v7.16beta [testing] is released!

RouterOS version 7.16beta has been released on the “v7 testing” channel!
Before an upgrade:

  1. Remember to make backup/export files before an upgrade and save them on another storage device;
  2. Make sure the device will not lose power during upgrade process;
  3. Device has enough free storage space for all RouterOS packages to be downloaded.

What’s new in 7.16beta7 (2024-Jul-25 12:55):
*) 6to4 - improved system stability when using 6to4 tunnel without specified remote-address;
*) 6to4 - make “remote-address” parameter not-mandatory (introduced in v7.16beta3);
*) arm64 - fixed “disable-running-check” for ARM64 UEFI;
*) arp - fixed possible issue with invalid entries;
*) bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge (additional fixes);
*) bridge - added L2 MDB support for IGMP snooping (additional fixes);
*) bridge - fixed MVRP leave;
*) bridge - fixed port “point-to-point” status after first link change;
*) bth - improved stability on system time change;
*) console - added “about” filters for “find” and “print where” commands;
*) console - increased default width for bitrate type of columns;
*) dhcp - improved DHCP IPv4 and IPv6 client/relay/server underlying interface state change handling;
*) dhcpv4-server - remove corresponding dynamic leases if their address-pool gets removed;
*) discovery - added discover-interval setting (additional fixes);
*) discovery - added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs support (additional fixes);
*) discovery - added LLDP-MED timeout (additional fixes);
*) discovery - changed default discover-interval setting from 60s to 30s;
*) disk - remove dummy “slot1” entries on CHR;
*) dns - added support for DoH with adlist (additional fixes);
*) dns - added support for mDNS proxy;
*) dns - fixed memory leak caused by DoH service (introduced in v7.16beta3);
*) dns - improved imported adlist parsing;
*) dns - match NXDOMAIN static entry only if other type entries for the same name are not found;
*) dns - refactored adlist service internal processes and improved logging;
*) dns - show static entry type “A” field in console;
*) ethernet - improved system stability for Alpine CPUs when dealing with unexpected non-UDP/TCP packet transmit;
*) file - renamed “creation-time” to “last-modified”;
*) filesystem - improved boot speed after device is rebooted without proper shutdown (additional fixes);
*) filesystem - refactored internal processes to minimize sector writes (additional fixes);
*) iot - fixed incorrect LoRa filter export behavior;
*) iot - fixed LoRa inability to set SSL for LoRa servers via command line;
*) ipsec - improved installed SA statistics update;
*) ipsec - improved performance by balancing multicore CPU usage for key exchange calculation;
*) ipv6 - fixed pool allocated addresses missing after reboot (additional fixes);
*) ipv6 - improved handling of IPv6 address information;
*) ipv6 - improved LL address generation process (additional fixes);
*) leds - fixed rgb LED blink (introduced in v7.16beta1);
*) lte - fixed possible crash when enabling/disabling config-less modem interface;
*) lte - improved modem AT/modem port open;
*) lte - improvements to “/interface/lte/show-capabilities” command (additional fixes);
*) modem - fixed cases where USB bus could switch places (introduced in v7.16beta1) (additional fixes);
*) modem - improved support for KNOT BG77 modem firmware update (additional fixes);
*) poe-out - fixed incorrect port mapping on CRS354-48P-4S+2Q+ device (introduced in v7.16beta1);
*) ppp - added SIM hot-plug enable command to default init-string for KNOT and CME gateway;
*) ppp - fixed PPP info parser showing error for BG77 modem running on KNOT AUX AT/modem port;
*) qos-hw - added queue-buffers property to tx-manager (additional fixes);
*) qos-hw - fixed egress-rate limit validation;
*) qos-hw - fixed WRED thresholds;
*) qos-hw - improved behavior when changing ports tx-manger;
*) rose-storage - renamed sync “remote-addr” property to “remote-address”;
*) route - improved route attribute handling (may increase memory usage);
*) route - improved stability when getting entries from large routing tables;
*) routerboard - improved Etherboot stability for CRS320-8P-8B-4S+ device (“/system routerboard upgrade” required);
*) sfp - fixed calculated link length based on EEPROM in certain cases (additional fixes);
*) ssh - fixed unsupported user SSH public key import (introduced in v7.15);
*) switch - fixed bonding FDB entries (introduced in v7.16beta3);
*) switch - fixed Ethernet counters after switch reset for CRS354 devices (introduced in v7.16beta1);
*) switch - improved switch reset;
*) system - added critical log message when not enough space to store new configuration;
*) system - fixed “free disk space” error message on system upgrade/downgrade;
*) system - improved internal system services messaging;
*) system - improved performance for TCP input;
*) traceroute - do not stop traceroute after 5 consecutive unreachable hops;
*) user - added inactivity timeout for non-GUI sessions (additional fixes);
*) webfig - allow to enter time that exceeds 23:59:59;
*) webfig - correctly display default value for number type;
*) webfig - enabled hotlock mode for terminal;
*) webfig - fixed an issue where wrong menu title was shown;
*) webfig - fixed sorting by datetime;
*) webfig - use “any” argument by default for Torch “Port” property;
*) wifi - added “slave-name-format”;
*) wifi - added interface provisioning logs;
*) wifi - fixed packet receive when having multiple station interfaces (additional fixes);
*) wifi - improved system stability after interface hang;
*) wifi - send channel switch announcements to clients when switching channels at requested re-select intervals;
*) winbox - added “Switch/QoS” menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices (additional fixes);
*) winbox - added configuration settings for ROSE;
*) winbox - added extra “File System” under “Format Drive” button;
*) winbox - added missing “Default Name” property for interfaces;
*) winbox - fixed Switch menu for RB1100AHx4 device;
*) winbox - improved QR code display;
*) winbox - moved Switch menu tabs to individual menus (additional fixes);
*) winbox - properly display available address-pools for DHCPv6 server configuration;
*) winbox - renamed configurable wifi property “Tx Power” to “Max Tx Power”;
*) winbox - use correct default value for “Partition Offset” property;

What’s new in 7.16beta4 (2024-Jul-02 15:47):
*) discovery - added discover-interval setting;
*) disk - added “wipe-quick” file-system option to format-drive command (CLI only);
*) dns - refactored DNS service internal processes (additional fixes);
*) filesystem - improved boot speed after device is rebooted without proper shutdown;
*) filesystem - refactored internal processes to minimize sector writes;
*) health - improved voltage measurements for RB912UAG-6HPnD and RB912UAG-5HPnD devices;
*) ipv6 - do not allow to manually delete LL address (additional fixes);
*) log - added basic validation for “disk-file-name” property;
*) lte - fixed R11e-LTE no traffic flow when modem with old firmware is used;
*) poe-out - fixed possible issue with “current_too_low” on devices with a single PoE out interface (introduced in v7.16beta1);
*) routerboard - improved Etherboot stability for IPQ-40xx devices (“/system routerboard upgrade” required);
*) user - added inactivity timeout for non-GUI sessions (additional fixes);
*) x86 - fixed missing serial ports with MCS9900;

What’s new in 7.16beta3 (2024-Jun-27 08:33):
*) 6to4 - fixed 6to4 tunnel LL address generation after system reboot;
*) 6to4 - limit keepalive timeout maximum value;
*) 6to4 - make “remote-address” parameter mandatory;
*) address - added “S” flag for addresses that belong to a slave interface;
*) arm64/x86 - added rtl8111/8168/8411 firmware;
*) bridge - added L2 MDB support for switch chips with HW offloaded IGMP snooping;
*) bridge - do not allow duplicate ports;
*) bth - improved system stability;
*) certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
*) certificate - automatically parse uppercase symbols to lowercase when registering domain on Let’s Encrypt;
*) chr - fixed incorrect disk size for ARM64;
*) console - added additional byte-array option to :convert command;
*) console - fixed an issue where certain MAC address can be interpreted as time value;
*) console - fixed typo in firewall error message;
*) console - improved stability when pasting a large input;
*) defconf - configure the default-route property for PPP clients only on devices with a built-in modem;
*) dhcp - added comment property for matchers, options and option sets;
*) dhcpv4-server - added matcher ability to match substring;
*) dhcpv4-server - added name for “User-Class” option (77), “Authentication” option (90), “SIP-Servers-DHCP-Option” option (120) and “Unassigned” option (163-174) in debug logs;
*) dhcpv6-client - release client on failed renew attempt (additional fixes);
*) discovery - added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs support;
*) discovery - added LLDP-MED timeout;
*) discovery - set unknown bit for any unspecified link type in MAC/PHY TLV;
*) disk - added log message when disks get added or removed;
*) dns - added support for DoH with static FWD entries;
*) dns - added support for mDNS proxy (CLI only);
*) dns - refactored DNS service internal processes;
*) firewall - removed unnecessary TLS host matcher from NAT tables;
*) health - removed unnecessary health settings for RB921 and RB922 devices;
*) install - allow to save old configuration during cdrom install;
*) iot - added an option to log LoRa filtered packets (additional fixes);
*) iot - added LoRa option to filter out proprietary packets (additional fixes);
*) ipip6 - make IPv6 LL address random;
*) ipsec - improved performance by balancing multicore CPU usage;
*) ipv6 - added “d” deprecated flag for expired IPv6 SLAAC addresses;
*) ipv6 - allow to properly disable address when it is generated from pool;
*) ipv6 - allow to properly move IPv6 address from slave interface to a bridge interface;
*) ipv6 - do not allow adding address with invalid prefix when using pool;
*) ipv6 - do not allow to manually delete LL address;
*) ipv6 - fixed “no-dad” functionality;
*) ipv6 - fixed SLAAC address dynamic appearance;
*) ipv6 - properly initialize default ND “interface=all” entry;
*) ipv6 - warn user that reboot is required in order to properly apply accept-router-advertisements changes;
*) leds - fixed system LED to indicate correct RAT for Chateau (introduced in v7.16beta1);
*) lte - fixed modem dialer disable for Chateau 5G devices when cellular modem support mode set to serial (introduced in v7.16beta2);
*) lte - improved system stability for MBIM modem during AT query (introduced in v7.16beta1);
*) modem - fixed cases where USB bus could switch places (introduced in v7.16beta1);
*) modem - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15) (additional fixes);
*) netwatch - use time format according to ISO standard;
*) port - added IPv6 support for the “remote-access” feature;
*) ppp - automatically generate IPv6 firewall rules when filter-id is specified;
*) profiler - classify wifi processing as “wireless”;
*) rose-storage - fixed “/file sysnc status” parameter to be read-only;
*) rose-storage - moved “/rsync-daemon” to "/file rsync-daemon;
*) route - fixed incorrectly handled route distinguisher and route targets (introduced in v7.15);
*) sfp - fixed calculated link length based on EEPROM in certain cases;
*) ssh - improved system stability when SSH tries to bind to non-existing interface;
*) ssh - fixed SSH cryptographic accelerator selection (introduced in v7.14);
*) supout - rename “store” section to “disk”;
*) switch - fixed an issue where half-duplex links could occupy Tx resources for 98DX8xxx, 98DX4xxx, 98DX325x switch chips;
*) switch - fixed an issue with Ethernet port group hang for CRS354 devices;
*) system - added “clock” logging topic for time change related messages;
*) system - do not start IPsec and certificate processes when not necessary;
*) system - fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15);
*) system - improved reporting of total memory size;
*) tunnel - allow specifying IPv6 LL address as “remote-address” for EoIPv6, GRE6 and IPIP6 tunnels;
*) user - added inactivity timeout for non-GUI sessions;
*) wifi - added “slave-name-format” (CLI only);
*) wifi - adjusted virtual interface naming when provisioning local radios;
*) wifi - do not allow frequency-scan on virtual interfaces;
*) wifi - fixed packet receive when having multiple station interfaces;
*) wifi - fixed signal strength reporting during association (introduced in v7.15) (additional fixes);
*) wifi - improve regulatory compliance for Chateau ax devices;
*) wifi-qcom - add spectral-scan and spectral-history tools (CLI only) (additional fixes);
*) wifi-qcom-ac - count dropped packets to “tx-drop” instead of “tx-error”;
*) winbox - fixed false invalid flag under “System/Ports/Remote Access” menu;
*) winbox - moved Switch menu tabs to individual menus (additional fixes);
*) winbox - separated different Watchdog settings into logical tabs;
*) winbox/webfig - fixed skins (introduced in v7.15);
*) wireless - allow unsetting signal-range and ssid-regext properties for capsman access-list (additional fixes);
*) x86 - added missing PCI ids for bnx2x driver;

What’s new in 7.16beta2 (2024-Jun-12 12:03):
*) arm64 - increased reserved storage space for bootloader;
*) bgp - fixed BGP sessions missing vpnv6 afi;
*) bgp - fixed cluster-list and originator-id;
*) bridge - fixed typo in filter and NAT error message;
*) chr - added support for licensing over IPv6 network;
*) dhcpv4-server - added “class-id” parameter for DHCP server leases;
*) dhcpv4-server - fixed setting and getting “next-server” property;
*) dhcpv4-server - increased lease offer timeout to 120 seconds;
*) disk - added simple test command to test device and filesystem speeds (CLI only) (additional fixes);
*) disk - improved system stability;
*) dns - added support for DoH with adlist;
*) ethernet - fixed port speed downshift functionality for CRS354 devices;
*) firewall - added message when interface belonging to VRF is added in filter rules (additional fixes);
*) health - improved voltage measurements for RB912UAG-6HPnD device;
*) iot - added an option to delete default LoRa servers and a button to recover them if needed;
*) iot - added an option to log LoRa filtered packets;
*) ip/ipv6 - added multipath hash policy settings;
*) ip/ipv6 - warn user that reboot is required in order to properly apply changes under IP/Settings and IPv6/Settings menus;
*) ipsec - changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4;
*) ipv6 - fixed dynamic duplicate address showing when static address is already configured;
*) ipv6 - improved LL address generation process;
*) l2tp - improved system stability;
*) lte - fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
*) lte - fixed MBIM modem registration on the network (introduced in v7.16beta1);
*) modem - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
*) netinstall-cli - added support for multiple device install (additional fixes);
*) poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces);
*) ppp - fixed dynamic queue default name (introduced in v7.15);
*) qos-hw - fixed incorrect per-port packet and byte cap (introduced in v7.16beta1);
*) queue - improved system stability;
*) route - fixed memory leak (introduced in v7.15);
*) route - fixed some missing route parameters when printing (introduced in v7.15);
*) routerboot - improved boot process (“/system routerboard upgrade” required);
*) sfp - fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ device;
*) switch - fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15);
*) system - added support for upgrade over IPv6 network;
*) system - improved watchdog and kernel panic reporting (additional fixes);
*) system - reduced RAM usage for ARM64 devices;
*) wifi-qcom - add spectral-scan and spectral-history tools (CLI only) (additional fixes);
*) winbox - added “Switch/QoS” menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices;
*) winbox - added “Trace” column under “System/History” menu;
*) winbox - do not show “Last Logged In” and “Expire Password” when creating new system user;
*) winbox - fixed “Authority” property under “System/Certificates/Requests” menu;
*) winbox - fixed error when changing wifi interface settings in some rare conditions (introduced in v7.16beta1);
*) winbox - moved DHCPv6 Server “Allow Dual Stack Queue” property from General to Queues tab;
*) winbox - moved Switch menu tabs to individual menus;
*) wireless - allow to unset signal-range and ssid-regext properties for capsman access-list;

What’s new in 7.16beta1 (2024-Jun-05 11:52):
*) bgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15);
*) bgp - fixed vpnv6 safi;
*) bgp - small logging improvements;
*) bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge;
*) bridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from “protocol-mode=none” functionality, disabled by default after upgrade);
*) bridge - added max-learned-entries property for bridge;
*) bridge - added message about who created a dynamic VLAN entry;
*) bridge - added MVRP support for VLANs assigned to bridge;
*) bridge - fixed BPDU address when using “ether-type=0x88a8” configuration;
*) bridge - improved system stability when removing MLAG configuration;
*) bridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached);
*) certificate - added no-key-export parameter for import;
*) certificate - improved DNS challenge error reporting for Let’s Encrypt;
*) certificate - show validity beyond year 2038;
*) console - added “verbose=progress” mode for import status updates, and verbose output only on failures;
*) console - added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only);
*) console - added limits for dst-start and dst-end clock properties;
*) console - added lock screen via :lock command;
*) console - added uppercase and lowercase transform modes to :convert command;
*) console - disallow ping command with empty address;
*) console - display hint when requesting specific argument syntax;
*) console - do not show default boot-os setting in export;
*) console - fixed negative values for gmt-offset clock property;
*) console - fixed output of ping command in certain cases;
*) console - improve large import file handling, error detection and stability;
*) console - improved :serialize and :deserialize commands and added support for DSV (delimiter separated values) format;
*) console - improved stability when removing script;
*) console - removed follow-strict parameter;
*) console - show rest-api name for active user connections;
*) container - clear VETH address on container exit and mark interface as running only when VETH is in use;
*) detnet - properly detect “Internet” status when multiple detnet instances preset in network;
*) dhcp - improved insert-queue-before, parent-queue and allow-dual-stack-queue behavior;
*) dhcpv4-client - execute script on DNS server or gateway address change;
*) dhcpv4-server - show active-server and host-name in print active command;
*) dhcpv6-client - do not add default gateway twice when both prefix and address is acquired;
*) dhcpv6-client - fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0;
*) dhcpv6-client - pause client and remove dynamically installed objects while it becomes invalid;
*) dhcpv6-client - release client on failed renew attempt;
*) dhcpv6-client - update gateway address for default route on renew;
*) dhcpv6-server - improved system stability;
*) disk - added simple test command to test device and filesystem speeds (CLI only);
*) dude - fixed map element RouterOS package upgrade functionality;
*) fetch - handle HTTP 401 status correctly;
*) fetch - improved logging;
*) firewall - added message when interface belonging to VRF is added in filter rules;
*) firewall - fixed IPv6 “nth” matcher showing up twice in help;
*) firewall - fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo command;
*) health - fixed board-temperature for KNOT device (introduced in v7.15);
*) health - fixed bogus CPU temperature spikes for CCR2216 device;
*) health - fixed missing health for CRS112-8G-4S device (introduced in v7.15);
*) health - upgraded fan controller firmware to latest version;
*) ike1 - removed unsupported NAT-D drafts with invalid payload numbers;
*) install - fixed ARM64 cdrom install (introduced in v7.15);
*) iot - added LoRa NetID and JoinEUI filtering for LNS and CUPS connections;
*) iot - added LoRa option to filter out proprietary packets;
*) iot - fixed LoRa inability to use variables for GPS-spoofing setting;
*) ip - added max-sessions property for services;
*) ipv6 - fixed pool allocated addresses missing after reboot;
*) ipv6 - respect APN settings for “add-default-route” and “use-peer-dns” also when “accept-router-advertisements=yes”;
*) isis - fixed filter-chain and filter-select settings;
*) isis - install IPv6 link-local gateways correctly;
*) l3hw - added per-VLAN packet and byte counters to compatible switches;
*) l3hw - disable L3HW on bonding modes that do not support it;
*) lte - added “sms-protocol” setting in “/interface lte” menu (CLI only);
*) lte - fixed “at-chat” for DELL T99W175 (PID: 0x05c6 VID: 0x90d5);
*) lte - fixed cases where modem could be handled by multiple dialer instances;
*) lte - fixed support for Fibocom modem fm150-na;
*) lte - improvements to “/interface/lte/show-capabilities” command;
*) media - improved file indexing for DLNA;
*) modem - added authentication functionality to EC200A;
*) modem - fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacity;
*) modem - improved support for KNOT BG77 modem firmware update;
*) mqtt - broker password is no longer exported unless “show-sensitive” flag is used;
*) netinstall-cli - added check for device and package architectures match;
*) netinstall-cli - added support for multiple device install;
*) netinstall-cli - allow mixed package architectures;
*) netwatch - added DNS probe;
*) netwatch - added ttl and accept-icmp-time-exceeded properties for ICMP probe;
*) ospf - improved system stability during LSA monitoring;
*) ovpn - improved system stability;
*) pimsm - improved system stability;
*) poe-out - fixed low-voltage detection while PD is connected for KNOT device;
*) poe-out - fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15);
*) poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces);
*) ppp - added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-client;
*) ptp - added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devices;
*) qos-hw - added H and I flags to queues (CLI only);
*) qos-hw - added new monitoring properties for ports and global QoS stats (CLI only);
*) qos-hw - added queue-buffers property to tx-manager (CLI only);
*) qos-hw - allow port print stats, usage and pfc while QoS is disabled (CLI only);
*) qos-hw - allow to set queue-buffers in bytes, percent or auto (CLI only);
*) qos-hw - enabling ECN forces WRED (unless share is disabled);
*) qos-hw - fixed global buffer limits for 98DX8212 and 98DX8332 switches;
*) qos-hw - limit WRED to queues with enabled shared buffers;
*) quickset - removed Basic AP mode;
*) route - added ability to redistribute isis routes;
*) route - place static route in the correct VRF when vrf-interface parameter is used;
*) route - rename route type from is-is to isis;
*) rpki - fixed preference sorting;
*) sfp - fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe device;
*) sfp - fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe device;
*) sms - added polling setting so that RouterOS itself checks SMS instead of relying on URC messages;
*) snmp - added support for KNOT BG77 modem cellular signal info;
*) snmp - fixed LAST-UPDATED format in MIKROTIK-MIB;
*) supout - added detnet section;
*) supout - added monitor command for all wifi interfaces;
*) supout - added netwatch section;
*) supout - added user SSH keys section;
*) supout - increased console output width;
*) supout - limit address-list and connection tracking entries to 999 in supout.rif;
*) switch - fixed Ethernet interface counter 32bit overflow for CRS354 devices;
*) switch - improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
*) system - added log message if device failed to reboot gracefully;
*) system - added more details to user initiated reboot (reset, upgrade, downgrade);
*) system - do not cancel package upgrade if another architecture packages found on the router;
*) system - do not download packages scheduled for uninstall;
*) system - fixed empty logs after reboot in certain cases;
*) system - improved system stability for RBSXTsq5nD and RBLDF-5nD;
*) system - improved system stability;
*) system - improved watchdog and kernel panic reporting;
*) system - set flash-boot mode as “boot-device” after system reset initiated by reset button (“/system routerboard upgrade” required);
*) system - set flash-boot mode as “boot-device” after system reset initiated from software;
*) user - added inactivity timeout for non-GUI sessions (CLI only);
*) user-manager - updated logo;
*) vxlan - added comment support to VTEPs;
*) vxlan - prevent creating multiple VTEPs with same IP/port combination;
*) webfig - fixed issue with incorrectly applying optional fields;
*) wifi - do not unset radio-mac and master-interface properties on reset;
*) wifi - enable creating virtual wifi interfaces using “copy-from” setting;
*) wifi - fixed signal strength reporting during association (introduced in v7.15);
*) wifi - fixed typo in log message;
*) wifi - improved interface stability when receiving invalid FT authentication frames;
*) wifi - improved WPA3 PMKSA handling when access-lists with custom passphrases are used;
*) wifi - make sniffer tool return an error when attempting to sniff with a radio which does not support it;
*) wifi - use name-format also for local interfaces when provisioning;
*) wifi-qcom - add spectral-scan and spectral-history tools (CLI only);
*) winbox - added “Import Router ID” parameter under “Routing/BGP/VPN” menu;
*) winbox - fixed duplicated “MVRP Attributes” table;
*) winbox - fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15);
*) winbox - fixed signal bar “excellent” tooltip;
*) winbox - removed deprecated x86/CHR specific settings under “System/Resources” menu;
*) winbox - removed spare argument for “PFS Group” property under “IP/IPsec/Proposals” menu;
*) winbox - use CAP serial number with “Set Identity” button under “WiFi/Remote CAP” menu;
*) wireless - allow to unset signal-range and ssid-regext properties for capsman access-list (CLI only);
*) wireless - fixed dynamic VLAN assignments for vlan-filtering bridge in certain cases;
*) wireless - limit antenna-gain property to 100;
*) www - log out inactive REST API users;
*) x86 - added RTL8156 driver support;

To upgrade, click “Check for updates” at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. The file must be generated while a router is not working as suspected or after some problem has appeared on the device

Please keep this forum topic strictly related to this particular RouterOS release.

phew!!!

when BG–VRF–def-route can be fixed?

Can you please update the Zerotier package if needed.

dude - fixed map element RouterOS package upgrade functionality;

WOW! The Dude in changelog :slight_smile:

any chance to implement ANY information with new WIFI CapsMan and SNMP ?

in old wireless capsman, there was at least some basic info, but now … null

Just asked this to support, updated ww2 snmp OID is coming. No ETA.

Damn, I was just thinking the other day how nice it would be to have spectral-history again!
Thank you!

I’m seeing this new warning message “in/out-interface matcher not possible when interface (interfaceXXX) belongs to vrf - use ‘vrfXXX’ interface instead” even on mangle and nat firewall rules, but I guess this new warning message should only be shown in filter rules that match in/out-interfaces within a VRF instance.

Good to see already one fix for one 7.15 bug

This is the beta with most changes in the 7 series as far as I can see.
And my MQTT support case was fixed :slight_smile:

7.16beta1	145
7.13beta1	125
7.12beta7	121
7.9beta4	113
7.15beta4	111
7.8beta2	90
7.10beta5	85
7.7beta3	82
7.11beta2	81
7.3beta33	80
7.14beta3	77
7.10beta8	56
7.5beta4	56
7.15beta8	55
7.14beta6	54
7.14beta9	53
7.3beta40	51
7.12beta3	50

My adguard container won’t start after update , nothing in log, anyone else has problem with containers ?

No problems here on a CCR2116. Six containers (pihole, open-speedtest, samba, uptime-kuma, home-assistant, esphome).

I see now whats wrong, update decided to change my usb from USB2 to USB1 so paths are broken, which also some of previous updates changed from USB1 to USB2..

Why is this change happening i wonder?

spectral-scan, wow … nice …

*) bgp - fixed vpnv6 safi;

Now I manage to establish the BGP session against the route reflector. However, there are some issues:

  • Although the VPNv6 session is established, it does not appear in the remote.afi parameter:
 1 E name="ROUTE_REFLECTOR-1" 
     remote.address=10.1.1.36 .as=65000 .id=10.1.1.36 .capabilities=mp,rr,as4,err .afi=vpnv4 .messages=875 .bytes=73924 .eor="" 
     local.role=ibgp .address=10.1.1.11 .as=65000 .id=10.1.1.11 .capabilities=mp,rr,gr,as4 .afi=vpnv4 .messages=291 .bytes=5624 .eor="" 
     output.procid=21 
     input.procid=21 ibgp 
     multihop=yes hold-time=3m keepalive-time=1m uptime=4h48m17s690ms last-started=2024-06-06 10:01:47 last-stopped=2024-06-06 10:01:47 prefix-count=1053
  • The way the default route is represented is strange:
routing/route/print where afi=vpn6          
Flags: U - UNREACHABLE; b - BGP; H - HW-OFFLOADED
Columns: DST-ADDRESS, GATEWAY, AFI, DISTANCE, SCOPE, TARGET-SCOPE
    DST-ADDRESS                          GATEWAY                 AFI   DISTANCE  SCOPE  TARGET-SCOPE
UbH 65000:111                           ::ffff:10.1.1.48         vpn6       200     40            30
UbH 2001:db8::/32&65000:111             ::ffff:10.1.1.84         vpn6       200     40            30

Was hoping 7.16 to fix roaming issues, but no luck, all worked perfect until 7.15 and new drivers.
My devices keep roaming from 5ghz to 2ghz and thats very next to router under full signal, and often multiple devices roam same time(Samsung s23, LG OLED TV, ASUS tablet).
I already reduced 2ghz to 10 TX which is over 10db difference from 5ghz, dont know what else to do.
roam.png

That’s going to be useful. Thought I’d provide an example, since I tested it (and works with a couple files at least).

As example script to use them… this takes the product matrix “CSV” from https://mikrotik.com/products/matrix using /tool/fetch. The file is actually a semi-colon separated file, or properly a DSV, and put into a RouterOS array for processing. And show using the newer options=json.pretty to take “DSV” and “pretty print” to JSON as string. All seems to work*.

# fetch Mikrotik's "Product Matrix CSV" from website
    :global productDsvRaw ([/tool/fetch url="https://mikrotik.com/products/matrix" http-data="ax=matrix" output=user as-value]->"data")

    # use NEW "DSV" support to convert it to an RouterOS array
    :global productsArray [:deserialize from=dsv $productDsvRaw delimiter=";" options=dsv.plain]

    # as an array, you can use it a loops etc...
        # so to print first 20 devices from the downloaded (to memory) CSV
    :foreach k,v in=$productsArray do={ :if ($k<20) do={:put "\$productsArray->$k = $($v->1)"}}
        
        # or perhaps the count of them
    :put "\r\nNumber of devices: $([:len $productsArray] / 2 - 1)"

    # OR... the new add-on the to=json, which does a pretty print of JSON text
    :global prettyProductJson [:serialize to=json options=json.pretty $productsArray]
    :put [:pick $prettyProductJson 0 512]
        # this also useful since :put <array> is hard to read...
        # for example the array looks like
    :put [:pick [:tostr $productsArray] 0 512]

* the product matrix CSV is oddly formed… so product count has to be adjusted… But [:deserialize] matches exactly Numbers app on MacOS does with same file - so Mikrotik’s website download… not the [:deserialize] - which seems work right given the data given

It is not strange, it is how it is supposed to be when you send ipv6 routes over ipv4 session. It is ipv4 mapped address.