MikroTik RouterOS MIPSBE Firmware 7.13 Beta 3

Notice - Starting from RouterOS version 7.13, significant changes have been made to the RouterOS wireless packages. This is done due to a new product developemnt which will require more disk space for hardware drivers so we had to split it in order to maintain old products alongside the new ones. More wireless packages are yet to come.

1. When upgrading by using "check-for-updates", all versions earlier than 7.12 will display 7.12 as the latest available version. Upgrade from v7.12 to v7.13 or later versions must be done through 7.12 in order to convert wireless packages automatically. Fresh installation with Netinstall or manual package installation works in the same manner as always.

2. Drivers for older wireless and 60GHz interfaces, as well as the wireless management system CAPsMAN, are now part of a separate "wireless" package instead of being a part of the bundle package. This package can be uninstalled if not needed.

3. The existing "wifiwave2" package has been divided into distinct packages: "wifi-qcom" and "wifi-qcom-ac", and the necessary utilities for WiFi management are now included in the RouterOS bundle. RouterOS and "wifi-qcom-ac" packages alongside each other now fit into 16MB flash memory.

What's new in 7.13beta3:

- bridge - added automatic "path-cost" values depending on interface rate;
- bridge - fixed HW offload enable with multiple switches (introduced in v7.13beta1);
- bridge - improved HW offload enable;
- certificate - fixed CRL check (introduced in v7.13beta1);
- certificate - fixed host certificate verification if host is IP address (introduced in v7.13beta1);
- certificate - fixed manual URL addition for CRL (introduced in v7.13beta2);
- certificate - improved CRL signature verification and download error messages;
- certificate - use error topic for CRL update failures;
- console - added "read" command under "file" menu;
- console - added unset option for "ssid-regex" and "allow-signal-out-of-range" properties under "interface/wifi/access-list" menu;
- console - fixed misaligned columns (introduced in v7.13beta1);
- console - improved stability when removing script;
- defconf - fixed bogus wifi password on certain Audience devices;
- defconf - use "WISP Bridge" default configuration mode for RBGrooveGA-52HPacn device;
- fetch - added "homepage" parameter, allows to select HTTP basic or digest authentication;
- fetch - added raw logging;
- ospf - fixed LSA Type3 advertisement for OSPFv2;
- qos-hw - added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only);
- qsfp - fixed supported rates for breakout cables (introduced in v7.12);
- sfp - added "1G-baseT" link mode for modules that supports "2.5G-baseT" mode;
- sfp - allow 2.5G rates only in forced link mode;
- sfp - fixed SFP and combo interface handling for CRS328-4C-20S-4S+ device (introduced in 7.13beta1);
- sfp - ignore "rx-loss" in forced link mode;
- sfp - ignore irrelevant extended compliance code for SFP modules;
- sfp - show 10M and 100M supported rates for RJ45 copper modules;
- ssh - added cipher and hash function acceleration for ARM64 and x86 architectures;
- supout - include missing wireless information (introduced in v7.13beta1);
- wifi - enable protected interworking ANQP responses;
- wifi-qcom - added fast-path for received packets;
- winbox - fixed memory allocation (introduced in v7.13beta2);

Other changes since v7.12:

- package - convert "wireless" and "wifi" packages automatically, if upgrading from v7.12;
- wifi - split existing "wifiwave2" package into separate packages "wifi-qcom", "wifi-qcom-ac", and include required utilities for WiFi management into bundle;
- wireless - separate "wireless" package from bundle and build as a standalone package;
- bridge - added bridge interface property "port-cost-mode" with "short" and "long" arguments;
- bridge - fixed bogus VLAN entries from wifi when vlan-filtering is not enabled;
- bridge - fixed missing "S" flag after configuration changes (introduced in v7.13beta1);
- bridge - improved host flush when removing VLAN on HW offloaded bridge;
- bth - added "VPN Prefer Relay Code" option;
- certificate - add support for multiple DNS names for Let's Encrypt;
- certificate - added HTTP redirect support for CRL download;
- certificate - added support for certificates with key size 16384;
- certificate - fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name";
- certificate - improved initial certificate creation using SCEP;
- cloud - improved re-connect speed after network related connection errors;
- console - added ":grep" command;
- console - added ":onerror" command;
- console - added ":serialize" and ":deserialize" commands for converting values to/from JSON;
- console - added "interface" name when printing "interface/pppoe-server" entries;
- console - added "where" functionality for "export" command;
- console - added flags to "print" command with "value-list";
- console - added interface helper for "gateway" property under "ip/route" menu;
- console - clear console history when resetting configuration;
- console - disallow setting existing "name" under "system/script" and "system/scheduler" menus;
- console - fixed "export" boolean arguments when saving output to file using API;
- console - fixed "interface/ethernet/switch/port-isolation" export;
- console - fixed "on-event" argument highlighting under "system/scheduler" menu;
- console - fixed graphic distortions in WinBox;
- console - fixed issue where API incorrectly asks for missing arguments;
- console - fixed missing escaped characters when using print in certain menus (introduced in v7.13beta1);
- console - fixed printing to file using API;
- console - ignore negative values for ":delay" command;
- console - improved flag printing in certain menus;
- console - improved stability when running "tool/ping" from API;
- console - removed "route-cache" setting from "ip/settings" menu;
- console - replace reserved characters in file and script names with underscores;
- console - resolve "wifiwave2" directory to "wifi";
- console - show "l2vpn-link" address family under "routing/route" menu;
- console - use more compact login screen for empty branding;
- defconf - expire password when reverting configuration;
- defconf - hide default configuration for users without "sensitive" policy;
- defconf - updated configuration with new "wifi" directory;
- defconf - use "fan-min-speed-percent=25" for CRS354-48P-4S+2Q+ device;
- defconf - use device factory preset credentials when using CAPs mode;
- defconf - use one SSID and enable FT when using "wifi" packages;
- disk - fixed hang on reboot when network file systems mounted;
- ethernet - improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic;
- fetch - added "homepage" setting;
- fetch - allow to receive HTTP response headers;
- fetch - require "ftp" user policy;
- firewall - added "nat-pmp" support;
- firewall - added new IPv6 filter arguments "icmp-err-src-routing-header" and "icmp-headers-too-long" for "reject-with" setting;
- firewall - do not mark all IPv6 GRE packets as invalid;
- firewall - fixed altered address-list when upgrading from RouterOS v6;
- firewall - fixed connections being tracked when tracking is disabled;
- firewall - fixed IPv6 address-list timeout;
- firewall - removed "prohibited" and "unreachable" IPv4 address-type arguments;
- health - dynamically add and remove invalid sensors (e.g. sfp-temperature);
- hotspot - fixed incorrect host moving to VLAN 0 when receiving packets through bridge;
- ike2 - fixed ike2 double reply;
- ipv6 - do not send out IPv6 RA deprecate message for re-used prefix;
- isis - added IS-IS protocol support (CLI only);
- l3hw - fixed routing for IPsec encapsulated packets;
- leds - fixed LED indication in multi-APN setup for Chateau;
- leds - improved LED indication during modem registration state for Chateau;
- log - added "fetch" topic;
- lora - added CUPs protocol support;
- lora - fixed issue with lost LoRa configuration when rebooting the device;
- lte - added RNDIS support for neoway N75-EA modem;
- lte - added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA;
- lte - disabled IMS service for Chateau 5G on A1 HR network;
- lte - fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets;
- lte - improved SIM slot status change notification handling for MBIM modems;
- lte - replaced "passthrough-subnet-selection" with "passthrough-subnet-size" setting (CLI only);
- lte - show each CA band in a new line;
- mipsbe - improved system stability when removing USB devices;
- mmips - properly mount and unmount USB devices;
- modem - added option to read SMS using MBIM interface;
- mpls - added "te-tunnel" property for VPLS monitor (CLI only);
- mpls - fixed IPv6 RSVP-TE;
- mpls - improved logging;
- netinstall-cli - added more details to help messages;
- ovpn - improved memory allocation during key-renegotiation;
- ovpn - removed "ping-timer-rem" option from client config file;
- package - added warning log about missing "wireless" or "wifi" package;
- pimsm - improved elected BSR change;
- poe-out - improved firmware upgrade stability for AF/AT controlled boards;
- ppc - fixed RouterOS bootup (introduced in v7.12);
- ppp - added remote-ipv6-prefix to IPv6 firewall address-list if "address-list" property is provided;
- ppp - allow at-chat and info commands in "waiting for packets" state for modems with shared data/info channel;
- ppp - improved IPv6 link-local address uniqueness;
- pppoe-server - fixed connection count limit per license level;
- profiler - improved "disk" and "supout.rif" classifiers;
- qsfp - added support for QSFP-to-SFP adapters;
- quickset - show DDNS name as VPN address for devices with new style serial number;
- route-filter - improved performance;
- sfp - improved link establishment with certain modules for hEX S device;
- sfp - improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips;
- ssh - fix error that caused large chunks of text not being pasted in their entirety into console;
- supout - added multiple WiFi sections;
- supout - added VXLAN FDB section;
- switch - fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches;
- system - added "rtrace" debugging tool (CLI only);
- traffic-generator - improved system stability when modifying interfaces;
- usb - added support for RTL8152 USB ethernet on ARM, ARM64 and x86;
- vpls - improved performance when decapsulating data;
- vrf - fixed ICMP reply lookup;
- webfig - allow to display comments in multiline or compact modes;
- webfig - make table headers always visible;
- webfig - use local storage for user preferences;
- wifi - added "flat-snoop" tool for surveying WiFi APs and stations (CLI only);
- wifi - added "remove" command in "capsman/remote-cap" menu;
- wifi - after radar detections, avoid selection of channels not permitted by the user;
- wifi - changed CAPsMAN generated certificate common name;
- wifi - fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined;
- wifi - fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces;
- wifi - fixed overridden datapath settings on CAP when unsetting from CAPsMAN;
- wifi - improved system stability when using sniffer (introduced in v7.13beta1);
- wifi - make slave APs use datapath bridge settings inherited from master by defau<
- wifi - removed "openflow-switch" setting;
- winbox - added "Hw. Offload" property under "IP/Firewall/Filter" menu;
- winbox - added "none" argument for "Preshared Key" under "WireGuard/Peers" menu;
- winbox - added "Ping" button under "IP/DHCP Server/Leases" menu;
- winbox - added "Tx bps" and "Rx bps" monitor values under "WiFi/Registration" menu;
- winbox - added icon to entries under "WiFi/Access List" menu;
- winbox - added missing "qos-classifier" argument for "Hw. Caps" under "WiFi/Radios" menu;
- winbox - added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu;
- winbox - allow opening entries under "WiFi/Registration" menu;
- winbox - fixed default "Name Format" property under "WiFi/Provisioning" menu;
- winbox - fixed minor typo under "Routing/BFD" menu;
- winbox - improved connection speed;
- winbox - updated "wireless" and "wifi" menus;
- wireless - fixed "wlan1" default name for RBSXTsqG-5acD and RBLDFG-5acD;
- wireless - fixed snooper information gathering from re-assocation requests;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.