v7.13beta [testing] is released!

Announcements
1

RouterOS version 7.13beta has been released on the “v7 testing” channel!
Before an upgrade:

  1. Remember to make backup/export files before an upgrade and save them on another storage device;
  2. Make sure the device will not lose power during upgrade process;
  3. Device has enough free storage space for all RouterOS packages to be downloaded.

Notice - Starting from RouterOS version 7.13, significant changes have been made to the RouterOS wireless packages. This is done due to a new product development which will require more disk space for hardware drivers so we had to split it in order to maintain old products alongside the new ones. More wireless packages are yet to come.

  1. When upgrading by using “check-for-updates”, all versions earlier than 7.12 will display 7.12 as the latest available version. Upgrade from v7.12 to v7.13 or later versions must be done through 7.12 in order to convert wireless packages automatically. Fresh installation with Netinstall or manual package installation works in the same manner as always.

  2. Drivers for older wireless and 60GHz interfaces, as well as the wireless management system CAPsMAN, are now part of a separate “wireless” package instead of being a part of the bundle package. This package can be uninstalled if not needed.

  3. The existing “wifiwave2” package has been divided into distinct packages: “wifi-qcom” and “wifi-qcom-ac”, and the necessary utilities for WiFi management are now included in the RouterOS bundle. RouterOS and “wifi-qcom-ac” packages alongside each other now fit into 16MB flash memory.

What’s new in 7.13beta3 (2023-Nov-24 13:52):
*) bridge - added automatic “path-cost” values depending on interface rate;
*) bridge - fixed HW offload enable with multiple switches (introduced in v7.13beta1);
*) bridge - improved HW offload enable;
*) certificate - fixed CRL check (introduced in v7.13beta1);
*) certificate - fixed host certificate verification if host is IP address (introduced in v7.13beta1);
*) certificate - fixed manual URL addition for CRL (introduced in v7.13beta2);
*) certificate - improved CRL signature verification and download error messages;
*) certificate - use error topic for CRL update failures;
*) console - added “read” command under “file” menu;
*) console - added unset option for “ssid-regex” and “allow-signal-out-of-range” properties under “interface/wifi/access-list” menu;
*) console - fixed misaligned columns (introduced in v7.13beta1);
*) console - improved stability when removing script;
*) defconf - fixed bogus wifi password on certain Audience devices;
*) defconf - use “WISP Bridge” default configuration mode for RBGrooveGA-52HPacn device;
*) fetch - added “http-auth-scheme” parameter, allows to select HTTP basic or digest authentication;
*) fetch - added raw logging;
*) ospf - fixed LSA Type3 advertisement for OSPFv2;
*) qos-hw - added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only);
*) qsfp - fixed supported rates for breakout cables (introduced in v7.12);
*) sfp - added “1G-baseT” link mode for modules that supports “2.5G-baseT” mode;
*) sfp - allow 2.5G rates only in forced link mode;
*) sfp - fixed SFP and combo interface handling for CRS328-4C-20S-4S+ device (introduced in 7.13beta1);
*) sfp - ignore “rx-loss” in forced link mode;
*) sfp - ignore irrelevant extended compliance code for SFP modules;
*) sfp - show 10M and 100M supported rates for RJ45 copper modules;
*) ssh - added cipher and hash function acceleration for ARM64 and x86 architectures;
*) supout - include missing wireless information (introduced in v7.13beta1);
*) wifi - enable protected interworking ANQP responses;
*) wifi-qcom - added fast-path for received packets;
*) winbox - fixed memory allocation (introduced in v7.13beta2);

What’s new in 7.13beta2 (2023-Nov-14 13:04):
*) bridge - fixed missing “S” flag after configuration changes (introduced in v7.13beta1);
*) certificate - added HTTP redirect support for CRL download;
*) certificate - added support for certificates with key size 16384;
*) console - added “:grep” command;
*) console - added “interface” name when printing “interface/pppoe-server” entries;
*) console - fixed missing escaped characters when using print in certain menus (introduced in v7.13beta1);
*) disk - fixed hang on reboot when network file systems mounted;
*) lora - added CUPs protocol support;
*) lte - disabled IMS service for Chateau 5G on A1 HR network;
*) ppc - fixed RouterOS bootup (introduced in v7.12);
*) route-filter - improved performance;
*) supout - added multiple WiFi sections;
*) wifi - improved system stability when using sniffer (introduced in v7.13beta1);
*) winbox - improved connection speed;

What’s new in 7.13beta1 (2023-Nov-09 13:15):
!) package - convert “wireless” and “wifi” packages automatically, if upgrading from v7.12;
!) wifi - split existing “wifiwave2” package into separate packages “wifi-qcom”, “wifi-qcom-ac”, and include required utilities for WiFi management into bundle;
!) wireless - separate “wireless” package from bundle and build as a standalone package;
*) bridge - added automatic “path-cost” values depending on interface rate;
*) bridge - added bridge interface property “port-cost-mode” with “short” and “long” arguments;
*) bridge - fixed bogus VLAN entries from wifi when vlan-filtering is not enabled;
*) bridge - improved host flush when removing VLAN on HW offloaded bridge;
*) bth - added “VPN Prefer Relay Code” option;
*) certificate - add support for multiple DNS names for Let’s Encrypt;
*) certificate - fixed certificate auto renewal via SCEP when certificate contains “subject-alt-name”;
*) certificate - improved initial certificate creation using SCEP;
*) cloud - improved re-connect speed after network related connection errors;
*) console - added “:grep” command;
*) console - added “:onerror” command;
*) console - added “:serialize” and “:deserialize” commands for converting values to/from JSON;
*) console - added “read” command under “file” menu;
*) console - added “where” functionality for “export” command;
*) console - added flags to “print” command with “value-list”;
*) console - added interface helper for “gateway” property under “ip/route” menu;
*) console - clear console history when resetting configuration;
*) console - disallow setting existing “name” under “system/script” and “system/scheduler” menus;
*) console - fixed “export” boolean arguments when saving output to file using API;
*) console - fixed “interface/ethernet/switch/port-isolation” export;
*) console - fixed “on-event” argument highlighting under “system/scheduler” menu;
*) console - fixed graphic distortions in WinBox;
*) console - fixed issue where API incorrectly asks for missing arguments;
*) console - fixed printing of “on-event” under “system/scheduler” menu;
*) console - fixed printing to file using API;
*) console - ignore negative values for “:delay” command;
*) console - improved flag printing in certain menus;
*) console - improved stability when running “tool/ping” from API;
*) console - removed “route-cache” setting from “ip/settings” menu;
*) console - replace reserved characters in file and script names with underscores;
*) console - resolve “wifiwave2” directory to “wifi”;
*) console - show “l2vpn-link” address family under “routing/route” menu;
*) console - use more compact login screen for empty branding;
*) defconf - expire password when reverting configuration;
*) defconf - hide default configuration for users without “sensitive” policy;
*) defconf - updated configuration with new “wifi” directory;
*) defconf - use “fan-min-speed-percent=25” for CRS354-48P-4S+2Q+ device;
*) defconf - use device factory preset credentials when using CAPs mode;
*) defconf - use one SSID and enable FT when using “wifi” packages;
*) ethernet - improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic;
*) fetch - added “http-content-encoding” setting;
*) fetch - allow to receive HTTP response headers;
*) fetch - require “ftp” user policy;
*) firewall - added “nat-pmp” support;
*) firewall - added new IPv6 filter arguments “icmp-err-src-routing-header” and “icmp-headers-too-long” for “reject-with” setting;
*) firewall - do not mark all IPv6 GRE packets as invalid;
*) firewall - fixed altered address-list when upgrading from RouterOS v6;
*) firewall - fixed connections being tracked when tracking is disabled;
*) firewall - fixed IPv6 address-list timeout;
*) firewall - removed “prohibited” and “unreachable” IPv4 address-type arguments;
*) health - dynamically add and remove invalid sensors (e.g. sfp-temperature);
*) hotspot - fixed incorrect host moving to VLAN 0 when receiving packets through bridge;
*) ike2 - fixed ike2 double reply;
*) ipv6 - do not send out IPv6 RA deprecate message for re-used prefix;
*) isis - added IS-IS protocol support (CLI only);
*) l3hw - fixed routing for IPsec encapsulated packets;
*) leds - fixed LED indication in multi-APN setup for Chateau;
*) leds - improved LED indication during modem registration state for Chateau;
*) log - added “fetch” topic;
*) lora - fixed issue with lost LoRa configuration when rebooting the device;
*) lte - added RNDIS support for neoway N75-EA modem;
*) lte - added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA;
*) lte - disabled IMS service for Chateau 5G on A1 HR network;
*) lte - fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets;
*) lte - improved SIM slot status change notification handling for MBIM modems;
*) lte - replaced “passthrough-subnet-selection” with “passthrough-subnet-size” setting (CLI only);
*) lte - show each CA band in a new line;
*) mipsbe - improved system stability when removing USB devices;
*) mmips - properly mount and unmount USB devices;
*) modem - added option to read SMS using MBIM interface;
*) mpls - added “te-tunnel” property for VPLS monitor (CLI only);
*) mpls - fixed IPv6 RSVP-TE;
*) mpls - improved logging;
*) netinstall-cli - added more details to help messages;
*) ovpn - improved memory allocation during key-renegotiation;
*) ovpn - removed “ping-timer-rem” option from client config file;
*) package - added warning log about missing “wireless” or “wifi” package;
*) pimsm - improved elected BSR change;
*) poe-out - improved firmware upgrade stability for AF/AT controlled boards;
*) ppp - added remote-ipv6-prefix to IPv6 firewall address-list if “address-list” property is provided;
*) ppp - allow at-chat and info commands in “waiting for packets” state for modems with shared data/info channel;
*) ppp - improved IPv6 link-local address uniqueness;
*) pppoe-server - fixed connection count limit per license level;
*) profiler - improved “disk” and “supout.rif” classifiers;
*) qos-hw - added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only);
*) qsfp - added support for QSFP-to-SFP adapters;
*) quickset - show DDNS name as VPN address for devices with new style serial number;
*) sfp - improved link establishment with certain modules for hEX S device;
*) sfp - improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips;
*) ssh - fix error that caused large chunks of text not being pasted in their entirety into console;
*) supout - added VXLAN FDB section;
*) switch - fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches;
*) system - added “rtrace” debugging tool (CLI only);
*) traffic-generator - improved system stability when modifying interfaces;
*) usb - added support for RTL8152 USB ethernet on ARM, ARM64 and x86;
*) vpls - improved performance when decapsulating data;
*) vrf - fixed ICMP reply lookup;
*) webfig - allow to display comments in multiline or compact modes;
*) webfig - make table headers always visible;
*) webfig - use local storage for user preferences;
*) wifi - added “flat-snoop” tool for surveying WiFi APs and stations (CLI only);
*) wifi - added “remove” command in “capsman/remote-cap” menu;
*) wifi - after radar detections, avoid selection of channels not permitted by the user;
*) wifi - changed CAPsMAN generated certificate common name;
*) wifi - fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined;
*) wifi - fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces;
*) wifi - fixed overridden datapath settings on CAP when unsetting from CAPsMAN;
*) wifi - make slave APs use datapath bridge settings inherited from master by default;
*) wifi - removed “openflow-switch” setting;
*) winbox - added “Hw. Offload” property under “IP/Firewall/Filter” menu;
*) winbox - added “none” argument for “Preshared Key” under “WireGuard/Peers” menu;
*) winbox - added “Ping” button under “IP/DHCP Server/Leases” menu;
*) winbox - added “Tx bps” and “Rx bps” monitor values under “WiFi/Registration” menu;
*) winbox - added icon to entries under “WiFi/Access List” menu;
*) winbox - added missing “qos-classifier” argument for “Hw. Caps” under “WiFi/Radios” menu;
*) winbox - added missing arguments for “MAC Format” under “Wireless/Security Profiles/RADIUS” menu;
*) winbox - allow opening entries under “WiFi/Registration” menu;
*) winbox - fixed default “Name Format” property under “WiFi/Provisioning” menu;
*) winbox - fixed minor typo under “Routing/BFD” menu;
*) winbox - updated “wireless” and “wifi” menus;
*) wireless - fixed “wlan1” default name for RBSXTsqG-5acD and RBLDFG-5acD;
*) wireless - fixed snooper information gathering from re-assocation requests;

To upgrade, click “Check for updates” at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while a router is not working as suspected or after some problem has appeared on the device

Please keep this forum topic strictly related to this particular RouterOS release.

2

See the updated user manual about WiFi:
https://help.mikrotik.com/docs/display/ROS/WiFi

3

still no ed25519 private key for ssh?

4

WHATTTT ??

Wifiwave2 compatibility for AC2, cap AC, cap XL AC, … ???
Do I understand that correctly ?

Or is it only bringing everything in one menu structure ? Old and new wifi remain incompatible ?
Please ? Let it be the first option …

5

Yes, WPA3 on AC devices, etc. Also old and new type of CAPsMAN can be managed on the same router. Not as a unified mechanism, but two separate and parallel systems on the same router.

6

Xmas is early this year :smiley:

7

Just a tip for you all: To make the upgrade less confusing and more smooth, use check-for-updates from 7.12

8

Champagne, I was going to replace my CapXl, to have only wifiwave2, but I’m now able to use wifiwave2 driver, thank you.

9

OMFG!!! I had to check it out before believing - 5009 as wifi capsman, 2x cap ax and now 3x wap ac, all in the same capsman - FINALLLY!!!
working without issues, had to manually uninstall old wireless package after check for upgrade.

10

What about the possibility of using the WifiWave2 driver on the RB4011iGS+5HacQ2HnD-IN without losing the 2.4 GHz WiFi?
Or is there an alternative to exchange the built-in 2.4 GHz card to ensure compatibility?

11

Unfortunately, it is not possible. If you need both - use wireless.npk. If you are satisfied with using just 5 GHz, then wifi-qcom-ac will work for you. Functionality in wifi (old wifiwave2) that has been changed is described in the changelog. Still, wifi package does not include drivers for RB4011 2 GHz wifi.

12

Thank you for staying in the wireless game. Keep moving forward.

13

By the way, if someone decides to upgrade to beta and then wants to downgrade back to, for example, 7.12. You can execute “uninstall” command for wifi or wireless packages and run check-for-updates with ignore-missing parameter. Bundle to bundle downgrade will still work or downgrade for any other packages besides wireless/wifi. Of course, do not do this on AX devices or AC devices using wifi-qcom-ac package without preparing. After such downgrade, wireless will not work. For these routers, for downgrade, you will need to schedule uninstall for new wifi packages and then download 7.12 wifiwave2 package and bundle package manually. Then execute “/system package downgrade”. Scheduled uninstall and downgrade will happen on the same reboot.

Here is an example:

/system package uninstall wifi-qcom
/tool/fetch  url="https://upgrade.mikrotik.com/routeros/7.12/wifiwave2-7.12-arm.npk"
/tool/fetch  url="https://upgrade.mikrotik.com/routeros/7.12/routeros-7.12-arm.npk"
/system package downgrade
14
  • I believe @DanMos79 is asking for an alternative DIY wireless card compatible with WifiWave2 drivers for RB4011, if available in the market.
  • Just a confirmation, if I update from 7.12 to 7.13 an hAP ac2 with old Wireless driver, will have the new “wireless-7.13…-arm” package installed, not “wifi-qcom-ac-7.13…-arm”, right?
  • Also noticed that if anyone has scripts for devices configuration, /interface/wifiwave2 is now /interface/wifi
  • No changes on support for VLAN tagging on 802.11ac chipsets?

Now it’s time for an integrated multicast repeater (like Avahi) :slight_smile:

15

First off, wonderful job on these updates!

A couple of questions and maybe minor reports. For the following “webfig - use local storage for user preferences;” I see this working but in some cases there are some wierd things happening.

  1. Under the IP/Firewall tab, resizing the comments tab makes the # tab to the size that you set for comments the next time you revist the page. And trying to resize the # tab will work in the moment but then goes back to it’s previous state after reloading the page.

  2. In some cases making changes to tab sizes, ordering etc doesn’t take effect if you make the change and then leave the page. However if you make the change and then log out it seems the setting is saved (generally).

16

Yes, these devices will install wireless package automatically and will also be shipped from the factory with wireless package. You can install wifi-qcom-ac package manually.

17

impressive and useful console additions. thanks
also the little added option to ping right away from the DHCP leases menu is a welcome addition.

18

I´ve updated my wAP AC with the wifi-qcom-ac package and the main ROS 7.13Beta1 package.
All went smooth and the change to my CAPsMAN-AX also went well.
But I get some strange error messages in the CAPsMAN AX for the AC-device:
hc_070.jpg
Is it required to update the CAPsMAN AX to 7.13 Beta1 also to make it work?

19

Documentation states this:

Nstreme and Nv2 wireless protocols
VLAN configuration in the wireless settings (Per-interface VLANs can be configured in bridge settings)
Compatibility with station-bridging as implemented in the ‘wireless’ package

https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-Lostfeatures

I think you might have omitted the new VLAN configuration.

20

I still see some strange behaviour in the SNMP-BGP;

bgp as defined at https://oidref.com/1.3.6.1.2.1.15
Is missing the following properties;

Also incorrect values are presented, and not updated over time;

  • bgpPeerFsmEstablishedTime (https://oidref.com/1.3.6.1.2.1.15.3.1.16); this one should indicate how long (in seconds) this peer has been in the Established state or how long since this peer was last in the Established state.

These values aren’t updated over time, nor after a reboot (and therefore a new Established) and completely inaccurate!

After a reboot, all the BGP-sessions are established at almost the same timestamp (+/- 10 minutes ago), side-by-side the output of snmpwalk ‘.1.3.6.1.2.1.15.3.1.16’ is shown. 10 minutes should result in 600 seconds, these values are far off and quite random;
snm_screenshot.png