What's new in 6.46.7 (2020-Sep-07 07:38):Important note!!!- The Dude server must be updated to monitor v6.46.4+ and v6.47beta30+ RouterOS type devices.- The Dude client must be manually upgraded after upgrading The Dude server.- The Dude requires "winbox" policy instead of "dude" to monitor v6.46.4+ and v6.47beta30+ RouterOS type devices.Changes since 6.46.6:*) arm - improved stability when forcing 25G speed on unsupported interface;*) bridge - fixed host table update on SNMP query;*) bridge - fixed STP alternate and backup port states for devices with switch chip;*) crs3xx - fixed hardware offloaded MPLS forwarding when using bonding interfaces;*) crs3xx - fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+;*) crs3xx - fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices;*) crs3xx - fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;*) crs3xx - improved 10G interface initialization on CRS312 devices;*) crs3xx - improved Ethernet port group traffic forwarding on CRS354 devices;*) crs3xx - improved system stability when using hardware offloaded MPLS;*) defconf - fixed default configuration loading on RBmAPL-2nD;*) dhcpv6-server - disallow changing binding's "prefix-pool";*) dhcpv6-server - do not require "server" parameter for bindings;*) discovery - do not send discovery packets on inactive bonding slave interfaces;*) discovery - do not send discovery packets on interfaces that are blocked by STP;*) dot1x - fixed duplicate EAP request packets for server;*) dot1x - fixed EAP packet version numbering;*) email - added support for multiple "to" recipients;*) export - fixed HotSpot "address-per-mac" parameter export;*) fetch - show status "uploaded" instead of "downloaded" when uploading a file;*) ftp - fixed possible buffer overflow;*) hotspot - ignore packets from host while MAC authentication is in progress;*) ike1 - improved stability when performing policy lookup on non-existant peer;*) ike2 - fixed local side NAT detection;*) ike2 - fixed policy reference for pending acquire;*) ike2 - retry RSA signature validation with deduced digest from certificate;*) interface - added new builtin "static" interface list;*) kidcontrol - fixed "time-unlimited-rate" to engage in correct time;*) lcd - improved general system stability when LCD is not present;*) lte - fixed modem initialization when multiple modems are used simultaneously;*) lte - fixed PDP authentication configuration for SIM7600;*) lte - improved stability during firmware upgrade;*) metarouter - fixed image importing (introduced in v6.46);*) ospf - fixed disappearing NSSA default route;*) ospf - fixed processing of "unknown" LSA type;*) ospf - improved route tag processing for OSPFv3;*) poe - fixed "power-cycle" functionality on hEX PoE, PowerBox Pro and OmniTIK 5 PoE ac;*) port - removed serial console port on hEX S;*) ppp - removed "comment", "set" and "edit" commands from "PPP->Active" menu;*) profile - added support for CCR2004-1G-12S+2XS;*) qsfp - fixed auto-negotiation status;*) quickset - fixed invalid configuration applying when performing changes during LTE modem initialization process;*) quickset - show "Antenna Gain" setting on devices without built-in antennas;*) route - improved stability when 6to4 interface is configured with disabled IPv6 package;*) routerboard - fixed "reset-button" menu presence on all devices;*) routerboot - fixed etherboot FCS errors with 100Mbps rate for CRS305, CRS309 and CRS317 devices ("/system routerboard upgrade" required);*) sfp - stabilized CRS212 SFP port functionality and improved monitoring of optical modules;*) smb - fixed file path validation (introduced in v6.46);*) smb - fixed possible memory leak;*) smb - limit active session count to 5 per connection;*) sniffer - allow setting port for "streaming-server";*) snmp - added "dot1qTpFdbTable" OID reporting for Q-BRIDGE-MIB;*) switch - correctly enable and disable CPU Flow Control on RB3011UiAS;*) switch - fixed MAC address learning on switch-cpu port for Atheros8316, Atheros8227 and Atheros7240 switch chips;*) upgrade - fixed space handling in package file names;*) w60g - added "mdmg-fix" parameter for RBwAP60Gx3 (CLI only);*) w60g - improved rate selection in low traffic conditions;*) webfig - fixed 5 GHz wireless interface "frequency" parameter value list on Audience;*) winbox - added "region" parameter for W60G interfaces;*) winbox - allow to specify any Ethernet like interface under "Tool/WoL" menu;*) winbox - do not allow to enter empty strings in "caps-man-names" and "common-name" parameters;*) winbox - fixed "Tx/Rx Signal Strength" value presence for 4 chain interfaces;*) winbox - fixed wireless interface "HT" tab setting presence when "band=5ghz-n/ac";*) winbox - fixed wireless sniffer parameter setting;*) winbox - hide irrelevant switch port parameters;*) wireless - added support for U-NII-2 for cAP ac;*) wireless - added support for U-NII-2 for wAP ac;*) wireless - allow setting "tx-power" up to 40;*) wireless - changed "station-roaming" default setting from "enabled" to "disabled";*) wireless - fixed potential wireless driver issue related to CVE-2020-3702;*) wireless - improved management service stability when receiving bogus packets;*) wireless - updated "bangladesh" regulatory domain information;*) wireless - updated "canada" regulatory domain information;*) wireless - updated "egypt" regulatory domain information;*) wireless - updated "indonesia5" regulatory domain information;*) wireless - updated "united states" regulatory domain information;*) www - added "tls-version" parameter in "IP->Services" menu;

What's new in 6.48beta40 (2020-Sep-14 13:34):*) arm64 - improved reboot reason reporting in log;*) bridge - added minor fixes and improvements for IGMP snooping with HW offloading;*) bridge - fixed link-local multicast forwarding when IGMP snooping and HW offloading is enabled;*) bridge - fixed MDB entry removal when using bridge port "fast-leave" property;*) conntrack - automatically reduce connection tracking timeouts when table is full;*) console - allow "once" parameter for bonding monitoring;*) crs3xx - added initial Bridge Port Extender support (CLI only);*) crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only);*) crs3xx - added switch-cpu port VLAN filtering (switch-cpu port is now mapped with bridge interface VLAN membership when vlan-filtering is enabled);*) crs3xx - fixed IGMP snooping for CRS312, CRS326-24S+2Q+ and CRS354 devices;*) crs3xx - fixed switch "copy-to-cpu" property for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices;*) detnet - fixed malformed dummy DHCP User Class option;*) detnet - use MAC address from bridge interface instead of slave port;*) dhcpv4-server - improved "client-id" value parsing;*) ipsec - refresh peer's DNS only when phase 1 is down;*) leds - fixed LED type setting;*) smb - fixed possible memory leak;*) sms - fixed SMS sending when both "interface" and "smsc" parameters are specified;*) snmp - added information from IPsec "active-peers" menu to MIKROTIK-MIB;*) snmp - fixed "/tool snmp-get" functionality (introduced in v 6.46beta43);*) snmp - fixed value types for "dot1qPvid";*) supout - added bonding interface monitor information;*) switch - fixed Ethernet padding for small packets;*) tr069-client - allow passing LTE firmware update URL as XML;*) user-manager - do not allow creating limitation that crosses midnight;*) user-manager - updated PayPal's root certificate authorities;*) wireless - improved WPS process stability;Other changes since v6.47.3:*) arm - added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices;*) arm - improved watchdog and kernel panic reporting in log after reboots on IPQ4018/IPQ4019 devices;*) bonding - added LACP monitoring (CLI only);*) bonding - removed "sys-id" and "sys-priority" from monitor-slaves command;*) bridge - added warning message when port is disabled by the BPDU guard;*) bridge - allow to exclude interfaces from extended ports (CLI only);*) bridge - correctly remove dynamic VLAN assignment for bridge ports;*) bridge - fixed BPDU guard port disable/enable on HW offloaded interfaces;*) bridge - fixed dynamic VLAN assignment when changing port "frame-type" property (introduced in v6.46);*) bridge - fixed dynamic VLAN assignment when changing port to tagged VLAN member;*) bridge - fixed local MAC address removal from host table when deleting bridge interface;*) bridge - fixed multicast table printing;*) bridge - fixed packet forwarding for CAP and BCP controlled interfaces (introduced in v6.48beta12);*) bridge - fixed STP alternate and backup port states for devices with switch chip (introduced in v6.47);*) bridge - improved BPDU guard logging;*) bridge - increased multicast table size to 4K entries;*) bridge - show error when switch do not support controlling bridge or port extension (CLI only);*) bridge - show "H" flag for extended bridge ports;*) certificate - clear challenge password on renew;*) chr - improved interface loading on startup on XEN;*) chr - improved system stability when changing flow control settings on e1000;*) crs3xx - added initial Bridge Port Extender support (CLI only);*) crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only);*) crs3xx - fixed "custom-drop-packet" and "not-learned" switch stats for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;*) crs3xx - fixed duplicate host entries when creating static switch hosts;*) crs3xx - fixed "mirror-source" property on switch port disable for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;*) crs3xx - fixed port isolation for "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;*) crs3xx - fixed port isolation removal for "switch-cpu" port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;*) crs3xx - fixed "storm-rate" traffic limiting for switch-cpu port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;*) crs3xx - fixed switch "not-learned" stats for CRS305, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, CRS318 devices;*) crs3xx - fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;*) crs3xx - fixed VLAN tagged packet forwarding on "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices (introduced in v6.48beta12);*) defconf - improved CAP interface bridging;*) defconf - improved default configuration generation on devices with non-default wireless interface names;*) defconf - improved default configuration generation on devices without wireless package installed;*) dhcpv6-server - added ability to generate binding on first request;*) discovery - added "lldp-med-net-policy-vlan" property for assigning VLAN ID (CLI only);*) discovery - allow choosing which discovery protocol is used (CLI only);*) discovery - fixed discovery on mesh ports;*) discovery - fixed discovery packet sending on newly bridged port with "protocol-mode=none";*) discovery - fixed discovery when enabled only on master port;*) discovery - send the same "Chassis ID" on all interfaces for LLDP packets;*) discovery - use interface MAC address when sending MNDP from slave port;*) dns - added IPv6 support for DoH;*) dns - do not use type "A" for static entries with unspecified type;*) dns - fixed listening for DNS queries when only dynamic static entries exist (introduced in v6.47);*) export - fixed RouterBOARD USB "type" parameter export;*) fetch - fixed "src-address" usage for SFTP;*) filesystem - fixed repartition on non-first partition;*) filesystem - fixed repartition on RB4011 series devices;*) filesystem - improved long-term filesystem stability and data integrity;*) gps - fixed "init-channel" release when not used;*) health - changed PSU state parameter type to read-only;*) health - removed unused "heater-control" and "heater-threshold" parameters;*) hotspot - added support for captive portal advertising using DHCP (RFC7710);*) hotspot - added "vlan-id" parameter support for hosts and HTML pages;*) hotspot - ignore packets from host while MAC authentication is in progress;*) hotspot - improved management service stability when receiving bogus packets;*) ike1 - allow using "my-id" parameter with XAuth;*) ike1 - fixed policy update with and without mode configuration;*) ike1 - rekey phase 1 as responder for Windows initiators;*) ike2 - added "prf-algorithm" support for phase 1;*) ike2 - improved child SA rekeying process;*) ipsec - added SHA384 hash algorithm support for phase 1 (CLI only);*) ipsec - do not kill connection when peer's "name" or "comment" is changed;*) ipsec - fixed client certificate usage when certificate is renewed with SCEP;*) ipsec - fixed multiple warning message display for peers;*) ipsec - inactivate peer's policy on disconnect;*) ipsec - refresh peer's DNS only when phase 1 is down;*) kidcontrol - allow creating static device entries without assigned user;*) kidcontrol - fixed "time-unlimited-rate" to engage in correct time;*) lora - expose "joinEui" un "devEui" values in the log;*) lte - added "age" column and "max-age" parameter to "cell-monitor" (CLI only);*) lte - added "comment" parameter for APN profiles;*) lte - added support for Alcatel IK41VE1;*) ospf - optimized LSA printing for smaller message sizes;*) ppp - added "ipv6-routes" parameter to "secrets" menu;*) ppp - added support for "Framed-IPv6-Route" RADIUS attribute;*) route - improved stability when 6to4 interface is configured with disabled IPv6 package;*) snmp - fixed value types for "dot1dStp";*) ssh - fixed returned output saving to file when "output-to-file" parameter is used;*) ssh - skip interactive authentication when not running in interactive mode;*) system - replace "3" in superscript to "^3" on RBD53GR devices;*) tr069-client - added additional wireless registration table parameters;*) tr069-client - added LTE model and revision parameters;*) tr069-client - added wireless "noise-floor" and "overall-tx-ccq" information parameters;*) tr069-client - added "X_MIKROTIK_MimoRSRP" parameter for LTE RSRP value reporting;*) tr069-client - allow passing LTE firmware update URL as XML;*) tr069-client - send correct "ConnectionRequestURL" when using IPv6;*) traffic-flow - added NAT event logging support for IPFIX;*) traffic-flow - added "sys-init-time" parameter support;*) webfig - fixed default value presence when creating new entries under "IP->Kid Control";*) winbox - allow performing "USB Power Reset" on "0" bus on RBM33G;*) winbox - fixed "IP->Kid Control->Devices" table automatic refreshing;*) winbox - fixed minor typo in "Users" menu;*) winbox - fixed "receive-errors" setting persistence under "Wireless/Wireless Sniffer/Settings" menu;*) winbox - fixed "tls-version" parameter setting under "IP/Services" menu;*) winbox - use health values reported by gauges for "System/Health" menu;*) wireless - added support for U-NII-2 for wAP ac;*) wireless - create "connect-list" rule when address specified for "setup-repeater";*) wireless - updated "canada" regulatory domain information;*) wireless - updated "no_country_set" regulatory domain information;*) wireless - updated "united states" regulatory domain information;