v7.11beta [testing] is released!

RouterOS version 7.11beta has been released on the “v7 testing” channel!
Before an upgrade:

  1. Remember to make backup/export files before an upgrade and save them on another storage device;
  2. Make sure the device will not lose power during upgrade process;
  3. Device has enough free storage space for all RouterOS packages to be downloaded.

What’s new in 7.11beta7 (2023-Jul-24 14:45):
*) certificate - allow to import certificate with DNS name constraint;
*) certificate - require CRL presence when using “crl-use=yes” setting;
*) conntrack - fixed “active-ipv4” property;
*) console - added “:convert” command;
*) dhcp-server - fixed setting “bootp-lease-time=lease-time”;
*) ike2 - log “reply ignored” as non-debug log message;
*) modem - added initial support for BG77 modem DFOTA firmware update;
*) modem - changed Quectel EC25 portmap to expose DM (diag port), DM channel=0, GPS channel=1;
*) ovpn - do not try to use the “bridge” setting from PPP/Profile, if the OVPN server is used in IP mode (introduced in v7.10);
*) ovpn - improved key renegotiation process;
*) ovpn - include “connect-retry 1” and “reneg-sec” parameters into the OVPN configuration export file;
*) routerboot - increased etherboot bootp timeout to 40s on MIPSBE and MMIPS devices (“/system routerboard upgrade” required);
*) ssh - fixed private key import (introduced in v7.9);
*) user - added “sensitive” policy requirement for SSH key and certificate export;
*) webfig - fixed gray-out italic font for entries after enable;

What’s new in 7.11beta6 (2023-Jul-18 14:06):
*) bfd - improved system stability;
*) bth - added “Back To Home” VPN service for ARM, ARM64 and TILE devices;
*) certificate - removed request for “passphrase” property on import;
*) defconf - do not change admin password if resetting with “keep-users=yes”;
*) modem - fixed missing sender’s last symbol in SMS inbox if the sender is an alphabetic string;
*) ssh - fixed host public key export (introduced in v7.9);
*) tftp - improved file name matching;

What’s new in 7.11beta5 (2023-Jul-17 10:07):
*) bridge - added warning when VLAN interface list contains ports that are not bridged;
*) bth - added “Back To Home” VPN service for 802.11ax devices with wifiwave2 package;
*) console - fixed incorrect date when printing “value-list” with multiple entries;
*) console - improved stability when using fullscreen editor;
*) container - added IPv6 support for VETH interface;
*) container - adjust the ownership of volume mounts that fall outside the container’s UID range;
*) hotspot - allow number as a first symbol in the Hotspot server DNS name;
*) lora - added uplink message filtering option using NetID or JoinEUI;
*) qos-hw - keep VLAN priority in packets that are sent from CPU;
*) resource - fixed erroneous CPU usage values;
*) sfp - reduce CPU load due to SFP interface handling for CCR2116, CCR2216, CCR2004-12S+2XS, CRS312, CRS518 devices (introduced in v7.9)
*) webfig - fixed “Connect To” configuration changes for L2TP client;
*) wifiwave2 - automatically add wifi interfaces to appropriate bridge VLAN when wireless clients with new VLAN IDs connect;
*) wifiwave2 - fixed multicast frame delivery (introduced in v7.11beta2);
*) wifiwave2 - fixed registration table statistics (introduced in v7.11beta4);

What’s new in 7.11beta4 (2023-Jul-05 13:33):
*) bluetooth - added “decode-ad” command for decoding raw Bluetooth payloads (CLI only);
*) bluetooth - added “Peripheral devices” section which displays decoded Eddystone TLM and UID, iBeacon and MikroTik Bluetooth payloads;
*) bridge - added warning when VLAN interface list contains ports that are not bridged;
*) bridge - prevent bridging the VLAN interface created on the same bridge;
*) console - fixed incorrect default value of “:return” command (introduced in v7.11beta2);
*) console - improved stability and responsiveness;
*) container - fixed duplicate image name;
*) dns - improved system stability when processing static DNS entries with specified address-list;
*) ipsec - improved IKE2 rekey process;
*) ipsec - properly check ph2 approval validity when using IKE1 exchange mode;
*) l3hw - changed minimal supported values for “neigh-discovery-interval” and “neigh-keepalive-interval” properties;
*) l3hw - fixed /32 and /128 route offloading after nexthop change;
*) l3hw - fixed incorrect source MAC usage for offloaded bonding interface;
*) l3hw - improved system responsiveness during partial offloading;
*) l3hw - improved system stability;
*) leds - blink red system-led when LTE is not connected to the network on D53 devices;
*) leds - fixed system-led color for “GSM EGPRS” RAT on D53 devices;
*) lte - fixed Dell DW5221E “at-chat” support;
*) lte - only listen to DHCP packets for LTE passtrough interface in auto mode when looking for the host;
*) package - treat disabled packages as enabled during upgrade;
*) profile - added “container” process classifier;
*) profile - properly classify “console” related processes;
*) quickset - correctly apply configuration when using “DHCP Server Range” property;
*) rose-storage - added “scsi-scan” command (CLI only);
*) route - added comment for BFD configuration (CLI only);
*) route - convert BFD timers from milliseconds to microseconds after upgrade;
*) sfp - improved optical QSFP interface handling for 98DX8332, 98DX3257, 98DX4310, 98DX8525 switches;
*) wifiwave2 - fixed “reg-info” information for several countries;
*) wifiwave2 - fixed interface hangs on IPQ6010-based boards (introduced in v7.9);
*) wifiwave2 - rename “reg-info” country argument from “Macedonia” to “North Macedonia”;
*) winbox - fixed “Storm Rate” property under “Switch/Port” menu;
*) winbox - fixed BGP affinity display;
*) wireless - ignore EAPOL Logoff frames;
*) x86 - updated e1000 driver;

What’s new in 7.11beta2 (2023-Jun-21 14:39):
*) api - disallow executing commands without required parameters;
*) bfd - fixed “actual-tx-interval” value and added “remote-min-tx” (CLI only);
*) bluetooth - added new AD structure type “service-data” for Bluetooth advertisement;
*) bridge - added more STP-related logging;
*) bridge - fixed MSTP BPDU aging;
*) bridge - fixed MSTP synchronization after link down;
*) certificate - fixed PEM import;
*) certificate - restored RSA with SHA512 support;
*) console - added default value for “rndstr” command (16 characters from 0-9a-zA-Z);
*) console - fixed minor typos;
*) console - fixed missing “parent” for script jobs (introduced in v7.9);
*) console - fixed missing return value for ping command in certain cases;
*) console - fixed printing interval when resizing terminal;
*) console - improved flag printing in certain menus;
*) console - improved stability and responsiveness;
*) console - improved timeout for certain commands and menus;
*) console - improved VPLS “cisco-id” argument validation;
*) container - added option to use overlayfs layers;
*) discovery - fixed “lldp-med-net-policy-vlan” (introduced in v7.8 );
*) ethernet - improved interface stability for CRS312 device;
*) fetch - improved timeout detection;
*) firewall - added warning when PCC divider argument is smaller than remainder;
*) firewall - fixed mangle “mark-connection” with “passthrough=yes” rule for TCP RST packets;
*) graphing - added paging support;
*) health - added more gradual control over fans for CRS3xx, CRS5xx, CCR2xxx devices;
*) health - fixed configuration export for “/system/health/settings” menu;
*) ike2 - improved system stability when closing phase1;
*) ike2 - improved system stability when making configuration changes on active setup;
*) l3hw - improved system stability during IPv6 route offloading;
*) led - fixed manually configured user LED for RB2011;
*) lora - added new EUI field;
*) lora - moved LoRa service to IoT package;
*) lora - properly apply configuration changes when multiple LoRa cards are used;
*) lora - updated LoRa firmware for R11e-LR8, R11e-LR9 and R11e-LR2 cards;
*) lte - added “at-chat” support for Dell DW5821e-eSIM modem;
*) lte - added extended support for Neoway N75 modem;
*) lte - fixed NR SINR reporting for Chateau 5G;
*) lte - fixed Telit LE910C4 “at-chat” support;
*) lte - improved initial interface startup time for SXT LTE 3-7;
*) mpls - improved MPLS TCP performance;
*) mqtt - added more MQTT publish configuration options;
*) mqtt - added new MQTT subscribe feature;
*) netwatch - added “src-address” property;
*) netwatch - changed “thr-tcp-conn-time” argument to time interval;
*) ovpn - fixed OVPN server peer-id negotiation;
*) ovpn - fixed session-timeout when using UDP mode;
*) ovpn - properly close OVPN session on the server when client gets disconnected;
*) poe - fixed missing PoE configuration section under specific conditions;
*) pppoe - fixed PPPoE client trying to establish connection when parent interface is inactive;
*) rose-storage - added disk stats for ramdisks;
*) rose-storage - fixed RAID 0 creation;
*) rose-storage - limit striped RAID element size to smallest disk size;
*) routerboard - fixed “gpio-function” setting on RBM33G (“/system routerboard upgrade” required);
*) routerboard - improved RouterBOOT stability for Alpine CPUs (“/system routerboard upgrade” required);
*) routerboard - removed unnecessary serial port for netPower16P and hAP ax lite devices (“/system routerboard upgrade” required);
*) sfp - improved interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 based switches;
*) ssh - fixed user RSA private key import;
*) switch - fixed “reset-counters” for “switch-cpu”;
*) system - disallow setting a non-existing CPU core number for system IRQ;
*) system - increased maximum supported CPU core count to 512 on CHR and x86;
*) system - reduced RAM usage for SMIPS devices;
*) w60g - improved stability for Cube 60Pro ac and CubeSA 60Pro ac devices;
*) webfig - added option to enable wide view in item list;
*) webfig - use router time zone for date and time;
*) wifiwave2 - added “steering” parameters and menu to set up and monitor AP neighbor groups (CLI only);
*) wifiwave2 - added more information on roaming candidates to BSS transition management requests (802.11v) and neighbor report responses (802.11k);
*) wifiwave2 - added option to filter frames captured by the sniffer command (CLI only);
*) wifiwave2 - changed default behavior for handling duplicate client MAC addresses, added settings for changing it (CLI only);
*) wifiwave2 - enabled PMK caching with EAP authentication types;
*) wifiwave2 - fixed “security.sae-max-failure” rate not limiting authentications correctly in some cases;
*) wifiwave2 - fixed clearing CAPsMAN Common Name when disabling “lock-to-caps-man”;
*) wifiwave2 - improved stability when changing interface settings;
*) wifiwave2 - improved stability when receiving malformed WPA3-PSK authentication frames;
*) wifiwave2 - make info log less verbose during client roaming (some info moved to wireless,debug log);
*) wifiwave2 - use correct status code when rejecting WPA3-PSK re-association;
*) winbox - added missing status values for Ethernet and Cable Test;
*) winbox - added warning about non-running probe due to “startup-delay”;
*) winbox - fixed default “Ingress Filtering” value under “Bridge” menu;
*) winbox - improved supout.rif progress display;
*) winbox - rename “Group Master” property to “Group Authority” under “Interface/VRRP” menu;
*) wireguard - fixed peer connection using DNS name on IP change;

To upgrade, click “Check for updates” at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while a router is not working as suspected or after some problem has appeared on the device

Please keep this forum topic strictly related to this particular RouterOS release.

Thank you.
Interesting, I have to check this one out.
*) system - reduced RAM usage for SMIPS devices;

SNMP Routing Table error (“Error: OID not increasing:”) still not fixed, which exists since version 7.9 (SUP-117934 / SUP-119410).

7.9 changelog:

*) snmp - improved outputting of routes;

Unfortunately you didn’t improve it, you broke it.

You can reproduce the problem by creating multiple routes with the same destination.

Thank you for the beta. What are the changes compare the alpha? Has been the WiFi bug fixed?

Thank you

*) webfig - added option to enable wide view in item list;

.
This is awesome, thanks a lot for that Mikrotik :slight_smile: Please consider allowing the “wide view” to be set as default somehow, and not requiring to click on the icon each time. Please also consider, and i’m asking that once again, consider also giving us the option to choose between inline or ‘newline’ comments.

*) mpls - improved MPLS TCP performance;

What can this mean?

It works better now :slight_smile:

The Better is the Enemy of good :slight_smile: :slight_smile: :slight_smile:

@strods you should better to answer more serious questions :slight_smile: Has been the WiFi bug fixed?

Does this include correction for issue with wifi and “key handshake timeout”?

This version includes the changes that were present in 7.11alpha127 that was shared on the forum. While some users have reported improvements with this version, the issue is not fully resolved. We are still working on it.

so you still have not reproduce the issue in your lab? It takes somethimes some time/days to apper so it will be difficult to fix it without reproduction in your lab. Lets see if anyone will report this issue on the beta.

Also it does not support multiple route tables, it only returns routes from the main table.

I think in general, it has to be considered to have persistent settable viewing options in webfig. There are none, so first that has to be implemented.

Update Failure!
From 7.10 with all extra packages installed and disabled.

Log error → “can not install lora-7.11beta2: iot is not installed, but is required”
But is not true!
iot was installed, but disabled.

Follow the historical evidence on screenshots.
01_RouterOS_FailureOnUpdateTo_v7.11beta2_BeforeFirstTry_v7.10.jpg
03_RouterOS_FailureOnUpdateTo_v7.11beta2_UninstallLora.jpg
02_RouterOS_FailureOnUpdateTo_v7.11beta2_LogAfterReboot.jpg
04_RouterOS_FailureOnUpdateTo_v7.11beta2_SecondTryAfterUninstallLora.jpg
06_RouterOS_v7.11beta2_BeforeReinstallLora.jpg
05_RouterOS_SuccessOnUpdateTo_v7.11beta2.jpg
07_RouterOS_v7.11beta2_ErrorAfterFistrTryReinstallLora.jpg
09_RouterOS_v7.11beta2_BeforeSecondTryReinstallLora_With-iotEnabled.jpg
08_RouterOS_v7.11beta2_Enable-iot.jpg
10_RouterOS_v7.11beta2_SucessrAfterSecondTryReinstallLora_With-iotEnabled.jpg
12_RouterOS_v7.11beta2_Sucess_AfterWorkarounds.jpg
11_RouterOS_v7.11beta2_Disable-iotAnd-lora.jpg

Classic logic error, the text of the error is wrong, it should be “can not install lora-7.11beta2: iot is not enabld or installed, but is required”


I’m really having a hard time understanding why you needlessly install all the extra packages if you then disable them…

Wow, even more!

Any details? What case should it fix?

Are you serious?

still broken .
截屏2023-06-22 20.48.13.png

More and better logging do we like.
Hopefully timestamp will be fixed and the prefix logging mess.
http://forum.mikrotik.com/t/logging-prefix-is-a-mess-sup-105353-sup-144261-waiting-for-mt-to-support-rfc-5424/111067/1

Will do some test on the STP and see if I can make a splunk dashboard on it.

Humm… This is my own testbed.
I do it (and many other stupid things) for testing… And reporting. After all, it’s a beta.

In production, only the packages that are actually used.

So I shouldn’t report?