - require Netinstall version to be the same or newer as "factory-software";
    *) poe - update PoE firmware only on devices that supports it;
    *) qsfp - improved system stability when setting unsupported link rates;
    *) routerboard - fixed "reformat-hold-button-max" validation for values below 10s;
    *) sfp - improved SFP, SFP+, SFP28 and QSFP+ interface stability for CRS3xx and CCR2004 devices;
    *) sfp28 - changed FEC auto mode to disabled;
    *) tr069-client - fixed traceroute diagnostics time values;
    *) tr069-client - improved XML with new-lines for readable output;
    *) w60g - limit power output when using region EU to match EN302567 on nRAY;
    *) w60g - use EU region by default;
    *) winbox - added "dhcp" option to "multicast-helper" setting;
    *) winbox - do not allow to add/remove W60G interfaces;
    *) winbox - separated CCQ Tx and Rx values in their own unique columns;
    *) winbox - show "System/Health/Settings" only on boards that have configurable values;
    *) winbox - show "current-channel" column by default for CAP interfaces;
    *) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac lite;
    *) wireless - do not remove channels >2462 MHz from "scanlist" if scanning for fixed channel;
    *) wireless - log client signal strength on disconnect;
    *) wireless - updated "israel" regulatory domain information;

    Other changes since v6.48.4:

    *) bridge - added IGMP and MLD querier monitoring (CLI only);
    *) bridge - added IGMP snooping log when multicast table gets full;
    *) bridge - fixed external flag in the host table for wireless clients;
    *) bridge - improved system stability when disabling IGMP/MLD querier port (introduced in v6.49beta22);
    *) chr - fixed OS provisioning on Azure;
    *) chr - improved stability when changing "flow-control" settings on interfaces with e1000 drivers;
    *) conntrack - increased total connection tracking table size based on installed RAM size;
    *) console - require "write+ftp" permissions for executing script to file;
    *) console - require "write+ftp" permissions for printing to file;
    *) crs3xx - correctly filter packets by L2MTU on 1Gbps Ethernet interfaces for CRS354 devices;
    *) crs3xx - fixed LEDs for QSFP+ interface on CRS326-24S+2Q+ device;
    *) crs3xx - fixed SFP and SFP+ link rate reporting (introduced in v6.48beta11);
    *) crs3xx - fixed interface flow control;
    *) crs3xx - fixed jumbo frame forwarding for CRS354 devices (introduced in v6.49beta36);
    *) crs3xx - fixed packet forwarding on 1Gbps Ethernet interfaces for CRS354 devices (introduced in v6.49beta44);
    *) crs3xx - improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - improved packet transmit on SFP+ interfaces;
    *) crs3xx - improved switch resource allocation for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) defconf - apply default configuration from branding package when performing reset with button;
    *) defconf - removed overlapping IPv6 firewall rules;
    *) defconf - use router as DNS server for DHCP hosts;
    *) dhcpv6-server - check if pool name has changed from RADIUS on renew;
    *) dhcpv6-server - improved dynamic server entry update;
    *) firewall - fixed "ingress-priority" matcher;
    *) firewall - fixed GRE protocol packets considered invalid when PPTP helper is disabled;
    *) health - added "phy-temperature" sensor monitoring for CRS312 device;
    *) ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
    *) ike2 - check if TS is still valid after obtaining SPI;
    *) ike2 - fixed initiator packet retransmit with DDOS cookie;
    *) ipsec - improved SA update by SPI;
    *) ipsec - improved system stability on CHR;
    *) ipsec - improved system stability on MMIPS devices;
    *) lora - added channel plan "il-917" for Israel;
    *) m33g - improved support for "/system gpio" menu ("/system routerboard upgrade" required);
    *) m33g - removed 12..16 pins from "/system gpio" menu;
    *) mipsbe - improved booting speed on non-NAND devices ("/system routerboard upgrade" required);
    *) netinstall - fixed lock file persistence after reinstall;
    *) netinstall - improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present;
    *) ntp - use correct IPv6 multicast group for SNTP client;
    *) package - always allow to uninstall package even if there is no free disk space left;
    *) poe - fixed PoE out functionality on CRS354 (introduced in v6.49beta22);
    *) ppp - improved stability when receiving bogus response on modem channel;
    *) rb922 - fixed miniPCI-e card detection (introduced in v6.49beta11);
    *) sfp - added "sfp-rate-select" setting (CLI only);
    *) sfp - fixed GPON module linking (introduced in v6.47);
    *) sfp - improved 25Gbps optical module stability and linking;
    *) sfp - improved link stability for 10G, 25G and 40G modules on CRS309, CRS312, CRS326-24S+2Q+ CRS354 and CCR2004 devices;
    *) snmp - added "engine-id" OID support;
    *) snmp - fixed "ipNetToMediaType" OID for incomplete entries;
    *) ssh - fixed "undo" functionality;
    *) supout - print detailed list of active user sessions;
    *) switch - fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings);
    *) switch - improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device;
    *) swos - fixed "static-ip-address" parameter;
    *) tr069-client - added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting;
    *) tr069-client - added support for Ethernet link speed reporting;
    *) tr069-client - added support for interface comment reporting and editing;
    *) tr069-client - added support for supout file upload;
    *) tr069-client - improved stability for download/upload diagnostics;
    *) upgrade - fixed free space checking on flash type memories when installing new packages;
    *) ups - added battery info for APC Back-UPS BX750MI;
    *) w60g - general stability and performance improvements;
    *) webfig - added support for logo image from branding package;
    *) webfig - do not show value units twice;
    *) webfig - fixed "Wireless/CAP" menu opening;
    *) webfig - fixed interface sorting by name;
    *) webfig - show only "Close" button under "Wireless/Wireless Sniffer/Sniffed Packets" menu;
    *) winbox - added "interface-speed-100G" LED type to "System/LEDs" menu;
    *) winbox - added "name" and "file-name" parameter when importing and exporting certificates;
    *) winbox - added "sfp-shutdown-temperature" setting to SFP interfaces;
    *) winbox - added SSH settings under "IP/SSH" menu;
    *) winbox - added TFTP settings under "IP/TFTP/Settings" menu;
    *) winbox - allow setting MCS (24-31) to 4x4 Wireless interfaces;
    *) winbox - do not allow to set empty "init-string" field under "System/GPS" menu;
    *) winbox - do not show "GPS antenna" selection for devices without selection support;
    *) winbox - fixed "Secondary Frequency" parameter setting under "CAPsMAN/Channel" menu;
    *) winbox - fixed DNS "cache-size" parameter setting;
    *) winbox - fixed health reporting on RB960, hEX, hEX S and hAP ac3 devices;
    *) winbox - fixed order of weekdays under "IP/Firewall" menu;
    *) winbox - fixed support for "Delegated-IPv6-Prefix" for PPP services;
    *) winbox - match "MAC Protocol-Num" predefined values under "Bridge/Filters" menu;
    *) winbox - properly show "CRL Signature" field under "System/Certificate" menu;
    *) winbox - show IPv6 address in separate field under "IP/Cloud" menu;
    *) wireless - added override for multicast-to-unicast translation of DHCP traffic;
    *) wireless - do not send packet back to station-bridge it was received from;
    *) wireless - fixed minor typo in debug logging messages;
    *) wireless - improve WMM priority assignment for packets with internal priority greater than 7;
    *) wireless - improve regulatory compliance with DFS requirements;
    *) wireless - improve signaling of QCA9984 interface capabilities when using 160/80+80MHz channel width;
    *) wireless - improved system stability on several 802.11ac devices (introduced in v6.49beta36);
    *) wireless - renamed "secondary-channel" to "secondary-frequency";
    *) wireless - updated "united kingdom" regulatory domain information;

    Download the new 'RouterOS 6.49rc1' version here: https://mikrotik.com/download

  12. 7.1rc4 changelog:

    *) improved filesystem and configuration storage stability;
    *) show "expired password" prompt for users with blank password;
    *) other fixes and improvements;

    Download the new 'RouterOS 7.1rc4' version here: https://mikrotik.com/download

  13. 7.1rc3 changelog:

    *) added IPSec hardware acceleration support for RB5009;
    *) added support for running Docker (TM) containers;
    *) added ZeroTier (TM) support for ARM and ARM64;
    *) fixed L2TP establishment (introduced in v7.1rc2);
    *) fixed LDPv6;
    *) functionality and stability improvements for L2TPv3;
    *) VPLS stability improvements;
    *) other minor fixes and improvements;

    Download the new 'RouterOS 7.1rc3' version here: https://mikrotik.com/download

  14. 7.1rc2 changelog:

    *) added "failure" flag for VRRP;
    *) fixed support for IGMP-Proxy;
    *) fixed support for NV2;
    *) fixed wifwave2 virtual AP configuration on boards with country locks;
    *) improved routing filter configuration;
    *) improved system stability when using CAKE and fq_codel queues;
    *) other minor fixes and improvements;

    Download the new 'RouterOS 7.1rc2' version here: https://mikrotik.com/download

  15. 6.48.4 changelog:

    *) branding - fixed missing branding skins if "skins" folder does not exist;
    *) bridge - added MAC and IP source addresses information for DHCP snooping log;
    *) bridge - fixed "vlan-encap" setting for filter and NAT rules;
    *) bridge - improved system stability when using IGMP snooping and changing bridge MAC address;
    *) capsman - use Bits instead of Bytes for "ap-tx-limit" and "client-tx-limit" parameters;
    *) crs3xx - fixed unknown multicast flood to CPU when IGMP snooping is used;
    *) crs3xx - improved system stability when increasing interface L2MTU for CRS318 devices;
    *) defconf - fixed default configuration loading on LHG R;
    *) defconf - fixed minor typo in configuration description;
    *) dhcpv6-server - fixed false missing IPv6 Pool warning for dynamic bindings;
    *) dns - fixed CNAME query when target record is not in cache;
    *) dns - fixed cache memory leak when resolving CNAME domains;
    *) health - fixed voltage monitor on BaseBox5 devices;
    *) health - improved temperature reporting;
    *) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
    *) leds - fixed "/system leds" menu on RBLHG-2nD;
    *) lora - added additional predefined network servers;
    *) lte - added support for Sharp 809SH;
    *) routerboard - fixed "reset-button" on hAP ac;
    *) system - improved stability when receiving bogus packets;
    *) telnet - fixed "routing-table" parameter usage;
    *) w60g - improved stability in low temperature environments;
    *) webfig - do not show "units" twice in multi list entries;
    *) winbox - added "Cloud Backup" options under "Files" menu;
    *) winbox - added "interworking-profile" parameter under "Wireless" menu;
    *) winbox - added support for PTP;
    *) winbox - do not show "Functionality" field for LTE interface if it is not provided;
    *) winbox - fixed "Switch" menu on RBwAPG;
    *) winbox - fixed "vid" parameter under "Bridge/Hosts" menu;
    *) winbox - show "System/Health" only on boards that have health monitoring;
    *) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac^3;
    *) wireless - added U-NII-2 support for US and Canada country profiles for hap ac, hAP ac^3 LTE6, Audience and Audience LTE6;
    *) wireless - updated "israel" regulatory domain information;

    Download the new 'RouterOS 6.48.4' version here: https://mikrotik.com/download

  16. 7.1rc1 changelog:

    !) added support for IPv6 NAT (CLI only);
    !) added support for L2TPv3 (CLI only);
    *) added "expired" user status with suggestion to change password (WinBox v3.29 required);
    *) added bridge HW offload support for vlan-filtering on RTL8367 switch chip (RB4011, RB1100AHx4);
    *) added password strength requirement settings;
    *) added skin support for WinBox (WinBox v3.29 required);
    *) fixed support for RIP (Routing Information Protocol);
    *) improved general stability and performance;
    *) other minor fixes and improvements;

    Download the new 'RouterOS 7.1rc1' version here: https://mikrotik.com/download

  17. 6.49beta54 changelog:

    Changes in this release:

    *) bridge - fixed external flag in the host table for wireless clients;
    *) capsman - use Bits instead of Bytes for "ap-tx-limit" and "client-tx-limit" parameters;
    *) crs3xx - fixed jumbo frame forwarding for CRS354 devices (introduced in v6.49beta36);
    *) crs3xx - fixed unknown multicast flood to CPU when IGMP snooping is used;
    *) crs3xx - improved system stability when increasing interface L2MTU for CRS318 devices;
    *) defconf - apply default configuration from branding package when performing reset with button;
    *) defconf - fixed default configuration loading on LHG R;
    *) health - fixed voltage monitor on BaseBox5 devices;
    *) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
    *) ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
    *) ike2 - check if TS is still valid after obtaining SPI;
    *) ipsec - improved SA update by SPI;
    *) leds - fixed "/system leds" menu on RBLHG-2nD;
    *) lora - added channel plan "il-917" for Israel;
    *) lte - added support for Sharp 809SH;
    *) m33g - improved support for "/system gpio" menu ("/system routerboard upgrade" required);
    *) sfp - improved 25Gbps optical module stability and linking;
    *) snmp - added "engine-id" OID support;
    *) snmp - fixed "ipNetToMediaType" OID for incomplete entries;
    *) ssh - fixed "undo" functionality;
    *) system - improved stability when receiving bogus packets;
    *) telnet - fixed "routing-table" parameter usage;
    *) tr069-client - added support for Ethernet link speed reporting;
    *) tr069-client - added support for interface comment reporting and editing;
    *) tr069-client - added support for supout file upload;
    *) tr069-client - improved stability for download/upload diagnostics;
    *) ups - added battery info for APC Back-UPS BX750MI;
    *) w60g - general stability and performance improvements;
    *) webfig - added support for logo image from branding package;
    *) winbox - added "Cloud Backup" options under "Files" menu;
    *) winbox - added "interworking-profile" parameter under "Wireless" menu;
    *) winbox - added "name" and "file-name" parameter when importing and exporting certificates;
    *) winbox - added "sfp-shutdown-temperature" setting to SFP interfaces;
    *) winbox - added SSH settings under "IP/SSH" menu;
    *) winbox - added TFTP settings under "IP/TFTP/Settings" menu;
    *) winbox - allow setting MCS (24-31) to 4x4 Wireless interfaces;
    *) winbox - do not allow to set empty "init-string" field under "System/GPS" menu;
    *) winbox - do not show "Functionality" field for LTE interface if it is not provided;
    *) winbox - do not show "GPS antenna" selection for devices without selection support;
    *) winbox - fixed "Secondary Frequency" parameter setting under "CAPsMAN/Channel" menu;
    *) winbox - fixed "Switch" menu on RBwAPG;
    *) winbox - fixed DNS "cache-size" parameter setting;
    *) winbox - fixed order of weekdays under "IP/Firewall" menu;
    *) winbox - match "MAC Protocol-Num" predefined values under "Bridge/Filters" menu;
    *) winbox - properly show "CRL Signature" field under "System/Certificate" menu;
    *) winbox - show "System/Health" only on boards that have health monitoring;
    *) winbox - show IPv6 address in separate field under "IP/Cloud" menu;
    *) wireless - added override for multicast-to-unicast translation of DHCP traffic;
    *) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac^3;

    Other changes since v6.48.3:

    *) bridge - added IGMP and MLD querier monitoring (CLI only);
    *) bridge - added IGMP snooping log when multicast table gets full;
    *) bridge - added MAC and IP source addresses information for DHCP snooping log;
    *) bridge - fixed "vlan-encap" setting for filter and NAT rules;
    *) bridge - improved system stability when disabling IGMP/MLD querier port (introduced in v6.49beta22);
    *) bridge - improved system stability when using IGMP snooping and changing bridge MAC address;
    *) chr - fixed OS provisioning on Azure;
    *) chr - improved stability when changing "flow-control" settings on interfaces with e1000 drivers;
    *) conntrack - increased total connection tracking table size based on installed RAM size;
    *) console - require "write+ftp" permissions for executing script to file;
    *) console - require "write+ftp" permissions for printing to file;
    *) crs3xx - correctly filter packets by L2MTU on 1Gbps Ethernet interfaces for CRS354 devices;
    *) crs3xx - fixed LEDs for QSFP+ interface on CRS326-24S+2Q+ device;
    *) crs3xx - fixed SFP and SFP+ link rate reporting (introduced in v6.48beta11);
    *) crs3xx - fixed interface flow control;
    *) crs3xx - fixed packet forwarding on 1Gbps Ethernet interfaces for CRS354 devices (introduced in v6.49beta44);
    *) crs3xx - improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - improved packet transmit on SFP+ interfaces;
    *) crs3xx - improved switch resource allocation for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) defconf - fixed minor typo in configuration description;
    *) defconf - removed overlapping IPv6 firewall rules;
    *) defconf - use router as DNS server for DHCP hosts;
    *) dhcpv6-server - check if pool name has changed from RADIUS on renew;
    *) dhcpv6-server - improved dynamic server entry update;
    *) dns - fixed CNAME query when target record is not in cache;
    *) firewall - fixed "ingress-priority" matcher;
    *) firewall - fixed GRE protocol packets considered invalid when PPTP helper is disabled;
    *) health - added "phy-temperature" sensor monitoring for CRS312 device;
    *) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
    *) ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
    *) ike2 - fixed initiator packet retransmit with DDOS cookie;
    *) ipsec - improved system stability on CHR;
    *) ipsec - improved system stability on MMIPS devices;
    *) m33g - removed 12..16 pins from "/system gpio" menu;
    *) mipsbe - improved booting speed on non-NAND devices ("/system routerboard upgrade" required);
    *) netinstall - fixed lock file persistence after reinstall;
    *) netinstall - improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present;
    *) ntp - use correct IPv6 multicast group for SNTP client;
    *) package - always allow to uninstall package even if there is no free disk space left;
    *) poe - fixed PoE out functionality on CRS354 (introduced in v6.49beta22);
    *) ppp - improved stability when receiving bogus response on modem channel;
    *) rb922 - fixed miniPCI-e card detection (introduced in v6.49beta11);
    *) sfp - added "sfp-rate-select" setting (CLI only);
    *) sfp - fixed GPON module linking (introduced in v6.47);
    *) sfp - improved link stability for 10G, 25G and 40G modules on CRS309, CRS312, CRS326-24S+2Q+ CRS354 and CCR2004 devices;
    *) supout - print detailed list of active user sessions;
    *) switch - fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings);
    *) switch - improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device;
    *) swos - fixed "static-ip-address" parameter;
    *) tr069-client - added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting;
    *) upgrade - fixed free space checking on flash type memories when installing new packages;
    *) w60g - improved stability in low temperature environments;
    *) webfig - do not show value units twice;
    *) webfig - fixed "Wireless/CAP" menu opening;
    *) webfig - fixed interface sorting by name;
    *) webfig - show only "Close" button under "Wireless/Wireless Sniffer/Sniffed Packets" menu;
    *) winbox - added "interface-speed-100G" LED type to "System/LEDs" menu;
    *) winbox - fixed health reporting on RB960, hEX, hEX S and hAP ac3 devices;
    *) winbox - fixed support for "Delegated-IPv6-Prefix" for PPP services;
    *) wireless - do not send packet back to station-bridge it was received from;
    *) wireless - fixed minor typo in debug logging messages;
    *) wireless - improve WMM priority assignment for packets with internal priority greater than 7;
    *) wireless - improve regulatory compliance with DFS requirements;
    *) wireless - improve signaling of QCA9984 interface capabilities when using 160/80+80MHz channel width;
    *) wireless - improved system stability on several 802.11ac devices (introduced in v6.49beta36);
    *) wireless - renamed "secondary-channel" to "secondary-frequency";
    *) wireless - updated "united kingdom" regulatory domain information;

    Download the new 'RouterOS 6.49beta54' version here: https://mikrotik.com/download

  18. 6.47.10 changelog:

    MAJOR CHANGES IN v6.47.10:
    ----------------------
    !) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147);
    ----------------------

    *) bonding - improved system stability when disabling/enabling bonding ports;
    *) branding - added option to upload custom files (newly generated branding package required);
    *) capsman - use proper units for "ap-tx-limit" and "client-tx-limit" parameters;
    *) console - do not clear environment values if any global variable is set;
    *) console - require "write+ftp" permissions for exporting configuration to file;
    *) console - updated copyright notice;
    *) crs3xx - added "/system swos" menu for CRS354 devices, should only be used after SwOS 2.13 release;
    *) crs3xx - fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices;
    *) crs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) defconf - fixed default configuration loading on LHG R;
    *) defconf - fixed default configuration loading on RBOmniTikPG-5HacD;
    *) dhcp - fixed link state checking for DHCP client;
    *) dude - fixed configuration menu presence on ARM64 devices;
    *) ethernet - improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices;
    *) ipsec - fixed SA address parameter exporting;
    *) lte - fixed "earfcn" to band translation for "cell-monitor";
    *) ovpn - fixed route cache entry leak when establishing a new session;
    *) poe - do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out;
    *) ppp - do not fail "at-chat" command when issued on disabled PPP interface;
    *) ptp - improved management service stability when receiving bogus packets;
    *) quickset - prefer 5GHz interface for WiFi scan in CPE mode;
    *) rb4011 - fixed SFP+ port MTU setting after link state change;
    *) rb4011 - improved SFP+ port stability after boot-up;
    *) route - improved stability when connected route is modified;
    *) sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
    *) supout - fixed "topic" column presence in "Log" section;
    *) switch - improved system stability with 98PX1012 switch chip for CCR2004-1G-12S+2XS device;
    *) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN);
    *) telnet - do not send options if connecting to non standard port;
    *) telnet - fixed server when run on non standard port;
    *) tile - fixed bridge performance degradation (introduced in v6.47);
    *) tr069-client - improved management service stability when receiving bogus packets;
    *) upgrade - improved "long-term" upgrade procedure on SMIPS devices;
    *) webfig - allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu;
    *) webfig - do not corrupt settings when starting "Wireless Sniffer";
    *) webfig - do not move top right menu in opposite direction when scrolling horizontally;
    *) webfig - show "network-mode" for LTE modems that support it;
    *) winbox - do not show "network-mode" parameter for LTE interfaces that do not support it;
    *) winbox - do not show empty "CPU Frequency" parameter under "System/Resources" menu;
    *) winbox - fixed "reachable-time" value unit under "IPv6/ND" menu;
    *) winbox - fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu;
    *) winbox - fixed health reporting on RB960, hEX and hEX S devices;
    *) winbox - hide "Allow Roaming" parameter on LTE modems that do not support it;
    *) winbox - increased "target" field limit to 128 under "Queues" menu;
    *) winbox - show "LCD" only on boards that have LCD;
    *) winbox - show "System/Health" only on boards that have health monitoring;
    *) winbox - show "activity" column by default under "IP/Kid Control/Devices" menu;
    *) wireless - fixed issue with multicast traffic delivery to client devices using power-save;
    *) wireless - improved iOS compatibility with HotSpot 2.0 networks;
    *) www - added "X-Frame-Options" header information to disallow website embedding in other pages;

    Download the new 'RouterOS 6.47.10' version here: https://mikrotik.com/download

  19. 6.48.3 changelog:

    MAJOR CHANGES IN v6.48.3:
    ----------------------
    !) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147);
    ----------------------

    *) branding - added option to upload custom files (newly generated branding package required);
    *) console - do not clear environment values if any global variable is set;
    *) crs3xx - fixed Ethernet LEDs after reboot for CRS354 devices;
    *) crs3xx - fixed VLAN priority removal for CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - fixed port-isolation on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) crs3xx - improved LACP linking between CRS3xx series switches;
    *) crs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
    *) defconf - fixed default configuration loading on RBOmniTikPG-5HacD;
    *) dot1x - fixed "reject-vlan-id" for MAC authentication (introduced in v6.48);
    *) dot1x - fixed MAC authentication fallback (introduced in v6.48);
    *) ipsec - fixed SA address parameter exporting;
    *) lte - fixed "earfcn" to band translation for "cell-monitor";
    *) package - added new "iot" package with Bluetooth (KNOT only) and MQTT publisher support;
    *) rb4011 - fixed SFP+ port MTU setting after link state change;
    *) rb4011 - improved SFP+ port stability after boot-up;
    *) route - improved stability when connected route is modified;
    *) sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
    *) ssh - return proper error code from executed command;
    *) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN);
    *) tile - fixed bridge performance degradation (introduced in v6.47);
    *) webfig - fixed "PortMapping" button (introduced in v6.48.2);
    *) winbox - fixed health reporting on RB960, hEX and hEX S devices;
    *) winbox - show "System/Health" only on boards that have health monitoring;
    *) wireless - fixed issue with multicast traffic delivery to client devices using power-save;
    *) wireless - improved iOS compatibility with HotSpot 2.0 networks;
    *) www - added "X-Frame-Options" header information to disallow website embedding in other pages;

    Download the new 'RouterOS 6.48.3' version here: https://mikrotik.com/download

  20. 7.1beta6 changelog:

    !) added support for Let's Encrypt certificate generation;
    !) added L3 HW support for all CRS3xx devices;
    !) added MLAG support for CRS3xx devices (CLI only);
    !) ported features and fixes introduced in v6.49;
    *) other minor fixes and improvements;

    Download the new 'RouterOS 7.1beta6' version here: https://mikrotik.com/download