v7.1rc5 [development] is released!

RouterOS version 7.1rc5 has been released in public “development” channel!

What’s new in 7.1rc5 (2021-Oct-25 20:15):

!) container - package is getting updated and will be made available in future, if interested in container feature please use 7.1rc4;
*) arm64 - fixed “total-sector-writes” resetting on each startup;
*) bgp - fixed IBGP nexthop selection;
*) bgp - fixed binding to IPv6 “link-local” address;
*) bgp - fixed missing default “local-pref” on selection;
*) bgp - fixed stability when appending extended communities;
*) bgp - improved stability and other minor fixes;
*) bonding - added warning when using 802.3ad mode without MII link monitoring;
*) bridge - added HW offload support for vlan-filtering on MT7621 switch chip (hEX, hEX S, RBM33G, RBM11G, LtAP);
*) bridge - fixed incorrect “hw=no” setting after reboot in rare cases;
*) bridge - improved MLAG stability;
*) capsman - do not include “access-list” passphrases in the output of export command by default;
*) certificate - added ability to choose the digest algorithm when generating a certificate;
*) chr - fixed FastPath support for VMXNET3 drivers;
*) dhcpv4 - fixed backslash prefix for packet logging;
*) dhcpv6-client - show correct DUID in print;
*) dhcpv6-server - fixed “address-pool” default value;
*) dhcpv6-server - fixed DUID generation with timestamp;
*) dns - fixed memory leak caused by large DNS replies;
*) gps - fixed built-in GPS functionality for LtAP;
*) health - fixed health value reporting on RB5009;
*) ipsec - enabled hardware acceleration support for ARM and ARM64 devices;
*) ipsec - fixed hardware acceleration support for CHR;
*) l3hw - fixed MTU on receive;
*) l3hw - fixed source MAC address usage for routed packets;
*) leds - adjust “system-led” color based on cellular connection technology on Chateau devices;
*) leds - fixed LED configuration on RB4011;
*) ltap - improved PCIe card support;
*) lte - added “at-chat” support in MBIM mode for Simcom modems in USB composition mode 9003;
*) lte - improved APN re-connection on non LTE networks;
*) lte - improved modem signal monitoring on Chateau 5G;
*) lte - moved notifications about incorrect responses from modem to ‘lte’ topic;
*) lte - properly show antenna selection on Chateau devices;
*) lte - request modem to restart registration process if timeout detected;
*) ospf - accept LA prefixes from intra-area router’s LSA to the routing table;
*) mpls - added ICMP handler (send ICMP ttl exceed on MPLS ttl expiry);
*) ospf - allow to set IPv6 networks for “interface-template”;
*) ospf - disable areas with no interface configuration;
*) ospf - do not allow to set “ptp-unnumbered” on IPv6 interfaces;
*) ospf - do not set empty filter chains when upgrading from v6;
*) ospf - improved stability and other minor fixes;
*) ospf - show interface’s hello, re-transmit and dead intervals;
*) package - uninstall “container” package when downgrading to v6;
*) pppoe - fixed DHCPv6 PD;
*) quickset - added 5G signal quality information;
*) quickset - made “Password…” button work in Basic AP mode;
*) route - improved stability and other minor fixes;
*) route-filters - fixed “<=” and “>=”;
*) route-filters - fixed “ext-community” problems;
*) route-filters - fixed “num range” matchers;
*) route-filters - fixed “route origin” matcher;
*) route-filters - improved completion;
*) route-filters - improved stability and other minor fixes;
*) rpki - added “rpki-query” command;
*) rpki - other minor fixes;
*) snmp - fixed IPsec-SA stats counter reporting;
*) snmp - fixed bulk get/walk with large neighbor version strings;
*) ssl - added support for additional GCM_SHA384 ciphers;
*) ssl - fixed x509 chain validation;
*) switch - fixed bogus statistics after RTL8367 switch reset;
*) system - improved DHCP and HotSpot service stability when shutting down;
*) system - improved system stability when downgrading to v6 with external disks attached;
*) tr069-client - improved compatibility for 5G;
*) traffic-flow - added systematic count-based packet sampling support;
*) user-manager - fixed “rate-limit-priority” parameter;
*) user-manager - fixed PEAP server authentication for Windows clients;
*) vrf - allow to assign interfaces directly along with interface lists;
*) vxlan - added default L2MTU value for improved connectivity in bridged setups;
*) vxlan - improved speed on MIPSBE devices;
*) wifiwave2 - fixed configuration profile renaming;
*) wifiwave2 - moved RADIUS accounting parameters to a separate configuration profile;
*) winbox - added “netmap” action to IPv6 NAT rules;
*) winbox - added IPv6 support for “Network” parameter under “Routing/OSFP/Interface Templates” menu;
*) winbox - added missing IPv6 mangle actions - “mark-routing”, “sniff-tzsp”, “sniff-pc”, “snpt” and “dnpt”;
*) winbox - added option to upgrade LTE firmware;
*) winbox - changed extension channel symbol to lower case for WifiWave2;
*) winbox - do not allow to set “memory-lines” parameter out of bounds under “System/Logging/Action” menu;
*) winbox - fixed “routing-mark” and “routing-table” selection in IPv4 and IPv6 firewall and route rules;
*) winbox - fixed private SSH key import;
*) winbox - made “0” the default value for GPS “init-channel” parameter;
*) winbox - made SSID field collapsible for WifiWave2;
*) winbox - moved “RPKI” tab from “Routing/BGP” to “Routing/RPKI” menu;
*) winbox - moved “Tables” tab from “IP/Route” to “Routing” menu;
*) winbox - moved all interface stats columns to the right;
*) winbox - properly load all backups stored in Cloud;
*) winbox - properly show “value” parameter for FWD type entries;
*) winbox - renamed “Backlight” to “OK” under “LCD/Backlight” menu;
*) winbox - renamed “Dst. Address” to “Route Dst.” under “IP/Firewall/Mangle” menu;
*) winbox - replaced “routing-table” with VRF in traceroute;
*) winbox - show “External Antenna” parameter on all Chateau devices;
*) winbox - updated WifiWave2 interface fields and tabs;
*) wireguard - do not consider WireGuard interface as ethernet;
*) wireguard - improved system stability when sending WireGuard packets over EoIP;
*) wireless - adjusted antenna gain on Chateau devices;
*) wireless - improved system stability when changing L2MTU for wireless interfaces;
*) wireless - improved system stability when limiting link throughput via “ap-tx-limit” and “client-tx-limit” parameters;
*) wireless - improved system stability when using nv2 protocol on ipq4019 interfaces;

All released RouterOS v7 changelogs are available here:
https://mikrotik.com/download/changelogs/development-release-tree

Perfect! thank you very much mikrotik!

“bridge - added HW offload support for vlan-filtering on MT7621 switch chip (hEX, hEX S, RBM33G, RBM11G, LtAP);”

Excellent! :smiley:

This = +1

Yes!!! “*) user-manager - fixed PEAP server authentication for Windows clients;”
Thanks MT !

EDIT: … but still don’t get in with Windows 10 client… https://forum.mikrotik.com/viewtopic.php?p=887578#p887578

I don’t suppose there is a rough ETA for the updated container package? :slight_smile:

Thank you MikroTik :slight_smile:

Aha a nice changelog!
IPv6 netmap - that looks good!

added missing IPv6 mangle actions - “mark-routing”, “sniff-tzsp”, “sniff-pc”, “snpt” and “dnpt”;

How about “set priority”?

Any info on BFD (with BGP)? In which rc version will it be implemented?

Wow, some nice features,
bridge - added HW offload support for vlan-filtering on MT7621 switch chip (hEX, hEX S, RBM33G, RBM11G, LtAP);
When will I get that for my CCR1009 (just kidding).

dns - fixed memory leak caused by large DNS replies;
I wonder how this bug showed up, random stuff that no one could pin down???

) ipsec - enabled hardware acceleration support for ARM and ARM64 device
Sweet.

*) wireguard - do not consider WireGuard interface as ethernet;
I dont understand?? I have RC4 wireguard and my wireguard interface DOES NOT SHOW UP under the Ethernet Tab (under Interface list).
It does show up as an entry under the general tab of INTERFACE as does an SSTP connection etc…

*) wireguard - improved system stability when sending WireGuard packets over EoIP
What use case is there to use wireguard within an EoIP tunnel ??

Chateau 5G updated without issue, thank you for the improvements.

hAP Lite updated as well.

updated hapac3 without any issue

Working as expected, except for IPSEC client which is broken.

I noticed an IPSEC issue during upgrade on the CCR2004-1G-12S+2XS, and I hope that this is the right place to post:

IPSEC authentication is broken. I used diff tool to compare /export and it appears that this line was missing on RC5:

/ip ipsec identity
add auth-method=eap certificate=“XXXXXXXXXXXXXXX CA” eap-methods=eap-mschapv2 generate-policy=port-strict mode-config=
“XXXXXXXXXXXX mode config” peer=“XXXXXXXXXXXXXX” policy-template-group=XXXXXXXXXX username=XXXXXXXXXXXXX

I could paste it from RC4 and everything was fine.

Update: The password was stripped also (which is a normal feature). Maybe this is why the /ip ipsec identity was not upgraded.
Just be aware that IPSEC will not be working after rc5 upgrade …

IPSEC authentication is broken

Did you have any issue with SW 7.0.5? Like speed, IPSec..?
I only want to know, what is better version for normal use..7.0.5 or 7.rc5?
Thank you

Ahh, why ist Container not included? Now i have to wait for RC6.. Damn! :slight_smile:

MT giveth and MT taketh away…

Never got an update to https://help.mikrotik.com/docs/display/ROS/v7+Routing+Protocol+Status for RC4. Can we get one for RC5?

edit: I guess I was impatient…The page just got updated

+1 (

Tried to upgrade my hAP ac2 from 6.49 (separate packages: advanced-tools,dhcp,security,system,wireless) to 7.1rc5.
Uploaded routeros-7.1rc5-arm.npk to device via winbox, it shows up in the files section.
Rebooted device, first two log entries are:
system,info installed system-7.1rc5
system,error not enough space for upgrade
after that, the device is still running 6.49
/system resource print shows:
free-hdd-space: 2680.0KiB
total-hdd-space: 15.3MiB

the bug about Intel 10G ports and bonding reported on ticket 61316 is not yet fixed in RC5:
we discovered two issue about bonding and 7.1rc4 on x86 and intel cards:

  • first issue: After the reboot the phisical ports remain down
    To have them working again you have to disable the bonding. As soon as you disable the bonding MT starts to report the ports UP and then eneable the bonding you have it working.
    I am able to reproduce the issue also on a working bonding, where I disable one bonding interface, then reenable it, the port renabled doesn’t go up in Running mode, the only way to have to port working again is to disable the bonding and reenable it.

    \
  • second issue seems related to “link monitoring=none”, when there is the bonding in this config and I chanhe the remote side, for exemple changing the hash from l3/l4 to l2 the bonding stops to forward the traffic.
    my workaround for this is to use linkmonitoring =mii on both side of the bonding (v6 is at the remote side).

*) leds - adjust “system-led” color based on cellular connection technology on Chateau devices;

Does this need some extra configuration? Is there a color->technology mapping?


*) wireless - adjusted antenna gain on Chateau devices;

How do I notice? It was antenna-gain=3 for 2.4ghz and antenna-gain=6 for 5ghz before. I see no change?

installed on my rb5009, so far so good :slight_smile: