Прошивка MikroTik RouterOS 7.6 | Скачать прошивку v7.6

Описание прошивки MikroTik RouterOS 7.6

Компания MikroTik обновила версию прошивки на канале stable до версии 7.6

Прошивку можно скачать с сайта https://mikrotik.com/download

Дата выхода прошивки: 17.10.2022

Версия прошивки 7.6 содержит такие доработки и исправления:

What’s new in 7.6 (2022-Oct-17 13:55):

*) bgp – added support for BGP advertisement displaying (CLI only);
*) bgp – fixed reporting of session uptime;
*) bgp – improved session establishment speed after bootup;
*) bonding – fixed ARP monitor packets with bond’s MAC address;
*) bonding – improved interface stability on slave configuration changes;
*) bonding – reduce “actual-mtu” according to interface “l2mtu”;
*) branding – execute “autorun.scr” file when installing branding package;
*) capsman – fixed RADIUS accounting when EAP is used;
*) certificate – fixed SHA1 certificate name lookup;
*) certificate – improved certificate management, signing and storing processes;
*) certificate – restricted maximum retry attempt window for Let’s Encrypt certificate to 60 minutes;
*) container – added “start-on-boot” parameter for automatic container startup;
*) container – allow changing container related parameters while it is running;
*) container – fixed usage of non-authenticated registries;
*) dhcpv4-server – fixed matcher functionality;
*) dhcpv4-server – fixed RADIUS accounting for local leases;
*) dhcpv4-server – improved service stability when removing dynamic leases;
*) dhcpv6-client – fixed false error status reporting when server offers T1 or T2 value as 0;
*) dns – added “match-subdomain” option for static entries (CLI only);
*) dot1x – fixed incorrect error when using “mac-auth”;
*) ethernet – added “5Gbps” option for speed setting;
*) firewall – added “src/dst-address-type” parameter under “IPv6/Firewall/Mangle” menu;
*) firewall – disable IRC NAT helper on upgrade;
*) firewall – fixed IPv6 filtering with “in/out-interface” matcher that is in VRF;
*) firewall – fixed IRC NAT helper (CVE-2022-2663);
*) firewall – fixed usage of “netmap” action for IPv6 source NAT;
*) health – fixed fan speed and temperature reporting on CCR1072;
*) health – improved voltage reading on RBmAP-2nD;
*) hotspot – fixed service initialization when HTML directory configured on an external disk;
*) hotspot – fixed SSL usage on all HotSpot pages;
*) hotspot – improved stability when receiving bogus packets;
*) hotspot – limit maximum allowed connections based on free RAM resources;
*) hotspot – removed “routerboard.com” URL from default HotSpot advertise;
*) interface – added warning when interface has configured “mtu” higher than “l2mtu”;
*) ipsec – added “invalid-packets” counter for Installed SA’s menu;
*) ipsec – fixed packet processing by hardware encryption engine on MMIPS devices;
*) l3hw – added “l3hw-settings” sub menu under the switch menu;
*) l3hw – added support for IPv6 route offloading (disabled by default);
*) l3hw – fixed “H” flag presence for accelerated connection tracking entries;
*) l3hw – fixed possible packet loss when using HW offloaded NAT;
*) l3hw – improved connected host offloading on startup;
*) l3hw – improved connected IPv6 host offloading when routing table is nearly full for 98DX224S, 98DX226S, and 98DX3236 switch chips;
*) l3hw – improved system stability;
*) l3hw – made route offloading selection work only on unicast;
*) lte – added interface name in MTU debug logging message;
*) lte – added periodic IPv6 RS to trigger IPv6 adress acquisition for non-MBIM modems;
*) lte – added support for Neoway N75-EA;
*) lte – added support to perform FOTA upgrade from local file for EG12-EA, EG18-EA, RG502Q-AE, EG06-A, EP06-A modems;
*) lte – disabled RPLMN on Chateau 5G;
*) lte – fixed at-chat on Telit FN980m;
*) lte – fixed handover from UMTS to LTE when PS activation had failed for MBIM modems;
*) lte – fixed MBIM modem initialization;
*) lte – fixed re-attaching on PS detach for MBIM modems;
*) lte – removed reconnect delay after receiving DETACH notification for MBIM modems;
*) macsec – added configuration support with VLAN, ARP, DHCP and bridge tagging/untagging;
*) macsec – added logging support with “debug” and “dot1x” topics;
*) macsec – added support for MTU and L2MTU;
*) macsec – fixed interface after Ethernet link down;
*) macsec – fixed interface statistics and missing properties;
*) macsec – fixed interface status;
*) macsec – fixed multiple interface creation on different Ethernet ports
*) macsec – improved interface stability;
*) macsec – improved system stability for TILE and RB5009 devices;
*) macsec – removed interface from SMIPS devices;
*) mac-telnet – respect interface MTU setting when sending packets for MAC-Telnet and MAC-WinBox;
*) netwatch – fixed string variable values in script;
*) ntp – improved initial synchronization speed after bootup;
*) ospf – added SHA hashing for authentication;
*) ospf – fixed area “no-summary” setting;
*) ospf – fixed checksum calculation;
*) ospf – fixed displaying of VRF interface in related logs;
*) ospf – fixed transmit of LSA/ACK’s on p2p interfaces;
*) ospf – improved logging when invalid configuration is detected;
*) ospf – refresh OSPFv3 interface configuration when IPv6 network becomes available;
*) ovpn – added IPv6 support;
*) ovpn – added VRF support for client;
*) ppp – fixed memory leak;
*) ppp – improved service stability when multiple users disconnect simultaneously;
*) pppoe – fixed MRU negotiation even when it is set to 1500;
*) qsfp – added interface temperature warnings and shutdown;
*) queue – improved stability for CAKE type queues;
*) radius – require “policy” policy for “login” service configuration;
*) rip – fixed passwordless MD5 authentication;
*) route-filter – fixed filtering for multiple community routes;
*) route-filter – fixed memory allocation when moving entries;
*) route – fixed disappearance of inactive static routes after upgrade;
*) route – fixed memory leak;
*) routerboard – return router’s short name in “model” parameter;
*) routerboard – set “Delete” as default key to enter booter menu (“/system routerboard upgrade” required);
*) serial – added support for newer PL2303 serial controllers;
*) sfp – improved QSFP/SFP interface stability for 98DXxxxx and 98PX1012 switches;
*) sms – added “status-report-request” parameter for “send” command;
*) sms – fixed handling of SMS send attempts on unsupported modems;
*) snmp – improved retrieval of routing related OID’s;
*) snmp – improved stability when receiving bogus packets;
*) ssh – increased key generation timeout;
*) sstp – added VRF support for client;
*) supout – added tr069-client section;
*) supout – removed duplicate “bridge-controller” section;
*) switch – improved traffic forwarding at 5Gbps rate for 98DX8525, 98DX4310 switches;
*) system – renamed error messages when trying to edit or remove dynamic entries;
*) tile – improved system stability when processing packets;
*) tr069-client – do not allow “:” symbols in username;
*) tr069-client – fixed reporting of “X_MIKROTIK_MimoRSRP” parameter;
*) user-manager – accept any username for outer authentication;
*) user-manager – added “comment” parameter for batch user creation;
*) user-manager – added support for multiple accounting sessions;
*) user-manager – added variables to print profile name and end time in voucher templates;
*) user-manager – allow specifying router’s address as subnet;
*) user-manager – fixed “migrate-legacy-db” command;
*) user-manager – fixed session expiry when it is stopped by Disconnect-Request;
*) user-manager – forced username verification against client’s certificate for EAP-TLS;
*) user-manager – use “Class” attribute to associate user’s accounting session;
*) user – removed unused “dude” policy;
*) vrrp – fixed connection tracking synchronization on MMIPS and MIPSBE devices;
*) vxlan – added IPv6 support for remote VTEPs (only IPv4 or IPv6 will be used at the same time, use “vteps-ip-version” property on VXLAN interface to change the version);
*) w60g – improved system stability (introduced in v7.5);
*) webfig – fixed creation of new IPv6 routes;
*) webfig – fixed displaying of “Last Seen” parameter under “IP/DHCP Server/Leases” menu;
*) webfig – fixed hex input for “Host Uniq” field;
*) webfig – fixed unsetting of “endpoint-address” parameter under “WireGuard/Peers” menu;
*) wifiwave2 – fixed enabling of unconfigured interfaces;
*) wifiwave2 – fixed malfunction of WPA3 hash-to-element technique when enabled on multiple interfaces;
*) wifiwave2 – fixed RADIUS accounting after fast-transition;
*) wifiwave2 – fixed “WPA Key Data Length” value in EAPOL frame when FT-EAP-SHA384 AKM is used;
*) winbox – added “Active” prefix for current remote and local session ID fields for L2TP-Ether interfaces;
*) winbox – added “address-list” parameter under “IP/DNS/Static” menu;
*) winbox – added “File Name” option for “Load Config” parameter under “System/SwOS” menu;
*) winbox – added icon for TR069-client menu;
*) winbox – added MACsec support;
*) winbox – added quick filtering option for route list;
*) winbox – added “Rapid Commit” parameter support under “IPv6/DHCP-Server” menu;
*) winbox – added “Reset Traffic Counters” button for all interfaces;
*) winbox – added “type” and “status-report-request” parameters under “Tools/SMS” menu;
*) winbox – allow “timeout” value to be less than 1 under “Tools/Netwatch” menu;
*) winbox – allow to rename mounted disks;
*) winbox – changed order of tabs under “User Manager” menu;
*) winbox – changed “uptime” parameter format when using the wifiwave2 package;
*) winbox – do not show unavailable features on SMIPS devices;
*) winbox – fixed interface traffic graph drawing on RB5009;
*) winbox – fixed maximum allowed value for VRRP’s “priority” parameter;
*) winbox – fixed “Session Uptime” value for not established sessions under “Routing/BGP” menu;
*) winbox – fixed “Session Uptime” value under “Routing/BGP” menu;
*) winbox – fixed “System/SwOS” window refreshing after changes are detected;
*) winbox – fixed “User Manager/User Profiles” window refreshing after changes are detected;
*) winbox – made “backup.swb” the default value for SwOS backup;
*) winbox – made sessions removable in “User Manager” menu;
*) winbox – show “F” flag for failed entries under “Interfaces/VRRP” menu;
*) winbox – show “Switch” menu on Chateau LTE18 ax;
*) winbox – show “System/Health” only on boards that have health monitoring;
*) winbox – show “System/RouterBOARD/Mode Button” on devices that have such feature;
*) wireguard – strip whitespaces from keys;
*) wireless – disallowed using “default” as scan list or channel names;
*) wireless – fixed incorrectly applied ingress priority to non-wireless packets;
*) wireless – fixed missing wireless interface on some RB921GS-5HPacD devices;
*) www – improved stability when receiving bogus packets;
*) x86 – improved ixgbe driver support;