v7.15beta [testing] is released!

RouterOS version 7.15beta has been released on the “v7 testing” channel!
Before an upgrade:

  1. Remember to make backup/export files before an upgrade and save them on another storage device;
  2. Make sure the device will not lose power during upgrade process;
  3. Device has enough free storage space for all RouterOS packages to be downloaded.

What’s new in 7.15beta9 (2024-Mar-27 21:55):
*) bgp - added initial vpnv6 support;
*) bridge - added MVRP support;
*) console - added “sanitize-names” property under “/console/settings” menu (option for replacing reserved characters with underscores for files, disabled by default);
*) console - added multi-line print in “/file” menu;
*) console - remove unnecessary serial ports for Alpine CPUs;
*) defconf - fixed 5ghz-ax channel width for L11, L22 devices;
*) dhcpv4-relay - added VRF support (CLI only);
*) eap - improved eap-peap, eap-mschap2 client authentication (dot1x/wireless/ipsec);
*) health - fixed missing “cpu-temperature” on IPQ-60xx devices (introduced in v7.15beta8);
*) ipv6 - properly initialize default ND “interface=all” entry;
*) media - added support for DLNA;
*) ppp - added “enable-ipv6-accounting” option under PPP AAA menu (CLI only);
*) ppp - fixed “Framed-IPv6-Pool” usage when received from RADIUS;
*) ppp - fixed reporting of frame error rate (introduced in v7.15beta8);
*) qos-hw - added “profile” and “map” support for CPU port;
*) qos-hw - added per-queue traffic shapers (CLI only);
*) sfp - added “100M-baseFX” link mode support for compatible devices;
*) sms - removed SMS for SMIPS;
*) system - general work on optimizing the size of RouterOS packages;
*) system - show “cpu-frequency” for Alpine CPUs;
*) vlan - added MVRP (applicant) configuration option;
*) wifi - added “reselect-interval” support;
*) wifi - rename “available-channels” parameter to “channel-priorities” and include desirability rating for each channel;
*) wifi - report current CAPsMAN address and identity on CAP;
*) wifi-qcom - added configuration.distance setting to enable operation over multi-kilometer distances (CLI only);
*) wifi-qcom - updated driver;
*) winbox - added key type and key length column for user SSH keys;
*) winbox - added passphrase option for SSH host key export;
*) winbox - added passphrase option for SSH host key import;
*) winbox - allow specifying size and rtmpfs size with M, G units under “System/Disks” menu;
*) winbox - do not show “Host Key Size” when using ed25519 key under “IP/SSH” menu;
*) winbox - renamed “Channel” column to “Current Channel” under “Wifi” menu;
*) winbox - show inherited properties for wifi interfaces;
*) winbox - updated icons for certain menus;
*) wireguard - added option to mark peer as responder only;
*) wireguard - fixed performance issues showing QR code;

What’s new in 7.15beta8 (2024-Mar-21 09:12):
*) bridge - added MVRP support;
*) bridge - improved protocol-mode STP, RSTP and MSTP stability;
*) bridge - reworked dynamic VLAN creation;
*) certificate - added support for different ACME servers for ssl-certificate (CLI only);
*) console - fixed DHCP server “authoritative=no” configuration export;
*) console - improved stability;
*) container - do not allow negative number for “ram-high” setting;
*) defconf - do not override default DHCP server lease time;
*) disk - improved system stability when adding partition with no parent;
*) eap - improved eap-peap, eap-mschap2 client authentication (dot1x/wireless/ipsec);
*) ethernet - fixed interface disable for CRS326-4C+20G+2Q;
*) ethernet - improved port speed downshift functionality for CRS326-4C+20G+2Q;
*) fetch - changed topic “info” to “error” for permission denied logs;
*) fetch - fixed slow throughput due to “raw” logging which occurred even when not listening to the topic (introduced in v7.13);
*) file - fixed moving files to/from external storage (introduced in v7.15beta4);
*) health - added “cpu-temperature” for IPQ50xx devices;
*) health - fixed fan behavior for CRS310-1G-5S-4S+ (introduced in v7.14);
*) health - fixed rogue voltage on CRS510-8XS-2XQ-IN;
*) leds - fixed LEDs for L22 device;
*) lte - fixed firmware upgrade not found issue for Chateau LTE12 (introduced in v7.15beta4);
*) media - added support for DLNA;
*) metarouter - removed support;
*) netinstall - improved stability;
*) ovpn - fixed import ovpn config when remote port is missing;
*) package - reduced “wireless” package size for ARM, ARM64 devices;
*) package - reduced package size for SMIPS;
*) ppp - added “enable-ipv6-accounting” option under PPP AAA menu (CLI only);
*) ppp - added addition support to monitor modem registration state, RSRP, RSRQ, SINR, PCI, CellID for BG77 modem;
*) qos-hw - fixed port “print stats/usage” when using “from” property;
*) quickset - only show LTE mode for devices without other wireless interfaces;
*) route - rework of route attributes;
*) route-filter - allow setting different AFI gateways;
*) sfp - fixed “sfp-tx-fault” state indication for CRS510;
*) sfp - improved auto-negotiation linking for some MikroTik cables and modules;
*) sfp - improved system stability with some GPON modules for CCR2004 and CCR2116 devices;
*) sms - added workaround for modems which do not notify regarding new SMS arrival (missing URC);
*) socks - attempt to parse domain name as IP before resolving;
*) ssh - require “policy” user policy when adding public key;
*) system - fixed upgrade for CCR2004-1G-12S+2XS (introduced in v7.15beta6);
*) system - updated office address in RouterOS license;
*) system - updated online manual links from “wiki” to the help documentation;
*) timezone - updated timezone information from “tzdata2024a” release;
*) traffic-flow - improved system stability;
*) webfig - allow pasting with ctrl+v into terminal;
*) webfig - fixed column preferences for ordered tables;
*) wifi - changed interface default to “disabled=yes”;
*) wifi - improve regulatory compliance for L11, L22 devices;
*) wifi - improved stability of DFS check in the 5GHz-A band;
*) wifi - improved system stability when provisioning CAPs in certain cases;
*) wifi - show inherited properties with “print” command (replaces “actual-configuration”) and added “print config” for showing only configured values;
*) winbox - fixed the issue where the skin file fails to appear in the user group menu after creation;
*) winbox - updated icons for WireGuard and ZeroTier menus;
*) wireguard - added option to mark peer as responder only (CLI only);
*) wireless - perform shorter channel availability check for 5600-5650MHz if regulatory domain permits it;
*) x86 - improved stability for RTL8125 driver;
*) x86/chr - improved panic saving (increased minimal RAM requirements to 256MB);

What’s new in 7.15beta6 (2024-Mar-08 08:23):
*) certificate - added support for importing pbes2 encrypted private keys with aes128;
*) chr - fixed bogus messages printed out while booting up the system (introduced in v7.14);
*) chr - fixed Xen and Vultr missing ethernet (introduced in v7.14);
*) ethernet - fixed default names for CRS310-8G+2S+ device (introduced in v7.14);
*) lte - make interface persistent (unused interface configs can be removed, allow to export and examine current configuration without the device present);
*) package - reduced package size for SMIPS;
*) poe-out - improved firmware upgrade stability for AF/AT controlled boards;
*) qos-hw - added congestion avoidance support for 98DX8xxx, 98DX4xxx, 98DX325x switch chips (CLI only);
*) qos-hw - added WRED support for compatible switches;
*) route - rework of route attributes;
*) sfp - improved system stability for CR2004-1G-2XS-PCIe (introduced in v7.14);
*) ssh - added passphrase option for host key import;
*) vrf - fixed VRF interfaces being moved to main table after reboot (introduced in v7.14);
*) wifi-qcom - improved regulatory compliance for L11, L22 devices;
*) wireguard - added peer “name” field and display it in logs;
*) wireguard - do not attempt to connect to peer without specified endpoint-address;

What’s new in 7.15beta4 (2024-Mar-04 08:04):
!) system - added support for AMPERE (R) hardware (new ARM64 ISO file, new ARM64 extra-nics.npk package);
*) bgp - fixed prefix count when BGP sessions run with multiple AFIs;
*) bgp-vpn - use VRF interface as gateway for leaked connected routes;
*) branding - added option to hide default configuration prompt;
*) branding - added option to hide or replace default caps-mode-script;
*) bridge - added MVRP support (CLI only);
*) bridge - rename monitor property “path-cost” to “actual-path-cost”;
*) certificate - added trusted parameter for certificate import;
*) chr - allow to “generate-new-id” only while CHR is running on level “free” license;
*) console - added “proplist” parameter to interactive commands;
*) console - added “type” parameter to “:resolve” command;
*) console - added “use-script-permissions” option when running scripts from CLI;
*) console - added hotkey “F8” to print entire multiline input;
*) console - added log for script execution failures;
*) console - added option to get “about” value (dynamically created text field by RouterOS services like CAPsMAN);
*) console - added option to read and change file line endings in full-screen editor;
*) console - added warning log for modified filenames due to reserved characters;
*) console - do not convert string to array in “:deserialize” command;
*) console - fixed “:onerror” behavior when “do” block is missing;
*) console - fixed “export where” functionality in certain menus;
*) console - fixed console prompt when entering hot lock mode with “F7”;
*) console - fixed do/while implementation not working with variables (introduced in v7.14);
*) console - fixed filtering by “dhcp” flag in “/ip/arp” menu;
*) console - fixed multiple typos in help;
*) console - optimized configuration export to prevent startup of processes without any configuration;
*) console - replace reserved characters to backup and certificate export file names with underscores;
*) console - show system note before serial login if enabled;
*) console - use user permissions when running scripts from WinBox and WebFig;
*) discovery - added LLDP MAC/PHY Configuration/Status TLV support;
*) discovery - added LLDP Maximum Frame Size TLV support;
*) discovery - added LLDP Port Description TLV support;
*) discovery - advertise only physical interface name for LLDP PortID TLV;
*) discovery - always send LLDP MED Power TLV if MED was received;
*) discovery - fixed high CPU utilization when “tx-only” mode is set;
*) discovery - optimized LLDP information update;
*) disk - added option to auto configure media sharing;
*) disk - added support for formatting exfat file-system;
*) disk - improved support for formatting ext4 file-system;
*) dns - added support for “adlist”;
*) dns - added VRF support (CLI only);
*) dns - improved system stability when caching entries;
*) ethernet - fixed management port disable/enable on CCR2004-1G-12S+2XS, CCR2004-1G-2XS-PCIe, CCR2216, CCR2116 devices;
*) file - allow adding and renaming files and directories;
*) health - added log for fan state changes on CRS3xx, CRS5xx, CCR2xxx, CCR1016r2, CCR1036r2 devices;
*) install - cdrom and hdd install images contain additional packages that can be interactively selected;
*) lte - apply the same configuration for Microsoft branded EM12-G modem (Surface Mobile Broadband) as for Quectel EM12-G;
*) lte - fixed R11e-LTE-US modem dial-up;
*) media - added support for DLNA;
*) modem - send APN authentication for BG77 modem also if ppp-client interface created manually;
*) poe-out - added LLDP power management support for devices with single PoE-out port;
*) poe-out - fixed powering devices if input voltage is lower than 12V for hEX PoE (introduced in v7.9);
*) poe-out - moved “PoE LLDP” property from “/interface/ethernet/poe” to “/ip/neighbor/discovery-settings” and enable it by default;
*) ppp - added “Mikrotik-IPV6-Stats-Prefix” option for RADIUS “Delegated-IPv6-Prefix” account by using statistics from dynamic queues;
*) ppp - added log when disconnecting a client due to “WISPr-Session-Terminate-Time” RADIUS attribute;
*) ppp - fixed “on-down” script running even when tunnel was not up;
*) profiler - added “neighbor-discovery” task;
*) qos-hw - added congestion avoidance support for 98DX8xxx, 98DX4xxx, 98DX325x switch chips (CLI only);
*) qos-hw - added ECN marking support for compatible switches;
*) qos-hw - added support for QoS profile assignment via ACL rules;
*) qos-hw - added WRED support for compatible switches;
*) radius - added “require-message-auth” option that requires “Message-Authenticator” in received Access-Accept/Challenge/Reject messages;
*) radius - include “Message-Authenticator” in any RADIUS communication messages besides accounting for all services;
*) route - do not allow routes with empty “dst-address”;
*) route - fixed bgp-vpn prefix import with the same route distinguisher (RD);
*) route - improved system stability;
*) route - show route-distinguisher (RD) in route print;
*) route-filter - fixed ext community list matcher;
*) sfp - added “100M-baseFX” link mode support for compatible devices;
*) sfp - added “sfp-ignore-rx-los” setting;
*) sfp - fixed link establishment with 100Mbps optical modules (requires “/interface ethernet reset” or adding “100M-baseFX” modes for advertise or speed properties);
*) sfp - fixed missing Tx traffic at 10Gbps rate on CCR2004-16G-2S+ in rare cases;
*) sfp - ignore SFP RX LOS signal for modules with bad EEPROM;
*) sfp - improved “sfp-tx-power” value monitoring in certain cases;
*) sms - added option to select SMS storage;
*) sms - added SMS PDU to SMS inbox “print detail”;
*) sms - improved SMS handling;
*) sms - use “gsm” logging topic for serial modem SMS logs;
*) ssh - added passphrase option for host key export;
*) ssh - added support for user Ed25519 private keys;
*) ssh - export host Ed25519 public key;
*) ssh - fixed permissions to run “.auto.rsc” scripts;
*) ssh - removed RSA flag for user SSH keys;
*) ssh - show key type and key length for user SSH keys;
*) sstp - disconnect clients when server is disabled;
*) switch - added support for multiple ingress and egress port mirroring on 98DXxxxx switches;
*) switch - added support for RSPAN mirroring on 98DXxxxx switches;
*) switch - fixed L3HW and QoS monitor during switch reset;
*) system - added resource values (Product name, File name and File version) for Windows executable files;
*) traffic-flow - detect IPv4 source address if not set;
*) userman - added “require-message-auth” option that requires “Message-Authenticator” in received Access-Request messages;
*) userman - include “Message-Authenticator” in any RADIUS communication messages besides accounting for all services;
*) vlan - ensure that VLAN MTU remains unchanged when adjustments are made to the parent interface MTU, only modifications to the L2MTU might impact VLAN MTU;
*) vlan - fixed MTU reset on bridge after reboot;
*) wifi - do not report disabled state for CAPsMAN managed interface;
*) wifi - fixed configuration export for “disabled” property;
*) wifi - improve channel selection after radar detection events;
*) wifi - rename “available-channels” parameter to “channel-priorities” and include desirability rating for each channel;
*) wifi - report current CAPsMAN address and identity on CAP;
*) winbox - added “Download” and “Flush” buttons under “System/Certificates/CRL” menu;
*) winbox - added “Flat Snoop” button under “WiFi” menu;
*) winbox - added “Request logout” button under “System/Users/Active Users” menu;
*) winbox - added “Trusted” checkbox under “System/Certificates/Import” menu;
*) winbox - added invalid flag under “IP/DHCP Relay” menu;
*) winbox - added missing SFP monitoring properties under “Interface/SFP” menu;
*) winbox - allow to specify “M” or “G” postfix for download, upload or total limits under “User Manager/Limitations” menu;
*) winbox - show “Valid Servers” and “Unknown Servers” column by default under “IP/DHCP Server/Alerts” menu;
*) winbox - show SIM settings for SXTR device under “Interfaces/LTE/Modem” menu;
*) wireguard - added peer “tag” field and display it in logs;
*) wireguard - fixed “auto” argument usage for “private-key” and “preshared-key” settings;
*) x86 - fixed ixgbe Tx hang by disabling TSO;
*) x86 - ice driver update to v1.13.7;
*) x86 - ixgbe driver update to 5.19.9;

To upgrade, click “Check for updates” at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. The file must be generated while a router is not working as suspected or after some problem has appeared on the device

Please keep this forum topic strictly related to this particular RouterOS release.

*) wifi - improve channel selection after radar detection events;
*) wifi - rename “available-channels” parameter to “channel-priorities” and include desirability rating for each channel;

Thank you! :+1:

What?? :heart_eyes:

I don’t know how you did it without increasing the size of the firmware, I can only say that it works great!
I can finally stop using the DLNA container.

Beautiful logo!

Link to the new IP/Media feature manual:
https://help.mikrotik.com/docs/pages/viewpage.action?pageId=237699479

Also new feature - IP/DNS/Adlist:
https://help.mikrotik.com/docs/display/ROS/DNS#DNS-Adlist

Updated switch QoS manual (see WRED, ECN):
https://help.mikrotik.com/docs/pages/viewpage.action?pageId=189497483

Thanks for the new release.

But still no work on the logging mess:
http://forum.mikrotik.com/t/logging-prefix-is-a-mess-sup-105353-sup-144261-waiting-for-mt-to-support-rfc-5424/111067/1

Thanks for the new release.

But still no work on the logging mess:
http://forum.mikrotik.com/t/logging-prefix-is-a-mess-sup-105353-sup-144261-waiting-for-mt-to-support-rfc-5424/111067/1

As mentioned on every version topic - please keep the topic related to the issues that are introduced just in this release and new features.

Logging rules have always worked as “and” filters. You have unlimited options there.

For example, “info” will log info messages, but “info,!l2tp” will log all info topic messages except ones with topic “l2tp” and “info,l2tp” will log only messages that contain both topics.

Consider each logging topic as “AND” filter.

Oh… This one is kind of a nightmare! :flushed_face:

RouterOS scripting is missing some control structures, one of these being :exit (or what ever it may be named…) to exit a scripts early, successfully. As this is missing I have a lot of script misusing :error for that purpose, which worked to date. Now RouterOS starts logging this, and my logs and me are flooded with:

script,error executing script from scheduler failed, please check it manually

Any chance we will have :exit really, really soon to fix this? Otherwise I will have a lot of work to do, implementing other (and probably a lot more complicated) workarounds to my scripts.

Example:

dhcp,critical,error xxxxxxxxxxxxxxxx

Is this a message with severity critical or severity error. (just one of many bad naming in the loging system)
I will post about this until its fixed. It will make RouterOS much more friendly for large environment where logging are a must.
BSD format does not include what module that are sending the message. Logging is broken.

Start using RFC 5424

*) vlan - ensure that VLAN MTU remains unchanged when adjustments are made to the parent interface MTU, only modifications to the L2MTU might impact VLAN MTU;
*) vlan - fixed MTU reset on bridge after reboot;

Thank you! this fixed my problem with 7.13 / 7.14 where I had to disable/enable my internet vlan interface after booting :slight_smile:

Or repurpose :quit for early termination when used in /system/script

*) poe-out - fixed powering devices if input voltage is lower than 12V for hEX PoE (introduced in v7.9);

I’ve had this issue on hEX PoE Lite… is it also fixed? I don’t know if it’s version related

That causes a ssh session to terminate when running the script… So not an option.

Can you add multiple lists to the new Adlist feature or only one list ?

And will the Adlists be automatically updated?

well, something that i wish mikrotik did on the dns adlist is coming true.Been using openwrt for my adblocks package of adblock-lean (lynxthecat) which support multiple lists and automatic update the lists daily. Thanks mikrotik

Please add documentation for mvrp.

Here is the log message from an RB951Ui, using ADlist from example in the linked manual above:
.
ADList.png
What is wrong?

Also how to get the log from the use of the ADlist? (to send to external server)?

About this adlist feature: how is DNS response of 0.0.0.0 better than NXDOMAIN (RouterOS static DNS entries can be configured as this)?

Unfortunately there often are different messages with the same topics. So writing “info,!l2tp” will exclude all info,l2tp topics but that will exclude more than the message you have seen and want excluded.
Suggestion: add a unique identifier to each type of message, that can be seen as an extra topic. so you could then filter on “info,!id12345678” or similar, and reject only that particular message.
Or, add another filter method: regexp on the message content. So you can exclude certain messages that you do not want to see, while still seeing all other messages of the same topic.

Also, you often state that we should not put issues not related to the version here.
Well, where should they be put instead? The feature request topic has been abandoned by MikroTik (people still add replies to it but the are not being read anymore).
It is suggested to use the issue tracker. I put improvement suggestion “SUP-124741” there which has the exact topic of logging, it was first replied with “Our developers have reviewed your requests, and they are generally approved for implementation.” on Aug 21, 2023 and subsequently was set to “Closed with resolution Done” on Oct 20, 2023 but none of the suggested features have been implemented.