Прошивка MikroTik RouterOS 7.8 | Обновить прошивку до v7.8

Описание прошивки MikroTik RouterOS 7.8

Компания MikroTik обновила версию прошивки на канале stable до версии 7.8

Прошивку можно скачать с сайта https://mikrotik.com/download

Дата выхода прошивки: 24.02.2023

Версия прошивки 7.8 содержит такие доработки и исправления:

What’s new in 7.8 (2023-Feb-24 11:03):

!) storage — added new «rose-storage» package support for extended disk management and monitoring functionality (ARM, ARM64, Tile and x86) (CLI only);
*) bgp — fixed setting of «default-prepend» parameter;
*) bridge — fixed adding disabled MSTI;
*) bridge — fixed DHCP packet flow when using DHCP snooping, HW offloading and «use-ip-firewall»;
*) bridge — fixed possible DHCP packet corruption when using DHCP snooping;
*) bridge — fixed PVID warning typo;
*) bridge — improved HW offloading logic;
*) certificate — fixed export of a certificate when the last line of the certificate is exactly 64 bytes long;
*) certificate — fixed PBES2 certificate import;
*) certificate — improved certificate management, signing and storing processes;
*) certificate — improved multiple certificate import process;
*) conntrack — improved system stability when changing connection tracking state;
*) conntrack — improved system stability when PPTP helper is used;
*) console — added «as-string» parameter to the «:execute» command;
*) container — added authentication option for registry (CLI only);
*) container — fixed «.type» file ownership;
*) container — fixed file ownership after system upgrade for containers running on internal disk;
*) container — fixed multiple container automatic startup on boot;
*) dhcpv4-client — send DHCPv4 unicast requests to DHCPv4 relay, instead of server when it is being used;
*) disk — limit maximum TMPFS size;
*) dns — added configurable DoH concurrent query limitation parameters;
*) dns — do not cache results from «:resolve» command with specific server;
*) dns — fixed CNAME reading from the cache;
*) dns — limited «DoH max concurrent queries reached» logging messages to once per minute;
*) dns — respond with «NOERROR» to DNS requests for static domain names when appropriate type record is not configured or found on upstream server;
*) firewall — fixed bridge priority target;
*) firewall — fixed DSCP priority target for IPv6 Mangle;
*) firewall — fixed netmap range maximum address calculation for IPv6 NAT;
*) graphing — fixed hiding of target queues when «allow-target» is disabled;
*) graphing — fixed sorting of interface and queue graphs;
*) graphing — properly handle disabled and static-binding interface graphs;
*) graphing — removed «move» command for graphing rules;
*) health — fixed «temperature» and «power-consumption» readings for RB1100AHx4;
*) hotspot — fixed setting of «address» parameter for IP binding;
*) hotspot — restore cookie timeout on reboot;
*) ike2 — added support for «address», «key-id» and «dn» for Remote ID matching (CLI only);
*) ike2 — fixed active SA flush on responder after an unsuccessful peer connection attempt;
*) ipsec — added support for «Framed-Route» RADIUS attribute support;
*) ipsec — do not match incoming IKE requests by unresolved DNS name peers;
*) ipsec — fixed peer matcher for incoming connection with unresolved DNS;
*) ipv6 — added «pref64» option configuration for RA;
*) ipv6 — improved handling of «advertise» IPv6 address status changes;
*) ipv6 — limited «hop-limit» parameter value range to 255;
*) ipv6 — made distributed DNS lifetime RFC8106 compliant;
*) l3hw — added destination MAC address check for offloaded FastTrack connections;
*) led — fixed signal reading for KNOT device;
*) leds — always require to set interface name when setting «modem-signal» indication;
*) lte — added AT support for Telit LE910C4 in MBIM mode;
*) lte — fixed APN setting usage on initial connection attempt for AT based Quectel and Neoway modems;
*) lte — fixed automatic antenna selection on Chateau LTE12/LTE18;
*) lte — fixed dialing for Fibocom L850-GL module;
*) lte — fixed displaying of «subscriber-number»;
*) lte — fixed possible memory leak when using passthrough mode on Chateau 5G;
*) lte — improved AT port matching for SIMCom, Huawei, WeLink, Cinterion, BandLuxe and Sierra modems;
*) lte — improved modem detection speed in lower mini-PCIe slot on LtAP;
*) lte — improved stability for R11e-LTE6, skip connection reset on first EEMGINFO command timeout;
*) lte — LtAP improved modem detection in lower mini-PCie slot («/system routerboard upgrade» required);
*) lte — parse USSD even if encoding is unsupported;
*) mpls — fixed handling of more than 9 VRF’s;
*) mpls — fixed LDP listen socket creation before IPv6 address is ready for use;
*) mpls — improved stability when neighboring router reboots;
*) ospf — fixed «ospf-type» parameter for OSPFv3 routes;
*) ospf — fixed simple auth for OSPFv3;
*) ovpn — added AES-GCM and multicore encryption support;
*) ovpn — improved server stability;
*) ovpn — improved TLS-related error logging;
*) pimsm — improved system stability;
*) poe — added LLDP power management support for 802.3at PSE;
*) poe — properly turn off power when link not detected on hAP ax2 and hAP ax3;
*) port — fixed modem channel number on KNOT;
*) pppoe — fixed PPPoE client scan showing only one server;
*) resource — show filesystem related statistics on CCR2004;
*) route — fixed IPv6 default route presence when received from RA;
*) route — fixed printing of routing table’s «count-only» parameter;
*) route — show hoplimit and MTU properties under the «/routing route» menu for SLAAC routes;
*) routerboot — fixed format storage for RBM33G device («/system routerboard upgrade» required);
*) routerboot — fixed protected routerboot for RBM33G device («/system routerboard upgrade» required);
*) sfp — fixed false link detection with S+RJ10 on RB5009;
*) sfp — fixed reading of SFP EEPROM on single SFP port devices;
*) sfp — improved optical modules SFP compatibility on CCR2004-16G-2S+, CCR2004-1G-12S+2XS, CCR2116-12G-4S+ devices;
*) sms — improved reporting of SMS sending errors;
*) sms — log USSD response when USSD is sent over MBIM;
*) sniffer — added additional filtering parameters;
*) snmp — do not show identity in LLDP when branding is used with hide SNMP data;
*) snmp — fixed handling of disabled routes;
*) snmp — fixed reporting of total number of routes counter;
*) ssh — hard-coded «localhost» address for forwarding requests;
*) ssh — improved system stability when processing none-crypto SSH connection;
*) sstp — fixed TLS session establishment when «connect-to» is DNS name;
*) switch — fixed SFP rate select for CRS354 devices;
*) switch — improved 10G, 25G, 40G and 100G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches;
*) switch — improved system stability for 98DXxxxx switch chips;
*) swos — removed «/system swos» menu for CRS5xx series switches;
*) torch — allow «without-paging» parameter for Torch;
*) traffic-generator — increased maximum allowed stream count;
*) upgrade — show error message when license prohibits upgrade;
*) usb — changed USB auto detect behavior to default to the external USB, when no internal USB devices detected;
*) vxlan — added «dont-fragment» setting that allows managing fragmentation;
*) vxlan — added «max-fdb-size» parameter;
*) vxlan — added FastPath support;
*) webfig — allow setting numeric values in time interval fields;
*) webfig — fixed accessing of WebFig when «Interface» menu is disabled by skin;
*) webfig — fixed editing of multi-field parameters with «not» checkbox;
*) webfig — fixed handling of empty skin files;
*) webfig — improved navigation responsiveness;
*) webfig — improved skin file parsing;
*) webfig — improved terminal operation;
*) webfig — properly escape all reserved URI characters;
*) webfig — updated WebFig and graph web pages to HTML5;
*) wifiwave2 — added wireless sniffer tool to capture wireless transmissions (CLI only);
*) wifiwave2 — adjust monitoring of station interfaces to report when an interface is authorized, not just connected;
*) wifiwave2 — enabled additional channels in UNII-3 and UNII-4 bands for Europe and USA on hAP ax^2, hAP ax^3 and Chateau ax;
*) wifiwave2 — fixed compatibility with third-party devices when using SAE hash-to-element authentication with DH groups 20 and 21;
*) wifiwave2 — fixed SAE authentication for interfaces in station mode when trying to connect to APs which require an anti-clogging token (introduced in RouterOS 7.4);
*) wifiwave2 — implement 802.11w management protection SA Query procedures;
*) wifiwave2 — improve protections from denial-of-service attacks on WPA3;
*) winbox — added «Connect» button under «WifiWave2/Scan» menu;
*) winbox — added «Disable/Enable» buttons under «WifiWave2» menu;
*) winbox — added «Match Subdomain» parameter under «IP/DNS/Static» menu;
*) winbox — added «Provision» button under «WifiWave2» menu;
*) winbox — added «Start On Boot» checkbox under «Container» menu;
*) winbox — added «Tx Rate» and «Rx Rate» columns under «WifiWave2/Registration» menu;
*) winbox — added missing properties when setting «Use DoH Server»;
*) winbox — added missing WifiWave2 related parameters under «WifiWave2» menu;
*) winbox — added support for manual RAM file system (TMPFS) creation under «System/Disk» menu;
*) winbox — added Type «https-get» parameter under «Tools/Netwatch» menu;
*) winbox — allow selecting bridge for static entries under «Bridge/MDB» menu;
*) winbox — fixed displaying of «Default Prepend» value under «Routing/BGP/Sessions» menu;
*) winbox — fixed displaying of «Tx/Rx CCQ» values under «Wireless/Registration» menu;
*) winbox — fixed displaying of flags under «System/Console» menu;
*) winbox — fixed displaying of multiple character flags;
*) winbox — fixed usage of IPv6 family addresses under «IP/Web Proxy/Access» menu;
*) winbox — hide «TTL» value for static DNS entries with FWD type;
*) winbox — hide unnecessary properties for virtual interfaces under «WifiWave2» menu;
*) winbox — improved mouseover hint for «local» policy under «System/Users/Groups» menu;
*) winbox — rename «Multicast Router» monitoring property to «Is Multicast Router» under «Bridge» menu;
*) winbox — show «Gateway» column by default under «IPv6/Routes» menu;
*) x86 — added support for TP-Link TG-3468;
*) x86 — fixed SR-IOV support for Intel X710 series NIC;
*) x86 — improved Intel 500 series 10G SFP module support;
*) x86 — improved stability for Intel X550 series NIC with SR-IOV;
*) zerotier — fixed routes after VRF change;