MikroTik RouterOS AMPERE Firmware 7.17 RC 1

What's new in 7.17rc1:

- webfig - redesigned HTML, styling and functionality (additional fixes);
- bridge - added priority setting to manually elect primary MLAG peer;
- container - do not log start, end events unless logging is enabled;
- log - fixed e-mail logging (introduced in v7.16);
- lte - improved recovery after unexpected modem reboot for Chateau's 5G and 5G R16 series devices (additional fixes);
- netwatch - added "ignore-initial-up" and "ignore-initial-down" properties;
- netwatch - fixed multiple variables;
- poe-out - improved PoE-out configuration handling when doing reset-configuration command;
- ptp - fixed packet receive with enabled igmp-snooping;
- romon - send uptime in discovery;
- route - improved stability with static route configuration;
- winbox - added "Copy to Access List" option under "WiFi/Registration" menu;
- winbox - added "Max Entries" and "Total Entries" properties under "IP/Firewall/Connections/Tracking" menu;
- winbox - added missing "bus" option for compatible devices under "System/RouterBOARD/USB Power Reset" menu;
- winbox - hide LCD menu for devices without display;
- winbox - hide LTE "External Antenna" menu for devices without switchable antenna option;
- winbox - show "FEC" property on status tab for interfaces that use it;
- winbox - updated properties and behavior under "Switch/QoS" menu;

Other changes since v7.16:

- device-mode - after upgrade, mode "enterprise" is renamed to "advanced" and traffic-gen, partition (command "repartition"), routerboard and install-any-version features will be disabled (additional fixes);
- 6to4 - fixed issue where 6to4 relay would not forward traffic unless destination address is set;
- adlist - improved logging;
- adlist - improved system stability;
- adlist - optimized import on system with low disk space;
- api - fixed REST API serialization of binary data;
- arm64 - fixed for bare-metal servers to be able to access more than 2GB RAM;
- arm64 - show CPU frequency on bare-metal installations;
- arm64/x86 - added missing PCI id for mlx4 driver;
- bonding - hide mlag-id property on non-compatible devices;
- bridge - add HW offload support for active-backup bonds on 98DXxxxx, 88E6393X, 88E6191X and88E6190 switches;
- bridge - added interface-list support for VLANs;
- bridge - added message for inactive port reason;
- bridge - correctly display PPP interfaces in VLAN menu;
- bridge - disallow duplicate static VLAN entries;
- bridge - disallow multicast MAC address as admin-mac;
- bridge - enable faster HW offloading when detect-internet is disabled;
- bridge - fixed bridge packet transmit if dhcp-snooping is enabled (introduced in v7.17beta5);
- bridge - fixed first host table response for SNMP;
- bridge - fixed incorrect HW offloaded port state in certain cases on MSTI add;
- bridge - fixed missing slave flag on port in certain cases;
- bridge - fixed MVRP registrar and applicant port options;
- bridge - fixed port monitor with interface-lists;
- bridge - fixed port move command;
- bridge - fixed setting bridge MTU to L2MTU value;
- bridge - fixed VLAN overlap check;
- bridge - ignore disabled interfaces when calculating bridge L2MTU;
- bridge - improved port handling;
- bridge - improved stability;
- bridge - prioritize MAC selection from Ethernet interfaces when using auto-mac feature;
- bridge - re-synchronize MLAG system-id when bridge MAC changes;
- bridge - removed support for master port config conversion (used before version 6.41);
- bridge - update dynamic MSTI priority value when changing configuration;
- bth - improved stability on system time change;
- certificate - do not download CRL if there is no enough free RAM;
- certificate - do not show not relevant values for certificate template (CLI only);
- certificate - fixed handling of capsman-cap certificates (introduced in v7.16);
- certificate - removed unstructured address field support;
- chr - added Chelsio VF driver for PCIID 5803;
- chr/arm64 - fixed kernel crypto use without crypto extensions for RPi CM4;
- cloud - changed ddns-enabled setting from "no" to "auto" (service is enabled when BTH is enabled);
- cloud - improved DDNS and VPN state stability;
- console - added: range command;
- console - added group-by property for print command;
- console - added json.no-string-conversion to: serialize;
- console - added lf/crlf options to: convert transform;
- console - added more argument definitions for mac-protocol property;
- console - added password property to "/system/ssh-exec" command;
- console - added to/from=num option for: convert command;
- console - allow clearing history for a specific user;
- console - allow setting width to supout.rif output;
- console - clear history when removing user;
- console - disallow autocomplete hints for user without read policy;
- console - execute: return command without error;
- console - fixed endless loop when closing input prompt;
- console - force print paging when output does not fit terminal width;
- console - improved printing output in some menus;
- console - improved scripting system stability;
- console - increased w60g scan-list size to 6;
- console - print warning in CLI after enabling protected bootloader;
- console - removed "chain" names from print parameter list and show all print parameters in "/ipv6/firewall/filter" directory;
- console - show system-id in export for CHR;
- container - allow import from .tar.gz file;
- container - fixed user and group ID range;
- container - improved container shell;
- crypto - improve crypto speeds (additional fixes);
- crypto - use hardware accelerator for GCM cipher in TLS connection on Alpine CPUs;
- defconf - changed wireless installation from "indoor" to "any";
- defconf - disable 5GHz secondary channel on RB4011;
- defconf - do not add default password for CAP mode configuration on older Audience devices without a password;
- defconf - fixed new port name recognition;
- detnet - remove dynamic DHCP client creation;
- device-mode - added "allowed-versions" list which are allowed to be installed without "install-any-version" mode enabled;
- device-mode - added "basic" mode;
- device-mode - added routerboard, install-any-version and partitions features;
- device-mode - allow feature and mode update on x86 via power button and reboot/shutdown from AWS;
- device-mode - changed "partition" to allow activate and do not allow repartition (introduced in v7.17beta2);
- device-mode - fixed feature and mode update on ARM64 Hetzner;
- device-mode - fixed feature and mode update via power-reset on MIPSBE devices;
- device-mode - limit "/tool/ping-speed" and "/tool/flood-ping" under "traffic-gen" feature;
- device-mode - limit device-mode update maximum allowed attempt count which can be reset only with reboot or button press;
- device-mode - provide more precise device-mode update action printout;
- device-mode - show all features and active restrictions with "print" command;
- dhcp-relay - added "local-address-as-src-ip" property;
- dhcp-server - improved stability (introduced in v7.17beta4);
- dhcp-server - use interface ID for NAS-Port and added interface name to NAS-Port-ID attribute in RADIUS requests;
- dhcp-server - use single RADIUS accounting session for IPv4 and IPv6 when dual stack is used (additional fixes);
- dhcpv4-client - correctly handle adding/setting emtpy dhcp-options;
- dhcpv4-client - fixed crash when releasing disabled DHCP client;
- dhcpv4-client - respect Renewal-Time (58) and Rebinding-Time (59) options;
- dhcpv4-server - do not remove options set config when DHCP network is changed;
- dhcpv4-server - properly detect DHCP server address when underlying interface has multiple IP addresses configured;
- dhcpv4-server/relay - added additional error messages for DHCP servers and relays;
- dhcpv4/v6-server - added address-list parameter to which address will be added if the lease is bound;
- dhcpv6-client - added prefix-address-list parameter;
- dhcpv6-client - improved system stability when DHCPv6 client is enabled on non-existing interface;
- dhcpv6-client - log message when response with invalid transaction-id received;
- dhcpv6-client/server - added support for DHCPv6 reconfigure messages;
- dhcpv6-server - added IPv6 address delegation support;
- dhcpv6-server - improved system stability when removing actively used DHCPv6 server;
- dhcpv6-server - include all existing prefixes (with lifetime 0) in renew reply and new prefix if RADIUS returns different prefix;
- discovery - added support for LLDP DCBX (additional fixes);
- discovery - use LLDP description field to populate platform, version and board-name;
- disk - add support for SWAP, currently allowed on any block device with "set x swap=yes" when container package is installed (CLI only);
- disk - added "type=file" for file-based block devices, useful for using file as a swap, or when having file-based filesystem images (CLI only);
- disk - added btrfs filesystems list (CLI only);
- disk - added mount-read-only and mount-filesystem options to allow read-only mounts and prevent mounting device at all (CLI only);
- disk - added sshfs client to "/disk" menu (CLI only);
- disk - allow to configure global and per disk mountpoint template - [slot],[model],[serial],[fw-version],[fs-label],[fs-uuid],[fs] variables supported;
- disk - auto mount iso and squashfs images;
- disk - fixed managing and cleaning up mount points;
- disk - fixed raid role auto selection for up to 64 drives;
- disk - improve slot naming and improvements for visualizing complex hardware topology;
- disk - improve test to report zero byte iops;
- disk - improved system stability;
- disk - read/show exfat filesystem label;
- disk - recognize virtual sd interfaces;
- disk - remove 32 character slot name limit;
- disk - save raid superblock and raid bitmap superblock on member devices in 1.2 format/location;
- disk - show detailed mountpoint users when unable to unmount;
- disk - show usage as percentage (CLI only);
- disk - try all NFS versions (4.2,4.1,4.0,3,2) when mounting NFS in that order;
- disk,nvme - show nvme namespaces if configured more than one on a nvme drive;
- dns - added option to create named DNS servers that can be used as forward-to servers (additional fixes);
- dns - do not look up local cache when executing ":resolve" command with specified "server" parameter (introduced in v7.16);
- dns - DoH whitelist support for adlist using static FWD entries;
- dns - refactored DNS service internal processes;
- dns - whitelist support for adlist using static FWD entries;
- ethernet - improved interface stability for RB4011 devices;
- ethernet - improved linking after reboot for hAP ax lite devices ("/system routerboard upgrade" required);
- ethernet - improved stability after reboot for Chateau PRO ax;
- ethernet - improved system stability for CCR2004-1G-2XS-PCIe device;
- ethernet - log warning only about excessive broadcast (do not include multicast) and reduced log count;
- fetch - fixed certificate check when provided hostname is IP address;
- fetch - fixed large file (over 4GB) fetch in HTTP/HTTPS mode;
- file - correctly identify mounted disks;
- file - do not needlessly scan large filesystems, could prevent unmounting;
- file - improved handling of changes to the file system;
- file - support files over 4GB size;
- file - update file size before trying to request content;
- firewall - added none-dynamic and none-static arguments for IPv6 address-list-timout settings;
- firewall - added support for random external port allocation;
- firewall - added warning log for TCP SYN flood;
- firewall - fixed "dst-limit" and "limit" mathers when using zero value for burst argument;
- firewall - improved matching from deeply nested interface-lists (additional fixes);
- firewall - improved matching from deeply nested interface-lists;
- firewall - removed default mangle passthrough=yes configuration from export;
- ftp - added VRF support;
- gps - LtAP mini, change default GPS antenna for new devices;
- graphing - fixed graphing rule removal (additional fixes);
- graphing - fixed queue graph storing on disk;
- health - added cpu-overtemp-check on ARM, ARM64 devices (CLI only);
- health - changed PSU state from "no-ac" to "no-input";
- health - hide settings in CLI if there is nothing to show;
- health - removed board-temperature on RB5009UPr+S+IN device;
- igmp-proxy - refactored IGMP querier (additional fixes);
- ike2 - improved performance by balancing multicore CPU usage for key exchange calculation also for initiator;
- iot - added additional debug for LoRa logging;
- iot - added an option to print out LoRa traffic in CLI (not GUI-only option anymore);
- iot - added new LoRa traffic FCnt packet counter parameter;
- iot - added support for USB Bluetooth dongles (LE 4.0+) which enables Bluetooth functionality;
- iot - bluetooth peripheral device menu now displays correct iBeacon major/minor values;
- iot - fixed duplicate LoRa payloads in the traffic tab;
- iot - fixed incorrect LoRa joineui filter export behavior;
- iot - improvements to LoRa device's stats tab;
- iot - limit mqtt publish message size to 32 KB;
- iot - LoRa LNS improvement;
- iot - LoRa traffic tab RSSI now shows proper values for ARM architecture;
- iot - modbus rework which improves Tx Rx switching behavior;
- iot - mqtt improvement to support large payloads and gracefully discard payloads above size limit;
- iot - removed crc-disabled and crc-error options from the LoRa forwarding;
- iot - removed LoRa pause traffic option/setting;
- iot - removed some LoRa radio related parameters (e.g. RSSI-OFF and Tx-enabled) that were not meant to be changed (additional fixes);
- ipsec - ike2 improved process for policies;
- ipv6 - added comment property to "/ipv6/nd/prefix" menu;
- ipv6 - added IPv6 settings related to stale IPv6 neighbor cleanup;
- ipv6 - added support for manual link-local address configuration;
- isis - do not disable fast-path when isis is enabled on an interface;
- isis - fixed console flags;
- isis - fixed invalid L2 LSP type;
- isis - make it work when MTU is larger than 1500;
- isis - update interface MAC address on change (caused neighbor to stuck in init state);
- kid-control - use time format according to ISO standard;
- l3hw - improved system stability;
- l3hw - rate limit error logging;
- leds - fixed issue where interface LEDs might not properly disable in some cases;
- log - added basic validation for "disk-file-name" property;
- log - added hostname support to remote logging action;
- log - added regex parameter for log filtering in rules;
- log - use time format according to ISO standard;
- lte - added option to check/install modem firmware from early-access/testing channel (CLI only);
- lte - added provider specific firmware update (FOTA) for Cosmote GR networks on Chateau 5G;
- lte - disabled ims service for Chateau 5G on operator "3 AT" network (PLMN ID 23205);
- lte - drop operator selection support for R11e-4G modem as it is unreliable;
- lte - fixed "default-name" property in export when multiple LTE interfaces are used;
- lte - fixed "lte monitor" signal reporting for RG520F-EU modem when connected to 5G SA network;
- lte - fixed "operator" setting for EC200A-EU modem;
- lte - fixed long "PLMN search in progress" for SXT 3-7;
- lte - fixed LTE band setting for SXT LTE 3-7;
- lte - fixed network registration for R11e-4G modem (introduced in v7.17beta2);
- lte - fixed roaming barring (allow-roaming=no) for EC200A-EU modem;
- lte - fixed signal info reporting for FG621-EA modem in UMTS network;
- lte - fixed SMS sender parsing;
- lte - improved modem FW upgrade for Chateau 5G;
- lte - improved R11eL-EC200A-EU modem firmware upgrade procedure;
- lte - improvements to modem "firmware-upgrade" command (additional fixes);
- lte - MBIM increased assignable APN profile count up to 8 then modem firmware allows it;
- lte - modem firmware update (FOTA), added support to install provider specific version (additional fixes);
- lte - removed trailing "F" symbol from uicc;
- lte - set "sms-read=no" and "sms-protocol=auto" as default values;
- lte - set IPv6 address reporting format in modem init for AT modems and MBIM modems with AT channel;
- mac-server - allow MAC-Telnet access through any bridged port when bridge interface is allowed;
- mac-telnet - use ASCII DEL as erase/backspace char instead of BS (fixes mac-telnet backspace for WinBox4);
- macvlan - improved error when trying to create new interface on already busy parent interface;
- macvlan - updated driver;
- modem - KNOT BG77 modem, improved handling of modem unexpected restarts;
- mpls - added fast-path support for VPLS (additional fixes);
- mpls - added MPLS mangle support;
- mpls - added support for "ICMP Fragmentation needed";
- mpls - do no drop LDP peering session on PW deactivation;
- mpls - do not reconnect VPLS on name or comment changes;
- netinstall - removed unused "Get key" button;
- netinstall - save and restore device-mode configuration on format;
- netinstall-cli - added "-o" option to install devices only once per netinstall run;
- netinstall-cli - fixed x86 detection;
- netwatch - fixed probe toggle when adding a comment;
- ospf - fixed memory corruption;
- ospf - improved stability on configuration update;
- ovpn - added VRF support to OVPN server (server menu now supports multiple entries and previous server configuration is automatically imported);
- ovpn - improved system stability;
- ovpn-client - added tls-crypt, tls-crypt-v2 support;
- ovpn-server - added "user-auth-method" property and allow mschap2 for RADIUS authentication;
- pimsm - improved system stability after interface disable;
- poe-out - added low-voltage-too-low status;
- poe-out - upgraded firmware for CRS354-48P-4S+2Q+ device (the update will cause brief power interruption to PoE-out interfaces);
- poe-out - upgraded firmware for PSE (BT) controlled boards (the update will cause brief power interruption to PoE-out interfaces);
- port - display a warning when using invalid log-file with the "remote-access" feature;
- port - more detailed print command output, include in "USED-BY" property channel number(s);
- ppp - add routes in matching VRF;
- ppp - added support for bridge-port-pvid configuration via ppp profile (additional fixes);
- ppp - added support for bridge-port-trusted configuration via ppp profile;
- ppp - do not print local/remote pool related errors in log when configuration does not require pool usage;
- ppp - fixed typos in log message;
- ppp - reuse link-local IPv6 address for static bindings when possible;
- ppp - set APN/PDN type "IPv4/v6" according assigned PPP profile protocol setting;
- pppoe - added support for PPPoE server over 802.1Q VLANs (additional fixes);
- profiler - classify ppp processing;
- profiler - improved process classification;
- profiler - renamed radv process to radvd;
- ptp - added dynamic switch ACL rules in order to trap PTP packets to CPU instead of forwarding;
- ptp - added option to configure L2 transport with forwardable and non-forwardable MAC destination;
- ptp - added PTP support for CRS320-8P-8B-4S+ and CRS326-4C+20G+2Q+ devices;
- ptp - display warning when none of the PTP ports has a link;
- ptp - fixed DSCP values for IPv4 packets;
- ptp - fixed synchronization on QSFP28 interfaces (additional fixes);
- ptp - make PTP process more stable and deterministic when applying configuration;
- ptp - restrict configuring g8275 profile with IPv4 transport;
- qos-hw - allow to disable/enable profiles, disabled or removed profile gets replaced with the default (additional fixes);
- qos-hw - enabling PFC on port also requires setting egress-rate-queueN;
- qos-hw - fixed export when changing default Tx Manager;
- qos-hw - fixed incorrect port byte-use counter;
- qos-hw - improved PFC behavior (additional fixes);
- qos-hw - improved WRED and ECN behavior (additional fixes);
- qos-hw - rename pfcN-pause and pfcN-resume to pfcN-pause-threshold and pfcN-resume-threshold;
- qos-hw - reworked PCP and DSCP mapping (now supports single, multiple and range values, previous configuration with minimal value mapping is converted to a single value);
- qos-hw - switch-cpu port trust settings are forced to "keep";
- queue - improved system stability when too many simple queues are added;
- quickset - added "LTE AP" quickset profile with one wifi interface;
- rip - improved stability when changing metric;
- romon - added dynamic switch rules on devices supporting it when enabling the service;
- romon - added interface-list support;
- rose-storage - allow to set iscsi-iqn only when type=iscsi and allow nvme-tcp-name only when type=nvme-tcp;
- rose-storage - do not allow to format exported disks;
- rose-storage - enable autocomplete for local-path property in "/file/sync" menu;
- rose-storage - enable more threads for faster RAID sync;
- rose-storage - ensure unique nvme-tcp-names for nvme-tcp clients;
- rose-storage - improved error messages;
- rose-storage - improved system stability;
- rose-storage,raid - improved stability of degraded arrays on startup;
- rose-storage,raid - store superblock in 1.2 format, show raid super block info when detected to help with reassembling arrays;
- route - fixed discourse attribute print;
- route - fixed minor typo in failure message;
- route - fixed possible issue with inactive routes after reboot (introduced in v7.16);
- route - improved stability;
- route - increased interface name length limit in log messages;
- route - removed possibility for IPv6 routes to specify interface in the dst-address;
- routerboot - fixed boot MAC for devices with Alpine CPU ("/system routerboard upgrade" required);
- routerboot - fixed boot MAC for MIPSBE CRS3xx and CRS5xx switches ("/system routerboard upgrade" required);
- routerboot - improved stability for IPQ8072 and IPQ6010 when flash-boot is used ("/system routerboard upgrade" required);
- routing-filter - fixed subtract and add for numerical values (+x, -x);
- rsync - fixed when used over ssh and spaces in directory names;
- sfp - fixed 1Gbps supported rate for RB960 and RB962 devices;
- sfp - fixed linking with 1Gbps optical modules with "combo-mode=sfp" configuration for CRS312 device;
- sfp - improved initialization and linking for some SFP modules;
- sfp - improved initialization for certain SFP modules on CRS309 and CRS317 devices ("/system routerboard upgrade" required);
- sfp - improved power control configuration for QSFP optical modules according to the EEPROM field;
- sfp - improved SFP auto-negotiation for L22, L23 devices;
- sfp - improved SFP28, QSFP28 interface stability using DAC cable for CRS520 switch;
- smb - stability improvements for client/server (additional fixes);
- snmp - added wifi fields to MIKROTIK-MIB (additional fixes);
- socks - fixed comment property for access configuration;
- ssh - added option to configure SSH ciphers (replaced allow-none-crypto parameter);
- ssh - do not regenerate host key after update from RouterOS version older than 7.9;
- ssh - fixed password authentication (introduced in v7.17beta2);
- ssh - improved logging;
- ssh - improved speed;
- ssh - prefer GCM ciphers for arm64 and x86 devices when ciphers=auto;
- ssl/tls - improved performance;
- sstp - added pfs=required option to allow only ECDHE during TLS handshake;
- storage - preserve permissions,owners,attributes when syncing under "/file/sync";
- storage,rsync - fixed to work with clients passing "-a" option;
- supout - added BGP advertisements section;
- supout - added device-mode section;
- supout - do not create autosupout.rif for second time after system reboot;
- supout - print non BGP and OSFP routes if route list is too large;
- supout - reduce minimal RAM required for export to be included;
- supout - use separate LTE section;
- switch - added "all" argument for "new-dst-ports" switch rule property for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices;
- switch - added IPv6 flow label matching in switch rules for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices;
- switch - allow bond interfaces in switch rules for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices;
- switch - allow matching network bitmask for IPv4 and IPv6 dst/src-address properties in switch rule;
- switch - disallow switch-cpu in "ports" and "new-dst-ports" rule properties for CRS3xx, CRS5xx, CCR2116, CCR2216 and RB5009 devices;
- switch - fixed L2MTU for 25Gbps ports;
- switch - fixed RSPAN error message when using mirror-target=cpu;
- switch - fixed rule disable in certain cases for 98DX224S, 98DX226S, and 98DX3236 switch chips;
- switch - fixed storm-rate accuracy on 98DX224S, 98DX226S, and 98DX3236 switch chips;
- switch - force "mac-protocol" when matching IPv4 or IPv6 specific properties;
- switch - improved CPU performance for CRS328-24P-4S+ switch;
- switch - improved system stability for RB5009 and CCR2004-16G-2S+ devices;
- switch - make switch rule "ports" property not required and unsettable (allows matching packets on all switch ports);
- switch - updated dynamic switch rules when using HW bridge with IGMP snooping (224.0.0.0/24 and ff02::/16 destination addresses are forwarded and copied to CPU) (additional fixes);
- system - make ICMP error source address selection configurable (icmp-errors-use-inbound-interface-address parameter in ip settings);
- system - make TCP timestamp handling configurable (tcp-timestamps parameter in ip settings);
- system - moved "/system/upgrade" to "/system/package/local-update";
- tftp - improved stability;
- upnp - rename service description file from gateway_description.xml back to gateway.xml;
- user-manager - improved stability;
- vpls - added support for bridge-pvid configuration;
- vrf - fixed packet handling with enabled queues;
- vxlan - fixed issue causing to loose IPv6 VTEP address setting;
- webfig - added search option for settings;
- webfig - allow download from file details;
- webfig - fixed uploading files with Windows style newlines;
- webfig - hide inherited wifi password;
- webfig - improved keyboard navigation (additional fixes);
- webfig - reduce flickering when table is sorted by column with duplicate values (additional fixes);
- webfig - Skin Designer moved to centralized page;
- webfig - status page is deprecated, old status page config will work, but can't be updated or created;
- webfig - support unicode strings;
- wifi - add information to each interface, showing which CAPsMAN manages it or which CAP hosts it when applicable;
- wifi - added a debug log entry when switching channel;
- wifi - added ability to set security.owe-transition-interface to "auto";
- wifi - added access-list stats (CLI only);
- wifi - added configuration.installation property to limit use of indoor-only channels;
- wifi - added debug log messages on station authentication mismatch;
- wifi - added extra info to CAPsMAN about message;
- wifi - added last-activity property in registration table;
- wifi - added multi-passphrase (PPSK) support (CLI only);
- wifi - added option to reset MAC address (CLI only);
- wifi - added station-roaming support (additional fixes);
- wifi - allow IPv6 LL address in caps-man-addresses;
- wifi - disabled 802.11h on 2.4GHz station;
- wifi - fixed "disabled" property in certain cases;
- wifi - fixed failure to resume operation after DFS non-occupancy period has elapsed;
- wifi - fixed failure with "auto" peer update on the OWE interface;
- wifi - fixed occasional failure to bring up management frame protection and channel switch capabilities;
- wifi - fixed the "no available channels" message still being displayed after a setting change has made some channels available;
- wifi - improved FT roaming with WPA3 for some Apple devices;
- wifi - indicate radios' ability to perform a channel switch in their "hw-caps" attribute;
- wifi - indicate which channels are subject to DFS, or are indoor-only in output of "monitor" command;
- wifi - re-word the "SA Query timeout" log message to "not responding";
- wifi - show authentication type and wireless standard used by each client in registration table;
- wifi - show regulatory limits on maximum bandwidth in output of radio/reg-info command;
- wifi - when operating in station mode, log more information when AP switches to an unsupported channel;
- wifi-qcom - added Superchannel country profile;
- wifi-qcom - updated regulatory info for Ukraine, Australia and United States;
- wifi-qcom-ac - allow use of channel 144 under "Japan" regulatory domain;
- wifi-qcom-ac - fix possible conflict between radio and USB initialization on hAP ac2;
- wifi-qcom-ac - improved CPU load balancing and system stability;
- winbox - added "Scan" and "Test Disks" features under "System/Disks" menu;
- winbox - added Enable/Disable buttons under "Tools/Graphing" menus;
- winbox - added MAC address support for "Group" property under "Bridge/MDB" menu;
- winbox - added missing properties under "IP/Neighbors" menu;
- winbox - allow to edit Ethernet MAC address;
- winbox - fixed duplicate timezone names;
- winbox - fixed typo in "System/Reset Configuration" menu;
- winbox - improved stability;
- winbox - minimal required version is v3.41;
- winbox - refresh values under "Bridge/VLANs/MVRP Attributes" menu;
- winbox - renamed and moved "System/Auto Upgrade" to "System/Packages" menu;
- winbox - renamed wrong invalid interface flag to inactive;
- winbox - show MLAG settings for CRS326-4C+20G+2Q+ device;
- wireguard - do not initiate handshake when peer is configured as responder;
- wireless - added option to reset MAC address (CLI only);
- wireless - added vlan-id to registration-table;
- wireless - allow to set Canada2 country profile when locked with US lock package for CubeG device;
- wireless - enable all chains by default for RB911 and RB922 series devices;
- wireless - fixed antenna gain for SXT5ac device;
- wireless - preserve configured country while using setup-repeater, added "country" argument (CLI only);
- x86 - Realtek r8169 updated driver;
- zerotier - added debug logging;
- zerotier - do not show default settings in export;
- zerotier - upgraded to version 1.14.0;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.