MikroTik RouterOS ARM64 Firmware 7.12 Beta 3

Changes in this release:

- ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
- sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
- bgp - fixed "atomic-aggregate" always set in output;
- bgp - fixed local and remote port settings for BGP connections;
- bgp - increase "hold-time" limit to 65000;
- bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
- bridge - fixed untagged VLAN entry disable;
- bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
- bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
- bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
- calea - improved system stability when trying to add rules without the CALEA package;
- console - added "transform" property for ":convert" command;
- console - fixed scheduler "on-event" script highlighting when editing;
- console - improved multi-argument property parsing into array;
- console - improved stability when editing long scripts;
- console - show full date and time in scheduler "next-run" property;
- dhcp - fixed DHCP server and relay related response delays;
- ethernet - added "supported" and "sfp-supported" values for "monitor" command;
- interface - added "macvlan" interface support;
- ipsec - fixed IPSec policy when using modp3072;
- ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
- ipv6 - send RA and RA deprecate messages out three times instead of just once;
- log - improved logging for user actions;
- lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
- lte - added SINR reporting for FG621-EA modem;
- lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
- lte - fixed startup race condition when SIM card is in non-default slot for LtAP mini;
- netinstall-cli - prioritise interface option over address option;
- ospf - fixed adding ECMP routes;
- ospf - fixed OSPFv3 not working with NSSA areas;
- ospf - fixed parsing of opaque LSAs used by TE;
- ospf - fixed translated NSSA routes not showing in backbone;
- port - add support for Huawei MS237h-517;
- port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
- quickset - fixed "LAN" interface list members if configuration does not contain bridge;
- rip - added BFD support;
- rip - fixed session not working in VRF;
- route - fixed gateway after link restart;
- route - removed deprecated "received-from" property;
- sfp - improved interface stability for SFP and QSFP types of interfaces;
- switch - improved switch chip stability for CCR2004-16g-2s+ devices;
- tile - improved system stability when using queues;
- traffic-generator - added "priority" property for "inject" command;
- wifiwave2 - added comment property for registration-table;
- wifiwave2 - enable changing interface MTU and L2MTU;
- wifiwave2 - fixed malformed Interworking packet elements;
- winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
- wireguard - added "wg-add-client" configuration wizard (CLI only);
- wireguard - added "wg-export" and "wg-import" functionality (CLI only);
- wireless - fixed malformed Interworking packet elements;
- x86 - added support for Mellanox ConnectX-6 Dx NIC;

Other changes since v7.11:

- bgp - fixed typos and missing spaces in log messages;
- bridge - improved system stability;
- certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
- certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
- certificate - improved certificate validation logging error messages;
- certificate - log CRL HTTP errors under the "error" logging topic;
- chr - increased OVA default RAM amount from 160MB to 256MB;
- console - added ":jobname" command;
- console - added "as-string" and "as-string-value" properties for "get" command;
- console - added "terminal/ask" command;
- console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
- console - improved stability and responsiveness;
- console - improved stability when using "special-login";
- firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
- ike1 - log an error when non-RSA keys are being used;
- iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
- iot - fixed behavior where GPIO output state would change on boot;
- lte - fixed Sierra modem initialization;
- lte - use more compact logging messages;
- modbus - added additional security settings for Modbus TCP;
- mpls - added option to match and set MPLS EXP with bridge and mangle rules;
- mpls - fixed "propagate-ttl=no" setting;
- netinstall - added option to discard branding package;
- ospf - fixed BFD on virtual-link with configured VRF;
- ovpn - added "tls-auth" option support for imported .ovpn profiles;
- sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
- ssh - added support for user ed25519 public keys;
- ssh - allow to specify key owner on import;
- ssh - fixed SSH tunnel performance (introduced in v7.10);
- supout - added LLDP power to supout.rif;
- supout - fixed BFD section;
- system - improved system stability when MD5 checksums are used;
- wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
- winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus; 

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.