MikroTik RouterOS MIPSBE Firmware 7.16 Beta 2

What's new in 7.16beta2:

- arm64 - increased reserved storage space for bootloader;
- bgp - fixed BGP sessions missing vpnv6 afi;
- bgp - fixed cluster-list and originator-id;
- bridge - fixed typo in filter and NAT error message;
- chr - added support for licensing over IPv6 network;
- dhcpv4-server - added "class-id" parameter for DHCP server leases;
- dhcpv4-server - fixed setting and getting "next-server" property;
- dhcpv4-server - increased lease offer timeout to 120 seconds;
- disk - added simple test command to test device and filesystem speeds (CLI only) (additional fixes);
- disk - improved system stability;
- dns - added support for DoH with adlist;
- ethernet - fixed port speed downshift functionality for CRS354 devices;
- firewall - added message when interface belonging to VRF is added in filter rules (additional fixes);
- health - improved voltage measurements for RB912UAG-6HPnD device;
- iot - added an option to delete default LoRa servers and a button to recover them if needed;
- iot - added an option to log LoRa filtered packets;
- ip/ipv6 - added multipath hash policy settings;
- ip/ipv6 - warn user that reboot is required in order to properly apply changes under IP/Settings and IPv6/Settings menus;
- ipsec - changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4;
- ipv6 - fixed dynamic duplicate address showing when static address is already configured;
- ipv6 - improved LL address generation process;
- l2tp - improved system stability;
- lte - fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
- lte - fixed MBIM modem registration on the network (introduced in v7.16beta1);
- modem - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
- netinstall-cli - added support for multiple device install (additional fixes);
- poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces);
- ppp - fixed dynamic queue default name (introduced in v7.15);
- qos-hw - fixed incorrect per-port packet and byte cap (introduced in v7.16beta1);
- queue - improved system stability;
- route - fixed memory leak (introduced in v7.15);
- route - fixed some missing route parameters when printing (introduced in v7.15);
- routerboot - improved boot process ("/system routerboard upgrade" required);
- sfp - fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ device;
- switch - fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15);
- system - added support for upgrade over IPv6 network;
- system - improved watchdog and kernel panic reporting (additional fixes);
- system - reduced RAM usage for ARM64 devices;
- wifi-qcom - add spectral-scan and spectral-history tools (CLI only) (additional fixes);
- winbox - added "Switch/QoS" menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices;
- winbox - added "Trace" column under "System/History" menu;
- winbox - do not show "Last Logged In" and "Expire Password" when creating new system user;
- winbox - fixed "Authority" property under "System/Certificates/Requests" menu;
- winbox - fixed error when changing wifi interface settings in some rare conditions (introduced in v7.16beta1);
- winbox - moved DHCPv6 Server "Allow Dual Stack Queue" property from General to Queues tab;
- winbox - moved Switch menu tabs to individual menus;
- wireless - allow to unset signal-range and ssid-regext properties for capsman access-list;

Other changes since v7.15:

- bgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15);
- bgp - fixed vpnv6 safi;
- bgp - small logging improvements;
- bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge;
- bridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade);
- bridge - added max-learned-entries property for bridge;
- bridge - added message about who created a dynamic VLAN entry;
- bridge - added MVRP support for VLANs assigned to bridge;
- bridge - fixed BPDU address when using "ether-type=0x88a8" configuration;
- bridge - improved system stability when removing MLAG configuration;
- bridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached);
- certificate - added no-key-export parameter for import;
- certificate - improved DNS challenge error reporting for Let's Encrypt;
- certificate - show validity beyond year 2038;
- console - added "verbose=progress" mode for import status updates, and verbose output only on failures;
- console - added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only);
- console - added limits for dst-start and dst-end clock properties;
- console - added lock screen via: lock command;
- console - added uppercase and lowercase transform modes to: convert command;
- console - disallow ping command with empty address;
- console - display hint when requesting specific argument syntax;
- console - do not show default boot-os setting in export;
- console - fixed negative values for gmt-offset clock property;
- console - fixed output of ping command in certain cases;
- console - improve large import file handling, error detection and stability;
- console - improved: serialize and: deserialize commands and added support for DSV (delimiter separated values) format;
- console - improved stability when removing script;
- console - removed follow-strict parameter;
- console - show rest-api name for active user connections;
- container - clear VETH address on container exit and mark interface as running only when VETH is in use;
- detnet - properly detect "Internet" status when multiple detnet instances preset in network;
- dhcp - improved insert-queue-before, parent-queue and allow-dual-stack-queue behavior;
- dhcpv4-client - execute script on DNS server or gateway address change;
- dhcpv4-server - show active-server and host-name in print active command;
- dhcpv6-client - do not add default gateway twice when both prefix and address is acquired;
- dhcpv6-client - fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0;
- dhcpv6-client - pause client and remove dynamically installed objects while it becomes invalid;
- dhcpv6-client - release client on failed renew attempt;
- dhcpv6-client - update gateway address for default route on renew;
- dhcpv6-server - improved system stability;
- dude - fixed map element RouterOS package upgrade functionality;
- fetch - handle HTTP 401 status correctly;
- fetch - improved logging;
- firewall - fixed IPv6 "nth" matcher showing up twice in help;
- firewall - fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo command;
- health - fixed board-temperature for KNOT device (introduced in v7.15);
- health - fixed bogus CPU temperature spikes for CCR2216 device;
- health - fixed missing health for CRS112-8G-4S device (introduced in v7.15);
- health - upgraded fan controller firmware to latest version;
- ike1 - removed unsupported NAT-D drafts with invalid payload numbers;
- install - fixed ARM64 cdrom install (introduced in v7.15);
- iot - added LoRa NetID and JoinEUI filtering for LNS and CUPS connections;
- iot - added LoRa option to filter out proprietary packets;
- iot - fixed LoRa inability to use variables for GPS-spoofing setting;
- ip - added max-sessions property for services;
- ipv6 - fixed pool allocated addresses missing after reboot;
- ipv6 - respect APN settings for "add-default-route" and "use-peer-dns" also when "accept-router-advertisements=yes";
- isis - fixed filter-chain and filter-select settings;
- isis - install IPv6 link-local gateways correctly;
- l3hw - added per-VLAN packet and byte counters to compatible switches;
- l3hw - disable L3HW on bonding modes that do not support it;
- lte - added "sms-protocol" setting in "/interface lte" menu (CLI only);
- lte - fixed "at-chat" for DELL T99W175 (PID: 0x05c6 VID: 0x90d5);
- lte - fixed cases where modem could be handled by multiple dialer instances;
- lte - fixed support for Fibocom modem fm150-na;
- lte - improvements to "/interface/lte/show-capabilities" command;
- media - improved file indexing for DLNA;
- modem - added authentication functionality to EC200A;
- modem - fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacity;
- modem - improved support for KNOT BG77 modem firmware update;
- mqtt - broker password is no longer exported unless "show-sensitive" flag is used;
- netinstall-cli - added check for device and package architectures match;
- netinstall-cli - allow mixed package architectures;
- netwatch - added DNS probe;
- netwatch - added ttl and accept-icmp-time-exceeded properties for ICMP probe;
- ospf - improved system stability during LSA monitoring;
- ovpn - improved system stability;
- pimsm - improved system stability;
- poe-out - fixed low-voltage detection while PD is connected for KNOT device;
- poe-out - fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15);
- ppp - added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-client;
- ptp - added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devices;
- qos-hw - added H and I flags to queues (CLI only);
- qos-hw - added new monitoring properties for ports and global QoS stats (CLI only);
- qos-hw - added queue-buffers property to tx-manager (CLI only);
- qos-hw - allow port print stats, usage and pfc while QoS is disabled (CLI only);
- qos-hw - allow to set queue-buffers in bytes, percent or auto (CLI only);
- qos-hw - enabling ECN forces WRED (unless share is disabled);
- qos-hw - fixed global buffer limits for 98DX8212 and 98DX8332 switches;
- qos-hw - limit WRED to queues with enabled shared buffers;
- quickset - removed Basic AP mode;
- route - added ability to redistribute isis routes;
- route - place static route in the correct VRF when vrf-interface parameter is used;
- route - rename route type from is-is to isis;
- rpki - fixed preference sorting;
- sfp - fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe device;
- sfp - fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe device;
- sms - added polling setting so that RouterOS itself checks SMS instead of relying on URC messages;
- snmp - added support for KNOT BG77 modem cellular signal info;
- snmp - fixed LAST-UPDATED format in MIKROTIK-MIB;
- supout - added detnet section;
- supout - added monitor command for all wifi interfaces;
- supout - added netwatch section;
- supout - added user SSH keys section;
- supout - increased console output width;
- supout - limit address-list and connection tracking entries to 999 in supout.rif;
- switch - fixed Ethernet interface counter 32bit overflow for CRS354 devices;
- switch - improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
- system - added log message if device failed to reboot gracefully;
- system - added more details to user initiated reboot (reset, upgrade, downgrade);
- system - do not cancel package upgrade if another architecture packages found on the router;
- system - do not download packages scheduled for uninstall;
- system - fixed empty logs after reboot in certain cases;
- system - improved system stability for RBSXTsq5nD and RBLDF-5nD;
- system - improved system stability;
- system - set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required);
- system - set flash-boot mode as "boot-device" after system reset initiated from software;
- user - added inactivity timeout for non-GUI sessions (CLI only);
- user-manager - updated logo;
- vxlan - added comment support to VTEPs;
- vxlan - prevent creating multiple VTEPs with same IP/port combination;
- webfig - fixed issue with incorrectly applying optional fields;
- wifi - do not unset radio-mac and master-interface properties on reset;
- wifi - enable creating virtual wifi interfaces using "copy-from" setting;
- wifi - fixed signal strength reporting during association (introduced in v7.15);
- wifi - fixed typo in log message;
- wifi - improved interface stability when receiving invalid FT authentication frames;
- wifi - improved WPA3 PMKSA handling when access-lists with custom passphrases are used;
- wifi - make sniffer tool return an error when attempting to sniff with a radio which does not support it;
- wifi - use name-format also for local interfaces when provisioning;
- winbox - added "Import Router ID" parameter under "Routing/BGP/VPN" menu;
- winbox - fixed duplicated "MVRP Attributes" table;
- winbox - fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15);
- winbox - fixed signal bar "excellent" tooltip;
- winbox - removed deprecated x86/CHR specific settings under "System/Resources" menu;
- winbox - removed spare argument for "PFS Group" property under "IP/IPsec/Proposals" menu;
- winbox - use CAP serial number with "Set Identity" button under "WiFi/Remote CAP" menu;
- wireless - fixed dynamic VLAN assignments for vlan-filtering bridge in certain cases;
- wireless - limit antenna-gain property to 100;
- www - log out inactive REST API users;
- x86 - added RTL8156 driver support;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.