v7.16beta [testing] is released! - MikroTik (2024)

RouterOS version 7.16beta has been released on the "v7 testing" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 7.16beta3 (2024-Jun-27 08:33):

*) 6to4 - fixed 6to4 tunnel LL address generation after system reboot;
*) 6to4 - limit keepalive timeout maximum value;
*) 6to4 - make "remote-address" parameter mandatory;
*) address - added "S" flag for addresses that belong to a slave interface;
*) arm64/x86 - added rtl8111/8168/8411 firmware;
*) bridge - added L2 MDB support for switch chips with HW offloaded IGMP snooping;
*) bridge - do not allow duplicate ports;
*) bth - improved system stability;
*) certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
*) certificate - automatically parse uppercase symbols to lowercase when registering domain on Let's Encrypt;
*) chr - fixed incorrect disk size for ARM64;
*) console - added additional byte-array option to :convert command;
*) console - fixed an issue where certain MAC address can be interpreted as time value;
*) console - fixed typo in firewall error message;
*) console - improved stability when pasting a large input;
*) defconf - configure the default-route property for PPP clients only on devices with a built-in modem;
*) dhcp - added comment property for matchers, options and option sets;
*) dhcpv4-server - added matcher ability to match substring;
*) dhcpv4-server - added name for "User-Class" option (77), "Authentication" option (90), "SIP-Servers-DHCP-Option" option (120) and "Unassigned" option (163-174) in debug logs;
*) dhcpv6-client - release client on failed renew attempt (additional fixes);
*) discovery - added LLDP Port VLAN ID, Port And Protocol VLAN ID, VLAN Name TLVs support;
*) discovery - added LLDP-MED timeout;
*) discovery - set unknown bit for any unspecified link type in MAC/PHY TLV;
*) disk - added log message when disks get added or removed;
*) dns - added support for DoH with static FWD entries;
*) dns - added support for mDNS proxy (CLI only);
*) dns - refactored DNS service internal processes;
*) firewall - removed unnecessary TLS host matcher from NAT tables;
*) health - removed unnecessary health settings for RB921 and RB922 devices;
*) install - allow to save old configuration during cdrom install;
*) iot - added an option to log LoRa filtered packets (additional fixes);
*) iot - added LoRa option to filter out proprietary packets (additional fixes);
*) ipip6 - make IPv6 LL address random;
*) ipsec - improved performance by balancing multicore CPU usage;
*) ipv6 - added "d" deprecated flag for expired IPv6 SLAAC addresses;
*) ipv6 - allow to properly disable address when it is generated from pool;
*) ipv6 - allow to properly move IPv6 address from slave interface to a bridge interface;
*) ipv6 - do not allow adding address with invalid prefix when using pool;
*) ipv6 - do not allow to manually delete LL address;
*) ipv6 - fixed "no-dad" functionality;
*) ipv6 - fixed SLAAC address dynamic appearance;
*) ipv6 - properly initialize default ND "interface=all" entry;
*) ipv6 - warn user that reboot is required in order to properly apply accept-router-advertisem*nts changes;
*) leds - fixed system LED to indicate correct RAT for Chateau (introduced in v7.16beta1);
*) lte - fixed modem dialer disable for Chateau 5G devices when cellular modem support mode set to serial (introduced in v7.16beta2);
*) lte - improved system stability for MBIM modem during AT query (introduced in v7.16beta1);
*) modem - fixed cases where USB bus could switch places (introduced in v7.16beta1);
*) modem - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15) (additional fixes);
*) netwatch - use time format according to ISO standard;
*) port - added IPv6 support for the "remote-access" feature;
*) ppp - automatically generate IPv6 firewall rules when filter-id is specified;
*) profiler - classify wifi processing as "wireless";
*) rose-storage - fixed "/file sysnc status" parameter to be read-only;
*) rose-storage - moved "/rsync-daemon" to "/file rsync-daemon;
*) route - fixed incorrectly handled route distinguisher and route targets (introduced in v7.15);
*) sfp - fixed calculated link length based on EEPROM in certain cases;
*) ssh - fixed SSH cryptographic accelerator selection (introduced in v7.14);
*) supout - rename "store" section to "disk";
*) switch - fixed an issue where half-duplex links could occupy Tx resources for 98DX8xxx, 98DX4xxx, 98DX325x switch chips;
*) switch - fixed an issue with Ethernet port group hang for CRS354 devices;
*) system - added "clock" logging topic for time change related messages;
*) system - do not start IPsec and certificate processes when not necessary;
*) system - fixed an issue where routing configuration was missing after performing a reset, adding a new configuration and then upgrading (introduced in v7.15);
*) system - improve system stability when accessing router over uninitialized address;
*) system - improved reporting of total memory size;
*) tunnel - allow specifying IPv6 LL address as "remote-address" for EoIPv6, GRE6 and IPIP6 tunnels;
*) user - added inactivity timeout for non-GUI sessions;
*) wifi - added "slave-name-format" (CLI only);
*) wifi - adjusted virtual interface naming when provisioning local radios;
*) wifi - do not allow frequency-scan on virtual interfaces;
*) wifi - fixed packet receive when having multiple station interfaces;
*) wifi - fixed signal strength reporting during association (introduced in v7.15) (additional fixes);
*) wifi - improve regulatory compliance for Chateau ax devices;
*) wifi-qcom - add spectral-scan and spectral-history tools (CLI only) (additional fixes);
*) wifi-qcom-ac - count dropped packets to "tx-drop" instead of "tx-error";
*) winbox - fixed false invalid flag under "System/Ports/Remote Access" menu;
*) winbox - moved Switch menu tabs to individual menus (additional fixes);
*) winbox - separated different Watchdog settings into logical tabs;
*) winbox/webfig - fixed skins (introduced in v7.15);
*) wireless - allow unsetting signal-range and ssid-regext properties for capsman access-list (additional fixes);
*) x86 - added missing PCI ids for bnx2x driver;

What's new in 7.16beta2 (2024-Jun-12 12:03):

*) arm64 - increased reserved storage space for bootloader;
*) bgp - fixed BGP sessions missing vpnv6 afi;
*) bgp - fixed cluster-list and originator-id;
*) bridge - fixed typo in filter and NAT error message;
*) chr - added support for licensing over IPv6 network;
*) dhcpv4-server - added "class-id" parameter for DHCP server leases;
*) dhcpv4-server - fixed setting and getting "next-server" property;
*) dhcpv4-server - increased lease offer timeout to 120 seconds;
*) disk - added simple test command to test device and filesystem speeds (CLI only) (additional fixes);
*) disk - improved system stability;
*) dns - added support for DoH with adlist;
*) ethernet - fixed port speed downshift functionality for CRS354 devices;
*) firewall - added message when interface belonging to VRF is added in filter rules (additional fixes);
*) health - improved voltage measurements for RB912UAG-6HPnD device;
*) iot - added an option to delete default LoRa servers and a button to recover them if needed;
*) iot - added an option to log LoRa filtered packets;
*) ip/ipv6 - added multipath hash policy settings;
*) ip/ipv6 - warn user that reboot is required in order to properly apply changes under IP/Settings and IPv6/Settings menus;
*) ipsec - changed default dpd-interval from 2 minutes to 8 seconds and dpd-maximum-failures from 5 to 4;
*) ipv6 - fixed dynamic duplicate address showing when static address is already configured;
*) ipv6 - improved LL address generation process;
*) l2tp - improved system stability;
*) lte - fixed cases where LTE interface would take long time to become ready after bootup for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
*) lte - fixed MBIM modem registration on the network (introduced in v7.16beta1);
*) modem - fixed modem firmware upgrade for Chateau 5G and Chateau 5G R16 (introduced in v7.15);
*) netinstall-cli - added support for multiple device install (additional fixes);
*) poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces);
*) ppp - fixed dynamic queue default name (introduced in v7.15);
*) qos-hw - fixed incorrect per-port packet and byte cap (introduced in v7.16beta1);
*) queue - improved system stability;
*) route - fixed memory leak (introduced in v7.15);
*) route - fixed some missing route parameters when printing (introduced in v7.15);
*) routerboot - improved boot process ("/system routerboard upgrade" required);
*) sfp - fixed missing traffic after reboot with S-RJ01 module running at 10/100 Mbps rate on CCR2004-16G-2S+ device;
*) switch - fixed limited Tx traffic on Ethernet ports for CRS354 devices (introduced in v7.15);
*) system - added support for upgrade over IPv6 network;
*) system - improved watchdog and kernel panic reporting (additional fixes);
*) system - reduced RAM usage for ARM64 devices;
*) wifi-qcom - add spectral-scan and spectral-history tools (CLI only) (additional fixes);
*) winbox - added "Switch/QoS" menu for CRS3xx, CRS5xx, CCR2116 and CCR2216 devices;
*) winbox - added "Trace" column under "System/History" menu;
*) winbox - do not show "Last Logged In" and "Expire Password" when creating new system user;
*) winbox - fixed "Authority" property under "System/Certificates/Requests" menu;
*) winbox - fixed error when changing wifi interface settings in some rare conditions (introduced in v7.16beta1);
*) winbox - moved DHCPv6 Server "Allow Dual Stack Queue" property from General to Queues tab;
*) winbox - moved Switch menu tabs to individual menus;
*) wireless - allow to unset signal-range and ssid-regext properties for capsman access-list;

What's new in 7.16beta1 (2024-Jun-05 11:52):

*) bgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15);
*) bgp - fixed vpnv6 safi;
*) bgp - small logging improvements;
*) bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge;
*) bridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade);
*) bridge - added max-learned-entries property for bridge;
*) bridge - added message about who created a dynamic VLAN entry;
*) bridge - added MVRP support for VLANs assigned to bridge;
*) bridge - fixed BPDU address when using "ether-type=0x88a8" configuration;
*) bridge - improved system stability when removing MLAG configuration;
*) bridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached);
*) certificate - added no-key-export parameter for import;
*) certificate - improved DNS challenge error reporting for Let's Encrypt;
*) certificate - show validity beyond year 2038;
*) console - added "verbose=progress" mode for import status updates, and verbose output only on failures;
*) console - added dry-run parameter to simulate import of files and find syntax errors without making configuration changes (verbose only);
*) console - added limits for dst-start and dst-end clock properties;
*) console - added lock screen via :lock command;
*) console - added uppercase and lowercase transform modes to :convert command;
*) console - disallow ping command with empty address;
*) console - display hint when requesting specific argument syntax;
*) console - do not show default boot-os setting in export;
*) console - fixed negative values for gmt-offset clock property;
*) console - fixed output of ping command in certain cases;
*) console - improve large import file handling, error detection and stability;
*) console - improved :serialize and :deserialize commands and added support for DSV (delimiter separated values) format;
*) console - improved stability when removing script;
*) console - removed follow-strict parameter;
*) console - show rest-api name for active user connections;
*) container - clear VETH address on container exit and mark interface as running only when VETH is in use;
*) detnet - properly detect "Internet" status when multiple detnet instances preset in network;
*) dhcp - improved insert-queue-before, parent-queue and allow-dual-stack-queue behavior;
*) dhcpv4-client - execute script on DNS server or gateway address change;
*) dhcpv4-server - show active-server and host-name in print active command;
*) dhcpv6-client - do not add default gateway twice when both prefix and address is acquired;
*) dhcpv6-client - fixed T1, T2, valid-lifetime and preferred-lifetime compliance with RFC8415 by using value 0;
*) dhcpv6-client - pause client and remove dynamically installed objects while it becomes invalid;
*) dhcpv6-client - release client on failed renew attempt;
*) dhcpv6-client - update gateway address for default route on renew;
*) dhcpv6-server - improved system stability;
*) disk - added simple test command to test device and filesystem speeds (CLI only);
*) dude - fixed map element RouterOS package upgrade functionality;
*) fetch - handle HTTP 401 status correctly;
*) fetch - improved logging;
*) firewall - added message when interface belonging to VRF is added in filter rules;
*) firewall - fixed IPv6 "nth" matcher showing up twice in help;
*) firewall - fixed issue that prevents restoring src-address-list and dst-addres-list properties using undo command;
*) health - fixed board-temperature for KNOT device (introduced in v7.15);
*) health - fixed bogus CPU temperature spikes for CCR2216 device;
*) health - fixed missing health for CRS112-8G-4S device (introduced in v7.15);
*) health - upgraded fan controller firmware to latest version;
*) ike1 - removed unsupported NAT-D drafts with invalid payload numbers;
*) install - fixed ARM64 cdrom install (introduced in v7.15);
*) iot - added LoRa NetID and JoinEUI filtering for LNS and CUPS connections;
*) iot - added LoRa option to filter out proprietary packets;
*) iot - fixed LoRa inability to use variables for GPS-spoofing setting;
*) ip - added max-sessions property for services;
*) ipv6 - fixed pool allocated addresses missing after reboot;
*) ipv6 - respect APN settings for "add-default-route" and "use-peer-dns" also when "accept-router-advertisem*nts=yes";
*) isis - fixed filter-chain and filter-select settings;
*) isis - install IPv6 link-local gateways correctly;
*) l3hw - added per-VLAN packet and byte counters to compatible switches;
*) l3hw - disable L3HW on bonding modes that do not support it;
*) lte - added "sms-protocol" setting in "/interface lte" menu (CLI only);
*) lte - fixed "at-chat" for DELL T99W175 (PID: 0x05c6 VID: 0x90d5);
*) lte - fixed cases where modem could be handled by multiple dialer instances;
*) lte - fixed support for Fibocom modem fm150-na;
*) lte - improvements to "/interface/lte/show-capabilities" command;
*) media - improved file indexing for DLNA;
*) modem - added authentication functionality to EC200A;
*) modem - fixed unresponsive PPP link recovery when TX bandwidth was exceeding link capacity;
*) modem - improved support for KNOT BG77 modem firmware update;
*) mqtt - broker password is no longer exported unless "show-sensitive" flag is used;
*) netinstall-cli - added check for device and package architectures match;
*) netinstall-cli - added support for multiple device install;
*) netinstall-cli - allow mixed package architectures;
*) netwatch - added DNS probe;
*) netwatch - added ttl and accept-icmp-time-exceeded properties for ICMP probe;
*) ospf - improved system stability during LSA monitoring;
*) ovpn - improved system stability;
*) pimsm - improved system stability;
*) poe-out - fixed low-voltage detection while PD is connected for KNOT device;
*) poe-out - fixed silent firmware upgrade fail on CRS112-8P-4S device (introduced in v7.15);
*) poe-out - upgraded firmware for SAMD20 PSE (AF/AT) controlled boards (the update will cause brief power interruption to PoE-out interfaces);
*) ppp - added support for IPv6-only domain names to l2tp-client, ovpn-client and sstp-client;
*) ptp - added PTP support for CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ, CRS518-16XS-2XQ, CRS504-4XQ, CRS510-8XS-2XQ devices;
*) qos-hw - added H and I flags to queues (CLI only);
*) qos-hw - added new monitoring properties for ports and global QoS stats (CLI only);
*) qos-hw - added queue-buffers property to tx-manager (CLI only);
*) qos-hw - allow port print stats, usage and pfc while QoS is disabled (CLI only);
*) qos-hw - allow to set queue-buffers in bytes, percent or auto (CLI only);
*) qos-hw - enabling ECN forces WRED (unless share is disabled);
*) qos-hw - fixed global buffer limits for 98DX8212 and 98DX8332 switches;
*) qos-hw - limit WRED to queues with enabled shared buffers;
*) quickset - removed Basic AP mode;
*) route - added ability to redistribute isis routes;
*) route - place static route in the correct VRF when vrf-interface parameter is used;
*) route - rename route type from is-is to isis;
*) rpki - fixed preference sorting;
*) sfp - fixed SFP28 interface with fec74 mode on CCR2004-1G-2XS-PCIe device;
*) sfp - fixed SFP28 jumbo frame processing on CCR2004-1G-2XS-PCIe device;
*) sms - added polling setting so that RouterOS itself checks SMS instead of relying on URC messages;
*) snmp - added support for KNOT BG77 modem cellular signal info;
*) snmp - fixed LAST-UPDATED format in MIKROTIK-MIB;
*) supout - added detnet section;
*) supout - added monitor command for all wifi interfaces;
*) supout - added netwatch section;
*) supout - added user SSH keys section;
*) supout - increased console output width;
*) supout - limit address-list and connection tracking entries to 999 in supout.rif;
*) switch - fixed Ethernet interface counter 32bit overflow for CRS354 devices;
*) switch - improved system stability on CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
*) system - added log message if device failed to reboot gracefully;
*) system - added more details to user initiated reboot (reset, upgrade, downgrade);
*) system - do not cancel package upgrade if another architecture packages found on the router;
*) system - do not download packages scheduled for uninstall;
*) system - fixed empty logs after reboot in certain cases;
*) system - improved system stability for RBSXTsq5nD and RBLDF-5nD;
*) system - improved system stability;
*) system - improved watchdog and kernel panic reporting;
*) system - set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required);
*) system - set flash-boot mode as "boot-device" after system reset initiated from software;
*) user - added inactivity timeout for non-GUI sessions (CLI only);
*) user-manager - updated logo;
*) vxlan - added comment support to VTEPs;
*) vxlan - prevent creating multiple VTEPs with same IP/port combination;
*) webfig - fixed issue with incorrectly applying optional fields;
*) wifi - do not unset radio-mac and master-interface properties on reset;
*) wifi - enable creating virtual wifi interfaces using "copy-from" setting;
*) wifi - fixed signal strength reporting during association (introduced in v7.15);
*) wifi - fixed typo in log message;
*) wifi - improved interface stability when receiving invalid FT authentication frames;
*) wifi - improved WPA3 PMKSA handling when access-lists with custom passphrases are used;
*) wifi - make sniffer tool return an error when attempting to sniff with a radio which does not support it;
*) wifi - use name-format also for local interfaces when provisioning;
*) wifi-qcom - add spectral-scan and spectral-history tools (CLI only);
*) winbox - added "Import Router ID" parameter under "Routing/BGP/VPN" menu;
*) winbox - fixed duplicated "MVRP Attributes" table;
*) winbox - fixed issue with skin file appearing as unknown in user group menu (introduced in v7.15);
*) winbox - fixed signal bar "excellent" tooltip;
*) winbox - removed deprecated x86/CHR specific settings under "System/Resources" menu;
*) winbox - removed spare argument for "PFS Group" property under "IP/IPsec/Proposals" menu;
*) winbox - use CAP serial number with "Set Identity" button under "WiFi/Remote CAP" menu;
*) wireless - allow to unset signal-range and ssid-regext properties for capsman access-list (CLI only);
*) wireless - fixed dynamic VLAN assignments for vlan-filtering bridge in certain cases;
*) wireless - limit antenna-gain property to 100;
*) www - log out inactive REST API users;
*) x86 - added RTL8156 driver support;

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. The file must be generated while a router is not working as suspected or after some problem has appeared on the device

Please keep this forum topic strictly related to this particular RouterOS release.