The Dude 7.14.1

package - convert "wireless" and "wifi" packages automatically, if upgrading from v7.12
wifi - split existing "wifiwave2" package into separate packages "wifi-qcom", "wifi-qcom-ac", and include required utilities for WiFi management into bundle
wireless - separate "wireless" package from bundle and build as a standalone package
bridge - added automatic "path-cost" values depending on interface rate
bridge - added bridge interface property "port-cost-mode" with "short" and "long" arguments
bridge - fixed bogus VLAN entries from wifi when vlan-filtering is not enabled
bridge - improved HW offload enable
bridge - improved host flush when removing VLAN on HW offloaded bridge
bth - added "VPN Prefer Relay Code" option
bth - improved automatic firewall rule generation process
certificate - add support for multiple DNS names for Let's Encrypt
certificate - added HTTP redirect support for CRL download
certificate - added support for certificates with key size 16384
certificate - fixed CRL updating
certificate - fixed certificate auto renewal via SCEP when certificate contains "subject-alt-name"
certificate - improved CRL signature verification and download error messages
certificate - improved initial certificate creation using SCEP
certificate - use error topic for CRL update failures
cloud - improved re-connect speed after network related connection errors
console - added ":grep" command
console - added ":onerror" command
console - added ":serialize" and ":deserialize" commands for converting values to/from JSON
console - added "interface" name when printing "interface/pppoe-server" entries
console - added "read" command under "file" menu
console - added "where" functionality for "export" command
console - added flags to "print" command with "value-list"
console - added interface helper for "gateway" property under "ip/route" menu
console - added unset option for "ssid-regex" and "allow-signal-out-of-range" properties under "interface/wifi/access-list" menu
console - clear console history when resetting configuration
console - disallow setting existing "name" under "system/script" and "system/scheduler" menus
console - fixed "export" boolean arguments when saving output to file using API
console - fixed "interface/ethernet/switch/port-isolation" export
console - fixed "on-event" argument highlighting under "system/scheduler" menu
console - fixed graphic distortions in WinBox
console - fixed issue where API incorrectly asks for missing arguments
console - fixed printing to file using API
console - ignore negative values for ":delay" command
console - improved flag printing in certain menus
console - improved stability when running "tool/ping" from API
console - removed "route-cache" setting from "ip/settings" menu
console - replace reserved characters in file and script names with underscores
console - resolve "wifiwave2" directory to "wifi"
console - show "l2vpn-link" address family under "routing/route" menu
console - use more compact login screen for empty branding
defconf - expire password when reverting configuration
defconf - fixed bogus wifi password on certain Audience devices
defconf - fixed configuration for Audience with "wifi-qcom-ac" package
defconf - fixed wireless band and channel-width selection (introduced in v7.12)
defconf - hide default configuration for users without "sensitive" policy
defconf - improved wifi interface detection after upgrade
defconf - updated configuration with new "wifi" directory
defconf - use "WISP Bridge" default configuration mode for RBGrooveGA-52HPacn device
defconf - use "fan-min-speed-percent=25" for CRS354-48P-4S+2Q+ device
defconf - use device factory preset credentials when using CAPs mode
defconf - use one SSID and enable FT when using "wifi" packages
disk - fixed hang on reboot when network file systems mounted
ethernet - improved packet CPU core classifier for Alpine CPUs for non IPv4/IPv6 traffic
ethernet - improved system stability for L009 and hAP ax lite devices
fetch - added "http-auth-scheme" parameter, allows to select HTTP basic or digest authentication
fetch - added "http-content-encoding" setting
fetch - added raw logging
fetch - allow to receive HTTP response headers
fetch - require "ftp" user policy
firewall - added "nat-pmp" support
firewall - added new IPv6 filter arguments "icmp-err-src-routing-header" and "icmp-headers-too-long" for "reject-with" setting
firewall - do not mark all IPv6 GRE packets as invalid
firewall - fixed IPv6 address-list timeout
firewall - fixed altered address-list when upgrading from RouterOS v6
firewall - fixed connections being tracked when tracking is disabled
firewall - removed "prohibited" and "unreachable" IPv4 address-type arguments
ftp - improved upload and download speeds
health - dynamically add and remove invalid sensors (e.g. sfp-temperature)
hotspot - fixed incorrect host moving to VLAN 0 when receiving packets through bridge
ike2 - fixed ike2 double reply
iot - fixed incorrect LoRa ACK packet handling during downlink messaging (introduced in v7.12)
ipv6 - do not send out IPv6 RA deprecate message for re-used prefix
isis - added IS-IS protocol support (CLI only)
l3hw - fixed routing for IPsec encapsulated packets
leds - fixed LED indication in multi-APN setup for Chateau
leds - improved LED indication during modem registration state for Chateau
log - added "fetch" topic
lora - added CUPs protocol support
lora - fixed issue with lost LoRa configuration when rebooting the device
lte - added RNDIS support for neoway N75-EA modem
lte - added support for FOTA firmware upgrade from custom URL for R11eL-FG621-EA
lte - disabled IMS service for Chateau 5G on A1 HR network
lte - fixed rare cases where Chateau 5G in passthrough mode may stop forwarding packets
lte - improved SIM slot status change notification handling for MBIM modems
lte - replaced "passthrough-subnet-selection" with "passthrough-subnet-size" setting (CLI only)
lte - show each CA band in a new line
mipsbe - improved system stability when removing USB devices
mmips - properly mount and unmount USB devices
modem - added option to read SMS using MBIM interface
mpls - added "te-tunnel" property for VPLS monitor (CLI only)
mpls - fixed IPv6 RSVP-TE
mpls - improved logging
netinstall-cli - added more details to help messages
ospf - fixed LSA Type3 advertisement for OSPFv2
ospf - fixed missing OSPF interface on L2TP interface reconnect
ospf - fixed missing opaque bit in opaque LSA
ovpn - improved memory allocation during key-renegotiation
ovpn - removed "ping-timer-rem" option from client config file
package - added warning log about missing "wireless" or "wifi" package
pimsm - improved elected BSR change
poe-out - improved firmware upgrade stability for AF/AT controlled boards
ppc - fixed RouterOS bootup (introduced in v7.12)
ppp - added remote-ipv6-prefix to IPv6 firewall address-list if "address-list" property is provided
ppp - allow at-chat and info commands in "waiting for packets" state for modems with shared data/info channel
ppp - improved IPv6 link-local address uniqueness
pppoe-server - fixed connection count limit per license level
profiler - improved "disk" and "supout.rif" classifiers
qos-hw - added initial congestion avoidance support for 98DX224S, 98DX226S, and 98DX3236 switch chips (CLI only)
qsfp - added support for QSFP-to-SFP adapters
qsfp - fixed supported rates for breakout cables (introduced in v7.12)
quickset - show DDNS name as VPN address for devices with new style serial number
route-filter - improved performance
sfp - added "1G-baseT" link mode for modules that supports "2.5G-baseT" mode
sfp - allow 2.5G rates only in forced link mode
sfp - fixed link establishment with S+DA0001 DAC cables
sfp - ignore irrelevant extended compliance code for SFP modules
sfp - improved SFP interface handling for 98DX224S, 98DX226S, 98DX3236, 98DX8208, and 98DX8216 switch chips
sfp - improved link establishment for SFP copper modules
sfp - improved link establishment with certain modules for hEX S device
sfp - show 10M and 100M supported rates for RJ45 copper modules
ssh - added cipher and hash function acceleration for ARM64 and x86 architectures
ssh - fix error that caused large chunks of text not being pasted in their entirety into console
supout - added VXLAN FDB section
supout - added multiple WiFi sections
switch - fixed service VLAN tagged IP multicast packets for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches
system - added "rtrace" debugging tool (CLI only)
system - improved incoming and outgoing TCP connection performance
system - improved internal process communication performance
traffic-generator - improved system stability when modifying interfaces
usb - added support for RTL8152 USB ethernet on ARM, ARM64 and x86
vpls - improved performance when decapsulating data
vrf - fixed ICMP reply lookup
webfig - allow to display comments in multiline or compact modes
webfig - make table headers always visible
webfig - use local storage for user preferences
wifi - added "flat-snoop" tool for surveying WiFi APs and stations (CLI only)
wifi - added "radio-mac" variable for "name-format" provisioning setting
wifi - added "remove" command in "capsman/remote-cap" menu
wifi - after radar detections, avoid selection of channels not permitted by the user
wifi - changed CAPsMAN generated certificate common name
wifi - create first interface without number when using "name-format" provisioning setting
wifi - enable protected interworking ANQP responses
wifi - fixed EAP authentication failures when the Session-Timout RADIUS attribute is defined
wifi - fixed occasional failures to start on 20/40mhz-eC channels for 2.4GHz 802.11ax interfaces
wifi - fixed overridden datapath settings on CAP when unsetting from CAPsMAN
wifi - improved CAPsMAN stability during provisioning
wifi - make slave APs use datapath bridge settings inherited from master by default
wifi - removed "openflow-switch" setting
wifi-qcom - added fast-path for received packets
winbox - added "Hw. Offload" property under "IP/Firewall/Filter" menu
winbox - added "Ping" button under "IP/DHCP Server/Leases" menu
winbox - added "Tx bps" and "Rx bps" monitor values under "WiFi/Registration" menu
winbox - added "none" argument for "Preshared Key" under "WireGuard/Peers" menu
winbox - added icon to entries under "WiFi/Access List" menu
winbox - added missing "qos-classifier" argument for "Hw. Caps" under "WiFi/Radios" menu
winbox - added missing arguments for "MAC Format" under "Wireless/Security Profiles/RADIUS" menu
winbox - allow opening entries under "WiFi/Registration" menu
winbox - fixed default "Name Format" property under "WiFi/Provisioning" menu
winbox - fixed minor typo under "Routing/BFD" menu
winbox - improved connection speed
winbox - updated "wireless" and "wifi" menus
wireless - fixed "wlan1" default name for RBSXTsqG-5acD and RBLDFG-5acD
wireless - fixed snooper information gathering from re-assocation requests
wireless - keep configuration after manual package removal

dhcp - fixed DHCP server "authoritative" and "delay-threshold" settings (introduced in v7.11.1);

*) bridge - fixed fast-path forwarding with HW offloaded vlan-filtering (introduced in v7.11);
*) bridge - fixed untagged VLAN entry disable;
*) bridge - fixed vlan-filtering stability with HW and non-HW offloaded ports (introduced in v7.10);
*) bridge - improved system stability;
*) bridge - improved vlan-filtering bridge stability with CAPsMAN (introduced in v7.11);
*) console - improved stability and responsiveness;
*) dhcp - fixed DHCP server and relay related response delays;
*) ipsec - fixed IPSec policy when using modp3072;
*) lte - fixed startup race condition when SIM card is in "up" slot for LtAP mini;

Уважаемый RuFull, поправьте меня, если я ошибаюсь. По ссылке не "полный пакет для администраторов сети", а клиент к серверу на RouterOS, и самостоятельно его использовать нельзя. Полный комплект "клиент + сервер" The Dude был до версии 3.6.

*) api - disallow executing commands without required parameters;
*) bfd - fixed "actual-tx-interval" value and added "remote-min-tx" (CLI only);
*) bfd - improved system stability;
*) bluetooth - added "decode-ad" command for decoding raw Bluetooth payloads (CLI only);
*) bluetooth - added "Peripheral devices" section which displays decoded Eddystone TLM and UID, iBeacon and MikroTik Bluetooth payloads;
*) bluetooth - added new AD structure type "service-data" for Bluetooth advertisement;
*) bridge - added more STP-related logging;
*) bridge - added warning when VLAN interface list contains ports that are not bridged;
*) bridge - fixed MAC learning on "switch-cpu" port with enabled FastPath;
*) bridge - fixed MSTP BPDU aging;
*) bridge - fixed MSTP synchronization after link down;
*) bridge - prevent bridging the VLAN interface created on the same bridge;
*) certificate - allow to import certificate with DNS name constraint;
*) certificate - fixed PEM import;
*) certificate - fixed trust store CRL link if generated on an older version (introduced in v7.7);
*) certificate - improved CRL download retry handling;
*) certificate - removed request for "passphrase" property on import;
*) certificate - require CRL presence when using "crl-use=yes" setting;
*) certificate - restored RSA with SHA512 support;
*) conntrack - fixed "active-ipv4" property;
*) console - added ":convert" command;
*) console - added default value for "rndstr" command (16 characters from 0-9a-zA-Z);
*) console - fixed incorrect date when printing "value-list" with multiple entries;
*) console - fixed minor typos;
*) console - fixed missing "parent" for script jobs (introduced in v7.9);
*) console - fixed missing return value for ping command in certain cases;
*) console - fixed printing interval when resizing terminal;
*) console - improved flag printing in certain menus;
*) console - improved stability and responsiveness;
*) console - improved stability when canceling console actions;
*) console - improved stability when using fullscreen editor;
*) console - improved timeout for certain commands and menus;
*) console - improved VPLS "cisco-id" argument validation;
*) container - added IPv6 support for VETH interface;
*) container - added option to use overlayfs layers;
*) container - adjust the ownership of volume mounts that fall outside the container's UID range;
*) container - fixed duplicate image name;
*) container - fixed IP address in container host file;
*) defconf - do not change admin password if resetting with "keep-users=yes";
*) dhcp-server - fixed setting "bootp-lease-time=lease-time";
*) discovery - fixed "lldp-med-net-policy-vlan" (introduced in v7.8);
*) dns - improved system stability when processing static DNS entries with specified address-list;
*) ethernet - fixed forced half-duplex 10/100 Mbps link speeds on CRS312 device;
*) ethernet - improved interface stability for CRS312 device;
*) fetch - improved timeout detection;
*) firewall - added warning when PCC divider argument is smaller than remainder;
*) firewall - fixed mangle "mark-connection" with "passthrough=yes" rule for TCP RST packets;
*) firewall - improved system stability when using "endpoint-independent-nat";
*) graphing - added paging support;
*) health - added more gradual control over fans for CRS3xx, CRS5xx, CCR2xxx devices;
*) health - fixed configuration export for "/system/health/settings" menu;
*) hotspot - allow number as a first symbol in the Hotspot server DNS name;
*) ike1 - fixed Phase 1 when using aggressive exchange mode (introduced in v7.10);
*) ike2 - improved SA rekeying reply process;
*) ike2 - improved system stability when closing phase1;
*) ike2 - improved system stability when making configuration changes on active setup;
*) ike2 - log "reply ignored" as non-debug log message;
*) ipsec - fixed public key export (introduced in v7.10);
*) ipsec - fixed signature authentication using secp521r1 certificate (introduced in v7.10);
*) ipsec - improved IKE2 rekey process;
*) ipsec - properly check ph2 approval validity when using IKE1 exchange mode;
*) l3hw - changed minimal supported values for "neigh-discovery-interval" and "neigh-keepalive-interval" properties;
*) l3hw - fixed /32 and /128 route offloading after nexthop change;
*) l3hw - fixed incorrect source MAC usage for offloaded bonding interface;
*) l3hw - improved system responsiveness during partial offloading;
*) l3hw - improved system stability during IPv6 route offloading;
*) l3hw - improved system stability;
*) led - fixed manually configured user LED for RB2011;
*) leds - blink red system-led when LTE is not connected to the network on D53 devices;
*) leds - fixed system-led color for "GSM EGPRS" RAT on D53 devices;
*) lora - added new EUI field;
*) lora - added uplink message filtering option using NetID or JoinEUI;
*) lora - moved LoRa service to IoT package;
*) lora - properly apply configuration changes when multiple LoRa cards are used;
*) lora - updated LoRa firmware for R11e-LR8, R11e-LR9 and R11e-LR2 cards;
*) lte - added "at-chat" support for Dell DW5821e-eSIM modem;
*) lte - added "at-chat" support for Dell DW5829 modem;
*) lte - added "at-chat" support for Fibocom L850-GL modem;
*) lte - added "at-chat" support for SIMCom 8202G modem;
*) lte - added "band" info to the "monitor" command for MBIM modems that support serving cell info reporting over MBIM;
*) lte - added extended support for Neoway N75 modem;
*) lte - fixed Dell DW5221E "at-chat" support;
*) lte - fixed LtAP mini default SIM slot "down" changeover to "up" after an upgrade (introduced in v7.10beta1);
*) lte - fixed NR SINR reporting for Chateau 5G;
*) lte - fixed R11e-LTE, R11e-LTE6 legacy 2G/3G RAT mode selection;
*) lte - fixed Telit LE910C4 "at-chat" support;
*) lte - improved initial interface startup time for SXT LTE 3-7;
*) lte - improved system stability when changing the "radio" state for MBIM modems;
*) lte - only listen to DHCP packets for LTE passtrough interface in auto mode when looking for the host;
*) modem - added initial support for BG77 modem DFOTA firmware update;
*) modem - changed Quectel EC25 portmap to expose DM (diag port), DM channel=0, GPS channel=1;
*) modem - fixed missing sender's last symbol in SMS inbox if the sender is an alphabetic string;
*) mpls - improved MPLS TCP performance;
*) mqtt - added more MQTT publish configuration options;
*) mqtt - added new MQTT subscribe feature;
*) netwatch - added "src-address" property;
*) netwatch - changed "thr-tcp-conn-time" argument to time interval;
*) ovpn - do not try to use the "bridge" setting from PPP/Profile, if the OVPN server is used in IP mode (introduced in v7.10);
*) ovpn - fixed OVPN server peer-id negotiation;
*) ovpn - fixed session-timeout when using UDP mode;
*) ovpn - improved key renegotiation process;
*) ovpn - include "connect-retry 1" and "reneg-sec" parameters into the OVPN configuration export file;
*) ovpn - properly close OVPN session on the server when client gets disconnected;
*) package - treat disabled packages as enabled during upgrade;
*) poe - fixed missing PoE configuration section under specific conditions;
*) poe-out - advertise LLDP power-mdi-long even if no power allocation was requested (introduced in v7.7);
*) pppoe - fixed PPPoE client trying to establish connection when parent interface is inactive;
*) profile - added "container" process classifier;
*) profile - properly classify "console" related processes;
*) qos-hw - keep VLAN priority in packets that are sent from CPU;
*) quickset - correctly apply configuration when using "DHCP Server Range" property;
*) resource - fixed erroneous CPU usage values;
*) rose-storage - added "scsi-scan" command (CLI only);
*) rose-storage - added disk stats for ramdisks;
*) rose-storage - fixed RAID 0 creation;
*) rose-storage - limit striped RAID element size to smallest disk size;
*) route - added comment for BFD configuration (CLI only);
*) route - convert BFD timers from milliseconds to microseconds after upgrade;
*) routerboard - fixed "gpio-function" setting on RBM33G ("/system routerboard upgrade" required);
*) routerboard - improved RouterBOOT stability for Alpine CPUs ("/system routerboard upgrade" required);
*) routerboard - removed unnecessary serial port for netPower16P and hAP ax lite devices ("/system routerboard upgrade" required);
*) routerboot - increased etherboot bootp timeout to 40s on MIPSBE and MMIPS devices ("/system routerboard upgrade" required);
*) sfp - fixed incorrect optical SFP temperature readings (introduced in v7.10);
*) sfp - improved interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 based switches;
*) sfp - improved optical QSFP interface handling for 98DX8332, 98DX3257, 98DX4310, 98DX8525 switches;
*) sfp - improved Q/SFP interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches;
*) sfp - reduce CPU load due to SFP interface handling for CCR2116, CCR2216, CCR2004-12S+2XS, CRS312, CRS518 devices (introduced in v7.9)
*) sms - increased wait time for modem startup;
*) ssh - fixed host public key export (introduced in v7.9);
*) ssh - fixed private key import (introduced in v7.9);
*) ssh - fixed SSH key agreement on the client side when ed25519 used under server settings;
*) ssh - fixed user RSA private key import;
*) switch - fixed "reset-counters" for "switch-cpu";
*) switch - fixed BPDU packet processing on MT7621, MT7531 with HW offloaded vlan-filtering;
*) switch - improved multicast packet forwarding on MT7621;
*) system - disallow setting a non-existing CPU core number for system IRQ;
*) system - increased maximum supported CPU core count to 512 on CHR and x86;
*) system - reduced RAM usage for SMIPS devices;
*) tftp - improved file name matching;
*) user - added "sensitive" policy requirement for SSH key and certificate export;
*) w60g - improved stability for Cube 60Pro ac and CubeSA 60Pro ac devices;
*) webfig - added option to enable wide view in item list;
*) webfig - fixed "Connect To" configuration changes for L2TP client;
*) webfig - fixed gray-out italic font for entries after enable;
*) webfig - use router time zone for date and time;
*) wifiwave2 - added "steering" parameters and menu to set up and monitor AP neighbor groups (CLI only);
*) wifiwave2 - added more information on roaming candidates to BSS transition management requests (802.11v) and neighbor report responses (802.11k);
*) wifiwave2 - added option to filter frames captured by the sniffer command (CLI only);
*) wifiwave2 - automatically add wifi interfaces to appropriate bridge VLAN when wireless clients with new VLAN IDs connect;
*) wifiwave2 - changed default behavior for handling duplicate client MAC addresses, added settings for changing it (CLI only);
*) wifiwave2 - enabled PMK caching with EAP authentication types;
*) wifiwave2 - fixed "reg-info" information for several countries;
*) wifiwave2 - fixed "security.sae-max-failure" rate not limiting authentications correctly in some cases;
*) wifiwave2 - fixed clearing CAPsMAN Common Name when disabling "lock-to-caps-man";
*) wifiwave2 - fixed interface hangs on IPQ6010-based boards (introduced in v7.9);
*) wifiwave2 - improved stability when changing interface settings;
*) wifiwave2 - improved stability when receiving malformed WPA3-PSK authentication frames;
*) wifiwave2 - make info log less verbose during client roaming (some info moved to wireless,debug log);
*) wifiwave2 - rename "reg-info" country argument from "Macedonia" to "North Macedonia";
*) wifiwave2 - use correct status code when rejecting WPA3-PSK re-association;
*) winbox - added missing status values for Ethernet and Cable Test;
*) winbox - added warning about non-running probe due to "startup-delay";
*) winbox - fixed "Storm Rate" property under "Switch/Port" menu;
*) winbox - fixed BGP affinity display;
*) winbox - fixed default "Ingress Filtering" value under "Bridge" menu;
*) winbox - improved supout.rif progress display;
*) winbox - rename "Group Master" property to "Group Authority" under "Interface/VRRP" menu;
*) wireguard - fixed peer connection using DNS name on IP change;
*) wireguard - fixed peer IPv6 "allowed-address" usage;
*) wireless - ignore EAPOL Logoff frames;
*) x86 - updated e1000 driver;

*) wifiwave2 - fixed interface hangs on IPQ6010-based boards (introduced in v7.9);

!) ipv6 - fixed DNS server processing by IPv6/ND services (CVE-2023-32154);
!) route - added BFD;
bgp - allow to filter BGP sessions by AFI;
bgp - changed default VPNv4 import distance to iBGP value (200);
bgp - do not check route distinguisher on import;
bgp - fixed "as-override" and rename to "output.as-override";
bgp - fixed "remove-private-as" and rename to "output.remove-private.as";
bgp - show address family in advertisements;
bgp - show approximate received prefix count by the session;
branding - fixed custom logo (introduced in v7.8);
bridge - fixed HW offloaded STP state on port disable;
bridge - fixed HW offloading for vlan-filtered bridge on devices with multiple switches (introduced in v7.8);
bridge - fixed incorrect host moving between ports with enabled FastPath;
certificate - fixed displaying of certificate serial number;
certificate - improved error reporting for Let's Encrypt certificate;
certificate - restore available "key-usage" property options;
conntrack - added read-only "active-ipv4" and "active-ipv6" fields to "/ip/firewall/connection/tracking" (CLI only);
console - added timeout error for configuration export;
console - changed time format according to ISO standard;
console - disable output when using "as-value" parameter;
console - fixed ":terminal inkey" input when resizing terminal;
console - fixed "print without-paging" output in some cases;
console - hide past commands with sensitive arguments;
console - improved stability when using command completion;
container - fixed "container pull" to support OCI manifest format;
container - fixed crash due to missing system directories;
container - improved default internal environment values;
defconf - allow to use device factory preset credentials in Flashfig and Netinstall configuration files;
defconf - fixed default configuration for RBSXTLTE3-7;
dhcp-server - fixed accounting on RADIUS interim update;
dhcpv4-server - added name for "IPv6-Only Preferred" option (108) in debug logs;
doh - less verbose logging;
firewall - added "endpoint-independent-nat" support;
firewall - added "nth" option for IPv6 firewall;
gps - expose GPS port for Quectel RM520N-GL;
ike2 - improved child SA delete request processing;
iot - added option to send Modbus function code commands directly from RouterOS (CLI only);
ipsec - added hardware acceleration support for IPQ-5010 (hAP ax lite);
ipsec - refactor public key authentication;
ipsec - removed "ec2n185" and "ec2n155" values from proposal configurations;
ipv6 - fixed IPv6 address removal;
l3hw - added "autorestart" option to L3HW settings;
l3hw - added advanced configuration options for fine-tuning the L3HW offload (l3hw-settings are cleared after upgrade or downgrade) (CLI only);
l3hw - added error message and reset "l3-hw-offloading=no" if L3HW driver fails to start;
l3hw - added monitoring options for L3HW utilization (CLI only);
l3hw - fixed /32 route deletion;
l3hw - fixed IPv6 ECMP route offloading;
l3hw - fixed offloading of /32 IPv4 and /128 IPv6 routes;
l3hw - fixed route table offloading during large volume of route updates;
l3hw - improved host and nexthop offloading;
l3hw - improved offloading of IPv6 hosts after L3HW driver restart;
l3hw - improved performance of partial offloading;
l3hw - improved route offloading after gateway change;
l3hw - improved system stability for partial routing table offload;
leds - fixed modem RAT mode indication on hAP ac^3 LTE6 WPS mode button LEDs;
lora - improved gateway card detection and upgrade logic;
lora - updated firmware version for LoRaWAN gateway (for R11e-LoRa8, R11e-LoRa9 cards);
lte - added serving cell query for MBIM modems with necessary MBIM extension;
lte - disable DHCP request filtering (UDP port 67) for Chateau 5G;
lte - fixed APN authentication for R11e-LTE6 modem;
lte - fixed Google Pixel 7 tethering support;
lte - improved MBIM modem firmware reported error handling when settings RAT modes;
lte - improved modem firmware upgrade stability for MBIM modems;
lte - improved stability for Chateau 5G LTE modem firmware upgrade;
lte - reduced SIM slot switchover time for MBIM modems with UUIC reset support;
lte - stop "cell-monitor" on LTE interface configuration change for MBIM modems;
mpls - added FastPath support;
netwatch - added warning about non-running probe due to "startup-delay" (CLI only);
ovpn - added initial support for V2 data transfer protocol;
ovpn - improved system stability;
poe - fixed bogous "poe-in-voltage" values when using DC jack for RB5009;
pppoe - fixed PPPoE client scan when server is sending PADO messages without Service-Name tag;
qos-hw - added QoS marking support for 98DXxxxx switches (CLI only);
qos-hw - renamed VLAN "priority" field to "pcp" to avoid confusion;
rose-storage - added support for multiple smb users and smb shares;
route - improved system stability when removing multicast forwarding entries;
routerboard - fixed memory test on CCR2116-12G-4S+ ("/system routerboard upgrade" required);
routerboard - improved RouterBOOT stability for Alpine CPUs ("/system routerboard upgrade" required);
routerboot - increased "preboot-etherboot" maximum value to 30 seconds ("/system routerboard upgrade" required);
scheduler - fixed incorrectly started scheduler during reboot or shutdown;
sfp - fixed "rate" monitor value for SFP interface on L009UiGS series devices;
sfp - fixed combo-ether link monitor for CRS328-4C-20S-4S+ switch;
sfp - fixed combo-sfp linking at 1G rate for CRS312 switch;
sfp - improved 10G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 based switches;
sfp - improved module compatibility with bad EEPROM data for RB4011, RB5009, CCR2xxx, CRS312 and CRS518 devices;
sfp - improved Q/SFP interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches;
sfp - improved SFP interface handling for RB4011, RB5009, CCR2xxx and CRS518 devices;
sfp - improved system stability with certain SFP modules for CCR2216 and CRS518 devices;
sfp - report EEPROM data even if "auto-init-failed" has occurred;
smb - improved SMB v1 operation;
sniffer - fixed large .pcap file limit;
snmp - added "engine-id-suffix" setting and display actual "engine-id" as read-only property;
snmp - added BGP peer table support IPv4 only (1.3.6.1.2.1.15.3.1);
snmp - added new "mtxrInterfaceStatsTxRx1024ToMax" OID to MIKROTIK-MIB;
ssh - added inline key "passphrase" property;
ssh - fixed RouterOS SSH client login when using a key (introduced in v7.9);
switch - added more precise "storm-rate" configuration options for 98DXxxxx switches (CLI only);
switch - fixed storm rate on 10G links for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255 switches;
system - improved watchdog reporting in log after reboots for several ARM and ARM64 devices;
system - reduced RAM usage for SMIPS devices;
tile - fixed support for microSD card;
tr069 - added 5G SCC "SNR" parameter for modems that report it;
upgrade - do not run manual upgrade if some packages are missing;
ups - fixed updating of "battery-voltage" property;
vrrp - added warning if "sync-connection-tracking=yes" while the global connection tracking is inactive;
vrrp - added warning if the VRRP group is misconfigured;
vrrp - added warning if VRRP or its interface does not have an IP address;
vrrp - do not start connection synchronization if the global connection tracking is inactive;
vrrp - fixed issue where disabled VRRP interface is affecting group;
vrrp - fixed VRRP interface state on physical cable disconnection;
vrrp - improved system stability on changing "group-authority" or "sync-connection-tracking";
vrrp - renamed "group-master" to "group-authority" to avoid confusion with VRRP master;
vrrp - send VRRP announcements only by "group-authority";
w60g - improved interface stability for PTMP setups;
webfig - added high-resolution favicon;
webfig - allow limitless upper bounds for number range;
webfig - allow to set "0" second time for fields with default values;
webfig - changed time format according to ISO standard;
webfig - display date and time in local time zone;
webfig - fixed missing "WifiWave2" menu;
webfig - fixed missing property names in "WifiWave2" menu;
webfig - redesigned item configuration display;
webfig - redesigned top menu bar;
webfig - removed "Tools/Telnet" menu;
webfig - removed auto-login with default credentials (admin without a password);
wifiwave2 - avoid transmitting extra bytes at the end of the packet after stripping a VLAN tag;
wifiwave2 - do not show placeholder transmit power values on interface startup;
wifiwave2 - fixed CAP connection when provisioning "manager=capsman";
wifiwave2 - fixed CAP interface name when using "name-format";
wifiwave2 - fixed connectivity issues wheen access-list is used;
wifiwave2 - fixed DFS channel availability warning (introduced in v7.9);
wifiwave2 - fixed dynamic interface adding to bridge on CAP device;
wifiwave2 - fixed inability to disable CAPsMAN when there are RADIUS-authenticated clients connected;
wifiwave2 - fixed incorrect limits on number of interfaces in station mode;
wifiwave2 - fixed interface name change when restoring backup;
wifiwave2 - fixed key handshake timeout with re-associating clients;
wifiwave2 - fixed OWE authentication compatibility with 802.11ax client devices;
wifiwave2 - fixed OWE authentication compatibility with third-party client devices (introduced in v7.8);
wifiwave2 - fixed wireless throughput issues after 802.11r client roaming events on 802.11ac devices;
wifiwave2 - improve protections against DoS attacks on WPA3-PSK;
wifiwave2 - improved logging when an interface is unable to assign a VLAN tag to client;
wifiwave2 - improved system stability when trying to exceed virtual AP limit;
wifiwave2 - less verbose logging when WPA3-PSK clients are connecting;
wifiwave2 - other system stability improvements;
wifiwave2 - restore interface running state when connection to CAPsMAN is lost;
winbox - added "MPLS/Settings" menu;
winbox - added "Queues" configuration tab when creating new entries under "IPv6/DHCP-Server" menu;
winbox - rename "URL" property to "Action data" under "IP/Web-Proxy/Access" menu;
wireguard - fixed IPv6 traffic processing with multiple peers;
wireguard - retry "endpoint-address" DNS query on failed resolve;
x86 - ice driver update to v1.11.14;
zerotier - make "identity" setting sensitive;

*) bgp - added comment functionality for BGP VPN (CLI only);
*) bgp - do not reflect route back to sender;
*) bgp - fixed BGP advertisement PCAP saver;
*) bgp - fixed connection establishment using link-local addresses;
*) bgp - improved BGP advertisement printing;
*) bgp - improved BGP session load distribution across multiple CPU cores;
*) bgp - properly set "bgp-ext-communities" from "communities" list;
*) bluetooth - added unique advertise message filtering;
*) bonding - properly detect VPLS interface state changes;
*) branding - fixed identity setting from branding package;
*) bridge - added support for static MDB entries;
*) bridge - disallow port-controller while the bridge has MSTP enabled;
*) bridge - fixed "edge=yes" setting for MSTP;
*) bridge - fixed MSTP compatibility with STP;
*) bridge - fixed R/M/STP bridge identifier on protocol-mode change;
*) bridge - fixed RSTP BCP with bridged PPP interfaces;
*) bridge - fixed STP blocking state on port-controller;
*) bridge - fixed host moving with fast-path;
*) bridge - fixed incorrect root port blocking for MSTP;
*) bridge - fixed master port conversion;
*) bridge - fixed mst-override port priority for MSTP;
*) bridge - fixed port priority for STP and RSTP;
*) bridge - improved port-controller system stability;
*) bridge - improved system stability when using MSTP and many VLAN mappings;
*) bridge - removed "age" monitoring property from the host table;
*) certificate - improved Let's Encrypt logging and error recovery;
*) certificate - improved certificate management, signing and storing processes;
*) conntrack - improved system stability when PPTP helper is used;
*) conntrack - improved system stability when processing SCTP connections on TILE;
*) console - updated copyright notice;
*) container - fixed access to "/dev/stderr" from containers;
*) container - fixed handling of groups and usernames from Dockerfile;
*) container - fixed tar extracting;
*) container - made "ram" and "tmp" directories use tmpfs;
*) crs1xx/2xx - fixed "new-customer-pcp" setting for ACL rules;
*) dhcpv6-client - handle receiving of invalid T1 and T2 times;
*) discovery - added "discovered-by" parameter to indicate which protocol discovered the neighbor;
*) discovery - added "mode" parameter for discovery configuration;
*) discovery - fixed neighbor discovery on Mesh interfaces;
*) discovery - report IPv6 LL address if global address does not exist;
*) disk - added support for manual RAM file system (TMPFS) creation (CLI only);
*) disk - improved external storage file system mounting, formatting and naming;
*) dns - do not query upstream DNS servers for matched regex records;
*) dns - fixed changing of "forward-to" parameter for FWD entries;
*) dns - fixed handling of CNAME entry pointing to another FWD entry;
*) dns - fixed handling of FWD entries where "forward-to" is a hostname;
*) dns - fixed incorrect TTL=0 reporting for cached entries;
*) dns - improved resolved static entry addition to address list;
*) dns - improved service stability when CNAME points to a FWD entry;
*) dns - query upstream DNS servers for other record types even if static entry exists;
*) dns - require "write" policy for DNS cache flushing;
*) dns - respond with lowest TTL for inner queries containing A, AAAA, CNAME chains;
*) filesystem - fixed repartition on devices with containers;
*) firewall - added "set-priority" option for IPv6 mangle firewall;
*) firewall - made "dynamic" parameter settable for IPv4 address lists;
*) hotspot - added "install-hotspot-queue" parameter to control dynamic queue creation;
*) hotspot - fixed maximum allowed connections limitation;
*) hotspot - fixed minor memory leak after each successful login from WEB;
*) hotspot - improved limitation of maximum allowed connections;
*) hotspot - improved system stability when clients migrate between bridge ports or VLANs;
*) ike1 - disallow "remote-id" setting for identity;
*) ike1 - fixed XAuth responder trying to recreate phase 1;
*) ike1 - improved expired IPsec-SA processing;
*) ike2 - added support for ChaChaPoly1305 encryption;
*) ike2 - added support for ChaChaPoly1305 encryption;
*) ike2 - added support for DH Group 31 (EC25519) (CLI only);
*) ike2 - fixed rekey notify creation;
*) ike2 - improved certificate payload parsing;
*) interface - do not allow adding invalid "veth" interfaces;
*) interface - improved system stability when handling large packets on CCR2216;
*) interface - show RTL8153 CDC Modem Device as ethernet;
*) ipsec - added "current-address" parameter for peers with DNS address;
*) ipsec - added hardware acceleration support for IPQ-6010;
*) ipsec - added support for AVX optimized SHA acceleration;
*) ipsec - improved "H" (hw-aead) flag presence for accelerated SA's;
*) ipsec - improved IKE payload processing;
*) ipsec - improved configuration of IPsec proposal auth-algorithms;
*) ipsec - removed Blowfish and Camellia encryption algorithms for IKE;
*) ipv6 - do not generate LL addresses for VPN interfaces when IPv6 is disabled;
*) ipv6 - do not use invalid/disabled global addresses for IPv6 ND;
*) l2tp - added VRF support for L2TP Ether interfaces;
*) l3hw - fixed host offloading in a case of MAC address change;
*) l3hw - fixed offloaded NAT for CRS309 switch;
*) l3hw - improved system stability when disabling or enabling L3HW offloading;
*) leds - fixed default LED configuration on netFiber 9;
*) leds - fixed turning off LEDs after system shutdown;
*) lte - added AT channel support for Telit FN990;
*) lte - added CA information in 5G mode;
*) lte - fixed error handling on opening AT control channel;
*) lte - fixed new MTU value validation;
*) lte - improved stability when LTE passthrough is enabled on Chateau 5G;
*) lte - properly show leading zeros in MCC and MNC strings;
*) lte - show band number in "ca-band" in NSA mode on Chateau 5G;
*) lte - use RSRP value reported by MBIM signal for MBIM type modems;
*) macsec - fixed packet duplication on Ethernet interface;
*) macsec - fixed packet transmission using traffic-generator;
*) macsec - fixed packet validation;
*) modem - added USB tethering support for Google Pixel 7 devices;
*) mpls - added VPLS LDP information in remote/local-mappings;
*) mpls - fixed assigning of explicit null label for IPv6;
*) netinstall - added "-i " parameter for Netinstall (CLI Linux);
*) netinstall - fixed Netinstall procedure on RouterBOOT versions from 3.27 to 6.41;
*) netinstall - improved automatic netbooting interface selection;
*) netwatch - added support for "https-get" type (CLI only);
*) netwatch - fixed reporting of VRF name in logging messages;
*) netwatch - improved "interval" and "packet-interval" coexistence for ICMP type;
*) ntp - log error message when server is unreachable;
*) ospf - fixed MD5 checksum calculation;
*) ospf - fixed simple authentication and checksums for NBMA and PTMP links;
*) ospf - fixed simple authentication checksum calculation;
*) ospf - fixed virtual-link address selection for PTP links;
*) ovpn - added "CBC" postfix to AES cipher names;
*) ovpn - added "route-nopull" option for client side;
*) ovpn - added hardware acceleration support for IPQ-6010;
*) ovpn - added support for IPv6 tunneling;
*) ovpn - fixed "Called-Station-Id" usage in RADIUS requests;
*) package - fixed missing menus when both "lora" and "wifiwave2" packages are installed;
*) ping - fixed ARP ping;
*) port - added serial port support for Telit FN990 modem;
*) port - do not show unusable USB port on hAP ax^2;
*) port - fixed R11e-LTE6 port mapping;
*) ppp - changed default lease time of dynamic DHCPv6 server to 1 day;
*) ppp - do not inherit routing mark for encapsulated packets;
*) ppp - fixed displaying of "info" command for PPP client;
*) ppp - improved authentication method negotiation;
*) pppoe - improved service stability when establishing PPPoE sessions;
*) quickset - fixed addition of bridge filter rules in bridged mode;
*) quickset - fixed interface list member table on configuration changes;
*) quickset - update DNS server IP address when changing router's IP address;
*) rb4011 - fixed reporting of current CPU frequency and changed default frequency to "auto";
*) sfp - added 2.5G SFP module support for RB5009;
*) sfp - allow usage of "10G Base-LR" mode for XS+31LC10D module;
*) snmp - added support for "lldpRemLocalPortNum" OID's;
*) snmp - improved stability when receiving bogus packets;
*) ssh - added support for Ed25519 key exchange;
*) ssh - do not allow SHA1 usage with strong crypto enabled;
*) ssh - fixed handling of non standard size RSA keys;
*) supout - added MSTI and mst-override monitor for bridge MSTP;
*) supout - added missing IPv6 firewall sections;
*) switch - avoid packet corruption in some setups for 98DX3257, 98DX3255, 98DX4310, 98DX8525 and 98PX1012 switches;
*) switch - fixed SFP Tx disable when changing auto-negotiation settings for 98DXxxxx and 98PX1012 switches;
*) switch - fixed egress mirror for 98DX4310 and 98DX8525 switches;
*) switch - hide invalid settings for 98DX3255 and 98DX8525 switch chips;
*) switch - improved 10G, 25G and 40G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98DX8525, 98PX1012 switches;
*) switch - improved 10G, 25G and 40G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches;
*) switch - improved 10G, 25G, 40G and 100G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches;
*) switch - improved 10Gbps Ethernet interface stability for 98DX8212 switch;
*) switch - improved 25G interface stability for 98PX1012, 98DX4310 and 98DX8525 switches (introduced in v7.6);
*) switch - increased the maximum value of "rate" for ACL rules;
*) swos - fixed "allow-from-ports" setting;
*) swos - fixed SwOS configuration changes from RouterOS;
*) swos - improved default SwOS backup file name;
*) system - allow up to 4GB of RAM allocation per process on x86, ARM64 and TILE;
*) system - improved handling of user policies;
*) timezone - updated timezone information from "tzdata2022g" release;
*) tr069-client - updated data model to version 2.15;
*) traffic-flow - fixed sending of sampling interval;
*) tunnels - added VRF support for EoIP, IPIP and GRE tunnels;
*) vpls - expose VPLS related debug logs to "vpls" logging topic;
*) vrrp - always use slave interface MTU;
*) vrrp - improved interface stability on configuration changes;
*) vxlan - added "local-address" parameter support;
*) vxlan - added VRF support;
*) w60g - improved system stability for Cube Pro devices;
*) webfig - ensure login page is displayed after each log out;
*) webfig - fixed accessing of WebFig when "Interface" menu is disabled by skin;
*) webfig - fixed displaying of VRF routes;
*) webfig - fixed input validation for "VPLS ID" parameter;
*) webfig - fixed setting of "DHCP Option Set" parameter;
*) webfig - improved WEB caching capabilities;
*) webfig - properly detect current location for navigation buttons;
*) webfig - properly show limited number of available options;
*) wifiwave2 - added "datapath" settings to configure data forwarding for an interface (CLI only);
*) wifiwave2 - added "ft-preserve-vlanid" parameter to control whether to change VLAN ID after FT;
*) wifiwave2 - added "provisioning" menu to automatically assign interface configurations to radios (CLI only);
*) wifiwave2 - added disable/enable commands to configuration profile sub-menus (CLI only);
*) wifiwave2 - added information of per-station throughput in the registration table;
*) wifiwave2 - added initial CAPsMAN support (only compatible with wifiwave2 interfaces) (CLI only);
*) wifiwave2 - added interworking/Hotspot 2.0 support (CLI only);
*) wifiwave2 - added more informative log messages on configuration profile changes;
*) wifiwave2 - added option to set per-client vlan-id in access list (only supported on 802.11ax interfaces) (CLI only);
*) wifiwave2 - do not permit a client device to be connected to more than one interface at a time;
*) wifiwave2 - fixed "radio-mac" provisioning matcher;
*) wifiwave2 - fixed 4-way handshake with TKIP;
*) wifiwave2 - improved compliance with regulatory domain information;
*) wifiwave2 - improved general system stability;
*) wifiwave2 - improved system stability when multiple virtual AP are configured;
*) wifiwave2 - properly report interface on which traffic is received when multiple station interfaces are used concurrently;
*) wifiwave2 - released packages for MMIPS, PPC, TILE and x86;
*) wifiwave2 - removed maximum limit for group key update interval and changed the default to 1 day;
*) winbox - added "Active" prefix for current "Circuit ID" and "Cookie Length" fields for L2TP-Ether interfaces;
*) winbox - added "Make Static" button to "IP/DHCP Server/Leases" menu;
*) winbox - added "bus" parameter for "USB Power Reset" command on Chateau ax;
*) winbox - added missing "force" parameter for new "IP/DHCP Server/Options" entries;
*) winbox - added missing "vlan-id" column under "IP/Hotspot/Hosts" table;
*) winbox - do not show LACP related status parameters for other bonding types;
*) winbox - fixed default MTU value for CAP interfaces;
*) winbox - fixed minor typo in "Zerotier" menu;
*) winbox - improved handling of large WinBox protocol messages;
*) winbox - increased maximum number of Winbox read-only sessions 5->25;
*) winbox - properly save "Interfaces/Detect Internet/Detect Internet State" menu in session file;
*) winbox - removed bogus VRF tab from "Interface" menu;
*) winbox - show "Switch" menu on Chateau 5G ax;
*) winbox - show "Switch" menu on NetFiber 9;
*) winbox - show "System/Health/Settings" only on boards that have configurable values;
*) winbox - show "System/RouterBOARD/Mode Button" on devices that have such feature;
*) winbox - show "USB Power Reset" menu on Chateau 5G ax;
*) winbox - show dynamic comment in WifiWave2 registration table;
*) wireless - fixed "nstreme" related parameter control in skins;
*) wireless - fixed setting of realms interworking parameter if realms-raw is unset;
*) x86 - added support for SUN 10G NICs;
*) x86 - improved igc driver support;

*) bgp - added support for BGP advertisement displaying (CLI only);
*) bgp - fixed reporting of session uptime;
*) bgp - improved session establishment speed after bootup;
*) bonding - fixed ARP monitor packets with bond's MAC address;
*) bonding - improved interface stability on slave configuration changes;
*) bonding - reduce "actual-mtu" according to interface "l2mtu";
*) branding - execute "autorun.scr" file when installing branding package;
*) capsman - fixed RADIUS accounting when EAP is used;
*) certificate - fixed SHA1 certificate name lookup;
*) certificate - improved certificate management, signing and storing processes;
*) certificate - restricted maximum retry attempt window for Let's Encrypt certificate to 60 minutes;
*) container - added "start-on-boot" parameter for automatic container startup;
*) container - allow changing container related parameters while it is running;
*) container - fixed usage of non-authenticated registries;
*) dhcpv4-server - fixed matcher functionality;
*) dhcpv4-server - fixed RADIUS accounting for local leases;
*) dhcpv4-server - improved service stability when removing dynamic leases;
*) dhcpv6-client - fixed false error status reporting when server offers T1 or T2 value as 0;
*) dns - added "match-subdomain" option for static entries (CLI only);
*) dot1x - fixed incorrect error when using "mac-auth";
*) ethernet - added "5Gbps" option for speed setting;
*) firewall - added "src/dst-address-type" parameter under "IPv6/Firewall/Mangle" menu;
*) firewall - disable IRC NAT helper on upgrade;
*) firewall - fixed IPv6 filtering with "in/out-interface" matcher that is in VRF;
*) firewall - fixed IRC NAT helper (CVE-2022-2663);
*) firewall - fixed usage of "netmap" action for IPv6 source NAT;
*) health - fixed fan speed and temperature reporting on CCR1072;
*) health - improved voltage reading on RBmAP-2nD;
*) hotspot - fixed service initialization when HTML directory configured on an external disk;
*) hotspot - fixed SSL usage on all HotSpot pages;
*) hotspot - improved stability when receiving bogus packets;
*) hotspot - limit maximum allowed connections based on free RAM resources;
*) hotspot - removed "routerboard.com" URL from default HotSpot advertise;
*) interface - added warning when interface has configured "mtu" higher than "l2mtu";
*) ipsec - added "invalid-packets" counter for Installed SA's menu;
*) ipsec - fixed packet processing by hardware encryption engine on MMIPS devices;
*) l3hw - added "l3hw-settings" sub menu under the switch menu;
*) l3hw - added support for IPv6 route offloading (disabled by default);
*) l3hw - fixed "H" flag presence for accelerated connection tracking entries;
*) l3hw - fixed possible packet loss when using HW offloaded NAT;
*) l3hw - improved connected host offloading on startup;
*) l3hw - improved connected IPv6 host offloading when routing table is nearly full for 98DX224S, 98DX226S, and 98DX3236 switch chips;
*) l3hw - improved system stability;
*) l3hw - made route offloading selection work only on unicast;
*) lte - added interface name in MTU debug logging message;
*) lte - added periodic IPv6 RS to trigger IPv6 adress acquisition for non-MBIM modems;
*) lte - added support for Neoway N75-EA;
*) lte - added support to perform FOTA upgrade from local file for EG12-EA, EG18-EA, RG502Q-AE, EG06-A, EP06-A modems;
*) lte - disabled RPLMN on Chateau 5G;
*) lte - fixed at-chat on Telit FN980m;
*) lte - fixed handover from UMTS to LTE when PS activation had failed for MBIM modems;
*) lte - fixed MBIM modem initialization;
*) lte - fixed re-attaching on PS detach for MBIM modems;
*) lte - removed reconnect delay after receiving DETACH notification for MBIM modems;
*) macsec - added configuration support with VLAN, ARP, DHCP and bridge tagging/untagging;
*) macsec - added logging support with "debug" and "dot1x" topics;
*) macsec - added support for MTU and L2MTU;
*) macsec - fixed interface after Ethernet link down;
*) macsec - fixed interface statistics and missing properties;
*) macsec - fixed interface status;
*) macsec - fixed multiple interface creation on different Ethernet ports
*) macsec - improved interface stability;
*) macsec - improved system stability for TILE and RB5009 devices;
*) macsec - removed interface from SMIPS devices;
*) mac-telnet - respect interface MTU setting when sending packets for MAC-Telnet and MAC-WinBox;
*) netwatch - fixed string variable values in script;
*) ntp - improved initial synchronization speed after bootup;
*) ospf - added SHA hashing for authentication;
*) ospf - fixed area "no-summary" setting;
*) ospf - fixed checksum calculation;
*) ospf - fixed displaying of VRF interface in related logs;
*) ospf - fixed transmit of LSA/ACK's on p2p interfaces;
*) ospf - improved logging when invalid configuration is detected;
*) ospf - refresh OSPFv3 interface configuration when IPv6 network becomes available;
*) ovpn - added IPv6 support;
*) ovpn - added VRF support for client;
*) ppp - fixed memory leak;
*) ppp - improved service stability when multiple users disconnect simultaneously;
*) pppoe - fixed MRU negotiation even when it is set to 1500;
*) qsfp - added interface temperature warnings and shutdown;
*) queue - improved stability for CAKE type queues;
*) radius - require "policy" policy for "login" service configuration;
*) rip - fixed passwordless MD5 authentication;
*) route-filter - fixed filtering for multiple community routes;
*) route-filter - fixed memory allocation when moving entries;
*) route - fixed disappearance of inactive static routes after upgrade;
*) route - fixed memory leak;
*) routerboard - return router's short name in "model" parameter;
*) routerboard - set "Delete" as default key to enter booter menu ("/system routerboard upgrade" required);
*) serial - added support for newer PL2303 serial controllers;
*) sfp - improved QSFP/SFP interface stability for 98DXxxxx and 98PX1012 switches;
*) sms - added "status-report-request" parameter for "send" command;
*) sms - fixed handling of SMS send attempts on unsupported modems;
*) snmp - improved retrieval of routing related OID's;
*) snmp - improved stability when receiving bogus packets;
*) ssh - increased key generation timeout;
*) sstp - added VRF support for client;
*) supout - added tr069-client section;
*) supout - removed duplicate "bridge-controller" section;
*) switch - improved traffic forwarding at 5Gbps rate for 98DX8525, 98DX4310 switches;
*) system - renamed error messages when trying to edit or remove dynamic entries;
*) tile - improved system stability when processing packets;
*) tr069-client - do not allow ":" symbols in username;
*) tr069-client - fixed reporting of "X_MIKROTIK_MimoRSRP" parameter;
*) user-manager - accept any username for outer authentication;
*) user-manager - added "comment" parameter for batch user creation;
*) user-manager - added support for multiple accounting sessions;
*) user-manager - added variables to print profile name and end time in voucher templates;
*) user-manager - allow specifying router's address as subnet;
*) user-manager - fixed "migrate-legacy-db" command;
*) user-manager - fixed session expiry when it is stopped by Disconnect-Request;
*) user-manager - forced username verification against client's certificate for EAP-TLS;
*) user-manager - use "Class" attribute to associate user's accounting session;
*) user - removed unused "dude" policy;
*) vrrp - fixed connection tracking synchronization on MMIPS and MIPSBE devices;
*) vxlan - added IPv6 support for remote VTEPs (only IPv4 or IPv6 will be used at the same time, use "vteps-ip-version" property on VXLAN interface to change the version);
*) w60g - improved system stability (introduced in v7.5);
*) webfig - fixed creation of new IPv6 routes;
*) webfig - fixed displaying of "Last Seen" parameter under "IP/DHCP Server/Leases" menu;
*) webfig - fixed hex input for "Host Uniq" field;
*) webfig - fixed unsetting of "endpoint-address" parameter under "WireGuard/Peers" menu;
*) wifiwave2 - fixed enabling of unconfigured interfaces;
*) wifiwave2 - fixed malfunction of WPA3 hash-to-element technique when enabled on multiple interfaces;
*) wifiwave2 - fixed RADIUS accounting after fast-transition;
*) wifiwave2 - fixed "WPA Key Data Length" value in EAPOL frame when FT-EAP-SHA384 AKM is used;
*) winbox - added "Active" prefix for current remote and local session ID fields for L2TP-Ether interfaces;
*) winbox - added "address-list" parameter under "IP/DNS/Static" menu;
*) winbox - added "File Name" option for "Load Config" parameter under "System/SwOS" menu;
*) winbox - added icon for TR069-client menu;
*) winbox - added MACsec support;
*) winbox - added quick filtering option for route list;
*) winbox - added "Rapid Commit" parameter support under "IPv6/DHCP-Server" menu;
*) winbox - added "Reset Traffic Counters" button for all interfaces;
*) winbox - added "type" and "status-report-request" parameters under "Tools/SMS" menu;
*) winbox - allow "timeout" value to be less than 1 under "Tools/Netwatch" menu;
*) winbox - allow to rename mounted disks;
*) winbox - changed order of tabs under "User Manager" menu;
*) winbox - changed "uptime" parameter format when using the wifiwave2 package;
*) winbox - do not show unavailable features on SMIPS devices;
*) winbox - fixed interface traffic graph drawing on RB5009;
*) winbox - fixed maximum allowed value for VRRP's "priority" parameter;
*) winbox - fixed "Session Uptime" value for not established sessions under "Routing/BGP" menu;
*) winbox - fixed "Session Uptime" value under "Routing/BGP" menu;
*) winbox - fixed "System/SwOS" window refreshing after changes are detected;
*) winbox - fixed "User Manager/User Profiles" window refreshing after changes are detected;
*) winbox - made "backup.swb" the default value for SwOS backup;
*) winbox - made sessions removable in "User Manager" menu;
*) winbox - show "F" flag for failed entries under "Interfaces/VRRP" menu;
*) winbox - show "Switch" menu on Chateau LTE18 ax;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - show "System/RouterBOARD/Mode Button" on devices that have such feature;
*) wireguard - strip whitespaces from keys;
*) wireless - disallowed using "default" as scan list or channel names;
*) wireless - fixed incorrectly applied ingress priority to non-wireless packets;
*) wireless - fixed missing wireless interface on some RB921GS-5HPacD devices;
*) www - improved stability when receiving bogus packets;
*) x86 - improved ixgbe driver support;

*) bgp - fixed VPNv4 route sending to remote peer;
*) bridge - fixed destination NAT when using "use-ip-firewall" setting;
*) bridge - fixed filter rules when using interface lists;
*) bridge - fixed priority tagged frame forwarding when using "frame-types=admit-only-untagged-and-priority-tagged" setting;
*) capsman - improved stability when running background scan on CAP;
*) crs3xx - improved maximum allowed ACL rule calculation;
*) crs3xx - improved system stability when creating many ACL rules on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) l2tp - improved system stability when processing L2TP control messages;
*) lte - made "no" the default value for "use-network-apn" parameter;
*) lte - made "RG502QEAAAR11A06M4G" the last OTA firmware version update for Chateau 5G in RouterOS 7.1.x release tree;
*) ntp - improved source address usage for reply packets;
*) ospf - fixed default route origination when "default-originate=if-installed" "redistribute" is enabled;
*) ospf - fixed incorrect LSA types when changing area types;
*) ppp - added "comment" option for PPPoE servers;
*) queue - improved system stability when using more than 255 unique packet marks;
*) route - fixed ECMP load balancing in FastPath;
*) route - fixed route addition to VRF from BGP;
*) route - fixed routing configuration export on SMIPS devices;
*) route-filters - renamed "*-set" to "*-list";
*) sfp - improved SFP module detection on CRS106 and CRS112;
*) switch - fixed port-isolation misconfiguration detection when using multiple switches;
*) traffic-flow - do not handle NAT events when "nat-events" is disabled;
*) ups - fixed UPS support;
*) winbox - added "VPN" tab to "Routing/BGP" menu;
*) winbox - added "VRF" parameter for "SSH" and "Telnet" menus;
*) winbox - do not show "Antenna Scan" button on devices that do not support it;
*) wireguard - allow same peer's public key for different interfaces;
*) wireless - added "3gpp-info" parameter to interworking configuration;
*) wireless - added EAP-AKA to interworking's realm configuration;
*) wireless - fixed interface initialization on Metal 2SHPn;

*) backup - added "force-v6-to-v7-configuration-upgrade" option on backup load to clear RouterOS v7 configuration and trigger reimport of RouterOS v6 route configuration (CLI only);
*) backup - fixed automatic backup generation when resetting configuration;
*) bgp - improvements on detecting peers local address when IPv6 link-local addresses are used;
*) capsman - improved system stability when processing CAP packet by Mangle;
*) dhcpv4-server - allow adding comments;
*) ethernet - improved system stability when receiving large packets on devices with 88F3720 CPU (nRAY, LHGG);
*) l3hw - fixed HW offloaded routing when using 7 or more VLAN interfaces;
*) l3hw - fixed bonding source MAC address;
*) l3hw - improved system stability when using 7 or more VLAN interfaces;
*) ntp - print log change time with time-zone applied;
*) ospf - fixed distance if "originate-default" is set to "always";
*) ospf - fixed neighbor stuck in ExStart;
*) ospf - fixed simple authentication;
*) ospf - improved overall stability;
*) ospf - improves stability when handling looped back OSPF packets;
*) upgrade - improved 404 error handling when checking for new versions;
*) webfig - fixed user policy lookup for skin designer;
*) winbox - made "Routing Filters/Rules" table sortable;
*) winbox - moved "IP/Route/Nexthops" and "IPv6/Route/Nexthops" menus to "Routing/Nexthops";
*) winbox - updated default "Routing/BGP/Peer Cache" table appearance;