MikroTik RouterOS ARM Firmware 7.4

What's new in 7.4:

- Important note: Container package is not available in v7.4. Development and testing continues in "testing" channel.
- api - fixed comma encoding within URL when using the ".proplist" argument;
- bridge - properly process IPsec decapsulated packets through the firewall when the "use-ip-firewall" option is enabled;
- capsman - require a unique name for configuration and configuration pre-sets;
- certificate - fixed new CRL updating;
- chr - fixed booting with added additional SCSI disk;
- cloud - print critical log message when system clock gets synchronized;
- console - added ":retry" command;
- console - fixed situation when print output was not consistent;
- defconf - fixed default configuration loading on devices with WifiWave2 package;
- dhcp-relay - fixed DHCPv6 relay forward and reply creation (introduced in v7.1.3);
- dhcp-server - change "vendor-class-id" matcher to generic option matcher;
- dhcpv4-server - disallowed overriding message type option;
- dhcpv4-server - log message when user option updates existing option;
- dhcpv4-server - placed option 53 as the first one in the packet;
- dns - convert the domain name to lowercase before matching regex;
- dot1x - fixed "undo" command for server instances;
- e-mail - added VRF support;
- filesystem - fixed repartition on RB5009 series devices;
- firewall - added "srcnat" and "dstnat" flags to IPv6/Firewall/Connection table;
- firewall - added support for IPv6/Firewall/NAT action=src-nat rules;
- firewall - fixed IPv6 NAT functionality when processing GRE traffic on TILE devices;
- firewall - fixed IPv6/Firewall/RAW functionality;
- firewall - include "connection-mark", "connection-state", and "packet-mark" when packet logging is enabled;
- firewall - properly handle interface matcher when VRF interface is specified;
- health - fixed requesting data from sensor when issuing "get" command;
- health - fixed voltage reporting on some RBmAP-2nD devices;
- hotspot - fixed ARP resolution for clients when address pool is specified on the server;
- hotspot - fixed Walled Garden entries with action=deny;
- ipv6 - fixed system stability when adding/removing IPv6 address;
- l2tp - improved stability when establishing l2tp-ether connection (introduced in v7.3);
- ldp - correctly handle AFI selection for usage on dual-stack peers;
- leds - fixed GPS LED configuration on LtAP LTE kit;
- leds - fixed LTE signal strength LED configuration on LHGG LTE kit;
- leds - fixed LTE signal strength LED configuration on LtAP LTE kit;
- lte - added AT chat support for Dell dw5821e modem;
- lte - fixed LTE interface running state after modem reconnection;
- lte - fixed Telit AT interface numbering;
- lte - improved LTE interface detection for LtAP-2HnD devices;
- lte - keep MBIM working even if AT channel fails to respond in the initialization stage;
- lte - request connect with the same IP type as in LTE attach status for MBIM;
- lte - show current value for "antenna" parameter when auto antenna selection fails;
- lte - validate LTE attached IP type in MBIM mode;
- mmips - improved USB device detection after system bootup;
- mpls - fixed VPLS functionality when PW peer is an immediate neighbor;
- mpls - improved stability with enabled loop-detect;
- mqtt - fixed log flooding with disconnect messages;
- mqtt - fixed socket error handling;
- netwatch - added support for more advanced probing;
- ntp - added VRF support for client and server;
- ntp - fixed manycast server support;
- ntp - improved "debug" log level logging;
- ovpn - added "AUTH_FAILED" control message sending;
- ovpn - fixed "called-station-id" RADIUS attribute value for OVPN server;
- ovpn - use selected cipher by default when the server does not provide "cipher" option;
- pimsm - improved system stability when changing configuration;
- poe - hide "poe-voltage" parameter on devices that do not support it;
- ppp - do not fail connection when trying to add existing IP address to address list;
- ppp - log warning message when remote IP address can not be added;
- ppp - properly try to use different authentication algorithms when Conf-Rej is received during the LCP phase;
- quickset - specify the "in-interface-list=WAN" attribute on firewall rules created through "Port Mapping";
- radius - added VRF support for RADIUS client;
- route - added option to join static IGMP and MLD groups (available in "/routing/gmp" menu);
- route - expose all valid routes to route select filter from BGP;
- route - expose all valid routes to route select filter from OSPF and RIP;
- route - fixed false route type detection as blackhole;
- route - fixed log messages when changing routing configuration;
- route - made export run faster on tables with a large number of dynamic routes;
- route - provide more detailed information about prefixes when using "discourse" tool;
- route-filter - fixed route select filter rules;
- routing - moved "/interface bgp vpls" to "/routing bgp vpls" menu;
- routing-filter - added origin matcher to match for example routes of a specific OSPF instance;
- routing-filter - fixed regexp community matcher;
- routing-filter - made "do-jump" work in select rules;
- rpki - fix potential memory leak;
- ssh - disable ssh-rsa when strong-crypto=yes and use rsa-sha2-sha256;
- ssh - fixed host key generation (introduced in v7.3);
- ssh - implemented "server-sig-algs" extension in order to improve rsa-sha2-sha256 support;
- switch - disabled second CPU core for CRS328-24P-4S+ device in order to improve SFP+ link stability;
- switch - fixed multicast flooding when HW offloaded bridge port gets disabled;
- system - added "shutdown" parameter for reset-configuration (CLI only);
- system - fixed configuration reset with "run-after-reset" with file stored on ramdisk;
- upgrade - ignore same version packages during upgrade procedure;
- upgrade - improved RouterOS upgrade stability with attached USB modem on MIPSBE, SMIPS and MMIPS devices;
- vpls - improved system stability with enabled connection tracking;
- vxlan - allow to specify MAC address manually;
- w60g - fixed interface "reset-configuration" on Cube 60 devices;
- w60g - improved interface initialization after being inactive for a while;
- w60g - improved system stability when using mismatched L2MTU between station and AP;
- webfig - updated WebFig HTML files with the new MikroTik logo and removed Telnet option from index page;
- webfig - updated link to the WinBox executable;
- webfig - updated link to the documentation;
- wifiwave2 - added initial support for roaming (802.11r) between local AP interfaces;
- wifiwave2 - fixed "frequency-scan" functionality (introduced in v7.3);
- wifiwave2 - improved WPA3 support stability;
- winbox - add a log and log-prefix options to IPv6 firewall NAT and mangle rules;
- winbox - added "name" parameter under "Routing/BGP/Session" menu;
- winbox - added "to-address" and "to-ports" parameters under "IPv6/Firewall/NAT" menu;
- winbox - added support for "veth" interface types;
- winbox - fixed "inactive" flag naming under "MPLS/Local Mapping" menu;
- winbox - fixed IP/Route and IPv6/Route OSPF type value;
- winbox - fixed filename dropdown value filtering;
- winbox - fixed minor typo under "Interface" stats;
- winbox - fixed units for "reachable-time" parameter under "IPv6/ND" menu;
- winbox - removed "TLS Host" parameter from "IP/Firewall/NAT" menu;
- winbox - removed duplicate signal strength column under "Wireless/Registration Table" menu;
- winbox - removed unused "Apply Changes" button from BGP sessions menu;
- wireguard - fixed system stability when adding/removing WireGuard interface;
- wireless - fixed possible traffic flooding to WDS clients when using Nv2 and multicast helper;
- x86 - fixed Broadcom NIC support;
- x86 - fixed keep old configuration functionality during x86 setup installation;
- x86 - improved log warning message on failed downgrade attempt;
- x86 - removed "hdd-model" information from installation screen;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.