MikroTik RouterOS PPC Firmware 7.12 Beta 7

Changes in this release:

- ethernet - changed "advertise" and "speed" arguments, and removed "half-duplex" setting under "/interface ethernet" menu;
- sfp - convert configuration to support new link modes for SFP and QSFP type of interfaces;
- api - fixed fetching objects with warning option from REST API;
- bgp - implemented IGP metric sending in BGP messages;
- bluetooth - use "g" units when decoding MikroTik beacon acceleration on peripheral devices menu;
- certificate - allow to remove issued certificates when CRL is not used;
- certificate - fixed certificate auto renewal via SCEP;
- chr - iavf updated driver to 4.9.1 version;
- console - improved randomness for ":rndstr" and ":rndnum" commands;
- console - improved stability when using "special-login";
- console - improved system stability through RoMON session;
- console - improved system stability when using autocomplete;
- dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.12beta3);
- ike2 - improved rekey collision handling;
- ipsec - fixed Diffie-Hellman public value encoding size;
- ipsec - fixed minor typo in logs;
- ipsec - reduce disk writes when started without active configuration;
- ipv6 - send RA and RA deprecate messages out three times instead of just once;
- l3hw - improved system stability during IPv6 route offloading;
- leds - added "dark-mode" functionality for RBwAPG-5HacD2HnD;
- leds - added "wireless-status" and "wireless-signal-strength" configuration types for wifiwave2 interfaces;
- log - improved logging for user actions;
- lte - fixed 5G data-class reporting for Chateau 5G;
- lte - fixed APN authentification in multi APN setup for R11e-LTE6;
- lte - fixed IPv6 prefix for MBIM modems in multi-apn setup when IPv6 APN used as not first APN;
- lte - fixed RSSI for FG621-EA modem to show the correct value;
- lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;
- mpls - improved FastPath next-hop selection hash algorithm;
- netinstall-cli - added empty configuration option "-e";
- netwatch - decreased "thr-tcp-conn-time" maximum limit to 30 seconds;
- ovpn - improved system stability;
- pimsm - improved system stability;
- qsfp - added 50Gbps rate support for QSFP28 interfaces;
- qsfp - fixed sub-interface EEPROM monitor data output (introduced in v7.12beta3);
- qsfp - improved auto link detection for 100G CWDM4 modules and AOC cables (introduced in v7.12beta3);
- qsfp - use sub-interface configuration for establishing link (for 40Gbps and 100Gbps links, all sub-interfaces must be enabled);
- routerboard - added "reset-button" support for RB800 and RB1100 devices;
- ssh - improved connection stability when pasting large chunks of text into console;
- supout - added interface list members section;
- switch - improved resource allocation for 98DX224S, 98DX226S, and 98DX3236 switch chips;
- traffic-generator - fixed traffic-generator on CHR and x86;
- usb - added support for RTL8153 USB ethernet on ARM, ARM64 and x86;
- vrf - limit maximum VRFs to 1024;
- vxlan - improved system stability for Tile devices;
- webfig - fixed "Days" property configuration change under "IP/Firewall" menu;
- webfig - fixed timezone for interface "Last Link Down/Up Time";
- webfig - improved Webfig performance and responsiveness;
- webfig - try to re-establish connection after disconnect;
- wifiwave2 - added an alternative QoS priority assignment mechanism based on IP DSCP (CLI only);
- wifiwave2 - added station-bridge interface mode (CLI only);
- wifiwave2 - do not show default "l2mtu" on compact export;
- wifiwave2 - fixed PTK renewal for interfaces in station mode;
- wifiwave2 - fixed sniffer command not receiving any QoS null function frames when using 802.11ax radios;
- wifiwave2 - fixed untagged VLAN 1 entry when using "vlan-id" setting together with vlan-filtering bridge;
- wifiwave2 - fixed warning on CAP devices when radar detected;
- wifiwave2 - implemented an option to transmit IP multicast packets as unicasts (CLI only);
- wifiwave2 - improved compliance with regulatory requirements;
- wifiwave2 - make 4-way handshake procedure more robust when acting as supplicant (client);
- winbox - added "Comment" under "Routing/BFD/Configuration" menu;
- winbox - added "g" flag under "IPv6/Routes" menu;
- winbox - added "Name Format" property under "WifiWave2/Provisioning" menu;
- winbox - changed "MBR Partition Table" checkbox to unchecked by default under "System/Disks/Format-Drive" menu;
- winbox - fixed "Address" property under "WifiWave2/Remote-CAP" menu;
- winbox - fixed "Group Key Update" maximum value under "WifiWave2/Security" menu;
- winbox - fixed entry numbering and ordering under "WifiWave2/Provisioning" menu;
- winbox - fixed minor typos;
- wireguard - allow to specify client settings under peer menu which will be included in configuration file and QR code;
- wireguard - generate Wireguard peer keys and preshared-key automatically, if value is specified but is not base64 string;
- wireguard - removed "wg-add-client" configuration wizard (introduced in v7.12beta3);
- wireless - added more "radius-mac-format" options (CLI only);
- www - fixed allowed address setting for REST API users;
- www - fixed fragmented POST data for SCEP service;
- x86 - i40e updated driver to 2.23.17 version;
- x86 - igc updated driver to 5.10.194 version;
- x86 - ixgbe updated driver to 5.19.6 version;
- x86 - Realtek r8169 updated driver;

Other changes since v7.11:

- bgp - fixed "atomic-aggregate" always set in output;
- bgp - fixed local and remote port settings for BGP connections;
- bgp - fixed typos and missing spaces in log messages;
- bgp - increase "hold-time" limit to 65000;
- bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
- bridge - fixed untagged VLAN entry disable;
- bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
- bridge - improved system stability;
- bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
- bth - added "Back To Home" VPN service for ARM, ARM64, and TILE devices;
- calea - improved system stability when trying to add rules without the CALEA package;
- certificate - allow to get and maintain Let's Encrypt certificate in IPv6 environment;
- certificate - fixed "subject-alt-name" duplicating itself when SCEP is used;
- certificate - improved certificate validation logging error messages;
- certificate - log CRL HTTP errors under the "error" logging topic;
- chr - increased OVA default RAM amount from 160MB to 256MB;
- console - added ":jobname" command;
- console - added "as-string" and "as-string-value" properties for "get" command;
- console - added "terminal/ask" command;
- console - added "transform" property for ":convert" command;
- console - fixed scheduler "on-event" script highlighting when editing;
- console - improved ":totime" and ":tonum" commands and added ":tonsec" command for time value manipulation;
- console - improved multi-argument property parsing into array;
- console - improved stability and responsiveness;
- console - improved stability when editing long scripts;
- console - show full date and time in scheduler "next-run" property;
- dhcp - fixed DHCP server and relay related response delays;
- ethernet - added "supported" and "sfp-supported" values for "monitor" command;
- firewall - added "ein-snat" and "ein-dnat" connection NAT state matchers for filter and mangle rules;
- ike1 - log an error when non-RSA keys are being used;
- interface - added "macvlan" interface support;
- iot - fixed an issue where applying a script to GPIO pin caused GPIO to stop working;
- iot - fixed behavior where GPIO output state would change on boot;
- ipsec - fixed IPSec policy when using modp3072;
- ipv6 - fixed IPv6 RA delay time from 5s to 500ms according to RFC;
- lte - added at-chat support and increased wait time on modem at-chat for Dell DW5821e, DW5821e-eSIM, DW5829e and DW5829e-eSIM;
- lte - added SINR reporting for FG621-EA modem;
- lte - fixed Sierra modem detection for modems with vendor-specific USB descriptors;
- lte - fixed Sierra modem initialization;
- lte - use more compact logging messages;
- modbus - added additional security settings for Modbus TCP;
- mpls - added option to match and set MPLS EXP with bridge and mangle rules;
- mpls - fixed "propagate-ttl=no" setting;
- netinstall - added option to discard branding package;
- netinstall-cli - prioritise interface option over address option;
- ospf - fixed adding ECMP routes;
- ospf - fixed BFD on virtual-link with configured VRF;
- ospf - fixed OSPFv3 not working with NSSA areas;
- ospf - fixed parsing of opaque LSAs used by TE;
- ospf - fixed translated NSSA routes not showing in backbone;
- ovpn - added "tls-auth" option support for imported .ovpn profiles;
- port - add support for Huawei MS237h-517;
- port - expose NMEA/DIAG ports for Dell DW5821e and DW5821e-eSIM;
- quickset - fixed "LAN" interface list members if configuration does not contain bridge;
- rip - added BFD support;
- rip - fixed session not working in VRF;
- route - fixed gateway after link restart;
- route - removed deprecated "received-from" property;
- sfp - fixed missing "rx-power" monitor with certain modules (introduced in v7.10);
- sfp - improved interface stability for SFP and QSFP types of interfaces;
- ssh - added support for user ed25519 public keys;
- ssh - allow to specify key owner on import;
- ssh - fixed SSH tunnel performance (introduced in v7.10);
- supout - added LLDP power to supout.rif;
- supout - fixed BFD section;
- switch - improved switch chip stability for CCR2004-16g-2s+ devices;
- system - improved system stability when MD5 checksums are used;
- tile - improved system stability when using queues;
- traffic-generator - added "priority" property for "inject" command;
- wifiwave2 - added comment property for registration-table;
- wifiwave2 - enable changing interface MTU and L2MTU;
- wifiwave2 - fixed malformed Interworking packet elements;
- wifiwave2 - list APs with a higher maximum data rate as more preferable roaming candidates;
- winbox - allow to change port numbers for SCTP, DCCP, and UDP-LITE protocols under "IP/Firewall" menus;
- winbox - allow to set multiple addresses and added IPv6 support under "Interface/VETH" menu;
- wireguard - added "wg-add-client" configuration wizard (CLI only);
- wireguard - added "wg-export" and "wg-import" functionality (CLI only);
- wireless - fixed malformed Interworking packet elements;
- x86 - added support for Mellanox ConnectX-6 Dx NIC;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.