Router OS
Operating system
RouterOS is the operating system of RouterBOARD. It can also be installed on a PC and will turn it into a router with all the necessary features - routing, firewall, bandwidth management, wireless access point, backhaul link, hotspot gateway, VPN server and more. You can compare the different license Level features on this page in our manual.
Online demo
Try RouterOS now by using our online demo routers. Connect via SSH or download our graphical application WinBox (latest version). When connecting in either way, use the address demo.mt.lv or demo2.mt.lv. Username is "demo" and there is no password. You can also open the web configuration interface in your web browser: demo.mt.lv and demo2.mt.lv
Installing RouterOS
Installing RouterOS on an x86 machine is very simple
| PC: | Download the ISO image, burn it to CD and boot from it. Your new router will run for 24 hours without a license (turn it off to stop the timer). During this time you can try all the features of RouterOS. |
| Other x86 |
Netinstall will write RouterOS to any secondary drive you have attached to your Windows PC. Move the drive to your Router PC and boot it. |
Both installation methods, plus upgrade files and more - on our download page.
Virtual environments now have special treatment: CHR
CHR, short for Cloud Hosted Router, is a new approach specifically made for Virtual Machines both locally and in the cloud. Optimised drivers, a new and more affordable licensing scheme, transferable licenses and more.
CHR is a special installation image, which is available for free on our download page, or directly in the Amazon AWS marketplace. Read more in our CHR manual.
Learning more about our software
RouterOS has extensive documentation and a Forum. Additionally we conduct Training and User Meetings.
Also our technical support team will try to answer your questions, and our trained consultants will help you configure your routers.
Purchasing a license for RouterOS
To use RouterOS after the free trial, a license key is required. You can obtain license keys in the MikroTik Account server. If you don't have an account yet, click on "New Account" there in the top-right corner of this page.
When purchasing the license, a SoftID number will be asked - this can be copied from the router's License menu.
To view license key level differences, see the comparison table.
Download
Upgrading RouterOS
If you are already running RouterOS, upgrading to the latest version can be done by clicking on "Check For Updates" in QuickSet or System > Packages menu in WebFig or WinBox. See the documentation for more information about upgrading and release types.
To manage your router, use the web interface, or download the maintenance utilities. Winbox to connect to your device, Dude to monitor your network and Netinstall for recovery and re-installation.
WinBox Download
Download Files
Download at mikrotik page| 7.15.3 Stable | 7.16beta7 Testing | |
|---|---|---|
| ARM | ||
| Main package |  SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| ARM64 / AMPERE | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| ISO image for AMPERE | SHA256 |
SHA256 |
| MIPSBE | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| MMIPS | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| SMIPS | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| TILE | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| PPC | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| X86 | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| CD Image | SHA256 |
SHA256 |
| Install image | SHA256 |
SHA256 |
| GENERAL | ||
| Netinstall (Windows) | SHA256 |
SHA256 |
| Netinstall (Windows 64bit) | SHA256 |
SHA256 |
| Netinstall (CLI Linux) | SHA256 |
SHA256 |
| The Dude client | SHA256 |
SHA256 |
| Bandwidth test | SHA256 |
SHA256 |
| Mikrotik.mib | SHA256 |
SHA256 |
| FlashFig | SHA256 |
SHA256 |
| Changelog |  |
|
| 6.49.13 Long-Term | 6.49.15 Stable | |
|---|---|---|
| ARM | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| ARM64 | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| MIPSBE | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| MMIPS | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| SMIPS | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| TILE | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| PPC | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| X86 | ||
| Main package | SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
| CD Image | SHA256 |
SHA256 |
| Install image | SHA256 |
SHA256 |
| GENERAL | ||
| Netinstall (Windows) | SHA256 |
SHA256 |
| Netinstall (Windows 64bit) | SHA256 |
SHA256 |
| Netinstall (CLI Linux) | SHA256 |
SHA256 |
| The Dude client | SHA256 |
SHA256 |
| Bandwidth test | SHA256 |
SHA256 |
| Mikrotik.mib | SHA256 |
SHA256 |
| FlashFig | SHA256 |
SHA256 |
| Changelog | |
|
| 6.49.13 Long-Term | 6.49.15 Stable | 7.15.3 Stable | 7.16beta7 Testing | |
|---|---|---|---|---|
| Images | vmdk, vhdx, vdi, ova, img | |||
| Main package | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| VHDX image | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| VMDK image | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| VDI image | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| VirtualPC image | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| OVA template | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| Raw disk image | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| Extra packages | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| The Dude client | SHA256 |
SHA256 |
SHA256 |
SHA256 |
| VDI image (arm64) | SHA256 |
SHA256 |
||
| Raw disk image (arm64) | SHA256 |
SHA256 |
||
| Changelog | |
|
|
|
| Switches | |
| Changelog 1.17 | |
| version 1.17 for RB250GS | |
| version 1.17 for RB260GS, RB260GSP | |
| version 2.16 for new RB260GS(CSS106-5G-1S), new RB260GSP(CSS106-1G-4P-1S) | |
| version 2.16 for CRS305-1G-4S+ | |
| version 2.16 for CRS305-1G-4S+OUT | |
| version 2.16 for CRS309-1G-8S+ | |
| version 2.16 for CRS310-1G-5S-4S+IN, CRS310-1G-5S-4S+OUT | |
| version 2.16 for CRS310-8G+2S+IN | |
| version 2.16 for CRS312-4C+8XG | |
| version 2.16 for CRS317-1G-16S+ | |
| version 2.16 for CRS318-1Fi-15Fr-2S | |
| version 2.16 for CRS318-16P-2S+ | |
| version 2.16 for CRS326-24G-2S+, CSS326-24G-2S+ | |
| version 2.16 for CRS326-24S+2Q+ | |
| version 2.16 for CRS326-4C+20G+2Q+RM | |
| version 2.16 for CRS328-4C-20S-4S+ | |
| version 2.16 for CRS328-24P-4S+ | |
| version 2.16 for CRS354-48G-4S+2Q+, CRS354-48P-4S+2Q+ | |
| Changelog 2.16 | |
| Switches | |
| version 2.18 for netPower Lite 7R (CSS610-1Gi-7R-2S+) | |
| version 2.18 for CSS610-8G-2S+ | |
| version 2.18 for CSS610-8P-2S+IN | |
| version 2.18 for GPEN21 | |
| version 2.18 for FTC11XG | |
| Changelog 2.18 | |
MikroTik RouterOS Stable and Long-Term releases
update : July 26, 2024, 7:10 a.m.
The newest MikroTik RouterOS releases.
All current and historical changelogs
What's new in 7.15.3 (2024-Jul-24 13:36):
*) lte - fixed possible crash when enabling/disabling config-less modem interface;
*) lte - fixed R11e-LTE no traffic flow when modem with older firmware version is used;
*) routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required);
*) ssh - fixed unsupported user SSH public key import (introduced in v7.15);
*) lte - fixed possible crash when enabling/disabling config-less modem interface;
*) lte - fixed R11e-LTE no traffic flow when modem with older firmware version is used;
*) routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required);
*) ssh - fixed unsupported user SSH public key import (introduced in v7.15);
What's new in 6.49.13 (2024-Apr-04 12:57):
*) defconf - fixed firewall rule for IPv6 UDP traceroute;
*) defconf - fixed firewall rule for IPv6 UDP traceroute;
Long-term release tree
What's new in 6.49.13 (2024-Apr-04 12:57):
*) defconf - fixed firewall rule for IPv6 UDP traceroute;
*) defconf - fixed firewall rule for IPv6 UDP traceroute;
Stable release tree
What's new in 7.15.3 (2024-Jul-24 13:36):
*) lte - fixed possible crash when enabling/disabling config-less modem interface;
*) lte - fixed R11e-LTE no traffic flow when modem with older firmware version is used;
*) routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required);
*) ssh - fixed unsupported user SSH public key import (introduced in v7.15);
*) lte - fixed possible crash when enabling/disabling config-less modem interface;
*) lte - fixed R11e-LTE no traffic flow when modem with older firmware version is used;
*) routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required);
*) ssh - fixed unsupported user SSH public key import (introduced in v7.15);
Testing release tree
What's new in 7.16beta7 (2024-Jul-25 12:55):
*) 6to4 - improved system stability when using 6to4 tunnel without specified remote-address;
*) 6to4 - make "remote-address" parameter not-mandatory (introduced in v7.16beta3);
*) arm64 - fixed "disable-running-check" for ARM64 UEFI;
*) arp - fixed possible issue with invalid entries;
*) bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge (additional fixes);
*) bridge - added L2 MDB support for IGMP snooping (additional fixes);
*) bridge - fixed MVRP leave;
*) bridge - fixed port "point-to-point" status after first link change;
*) bth - improved stability on system time change;
*) console - added "about" filters for "find" and "print where" commands;
*) console - increased default width for bitrate type of columns;
*) dhcp - improved DHCP IPv4 and IPv6 client/relay/server underlying interface state change handling;
*) dhcpv4-server - remove corresponding dynamic leases if their address-pool gets removed;
*) discovery - added discover-interval setting (additional fixes);
*) discovery - added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs support (additional fixes);
*) discovery - added LLDP-MED timeout (additional fixes);
*) discovery - changed default discover-interval setting from 60s to 30s;
*) disk - remove dummy "slot1" entries on CHR;
*) dns - added support for DoH with adlist (additional fixes);
*) dns - added support for mDNS proxy;
*) dns - fixed memory leak caused by DoH service (introduced in v7.16beta3);
*) dns - improved imported adlist parsing;
*) dns - match NXDOMAIN static entry only if other type entries for the same name are not found;
*) dns - refactored adlist service internal processes and improved logging;
*) dns - show static entry type "A" field in console;
*) ethernet - improved system stability for Alpine CPUs when dealing with unexpected non-UDP/TCP packet transmit;
*) file - renamed "creation-time" to "last-modified";
*) filesystem - improved boot speed after device is rebooted without proper shutdown (additional fixes);
*) filesystem - refactored internal processes to minimize sector writes (additional fixes);
*) iot - fixed incorrect LoRa filter export behavior;
*) iot - fixed LoRa inability to set SSL for LoRa servers via command line;
*) ipsec - improved installed SA statistics update;
*) ipsec - improved performance by balancing multicore CPU usage for key exchange calculation;
*) ipv6 - fixed pool allocated addresses missing after reboot (additional fixes);
*) ipv6 - improved handling of IPv6 address information;
*) ipv6 - improved LL address generation process (additional fixes);
*) leds - fixed rgb LED blink (introduced in v7.16beta1);
*) lte - fixed possible crash when enabling/disabling config-less modem interface;
*) lte - improved modem AT/modem port open;
*) lte - improvements to "/interface/lte/show-capabilities" command (additional fixes);
*) modem - fixed cases where USB bus could switch places (introduced in v7.16beta1) (additional fixes);
*) modem - improved support for KNOT BG77 modem firmware update (additional fixes);
*) poe-out - fixed incorrect port mapping on CRS354-48P-4S+2Q+ device (introduced in v7.16beta1);
*) ppp - added SIM hot-plug enable command to default init-string for KNOT and CME gateway;
*) ppp - fixed PPP info parser showing error for BG77 modem running on KNOT AUX AT/modem port;
*) qos-hw - added queue-buffers property to tx-manager (additional fixes);
*) qos-hw - fixed egress-rate limit validation;
*) qos-hw - fixed WRED thresholds;
*) qos-hw - improved behavior when changing ports tx-manger;
*) rose-storage - renamed sync "remote-addr" property to "remote-address";
*) route - improved route attribute handling (may increase memory usage);
*) route - improved stability when getting entries from large routing tables;
*) routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required);
*) sfp - fixed calculated link length based on EEPROM in certain cases (additional fixes);
*) ssh - fixed unsupported user SSH public key import (introduced in v7.15);
*) switch - fixed bonding FDB entries (introduced in v7.16beta3);
*) switch - fixed Ethernet counters after switch reset for CRS354 devices (introduced in v7.16beta1);
*) switch - improved switch reset;
*) system - added critical log message when not enough space to store new configuration;
*) system - fixed "free disk space" error message on system upgrade/downgrade;
*) system - improved internal system services messaging;
*) system - improved performance for TCP input;
*) traceroute - do not stop traceroute after 5 consecutive unreachable hops;
*) user - added inactivity timeout for non-GUI sessions (additional fixes);
*) webfig - allow to enter time that exceeds 23:59:59;
*) webfig - correctly display default value for number type;
*) webfig - enabled hotlock mode for terminal;
*) webfig - fixed an issue where wrong menu title was shown;
*) webfig - fixed sorting by datetime;
*) webfig - use "any" argument by default for Torch "Port" property;
*) wifi - added "slave-name-format";
*) wifi - added interface provisioning logs;
*) wifi - fixed packet receive when having multiple station interfaces (additional fixes);
*) wifi - improved system stability after interface hang;
*) wifi - send channel switch announcements to clients when switching channels at requested re-select intervals;
*) winbox - added "Switch/QoS" menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices (additional fixes);
*) winbox - added configuration settings for ROSE;
*) winbox - added extra "File System" under "Format Drive" button;
*) winbox - added missing "Default Name" property for interfaces;
*) winbox - fixed Switch menu for RB1100AHx4 device;
*) winbox - improved QR code display;
*) winbox - moved Switch menu tabs to individual menus (additional fixes);
*) winbox - properly display available address-pools for DHCPv6 server configuration;
*) winbox - renamed configurable wifi property "Tx Power" to "Max Tx Power";
*) winbox - use correct default value for "Partition Offset" property;
Other changes since v7.15:
*) 6to4 - fixed 6to4 tunnel LL address generation after system reboot;
*) 6to4 - limit keepalive timeout maximum value;
*) address - added "S" flag for addresses that belong to a slave interface;
*) arm64 - increased reserved storage space for bootloader;
*) arm64/x86 - added rtl8111/8168/8411 firmware;
*) bgp - fixed BGP sessions missing vpnv6 afi;
*) bgp - fixed cluster-list and originator-id;
*) bgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15);
*) bgp - fixed vpnv6 safi;
*) bgp - small logging improvements;
*) bridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade);
*) bridge - added max-learned-entries property for bridge;
*) bridge - added message about who created a dynamic VLAN entry;
*) bridge - added MVRP support for VLANs assigned to bridge;
*) bridge - do not allow duplicate ports;
*) bridge - fixed BPDU address when using "ether-type=0x88a8" configuration;
*) bridge - fixed typo in filter and NAT error message;
*) bridge - improved system stability when removing MLAG configuration;
*) bridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached);
*) bth - improved system stability;
*) certificate - added no-key-export parameter for import;
*) certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
*) certificate - automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt;
*) certificate - improved DNS challenge error reporting for Let's Encrypt;
*) certificate - show validity beyond year 2038;
*) chr - added support for licensing over IPv6 network;
*) chr - fixed incorrect disk size for ARM64;
*) console - added "verbose=progress" mode for import status updates, and verbose output only on failures;
*) console - added additional byte-array option to :convert command;
*) console - added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only);
*) console - added limits for dst-start and dst-end clock properties;
*) console - added lock screen via :lock command;
*) console - added uppercase and lowercase transform modes to :convert command;
*) console - disallow ping command with empty address;
*) console - display hint when requesting specific argument syntax;
*) console - do not show default boot-os setting in export;
*) console - fixed an issue where certain MAC address can be interpreted as time value;
*) console - fixed negative values for gmt-offset clock property;
*) console - fixed output of ping command in certain cases;
*) console - fixed typo in firewall error message;
*) console - improve large import file handling, error detection and stability;
*) console - improved :serialize and :deserialize commands and added support for DSV (delimiter separated values) format;
*) console - improved stability when pasting a large input;
*) console - improved stability when removing script;
*) console - removed follow-strict parameter;
*) console - show rest-api name for active user connections;
*) container - clear VETH address on container exit and mark interface as running only when VETH is in use;
*) defconf - configure the default-route property for PPP clients only on devices with a built-in modem;
*) detnet - properly detect "Internet" status when multiple detnet instances preset in network;
*) dhcp - added comment property for matchers, options and option sets;
*) dhcp - improved insert-queue-before, parent-queue and allow-dual-stack-queue behavior;
*) dhcpv4-client - execute script on DNS server or gateway address change;
*) dhcpv4-server - added "class-id" parameter for DHCP server leases;
*) dhcpv4-server - added matcher ability to match substring;
*) dhcpv4-server - added name for "User-Class" option (77), "Authentication" option (90), "SIP-Servers-DHCP-Option" option (120) and "Unassigned" option (163-174) in debug logs;
*) dhcpv4-server - fixed setting and getting "next-server" property;
*) dhcpv4-server - increased lease offer timeout to 120 seconds;
*) dhcpv4-server - show active-server and host-name in print active command;
*) dhcpv6-client - do not add default gateway twice when both prefix and address is acquired;
*) dhcpv6-client - fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0;
*) dhcpv6-client - pause client and remove dynamically installed objects while it becomes invalid;
*) dhcpv6-client - release client on failed renew attempt (additional fixes);
*) dhcpv6-client - update gateway address for default route on renew;
*) dhcpv6-server - improved system stability;
*) discovery - set unknown bit for any unspecified link type in MAC/PHY TLV;
*) disk - added "wipe-quick" file-system option to format-drive command (CLI only);
*) disk - added log message when disks get added or removed;
*) disk - added simple test command to test device and filesystem speeds (CLI only) (additional fixes);
*) disk - improved system stability;
*) dns - added support for DoH with static FWD entries;
*) dns - refactored DNS service internal processes (additional fixes);
*) dude - fixed map element RouterOS package upgrade functionality;
*) ethernet - fixed port speed downshift functionality for CRS354 devices;
*) fetch - handle HTTP 401 status correctly;
*) fetch - improved logging;
*) firewall - added message when interface belonging to VRF is added in filter rules (additional fixes);
*) firewall - fixed IPv6 "nth" matcher showing up twice in help;
*) firewall - fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo command;
*) firewall - removed unnecessary TLS host matcher from NAT tables;
*) health - fixed board-temperature for KNOT device (introduced in v7.15);
*) health - fixed bogus CPU temperature spikes for CCR2216 device;
*) health - fixed missing health for CRS112-8G-4S device (introduced in v7.15);
*) health - improved voltage measurements for RB912UAG-6HPnD and RB912UAG-5HPnD devices;
*) health - removed unnecessary health settings for RB921 and RB922 devices;
*) health - upgraded fan controller firmware to latest version;
*) ike1 - removed unsupported NAT-D drafts with invalid payload numbers;
*) install - allow to save old configuration during cdrom install;
*) install - fixed ARM64 cdrom install (introduced in v7.15);
*) iot - added an option to delete default LoRa servers and a button to recover them if needed;
*) iot - added an option to log LoRa filtered packets (additional fixes);
*) iot - added LoRa NetID and JoinEUI filtering for LNS and CUPS connections;
*) iot - added LoRa option to filter out proprietary packets (additional fixes);
*) iot - fixed LoRa inability to use variables for GPS-spoofing setting;
*) ip - added max-sessions property for services;
*) ip/ipv6 - added multipath hash policy settings;
*) ipip6 - make IPv6 LL address random;
*) ipsec - changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4;
*) ipv6 - added "d" deprecated flag for expired IPv6 SLAAC addresses;
*) ipv6 - allow to properly disable address when it is generated from pool;
*) ipv6 - allow to properly move IPv6 address from slave interface to a bridge interface;
*) ipv6 - do not allow adding address with invalid prefix when using pool;
*) ipv6 - do not allow to manually delete LL address (additional fixes);
*) ipv6 - fixed "no-dad" functionality;
*) ipv6 - fixed dynamic duplicate address showing when static address is already configured;
*) ipv6 - fixed SLAAC address dynamic appearance;
*) ipv6 - properly initialize default ND "interface=all" entry;
*) ipv6 - respect APN settings for "add-default-route" and "use-peer-dns" also when "accept-router-advertisements=yes";
*) ipv6 - warn user that reboot is required in order to properly apply accept-router-advertisements changes;
*) isis - fixed filter-chain and filter-select settings;
*) isis - install IPv6 link-local gateways correctly;
*) l2tp - improved system stability;
*) l3hw - added per-VLAN packet and byte counters to compatible switches;
*) l3hw - disable L3HW on bonding modes that do not support it;
*) leds - fixed system LED to indicate correct RAT for Chateau (introduced in v7.16beta1);
*) log - added basic validation for "disk-file-name" property;
*) lte - added "sms-protocol" setting in "/interface lte" menu (CLI only);
*) lte - fixed "at-chat" for DELL T99W175 (PID: 0x05c6 VID: 0x90d5);
*) lte - fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
*) lte - fixed cases where modem could be handled by multiple dialer instances;
*) lte - fixed MBIM modem registration on the network (introduced in v7.16beta1);
*) lte - fixed modem dialer disable for Chateau 5G devices when cellular modem support mode set to serial (introduced in v7.16beta2);
*) lte - fixed R11e-LTE no traffic flow when modem with older firmware version is used;
*) lte - fixed support for Fibocom modem fm150-na;
*) lte - improved system stability for MBIM modem during AT query (introduced in v7.16beta1);
*) media - improved file indexing for DLNA;
*) modem - added authentication functionality to EC200A;
*) modem - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15) (additional fixes);
*) modem - fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacity;
*) mqtt - broker password is no longer exported unless "show-sensitive" flag is used;
*) netinstall-cli - added check for device and package architectures match;
*) netinstall-cli - added support for multiple device install (additional fixes);
*) netinstall-cli - allow mixed package architectures;
*) netwatch - added DNS probe;
*) netwatch - added ttl and accept-icmp-time-exceeded properties for ICMP probe;
*) netwatch - use time format according to ISO standard;
*) ospf - improved system stability during LSA monitoring;
*) ovpn - improved system stability;
*) pimsm - improved system stability;
*) poe-out - fixed low-voltage detection while PD is connected for KNOT device;
*) poe-out - fixed possible issue with "current_too_low" on devices with a single PoE out interface (introduced in v7.16beta1);
*) poe-out - fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15);
*) poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces);
*) port - added IPv6 support for the "remote-access" feature;
*) ppp - added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-client;
*) ppp - automatically generate IPv6 firewall rules when filter-id is specified;
*) ppp - fixed dynamic queue default name (introduced in v7.15);
*) profiler - classify wifi processing as "wireless";
*) ptp - added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devices;
*) qos-hw - added H and I flags to queues;
*) qos-hw - added new monitoring properties for ports and global QoS stats;
*) qos-hw - allow port print stats, usage and pfc while QoS is disabled;
*) qos-hw - allow to set queue-buffers in bytes, percent or auto;
*) qos-hw - enabling ECN forces WRED (unless share is disabled);
*) qos-hw - fixed global buffer limits for 98DX8212 and 98DX8332 switches;
*) qos-hw - fixed incorrect per-port packet and byte cap (introduced in v7.16beta1);
*) qos-hw - limit WRED to queues with enabled shared buffers;
*) queue - improved system stability;
*) quickset - removed Basic AP mode;
*) rose-storage - fixed "/file sysnc status" parameter to be read-only;
*) rose-storage - moved "/rsync-daemon" to "/file rsync-daemon;
*) route - added ability to redistribute isis routes;
*) route - fixed incorrectly handled route distinguisher and route targets (introduced in v7.15);
*) route - fixed memory leak (introduced in v7.15);
*) route - fixed some missing route parameters when printing (introduced in v7.15);
*) route - place static route in the correct VRF when vrf-interface parameter is used;
*) route - rename route type from is-is to isis;
*) routerboard - improved Etherboot stability for IPQ-40xx devices ("/system routerboard upgrade" required);
*) routerboot - improved boot process ("/system routerboard upgrade" required);
*) rpki - fixed preference sorting;
*) sfp - fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ device;
*) sfp - fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe device;
*) sfp - fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe device;
*) sms - added polling setting so that RouterOS itself checks SMS instead of relying on URC messages;
*) snmp - added support for KNOT BG77 modem cellular signal info;
*) snmp - fixed LAST-UPDATED format in MIKROTIK-MIB;
*) ssh - fixed SSH cryptographic accelerator selection (introduced in v7.14);
*) ssh - improved system stability when SSH tries to bind to non-existing interface;
*) supout - added detnet section;
*) supout - added monitor command for all wifi interfaces;
*) supout - added netwatch section;
*) supout - added user SSH keys section;
*) supout - increased console output width;
*) supout - limit address-list and connection tracking entries to 999 in supout.rif;
*) supout - rename "store" section to "disk";
*) switch - fixed an issue where half-duplex links could occupy Tx resources for 98DX8xxx, 98DX4xxx, 98DX325x switch chips;
*) switch - fixed an issue with Ethernet port group hang for CRS354 devices;
*) switch - fixed Ethernet interface counter 32bit overflow for CRS354 devices;
*) switch - fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15);
*) switch - improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
*) system - added "clock" logging topic for time change related messages;
*) system - added log message if device failed to reboot gracefully;
*) system - added more details to user initiated reboot (reset, upgrade, downgrade);
*) system - added support for upgrade over IPv6 network;
*) system - do not cancel package upgrade if another architecture packages found on the router;
*) system - do not download packages scheduled for uninstall;
*) system - do not start IPsec and certificate processes when not necessary;
*) system - fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15);
*) system - fixed empty logs after reboot in certain cases;
*) system - improved reporting of total memory size;
*) system - improved system stability for RBSXTsq5nD and RBLDF-5nD;
*) system - improved system stability;
*) system - improved watchdog and kernel panic reporting (additional fixes);
*) system - reduced RAM usage for ARM64 devices;
*) system - set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required);
*) system - set flash-boot mode as "boot-device" after system reset initiated from software;
*) tunnel - allow specifying IPv6 LL address as "remote-address" for EoIPv6, GRE6 and IPIP6 tunnels;
*) user-manager - updated logo;
*) vxlan - added comment support to VTEPs;
*) vxlan - prevent creating multiple VTEPs with same IP/port combination;
*) webfig - fixed issue with incorrectly applying optional fields;
*) wifi - adjusted virtual interface naming when provisioning local radios;
*) wifi - do not allow frequency-scan on virtual interfaces;
*) wifi - do not unset radio-mac and master-interface properties on reset;
*) wifi - enable creating virtual wifi interfaces using "copy-from" setting;
*) wifi - fixed signal strength reporting during association (introduced in v7.15) (additional fixes);
*) wifi - fixed typo in log message;
*) wifi - improve regulatory compliance for Chateau ax devices;
*) wifi - improved interface stability when receiving invalid FT authentication frames;
*) wifi - improved WPA3 PMKSA handling when access-lists with custom passphrases are used;
*) wifi - make sniffer tool return an error when attempting to sniff with a radio which does not support it;
*) wifi - use name-format also for local interfaces when provisioning;
*) wifi-qcom - add spectral-scan and spectral-history tools (CLI only) (additional fixes);
*) wifi-qcom-ac - count dropped packets to "tx-drop" instead of "tx-error";
*) winbox - added "Import Router ID" parameter under "Routing/BGP/VPN" menu;
*) winbox - added "Trace" column under "System/History" menu;
*) winbox - do not show "Last Logged In" and "Expire Password" when creating new system user;
*) winbox - fixed "Authority" property under "System/Certificates/Requests" menu;
*) winbox - fixed duplicated "MVRP Attributes" table;
*) winbox - fixed error when changing wifi interface settings in some rare conditions (introduced in v7.16beta1);
*) winbox - fixed false invalid flag under "System/Ports/Remote Access" menu;
*) winbox - fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15);
*) winbox - fixed signal bar "excellent" tooltip;
*) winbox - moved DHCPv6 Server "Allow Dual Stack Queue" property from General to Queues tab;
*) winbox - removed deprecated x86/CHR specific settings under "System/Resources" menu;
*) winbox - removed spare argument for "PFS Group" property under "IP/IPsec/Proposals" menu;
*) winbox - separated different Watchdog settings into logical tabs;
*) winbox - use CAP serial number with "Set Identity" button under "WiFi/Remote CAP" menu;
*) winbox/webfig - fixed skins (introduced in v7.15);
*) wireless - allow unsetting signal-range and ssid-regext properties for capsman access-list (additional fixes);
*) wireless - fixed dynamic VLAN assignments for vlan-filtering bridge in certain cases;
*) wireless - limit antenna-gain property to 100;
*) www - log out inactive REST API users;
*) x86 - added missing PCI ids for bnx2x driver;
*) x86 - added RTL8156 driver support;
*) x86 - fixed missing serial ports with MCS9900;
*) 6to4 - improved system stability when using 6to4 tunnel without specified remote-address;
*) 6to4 - make "remote-address" parameter not-mandatory (introduced in v7.16beta3);
*) arm64 - fixed "disable-running-check" for ARM64 UEFI;
*) arp - fixed possible issue with invalid entries;
*) bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge (additional fixes);
*) bridge - added L2 MDB support for IGMP snooping (additional fixes);
*) bridge - fixed MVRP leave;
*) bridge - fixed port "point-to-point" status after first link change;
*) bth - improved stability on system time change;
*) console - added "about" filters for "find" and "print where" commands;
*) console - increased default width for bitrate type of columns;
*) dhcp - improved DHCP IPv4 and IPv6 client/relay/server underlying interface state change handling;
*) dhcpv4-server - remove corresponding dynamic leases if their address-pool gets removed;
*) discovery - added discover-interval setting (additional fixes);
*) discovery - added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs support (additional fixes);
*) discovery - added LLDP-MED timeout (additional fixes);
*) discovery - changed default discover-interval setting from 60s to 30s;
*) disk - remove dummy "slot1" entries on CHR;
*) dns - added support for DoH with adlist (additional fixes);
*) dns - added support for mDNS proxy;
*) dns - fixed memory leak caused by DoH service (introduced in v7.16beta3);
*) dns - improved imported adlist parsing;
*) dns - match NXDOMAIN static entry only if other type entries for the same name are not found;
*) dns - refactored adlist service internal processes and improved logging;
*) dns - show static entry type "A" field in console;
*) ethernet - improved system stability for Alpine CPUs when dealing with unexpected non-UDP/TCP packet transmit;
*) file - renamed "creation-time" to "last-modified";
*) filesystem - improved boot speed after device is rebooted without proper shutdown (additional fixes);
*) filesystem - refactored internal processes to minimize sector writes (additional fixes);
*) iot - fixed incorrect LoRa filter export behavior;
*) iot - fixed LoRa inability to set SSL for LoRa servers via command line;
*) ipsec - improved installed SA statistics update;
*) ipsec - improved performance by balancing multicore CPU usage for key exchange calculation;
*) ipv6 - fixed pool allocated addresses missing after reboot (additional fixes);
*) ipv6 - improved handling of IPv6 address information;
*) ipv6 - improved LL address generation process (additional fixes);
*) leds - fixed rgb LED blink (introduced in v7.16beta1);
*) lte - fixed possible crash when enabling/disabling config-less modem interface;
*) lte - improved modem AT/modem port open;
*) lte - improvements to "/interface/lte/show-capabilities" command (additional fixes);
*) modem - fixed cases where USB bus could switch places (introduced in v7.16beta1) (additional fixes);
*) modem - improved support for KNOT BG77 modem firmware update (additional fixes);
*) poe-out - fixed incorrect port mapping on CRS354-48P-4S+2Q+ device (introduced in v7.16beta1);
*) ppp - added SIM hot-plug enable command to default init-string for KNOT and CME gateway;
*) ppp - fixed PPP info parser showing error for BG77 modem running on KNOT AUX AT/modem port;
*) qos-hw - added queue-buffers property to tx-manager (additional fixes);
*) qos-hw - fixed egress-rate limit validation;
*) qos-hw - fixed WRED thresholds;
*) qos-hw - improved behavior when changing ports tx-manger;
*) rose-storage - renamed sync "remote-addr" property to "remote-address";
*) route - improved route attribute handling (may increase memory usage);
*) route - improved stability when getting entries from large routing tables;
*) routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device ("/system routerboard upgrade" required);
*) sfp - fixed calculated link length based on EEPROM in certain cases (additional fixes);
*) ssh - fixed unsupported user SSH public key import (introduced in v7.15);
*) switch - fixed bonding FDB entries (introduced in v7.16beta3);
*) switch - fixed Ethernet counters after switch reset for CRS354 devices (introduced in v7.16beta1);
*) switch - improved switch reset;
*) system - added critical log message when not enough space to store new configuration;
*) system - fixed "free disk space" error message on system upgrade/downgrade;
*) system - improved internal system services messaging;
*) system - improved performance for TCP input;
*) traceroute - do not stop traceroute after 5 consecutive unreachable hops;
*) user - added inactivity timeout for non-GUI sessions (additional fixes);
*) webfig - allow to enter time that exceeds 23:59:59;
*) webfig - correctly display default value for number type;
*) webfig - enabled hotlock mode for terminal;
*) webfig - fixed an issue where wrong menu title was shown;
*) webfig - fixed sorting by datetime;
*) webfig - use "any" argument by default for Torch "Port" property;
*) wifi - added "slave-name-format";
*) wifi - added interface provisioning logs;
*) wifi - fixed packet receive when having multiple station interfaces (additional fixes);
*) wifi - improved system stability after interface hang;
*) wifi - send channel switch announcements to clients when switching channels at requested re-select intervals;
*) winbox - added "Switch/QoS" menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices (additional fixes);
*) winbox - added configuration settings for ROSE;
*) winbox - added extra "File System" under "Format Drive" button;
*) winbox - added missing "Default Name" property for interfaces;
*) winbox - fixed Switch menu for RB1100AHx4 device;
*) winbox - improved QR code display;
*) winbox - moved Switch menu tabs to individual menus (additional fixes);
*) winbox - properly display available address-pools for DHCPv6 server configuration;
*) winbox - renamed configurable wifi property "Tx Power" to "Max Tx Power";
*) winbox - use correct default value for "Partition Offset" property;
Other changes since v7.15:
*) 6to4 - fixed 6to4 tunnel LL address generation after system reboot;
*) 6to4 - limit keepalive timeout maximum value;
*) address - added "S" flag for addresses that belong to a slave interface;
*) arm64 - increased reserved storage space for bootloader;
*) arm64/x86 - added rtl8111/8168/8411 firmware;
*) bgp - fixed BGP sessions missing vpnv6 afi;
*) bgp - fixed cluster-list and originator-id;
*) bgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15);
*) bgp - fixed vpnv6 safi;
*) bgp - small logging improvements;
*) bridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade);
*) bridge - added max-learned-entries property for bridge;
*) bridge - added message about who created a dynamic VLAN entry;
*) bridge - added MVRP support for VLANs assigned to bridge;
*) bridge - do not allow duplicate ports;
*) bridge - fixed BPDU address when using "ether-type=0x88a8" configuration;
*) bridge - fixed typo in filter and NAT error message;
*) bridge - improved system stability when removing MLAG configuration;
*) bridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached);
*) bth - improved system stability;
*) certificate - added no-key-export parameter for import;
*) certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
*) certificate - automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt;
*) certificate - improved DNS challenge error reporting for Let's Encrypt;
*) certificate - show validity beyond year 2038;
*) chr - added support for licensing over IPv6 network;
*) chr - fixed incorrect disk size for ARM64;
*) console - added "verbose=progress" mode for import status updates, and verbose output only on failures;
*) console - added additional byte-array option to :convert command;
*) console - added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only);
*) console - added limits for dst-start and dst-end clock properties;
*) console - added lock screen via :lock command;
*) console - added uppercase and lowercase transform modes to :convert command;
*) console - disallow ping command with empty address;
*) console - display hint when requesting specific argument syntax;
*) console - do not show default boot-os setting in export;
*) console - fixed an issue where certain MAC address can be interpreted as time value;
*) console - fixed negative values for gmt-offset clock property;
*) console - fixed output of ping command in certain cases;
*) console - fixed typo in firewall error message;
*) console - improve large import file handling, error detection and stability;
*) console - improved :serialize and :deserialize commands and added support for DSV (delimiter separated values) format;
*) console - improved stability when pasting a large input;
*) console - improved stability when removing script;
*) console - removed follow-strict parameter;
*) console - show rest-api name for active user connections;
*) container - clear VETH address on container exit and mark interface as running only when VETH is in use;
*) defconf - configure the default-route property for PPP clients only on devices with a built-in modem;
*) detnet - properly detect "Internet" status when multiple detnet instances preset in network;
*) dhcp - added comment property for matchers, options and option sets;
*) dhcp - improved insert-queue-before, parent-queue and allow-dual-stack-queue behavior;
*) dhcpv4-client - execute script on DNS server or gateway address change;
*) dhcpv4-server - added "class-id" parameter for DHCP server leases;
*) dhcpv4-server - added matcher ability to match substring;
*) dhcpv4-server - added name for "User-Class" option (77), "Authentication" option (90), "SIP-Servers-DHCP-Option" option (120) and "Unassigned" option (163-174) in debug logs;
*) dhcpv4-server - fixed setting and getting "next-server" property;
*) dhcpv4-server - increased lease offer timeout to 120 seconds;
*) dhcpv4-server - show active-server and host-name in print active command;
*) dhcpv6-client - do not add default gateway twice when both prefix and address is acquired;
*) dhcpv6-client - fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0;
*) dhcpv6-client - pause client and remove dynamically installed objects while it becomes invalid;
*) dhcpv6-client - release client on failed renew attempt (additional fixes);
*) dhcpv6-client - update gateway address for default route on renew;
*) dhcpv6-server - improved system stability;
*) discovery - set unknown bit for any unspecified link type in MAC/PHY TLV;
*) disk - added "wipe-quick" file-system option to format-drive command (CLI only);
*) disk - added log message when disks get added or removed;
*) disk - added simple test command to test device and filesystem speeds (CLI only) (additional fixes);
*) disk - improved system stability;
*) dns - added support for DoH with static FWD entries;
*) dns - refactored DNS service internal processes (additional fixes);
*) dude - fixed map element RouterOS package upgrade functionality;
*) ethernet - fixed port speed downshift functionality for CRS354 devices;
*) fetch - handle HTTP 401 status correctly;
*) fetch - improved logging;
*) firewall - added message when interface belonging to VRF is added in filter rules (additional fixes);
*) firewall - fixed IPv6 "nth" matcher showing up twice in help;
*) firewall - fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo command;
*) firewall - removed unnecessary TLS host matcher from NAT tables;
*) health - fixed board-temperature for KNOT device (introduced in v7.15);
*) health - fixed bogus CPU temperature spikes for CCR2216 device;
*) health - fixed missing health for CRS112-8G-4S device (introduced in v7.15);
*) health - improved voltage measurements for RB912UAG-6HPnD and RB912UAG-5HPnD devices;
*) health - removed unnecessary health settings for RB921 and RB922 devices;
*) health - upgraded fan controller firmware to latest version;
*) ike1 - removed unsupported NAT-D drafts with invalid payload numbers;
*) install - allow to save old configuration during cdrom install;
*) install - fixed ARM64 cdrom install (introduced in v7.15);
*) iot - added an option to delete default LoRa servers and a button to recover them if needed;
*) iot - added an option to log LoRa filtered packets (additional fixes);
*) iot - added LoRa NetID and JoinEUI filtering for LNS and CUPS connections;
*) iot - added LoRa option to filter out proprietary packets (additional fixes);
*) iot - fixed LoRa inability to use variables for GPS-spoofing setting;
*) ip - added max-sessions property for services;
*) ip/ipv6 - added multipath hash policy settings;
*) ipip6 - make IPv6 LL address random;
*) ipsec - changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4;
*) ipv6 - added "d" deprecated flag for expired IPv6 SLAAC addresses;
*) ipv6 - allow to properly disable address when it is generated from pool;
*) ipv6 - allow to properly move IPv6 address from slave interface to a bridge interface;
*) ipv6 - do not allow adding address with invalid prefix when using pool;
*) ipv6 - do not allow to manually delete LL address (additional fixes);
*) ipv6 - fixed "no-dad" functionality;
*) ipv6 - fixed dynamic duplicate address showing when static address is already configured;
*) ipv6 - fixed SLAAC address dynamic appearance;
*) ipv6 - properly initialize default ND "interface=all" entry;
*) ipv6 - respect APN settings for "add-default-route" and "use-peer-dns" also when "accept-router-advertisements=yes";
*) ipv6 - warn user that reboot is required in order to properly apply accept-router-advertisements changes;
*) isis - fixed filter-chain and filter-select settings;
*) isis - install IPv6 link-local gateways correctly;
*) l2tp - improved system stability;
*) l3hw - added per-VLAN packet and byte counters to compatible switches;
*) l3hw - disable L3HW on bonding modes that do not support it;
*) leds - fixed system LED to indicate correct RAT for Chateau (introduced in v7.16beta1);
*) log - added basic validation for "disk-file-name" property;
*) lte - added "sms-protocol" setting in "/interface lte" menu (CLI only);
*) lte - fixed "at-chat" for DELL T99W175 (PID: 0x05c6 VID: 0x90d5);
*) lte - fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
*) lte - fixed cases where modem could be handled by multiple dialer instances;
*) lte - fixed MBIM modem registration on the network (introduced in v7.16beta1);
*) lte - fixed modem dialer disable for Chateau 5G devices when cellular modem support mode set to serial (introduced in v7.16beta2);
*) lte - fixed R11e-LTE no traffic flow when modem with older firmware version is used;
*) lte - fixed support for Fibocom modem fm150-na;
*) lte - improved system stability for MBIM modem during AT query (introduced in v7.16beta1);
*) media - improved file indexing for DLNA;
*) modem - added authentication functionality to EC200A;
*) modem - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15) (additional fixes);
*) modem - fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacity;
*) mqtt - broker password is no longer exported unless "show-sensitive" flag is used;
*) netinstall-cli - added check for device and package architectures match;
*) netinstall-cli - added support for multiple device install (additional fixes);
*) netinstall-cli - allow mixed package architectures;
*) netwatch - added DNS probe;
*) netwatch - added ttl and accept-icmp-time-exceeded properties for ICMP probe;
*) netwatch - use time format according to ISO standard;
*) ospf - improved system stability during LSA monitoring;
*) ovpn - improved system stability;
*) pimsm - improved system stability;
*) poe-out - fixed low-voltage detection while PD is connected for KNOT device;
*) poe-out - fixed possible issue with "current_too_low" on devices with a single PoE out interface (introduced in v7.16beta1);
*) poe-out - fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15);
*) poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces);
*) port - added IPv6 support for the "remote-access" feature;
*) ppp - added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-client;
*) ppp - automatically generate IPv6 firewall rules when filter-id is specified;
*) ppp - fixed dynamic queue default name (introduced in v7.15);
*) profiler - classify wifi processing as "wireless";
*) ptp - added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devices;
*) qos-hw - added H and I flags to queues;
*) qos-hw - added new monitoring properties for ports and global QoS stats;
*) qos-hw - allow port print stats, usage and pfc while QoS is disabled;
*) qos-hw - allow to set queue-buffers in bytes, percent or auto;
*) qos-hw - enabling ECN forces WRED (unless share is disabled);
*) qos-hw - fixed global buffer limits for 98DX8212 and 98DX8332 switches;
*) qos-hw - fixed incorrect per-port packet and byte cap (introduced in v7.16beta1);
*) qos-hw - limit WRED to queues with enabled shared buffers;
*) queue - improved system stability;
*) quickset - removed Basic AP mode;
*) rose-storage - fixed "/file sysnc status" parameter to be read-only;
*) rose-storage - moved "/rsync-daemon" to "/file rsync-daemon;
*) route - added ability to redistribute isis routes;
*) route - fixed incorrectly handled route distinguisher and route targets (introduced in v7.15);
*) route - fixed memory leak (introduced in v7.15);
*) route - fixed some missing route parameters when printing (introduced in v7.15);
*) route - place static route in the correct VRF when vrf-interface parameter is used;
*) route - rename route type from is-is to isis;
*) routerboard - improved Etherboot stability for IPQ-40xx devices ("/system routerboard upgrade" required);
*) routerboot - improved boot process ("/system routerboard upgrade" required);
*) rpki - fixed preference sorting;
*) sfp - fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ device;
*) sfp - fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe device;
*) sfp - fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe device;
*) sms - added polling setting so that RouterOS itself checks SMS instead of relying on URC messages;
*) snmp - added support for KNOT BG77 modem cellular signal info;
*) snmp - fixed LAST-UPDATED format in MIKROTIK-MIB;
*) ssh - fixed SSH cryptographic accelerator selection (introduced in v7.14);
*) ssh - improved system stability when SSH tries to bind to non-existing interface;
*) supout - added detnet section;
*) supout - added monitor command for all wifi interfaces;
*) supout - added netwatch section;
*) supout - added user SSH keys section;
*) supout - increased console output width;
*) supout - limit address-list and connection tracking entries to 999 in supout.rif;
*) supout - rename "store" section to "disk";
*) switch - fixed an issue where half-duplex links could occupy Tx resources for 98DX8xxx, 98DX4xxx, 98DX325x switch chips;
*) switch - fixed an issue with Ethernet port group hang for CRS354 devices;
*) switch - fixed Ethernet interface counter 32bit overflow for CRS354 devices;
*) switch - fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15);
*) switch - improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
*) system - added "clock" logging topic for time change related messages;
*) system - added log message if device failed to reboot gracefully;
*) system - added more details to user initiated reboot (reset, upgrade, downgrade);
*) system - added support for upgrade over IPv6 network;
*) system - do not cancel package upgrade if another architecture packages found on the router;
*) system - do not download packages scheduled for uninstall;
*) system - do not start IPsec and certificate processes when not necessary;
*) system - fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15);
*) system - fixed empty logs after reboot in certain cases;
*) system - improved reporting of total memory size;
*) system - improved system stability for RBSXTsq5nD and RBLDF-5nD;
*) system - improved system stability;
*) system - improved watchdog and kernel panic reporting (additional fixes);
*) system - reduced RAM usage for ARM64 devices;
*) system - set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required);
*) system - set flash-boot mode as "boot-device" after system reset initiated from software;
*) tunnel - allow specifying IPv6 LL address as "remote-address" for EoIPv6, GRE6 and IPIP6 tunnels;
*) user-manager - updated logo;
*) vxlan - added comment support to VTEPs;
*) vxlan - prevent creating multiple VTEPs with same IP/port combination;
*) webfig - fixed issue with incorrectly applying optional fields;
*) wifi - adjusted virtual interface naming when provisioning local radios;
*) wifi - do not allow frequency-scan on virtual interfaces;
*) wifi - do not unset radio-mac and master-interface properties on reset;
*) wifi - enable creating virtual wifi interfaces using "copy-from" setting;
*) wifi - fixed signal strength reporting during association (introduced in v7.15) (additional fixes);
*) wifi - fixed typo in log message;
*) wifi - improve regulatory compliance for Chateau ax devices;
*) wifi - improved interface stability when receiving invalid FT authentication frames;
*) wifi - improved WPA3 PMKSA handling when access-lists with custom passphrases are used;
*) wifi - make sniffer tool return an error when attempting to sniff with a radio which does not support it;
*) wifi - use name-format also for local interfaces when provisioning;
*) wifi-qcom - add spectral-scan and spectral-history tools (CLI only) (additional fixes);
*) wifi-qcom-ac - count dropped packets to "tx-drop" instead of "tx-error";
*) winbox - added "Import Router ID" parameter under "Routing/BGP/VPN" menu;
*) winbox - added "Trace" column under "System/History" menu;
*) winbox - do not show "Last Logged In" and "Expire Password" when creating new system user;
*) winbox - fixed "Authority" property under "System/Certificates/Requests" menu;
*) winbox - fixed duplicated "MVRP Attributes" table;
*) winbox - fixed error when changing wifi interface settings in some rare conditions (introduced in v7.16beta1);
*) winbox - fixed false invalid flag under "System/Ports/Remote Access" menu;
*) winbox - fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15);
*) winbox - fixed signal bar "excellent" tooltip;
*) winbox - moved DHCPv6 Server "Allow Dual Stack Queue" property from General to Queues tab;
*) winbox - removed deprecated x86/CHR specific settings under "System/Resources" menu;
*) winbox - removed spare argument for "PFS Group" property under "IP/IPsec/Proposals" menu;
*) winbox - separated different Watchdog settings into logical tabs;
*) winbox - use CAP serial number with "Set Identity" button under "WiFi/Remote CAP" menu;
*) winbox/webfig - fixed skins (introduced in v7.15);
*) wireless - allow unsetting signal-range and ssid-regext properties for capsman access-list (additional fixes);
*) wireless - fixed dynamic VLAN assignments for vlan-filtering bridge in certain cases;
*) wireless - limit antenna-gain property to 100;
*) www - log out inactive REST API users;
*) x86 - added missing PCI ids for bnx2x driver;
*) x86 - added RTL8156 driver support;
*) x86 - fixed missing serial ports with MCS9900;
Development release tree
--