What's new in 7.24beta2 (2026-Jun-10 10:44):
- app - allow HTTP for Gitea when "check-certificate=no";
- app - fixed home-assistant default config files;
- app - fixed making empty directories when running configuration export;
- app - make secrets sensitive to avoid polluting configuration export;
- bgp - fixed advertisement print handling by "dst" when destination is in VRF;
- bgp - fixed EVPN label corruption and correct EVPN type-5 output;
- bgp - fixed IPv6 End-of-Route processing;
- bgp - improved stability on MP (multiprotocol) parsing;
- bgp - removed "save-to" from "resend" command;
- bgp-vpn - fixed blackhole route export;
- bridge - added ARP inspection and IP source guard support;
- certificate - always use all trust stores for downloaded CRL validation;
- certificate - general improvements in certificate handling;
- console - fixed argument mappings in "do" block for monitor commands;
- console - fixed missing comments in scripts (introduced in v7.24beta1);
- console - fixed proplist order in monitor commands;
- console - fixed quoted input issues for multi-argument properties;
- console - fixed UTF-8 comparisons on some architectures;
- console - improved "print detail" mode;
- console - make execute non-blocking when file parameter is used (introduced in v7.24beta1);
- container - fixed missing config.json issue when upgrading from version 7.20.8 or older;
- defconf - set "configuration.dtim-period=3" for WiFi;
- defconf - use "add-dns-entries=yes" on devices with DHCP server;
- dhcp - fixed processing of DHCP options that are longer than 255 bytes;
- discovery - added "discovery" logging topic (additional fixes);
- discovery - added "last-breath" feature;
- disk - added "last-seen" property that displays disk model and serial when removed;
- disk - added error message when disk state transitions from good to bad;
- disk - avoid reading SCSI stats all the time to allow disks to go to sleep;
- disk - improved error message when a swap file is created without "file-size" specified;
- ethernet - removed "1G-baseT-half" link mode on RTL8367 switch;
- fetch - added option to force HTTP/2 only (only for ARM64 and x86/CHR devices);
- interface - fixed duplicate MAC warning for wireless, wifi, macsec, w60g interfaces (introduced in v7.23);
- ip-service - show service name for "l2tp";
- ipsec,ike2 - fixed active connection termination;
- ipsec,ike2 - fixed SA payload validation;
- ipsec,ike2 - improved pending child SA cleanup and removal of dangling SAs during Phase 2 deletion;
- ipv6,ra - correctly process RAs advertising previously expired prefix;
- ipv6,ra - fixed prefix invalidation;
- isis - fixed missing "l2.lsp-refresh-interval" parameter;
- l2tp - allow fragmentation of large IPv6 packets;
- l3hw - added HW offloaded VRF support on 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98CX8410 switches (additional fixes);
- leds - added dark mode support for L009;
- lte - cap IPv6 prefix lifetime for ipv6-interface;
- lte - do not add extra /128 IPv6 address for ipv6-interface;
- lte - limit IPv6 prefix lifetime only when lifetime is advertised as infinity;
- lte - make modem MAC persistent for R11e-LTE6 and R11l-LTE7 modems;
- lte - remove site local DNS for ipv6-interface;
- netwatch - fixed issue where ICMP probes did not accept TTL exceeded packets when "accept-icmp-time-exceeded" was enabled;
- netwatch - increased maximum packet size to 65535;
- ospf - added missing interface parameters (additional fixes);
- ospf - allow comments on static interfaces;
- ospf - fixed interface passive flag update in WinBox;
- ospf - fixed unresolved route problem when "routing-table" setting is used;
- pimsm - make "hash-mask-length" parameter naming consistent and fixed typos;
- poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
- poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
- ppp - disable/enable modem radio state depending on ppp interface state (additional fixes);
- ppp - fixed ppp-out stability issue (additional fixes);
- ppp - improved "info" command for BG77 and BG770 modems;
- ppp - only show pin in export with "show-sensitive" flag;
- route - allow to add route with link-local destination address;
- route - fixed memory leak when flapping addresses or interfaces with routing protocols running;
- route - fixed static route flag handling by WinBox on disable;
- sftp - fixed branding package upload;
- switch - increase "ingress-rate" and "egress-rate" maximum value to 400G;
- traffic-generator - fixed injecting pcap/pcapng files on MIPSBE architecture;
- tunnel - fixed stability issue caused by a misconfigured routing loop under bridge (introduced in v7.22);
- vrrp - fixed stability issue when "sync-connection-tracking" is enabled;
- wifi - improved roaming/steering behavior for WiFi 7 MLO (additional fixes);
- wifi - upgraded wifi-qcom driver;
- winbox - added "Network" configuration menu for WiFi;
- winbox - added missing values to "AFI" setting under "Routing/BGP" menus;
- winbox - fixed "Connection Bytes" field under "IP/Firewall" menu;
- winbox - fixed "EC/IO" scaling for LTE interface;
- winbox - fixed empty value in "Immediate Gateway" under "IP/Routes" menu;
- winbox - fixed value unset under "MPLS/LDP Neighbor" menu;
- winbox - fixed WinBox v3 stability issue when Netinstall package is enabled (introduced in v7.24beta1);
- winbox - move "EAP" under "Security" tab for WiFi;
- winbox - show priority bits in "VLAN ID" field under "Tools/Packet Sniffer" menu;
- wireguard - fixed peer recreation on interface change;
- x86 - fixed IRQ displaying per CPU on Intel 700 series NIC;