RouterOS version 6.48.5 has been released in public “long-term” channel!
Before an upgrade:
Remember to make backup/export files before an upgrade and save them on another storage device;
Make sure the device will not lose power during upgrade process;
Device has enough free storage space for all RouterOS packages to be downloaded.
What’s new in 6.48.5 (2021-Sep-21 13:50):
Changes since 6.48.4:
*) branding - properly clean up old branding files before installing a new one;
*) crs3xx - fixed default MAC address calculation on management Ethernet for CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) gps - improved interface monitoring;
*) health - improved temperature reporting;
*) ike2 - check if TS is still valid after obtaining SPI;
*) ipsec - improved SA update by SPI;
*) netinstall - require Netinstall version to be the same or newer as “factory-software”;
*) poe - update PoE firmware only on devices that supports it;
*) ppp - improved stability when receiving bogus response on modem channel;
*) qsfp - improved system stability when setting unsupported link rates;
*) sfp - added “sfp-rate-select” setting (CLI only);
*) sfp - improved SFP, SFP+, SFP28 and QSFP+ interface stability for CRS3xx and CCR2004 devices;
*) sfp28 - changed FEC auto mode to disabled;
*) w60g - limit power output when using region EU to match EN302567 on nRAY;
*) w60g - use EU region by default;
*) winbox - added “name” and “file-name” parameter when importing and exporting certificates;
*) winbox - allow setting MCS (24-31) to 4x4 Wireless interfaces;
*) winbox - do not allow to set empty “init-string” field under “System/GPS” menu;
*) winbox - do not show “GPS antenna” selection for devices without selection support;
*) winbox - show “System/Health/Settings” only on boards that have configurable values;
*) winbox - show “current-channel” column by default for CAP interfaces;
*) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac lite;
To upgrade, click “Check for updates” at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download
If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device
Please keep this forum topic strictly related to this specific RouterOS release.
How much power and range can we lose due to these changes? Does this only affect the nRAY (which already seems weaker than LHG60)?
What does “by default” mean - change to EU after upgrade only if no region set previously, or always?
Can’t afford to lose connection with remote station after upgrade.
I still think it is a bad policy to release a new version in the stable channel and declare it the long-term version at the same time.
You should move versions to the long-term channel only after they have proven to be free of obvious issues in the stable channel for some time.
(I know that long-term, stable and testing are not referring to quality of the software, but lots of users run long-term versions because they do not want to be concerned with bugs inadvertently included in a fresh release version)
Totally agreed. The fact the same version/build was previously released and run by others in field, even if short while, is what gives me confidence about “long-term”. Since ROS v7.1 certainly isn’t bug free, the last thing anyone needs is some unstable v6 “long-term” build.
e.g. we use PPP-based modems on some devices, so when I see stuff like “ppp - improved stability when receiving bogus response on modem channel;” - that seem like something that should be tried in the “stable” channel first…
So now have a question about what modems/RB/etc are unstable “when receiving bogus response” with PPP before this release…
Hi,
Just applied the upgrade. Why is the multicast package missing? I have to use IGMP Proxy and now it’s not available.
EDIT: I had to re-download the multicast package included in all_packages.zip, then applied it and everything back to normal. If I remember right the last time I did an upgrade I did not have to upgrade the multicast package separately. Can somebody confirm? Maybe I’m wrong about that. I’m also a quite new MT user, so sorry for that.
Might also be the case that last time I upgraded via system/packages/check for updates/download and install, which might be different from downloading and applying manually.
So lets see how the actual release notes for long-term v6.48.5 upgrade from v6.47.10 looks like:
What''s new in 6.48.5 (2021-Sep-21 13:50):
Changes since 6.47.10:
*) arm - added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices;
*) arm - improved system stability;
*) arm - improved watchdog and kernel panic reporting in log after reboots on IPQ4018/IPQ4019 devices;
*) arm64 - improved reboot reason reporting in log;
*) bgp - fixed VPNV4 RD byte order;
*) bonding - improved system stability when disabling/enabling bonding ports;
*) bonding - improved system stability when disabling/enabling bonding ports;
*) bonding - added LACP monitoring;
*) branding - fixed missing branding skins if "skins" folder does not exist;
*) branding - fixed LCD logo loading from new style branding package;
*) branding - added option to upload custom files (newly generated branding package required);
*) branding - properly clean up old branding files before installing a new one;
*) branding - added option to upload custom files (newly generated branding package required);
*) bridge - added minor fixes and improvements for IGMP snooping with HW offloading;
*) bridge - added fixes and improvements for IGMP and MLD snooping;
*) bridge - added "multicast-router" monitoring value for bridge interface;
*) bridge - automatically remove extended interfaces when deleting PE device from CB;
*) bridge - correctly filter packets by L2MTU size;
*) bridge - improved bridge stability when host changes port (introduced in v6.47);
*) bridge - allow to exclude interfaces from extended ports;
*) bridge - added warning message when port is disabled by the BPDU guard;
*) bridge - added MAC and IP source addresses information for DHCP snooping log;
*) bridge - use "frame-types=admit-all" by default for extended bridge ports;
*) bridge - show "H" flag for extended bridge ports;
*) bridge - fixed "vlan-encap" setting for filter and NAT rules;
*) bridge - improved system stability when using IGMP snooping and changing bridge MAC address;
*) bridge - show error when switch do not support controlling bridge or port extension;
*) bridge - increased multicast table size to 4K entries;
*) bridge - improved BPDU guard logging;
*) bridge - fixed multicast table printing;
*) bridge - fixed local MAC address removal from host table when deleting bridge interface;
*) bridge - fixed link-local multicast forwarding when IGMP snooping and HW offloading is enabled;
*) bridge - fixed dynamic VLAN assignment when changing port to tagged VLAN member;
*) bridge - fixed dynamic VLAN assignment when changing port "frame-type" property (introduced in v6.46);
*) bridge - fixed "multicast-router" setting on bridge enable;
*) bridge - correctly remove dynamic VLAN assignment for bridge ports;
*) bridge - fixed MDB entry removal when using bridge port "fast-leave" property;
*) cap - fixed L2MTU setting from CAPsMAN;
*) capsman - use Bits instead of Bytes for "ap-tx-limit" and "client-tx-limit" parameters;
*) capsman - use proper units for "ap-tx-limit" and "client-tx-limit" parameters;
*) certificate - properly flush expired SCEP OTP entries;
*) certificate - generate CRL even when CRL URL not specified;
*) certificate - fixed CRL URL length limit;
*) certificate - fixed private key verification for CA certificate during signing process;
*) certificate - clear challenge password on renew;
*) chr - fixed VLAN tagged packet transmit on bridge for Hyper-V installations;
*) chr - fixed SSH key import on Azure;
*) chr - improved interface loading on startup on XEN;
*) chr - improved system stability when changing flow control settings on e1000;
*) cloud - improved backup generation process;
*) conntrack - automatically reduce connection tracking timeouts when table is full;
*) console - updated copyright notice;
*) console - do not clear environment values if any global variable is set;
*) console - require "write+ftp" permissions for exporting configuration to file;
*) console - require "write+ftp" permissions for exporting configuration to file;
*) console - updated copyright notice;
*) console - allow "once" parameter for bonding monitoring;
*) console - do not clear environment values if any global variable is set;
*) crs312 - fixed missing SwOS firmware on revision 2 devices;
*) crs3xx - correctly filter packets by L2MTU size;
*) crs3xx - fixed "custom-drop-packet" and "not-learned" switch stats for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed "mirror-source" property on switch port disable for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
*) crs3xx - fixed "storm-rate" traffic limiting for switch-cpu port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - added initial Bridge Port Extender support;
*) crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed default MAC address calculation on management Ethernet for CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed CDP packet forwarding for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices;
*) crs3xx - added switch-cpu port VLAN filtering (switch-cpu port is now mapped with bridge interface VLAN membership when vlan-filtering is enabled);
*) crs3xx - fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - added "/system swos" menu for CRS354 devices, should only be used after SwOS 2.13 release;
*) crs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices;
*) crs3xx - fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - added "/system swos" menu for CRS354 devices, should only be used after SwOS 2.13 release;
*) crs3xx - fixed "switch-cpu" VLAN membership on bridge disable;
*) crs3xx - fixed unknown multicast flood to CPU when IGMP snooping is used;
*) crs3xx - improved system stability when increasing interface L2MTU for CRS318 devices;
*) crs3xx - improved LACP linking between CRS3xx series switches;
*) crs3xx - improved system stability when bonding and IGMP snooping is used (introduced in v6.48);
*) crs3xx - improved load balancing on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed port-isolation on ether37-ether48 ports for CRS354 device;
*) crs3xx - fixed packet duplication when multiple bonding interfaces are created for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed duplicate host entries when creating static switch hosts;
*) crs3xx - fixed port isolation for "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
*) crs3xx - fixed port isolation removal for "switch-cpu" port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed switch "copy-to-cpu" property for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices;
*) crs3xx - fixed switch "not-learned" stats for CRS305, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, CRS318 devices;
*) crs3xx - improved system stability on CRS354 devices;
*) crs3xx - improved system stability when receiving large frames for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v6.47.5);
*) crs3xx - fixed Ethernet LEDs after reboot for CRS354 devices;
*) crs3xx - fixed VLAN priority removal for CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices;
*) crs3xx - fixed port-isolation on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed packet transmit in 5Gbps link rate for CRS312 device;
*) defconf - fixed default configuration loading on RBOmniTikPG-5HacD;
*) defconf - fixed default configuration loading on LHG R;
*) defconf - fixed default configuration loading on LHG R;
*) defconf - fixed default configuration loading on RBcAP-2nD and RBwAP-2nD;
*) defconf - improved default configuration generation on devices with non-default wireless interface names;
*) defconf - improved CAP interface bridging;
*) defconf - fixed minor typo in configuration description;
*) defconf - fixed default configuration loading on RBOmniTikPG-5HacD;
*) defconf - fixed static IP address setting in case default configuration loading fails;
*) detnet - fixed malformed dummy DHCP User Class option;
*) detnet - use MAC address from bridge interface instead of slave port;
*) dhcp - fixed link state checking for DHCP client;
*) dhcp - fixed DHCP packet forwarding to IPsec policies;
*) dhcp - fixed link state checking for DHCP client;
*) dhcpv4-server - improved "client-id" value parsing;
*) dhcpv6 server - added support for "Delegated-IPv6-Prefix" for PPP services;
*) dhcpv6-server - allow loose static binding "pool" parameter (introduced in v6.46.8);
*) dhcpv6-server - added support for "option18" and "option37" for RADIUS managed clients;
*) dhcpv6-server - make sure that calling station ID always contains DUID;
*) dhcpv6-server - fixed false missing IPv6 Pool warning for dynamic bindings;
*) dhcpv6-server - added ability to generate binding on first request;
*) discovery - added "lldp-med-net-policy-vlan" property for assigning VLAN ID;
*) discovery - use interface MAC address when sending MNDP from slave port;
*) discovery - send the same "Chassis ID" on all interfaces for LLDP packets;
*) discovery - fixed discovery when enabled only on master port;
*) discovery - fixed discovery packet sending on newly bridged port with "protocol-mode=none";
*) discovery - fixed discovery on mesh ports;
*) discovery - allow choosing which discovery protocol is used;
*) disk - fixed external EXT3 disk mounting on x86 systems;
*) dns - added IPv6 support for DoH;
*) dns - do not use type "A" for static entries with unspecified type;
*) dns - end ongoing queries when changing DoH configuration;
*) dns - fixed listening for DNS queries when only dynamic static entries exist (introduced in v6.47);
*) dns - fixed cache memory leak when resolving CNAME domains;
*) dns - fixed CNAME query when target record is not in cache;
*) dot1x - fixed "reject-vlan-id" for MAC authentication (introduced in v6.48);
*) dot1x - fixed reauthentication after server rejects a client into VLAN;
*) dot1x - fixed unicast destination EAP packet receiving when a client is running on a bridge port;
*) dot1x - accept priority tagged (VLAN 0) EAP packets on dot1x client;
*) dot1x - fixed MAC authentication fallback (introduced in v6.48);
*) dude - fixed configuration menu presence on ARM64 devices;
*) dude - fixed configuration menu presence on ARM64 devices;
*) ethernet - improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices;
*) ethernet - improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices;
*) ethernet - fixed cable-test for some devices (e.g. RB2011, RB951G-2HnD);
*) export - fixed RouterBOARD USB "type" parameter export;
*) fastpath - fixed IP packet receive on bridge and bonding interfaces when destination MAC address match with slave port MAC;
*) filesystem - improved long-term filesystem stability and data integrity;
*) filesystem - fixed repartition on non-first partition;
*) filesystem - fixed repartition on RB4011 series devices;
*) gps - fixed "init-channel" release when not used;
*) gps - improved interface monitoring;
*) health - improved temperature reporting;
*) health - improved temperature reporting;
*) health - fixed voltage monitor on BaseBox5 devices;
*) health - fixed voltage monitor on BaseBox5 devices;
*) health - removed unused "heater-control" and "heater-threshold" parameters;
*) health - changed PSU state parameter type to read-only;
*) hotspot - added support for captive portal advertising using DHCP (RFC7710);
*) hotspot - fixed "html-directory" parameter export;
*) hotspot - improved management service stability when receiving bogus packets;
*) hotspot - fixed special character parsing in "target" variable (CVE-2021-3014);
*) hotspot - fixed "idle-timeout" usage with RADIUS authentication;
*) hotspot - added "vlan-id" parameter support for hosts and HTML pages;
*) ike1 - fixed "my-id=address" parameter usage together with certificate authentication;
*) ike1 - fixed policy update with and without mode configuration;
*) ike1 - fixed memory leak on multiple CR payloads;
*) ike1 - rekey phase 1 as responder for Windows initiators;
*) ike1 - fixed ''rsa-signature-hybrid'' authentication method;
*) ike2 - fixed EAP MSK length validation (introduced in v6.48);
*) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
*) ike2 - fixed DH group negotiation with EAP;
*) ike2 - fixed phase 2 rekeying with enabled PFS (introduced in v6.48);
*) ike2 - improved stability when invalid certificate is configured (introduced in v6.48);
*) ike2 - properly register packet time after expensive CPU operations;
*) ike2 - improved EAP message integrity checking;
*) ike2 - check if TS is still valid after obtaining SPI;
*) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
*) ike2 - improved child SA rekeying process;
*) ike2 - fixed EAP MSK length validation;
*) ike2 - fixed too small payload parsing;
*) ike2 - added "prf-algorithm" support for phase 1;
*) ike2 - added support for IKEv2 Message Fragmentation (RFC7383);
*) ike2 - fixed initial traffic selector''s protocol and port in transport mode;
*) interface - added temperature warning and interface disable on overheat for SFP and SFP+ interfaces (CLI only);
*) interface - fixed pwr-line running state (introduced in v6.45);
*) interface - fixed pwr-line interface linking (introduced in v6.48);
*) ipsec - fixed multiple warning message display for peers;
*) ipsec - fixed SA address parameter exporting;
*) ipsec - refresh peer''s DNS only when phase 1 is down;
*) ipsec - fixed SA address parameter exporting;
*) ipsec - improved stability when processing IPv6 packets larger than interface MTU;
*) ipsec - added SHA384 hash algorithm support for phase 1;
*) ipsec - do not kill connection when peer''s "name" or "comment" is changed;
*) ipsec - fixed client certificate usage when certificate is renewed with SCEP;
*) ipsec - improved SA update by SPI;
*) ipsec - inactivate peer''s policy on disconnect;
*) ipv6 - improved system stability when parsing IPv6 options;
*) kidcontrol - allow creating static device entries without assigned user;
*) led - fixed default LED configuration for RB911-5HnD;
*) led - fixed state persistence after device reboot on NetMetal 5 ac devices;
*) leds - fixed "/system leds" menu on RBLHG-2nD;
*) lora - added additional predefined network servers;
*) lora - added additional predefined network servers;
*) lora - added option to hide CRC error messages in monitor;
*) lora - improved downlink transmission;
*) lora - fixed device going into "ERROR" state caused by FSK modulated downlinks;
*) lora - limited output power in RU region for range 868.7 MHz - 869.2 MHz according to regulations;
*) lte - added support for Alcatel IK41VE1;
*) lte - added "comment" parameter for APN profiles;
*) lte - added "age" column and "max-age" parameter to "cell-monitor" (CLI only);
*) lte - added support for Sharp 809SH;
*) lte - fixed "earfcn" to band translation for "cell-monitor";
*) lte - fixed "band" value reporting;
*) lte - fixed "earfcn" to band translation for "cell-monitor";
*) lte - increased "at+cops" reply timeout to 90 seconds;
*) m33g - added support for "/system gpio" menu (CLI only);
*) metarouter - allow creating RouterOS metarouter instances on devices with 16MB flash storage;
*) metarouter - fixed memory leak when tearing down metarouter instance;
*) netinstall - require Netinstall version to be the same or newer as "factory-software";
*) ospf - fixed type-7 LSA translation to type-5;
*) ovpn - fixed route cache entry leak when establishing a new session;
*) ovpn - fixed route cache entry leak when establishing a new session;
*) package - do not include multiple The Dude packages in HDD installer;
*) package - added new "iot" package with Bluetooth (KNOT only) and MQTT publisher support;
*) poe - do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out;
*) poe - do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out;
*) poe - update PoE firmware only on devices that supports it;
*) ppp - added "bridge-learning" parameter support;
*) ppp - added "ipv6-routes" parameter to "secrets" menu;
*) ppp - added support for "Framed-IPv6-Route" RADIUS attribute;
*) ppp - do not fail "at-chat" command when issued on disabled PPP interface;
*) ppp - do not fail "at-chat" command when issued on disabled PPP interface;
*) ppp - improved stability when receiving bogus response on modem channel;
*) ppp - store "last-caller-id" for PPP secrets;
*) ppp - store "last-disconnect-reason" for PPP secrets;
*) profile - added "lcd" process classificator;
*) profile - improved idle process detection on x86 processors;
*) profile - improved process classification on ARM devices;
*) ptp - improved management service stability when receiving bogus packets;
*) ptp - improved management service stability when receiving bogus packets;
*) qsfp - improved system stability when setting unsupported link rates;
*) quickset - prefer 5GHz interface for WiFi scan in CPE mode;
*) quickset - added "Port Mapping" to QuickSet;
*) quickset - fixed local IP address setting on master interface;
*) quickset - prefer 5GHz interface for WiFi scan in CPE mode;
*) rb3011 - improved system stability when changing RouterBOARD settings (introduced in v6.48);
*) rb4011 - improved SFP+ port stability after boot-up;
*) rb4011 - fixed SFP+ port MTU setting after link state change;
*) rb4011 - fixed SFP+ port MTU setting after link state change;
*) rb4011 - improved SFP+ port stability after boot-up;
*) route - improved stability when connected route is modified;
*) route - improved stability when 6to4 interface is configured with disabled IPv6 package;
*) route - improved stability when connected route is modified;
*) routerboard - fixed PCIe bus reset during power-on on MMIPS devices ("/system routerboard upgrade" required);
*) routerboard - fixed "reset-button" on hAP ac;
*) routerboard - force power-down on PCIe bus during reboot on LHGR devices ("/system routerboard upgrade" required);
*) script - added error message in the logs if startup script runtime limit was exceeded;
*) sfp - added "sfp-rate-select" setting (CLI only);
*) sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
*) sfp - improved SFP, SFP+, SFP28 and QSFP+ interface stability for CRS3xx and CCR2004 devices;
*) sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
*) sfp28 - changed FEC auto mode to disabled;
*) snmp - fixed SNMP trap agent address;
*) snmp - added information from IPsec "active-peers" menu to MIKROTIK-MIB;
*) snmp - fixed value types for "dot1qPvid";
*) snmp - fixed value types for "dot1dStp";
*) snmp - added new LTE monitoring OID''s to MIKROTIK-MIB;
*) snmp - fixed "send-trap" functionality (introduced in v6.48);
*) ssh - fixed returned output saving to file when "output-to-file" parameter is used;
*) ssh - return proper error code from executed command;
*) ssh - skip interactive authentication when not running in interactive mode;
*) supout - fixed "topic" column presence in "Log" section;
*) supout - improved autosupout.rif file generation process;
*) supout - added bonding interface monitor information;
*) supout - fixed "topic" column presence in "Log" section;
*) switch - improved system stability with 98PX1012 switch chip for CCR2004-1G-12S+2XS device;
*) switch - improved system stability with 98PX1012 switch chip for CCR2004-1G-12S+2XS device;
*) switch - fixed interface toggling for devices with multiple QCA8337, Atheros8327 or RTL8367 switch chips (introduced in v6.48);
*) switch - improved resource allocation on 98PX1012 switch chip for CCR2004-1G-12S+2XS device;
*) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN);
*) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN);
*) system - improved stability when receiving bogus packets;
*) telnet - do not send options if connecting to non standard port;
*) telnet - fixed "routing-table" parameter usage;
*) telnet - do not send options if connecting to non standard port;
*) telnet - fixed server when run on non standard port;
*) telnet - fixed server when run on non standard port;
*) tile - fixed bridge performance degradation (introduced in v6.47);
*) tile - fixed bridge performance degradation (introduced in v6.47);
*) timezone - updated timezone information from "tzdata2020d" release;
*) tr069-client - fixed RouterOS downgrade procedure;
*) tr069-client - added branding package build time parameter;
*) tr069-client - added wireless "noise-floor" and "overall-tx-ccq" information parameters;
*) tr069-client - allow passing LTE firmware update URL as XML;
*) tr069-client - added additional wireless registration table parameters;
*) tr069-client - fixed TotalBytesReceived parameter value;
*) tr069-client - send correct "ConnectionRequestURL" when using IPv6;
*) tr069-client - added LTE model and revision parameters;
*) tr069-client - added "X_MIKROTIK_MimoRSRP" parameter for LTE RSRP value reporting;
*) tr069-client - improved management service stability when receiving bogus packets;
*) tr069-client - improved management service stability when receiving bogus packets;
*) traffic-flow - added "sys-init-time" parameter support;
*) traffic-flow - added NAT event logging support for IPFIX;
*) traffic-generator - fixed 32Gbps limitation;
*) upgrade - improved "long-term" upgrade procedure on SMIPS devices;
*) upgrade - fixed upgrade procedure on 16MB devices;
*) upgrade - improved "long-term" upgrade procedure on SMIPS devices;
*) user - fixed "skin" configuration for user groups (introduced in v6.48);
*) user-manager - do not allow creating limitation that crosses midnight;
*) user-manager - updated PayPal''s root certificate authorities;
*) w60g - use EU region by default;
*) w60g - limit power output when using region EU to match EN302567 on nRAY;
*) w60g - improved stability in low temperature environments;
*) webfig - allow hiding QuickSet mode selector;
*) webfig - properly stop background processes when switching away from QuickSet tab;
*) webfig - allow hiding and renaming inline buttons;
*) webfig - fixed default value presence when creating new entries under "IP/Kid Control";
*) webfig - allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu;
*) webfig - do not corrupt settings when starting "Wireless Sniffer";
*) webfig - do not show newly created SMB shares as invalid;
*) webfig - do not move top right menu in opposite direction when scrolling horizontally;
*) webfig - fixed new interface addition;
*) webfig - show "Interfaces" menu by default after logging in;
*) webfig - do not show "units" twice in multi list entries;
*) webfig - do not move top right menu in opposite direction when scrolling horizontally;
*) webfig - show "network-mode" for LTE modems that support it;
*) webfig - fixed "PortMapping" button (introduced in v6.48.2);
*) webfig - allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu;
*) webfig - do not corrupt settings when starting "Wireless Sniffer";
*) webfig - show "network-mode" for LTE modems that support it;
*) winbox - added missing IGMP Snooping settings to "Bridge" menu;
*) winbox - added missing MSTP settings to "Bridge" menu;
*) winbox - added support for LTE Cell Monitor;
*) winbox - allow adding bonding interface with one slave interface;
*) winbox - allow performing "USB Power Reset" on "0" bus on RBM33G;
*) winbox - do not show "network-mode" parameter for LTE interfaces that do not support it;
*) winbox - fixed "IP->Kid Control->Devices" table automatic refreshing;
*) winbox - fixed "interface" and "on-interface" parameter presence under "Bridge/Hosts" menu;
*) winbox - fixed "receive-errors" setting persistence under "Wireless/Wireless Sniffer/Settings" menu;
*) winbox - fixed "tls-version" parameter setting under "IP/Services" menu;
*) winbox - fixed minor typo in "Users" menu;
*) winbox - provide sane default values for bridge "VLAN IDs" parameter;
*) winbox - use health values reported by gauges for "System/Health" menu;
*) winbox - added "Cloud Backup" options under "Files" menu;
*) winbox - fixed health reporting on RB960, hEX and hEX S devices;
*) winbox - show "current-channel" column by default for CAP interfaces;
*) winbox - show "System/Health/Settings" only on boards that have configurable values;
*) winbox - do not show "GPS antenna" selection for devices without selection support;
*) winbox - allow setting MCS (24-31) to 4x4 Wireless interfaces;
*) winbox - added "name" and "file-name" parameter when importing and exporting certificates;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - fixed "Switch" menu on RBwAPG;
*) winbox - fixed enable/disable button presence for "Bridge/Hosts" menu;
*) winbox - show "activity" column by default under "IP/Kid Control/Devices" menu;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - show "LCD" only on boards that have LCD;
*) winbox - renamed IP protocol 41 to "ipv6-encap";
*) winbox - increased "target" field limit to 128 under "Queues" menu;
*) winbox - hide "Allow Roaming" parameter on LTE modems that do not support it;
*) winbox - fixed duplicate "Trusted" setting under "Interface/Bridge/Ports" menu;
*) winbox - fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu;
*) winbox - fixed "reachable-time" value unit under "IPv6/ND" menu;
*) winbox - do not show empty "CPU Frequency" parameter under "System/Resources" menu;
*) winbox - added "Channel" parameter under "System/Console" menu;
*) winbox - added "interworking-profile" parameter under "Wireless" menu;
*) winbox - added support for PTP;
*) winbox - do not show "Functionality" field for LTE interface if it is not provided;
*) winbox - fixed "vid" parameter under "Bridge/Hosts" menu;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - do not allow to set empty "init-string" field under "System/GPS" menu;
*) winbox - added "src-mac-address" parameter under "IP/DHCP-Server/Leases" menu;
*) winbox - do not show "network-mode" parameter for LTE interfaces that do not support it;
*) winbox - do not show empty "CPU Frequency" parameter under "System/Resources" menu;
*) winbox - fixed "reachable-time" value unit under "IPv6/ND" menu;
*) winbox - fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu;
*) winbox - fixed health reporting on RB960, hEX and hEX S devices;
*) winbox - hide "Allow Roaming" parameter on LTE modems that do not support it;
*) winbox - increased "target" field limit to 128 under "Queues" menu;
*) winbox - show "LCD" only on boards that have LCD;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - show "activity" column by default under "IP/Kid Control/Devices" menu;
*) wireless - added U-NII-2 support for US and Canada country profiles for mANTBox series devices;
*) wireless - improved WPS process stability;
*) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac lite;
*) wireless - increased "group-key-update" maximum value to 1 day;
*) wireless - updated "indonesia5" regulatory domain information;
*) wireless - updated "no_country_set" regulatory domain information;
*) wireless - do not override MTU and ARP values from CAPsMAN with local forwarding;
*) wireless - added U-NII-2 support for US and Canada country profiles for hap ac, hAP ac^3 LTE6, Audience and Audience LTE6;
*) wireless - updated "israel" regulatory domain information;
*) wireless - renamed "macedonia" regulatory domain information to "north macedonia";
*) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac^3;
*) wireless - create "connect-list" rule when address specified for "setup-repeater";
*) wireless - fixed issue with multicast traffic delivery to client devices using power-save;
*) wireless - improved iOS compatibility with HotSpot 2.0 networks;
*) wireless - fixed issue with multicast traffic delivery to client devices using power-save;
*) wireless - improved iOS compatibility with HotSpot 2.0 networks;
*) www - added "X-Frame-Options" header information to disallow website embedding in other pages;
*) www - added "X-Frame-Options" header information to disallow website embedding in other pages;
Hi, I think I found what seems to be a bug in the dns, although I’m not sure what versions are affected.
(here, I ran ‘nslookup’ to get the actual IP addresses of www.example.com used for demonstration purposes.
# first let's add some new A and AAAA dns records for www.example.com
/ip dns static add name=www.example.com address=93.184.216.34
/ip dns static add name=www.example.com address=2606:2800:220:1:248:1893:25c8:1946
# and run some tests on the dns STATIC table...
/ip dns static print terse where name=www.example.com
0 name=www.example.com address=93.184.216.34 ttl=1d # <---- notice this is not a 'type A' record
1 name=www.example.com type=AAAA address=2606:2800:220:1:248:1893:25c8:1946 ttl=1d
/ip dns static print terse where name=www.example.com type=A # <---- issue right here (no output)
/ip dns static print terse where name=www.example.com type!=A # <---- another issue here
0 name=www.example.com address=93.184.216.34 ttl=1d
1 name=www.example.com type=AAAA address=2606:2800:220:1:248:1893:25c8:1946 ttl=1d
/ip dns static print terse where name=www.example.com type=AAAA
0 name=www.example.com type=AAAA address=2606:2800:220:1:248:1893:25c8:1946 ttl=1d
/ip dns static print terse where name=www.example.com type!=AAAA
0 name=www.example.com address=93.184.216.34 ttl=1d
# Now Let's verify the output of these exact same commands run on the dns CACHE table:
/ip dns cache print terse where name=www.example.com
0 S type=A data=93.184.216.34 name=www.example.com ttl=1d
1 S type=AAAA data=2606:2800:220:1:248:1893:25c8:1946 name=www.example.com ttl=1d
/ip dns cache print terse where name=www.example.com type=A
0 S type=A data=93.184.216.34 name=www.example.com ttl=1d
/ip dns cache print terse where name=www.example.com type!=A
0 S type=AAAA data=2606:2800:220:1:248:1893:25c8:1946 name=www.example.com ttl=1d
/ip dns cache print terse where name=www.example.com type=AAAA
0 S type=AAAA data=2606:2800:220:1:248:1893:25c8:1946 name=www.example.com ttl=1d
/ip dns cache print terse where name=www.example.com type!=AAAA
0 S type=A data=93.184.216.34 name=www.example.com ttl=1d
# The output of "/ip dns static print" and "/ip dns cache print" commands is expected to be identical, but it's not.
# At the same time the output of "/ip dns cache print" seems to be correct.
So far the issue has manifested itself only during tests of a script that I’m writing, as I don’t use IPv6 in production.
I’m interested to hear some feedaback on this. Thanks
6.48.5 was released in long term without any time spent in stable channel. This is bad long term channel management.
6.48.5 changelog is in respect to 6.48.4 and not in respect to 6.47.10 (which was last long term channel release). This is bad long term channel management.
6.48.5 auto upgrade failed on HAP AC2. The wireless package failed to run after upgrade. So, this package was released with limited testing. This is bad long term channel management.
I expect Mikrotik to do better so that we can use long term channel packages in production.
P.S. I understand the rational, perhaps in an attempt to avoid potential incompatibilities of legacy IPv4 scripts with newer IPv6 features,
Or, is the actual reason so to make it more convenient for developers to transition to RouterOS v7 ?
but please elaborate on “do not use type “A” for static entries with unspecified type”
and then how come these two commands “/ip dns static print” and “/ip dns cache print” produce such different output?
(FYI: Just so to understand the importance here is an example: searching a single record in a table of 80K+ records returns a result 25% faster if I search in “/ip dns cache” compared to “/ip dns static”)
–
PS.PS.
Honestly the output of “/ip dns cache” is the expected behaviour. And the following “feature”
*) dns - do not use type “A” for static entries with unspecified type;
is either a bug, or in a very early Alpha, (not even “Beta”) stage.
PS.PS.PS.
It’s an ugly bug. That also present in 6.47.10 (long term) - observed same behaviour after a downgrade.
Digging more reveals some relevant changes made as early as 6.47.3:
*) dns - hide default static entry “type” from export;
–
Fix It. (pardon my French).
Please and thank you.
What MT should do is to make a web page where you select two different release and it will then show all changes between those two releases.
Some like to see difference between 6.48.4 to 6.48.5 other 6.47.10 and 6.48.5. Some my upgrade from 6.48.2 to 6.48.5, so then those changes should be shown.
I think it has been already discussed a lot about the change log of long term releases. What they will put in the forum as change log is the change to the latest stable version from which the long term has derived. If one wants to see the whole change from the latest long term release you can find it in the change log archive in their web page.
What is different this time is that Mikrotik gave less than two months to last stable release 6.48.4 to pass it on the long term release. Previous releases gave more time to the preceding stable version if I recall it correctly. Maybe they didn’t have much tickets from 6.48.4 or maybe they just have strengthen their testing team ( I hope ).
Well, what I find most irritating is that the stable release was 6.48.4 (and it had some known problems e.g. in DNS resolver) and now it is quickly upgraded to 6.48.5 and declared long-term.
This is no problem in the strict definition of long-term in that this will be supported all the time that 6.49 (which is now in “stable”) is getting fixed, but lots of users see long-term as a reliable version that they can deploy in production without worrying about unforeseen new bugs, because it has been througly tested not only by MikroTik but also by a wide user base. But this version 6.48.5 has not been tested by the user base at all! We still need to verify that the new fixes between .4 and .5 did not do any damage.
For now I keep my routers that run long-term on version 6.47.10 until this version has received more testing. I would prefer it when the latest stable version is promoted to long-term, not a quick fixup version after that. 6.49 could have waited.
Did anyone find documentation about the new properties nat-events and sys-init-time in /ip traffic-flow ipfix? I didn’t even find the word ipfix neither on wiki.mikrotik.com nor on help.mikrotik.com. Is wiki.mikrotik.com even updated or to be considered up-to-date still?
Changing one version from stable to longterm is nothing new, and with all changes there was bugs before, and new bugs after…
I do also see people complaining than stable changes to long term. If that is not the way to do it, how to do it then.
Hopefully it will be better with time…
6.47.8 stable → 6.47.9 Long term
6.46.6 stable → 6.46.7 Long term
6.45.7 stable → 6.45.8 Long term
…
Also to people complaining that there are many bugs.
Try to compare the functionality and what they can do. The other does not even reach to knees of RouterOS in number of function compared to price.
Everyone is free to select what they like best. I do love RouterOS…
