The Dude 6.48

What's new in this version:

- arm - added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices
- arm - improved system stability
- arm - improved watchdog and kernel panic reporting in log after reboots on IPQ4018/IPQ4019 devices
- arm64 - improved reboot reason reporting in log
- bgp - fixed VPNV4 RD byte order
- bonding - added LACP monitoring
- branding - fixed LCD logo loading from new style branding package
- bridge - added "multicast-router" monitoring value for bridge interface
- bridge - added fixes and improvements for IGMP and MLD snooping
- bridge - added minor fixes and improvements for IGMP snooping with HW offloading
- bridge - added warning message when port is disabled by the BPDU guard
- bridge - allow to exclude interfaces from extended ports
- bridge - automatically remove extended interfaces when deleting PE device from CB
- bridge - correctly filter packets by L2MTU size
- bridge - correctly remove dynamic VLAN assignment for bridge ports
- bridge - fixed "multicast-router" setting on bridge enable
- bridge - fixed MDB entry removal when using bridge port "fast-leave" property
- bridge - fixed dynamic VLAN assignment when changing port "frame-type" property (introduced in v6.46)
- bridge - fixed dynamic VLAN assignment when changing port to tagged VLAN member
- bridge - fixed link-local multicast forwarding when IGMP snooping and HW offloading is enabled
- bridge - fixed local MAC address removal from host table when deleting bridge interface
- bridge - fixed multicast table printing
- bridge - improved BPDU guard logging
- bridge - increased multicast table size to 4K entries
- bridge - show "H" flag for extended bridge ports
- bridge - show error when switch do not support controlling bridge or port extension
- bridge - use "frame-types=admit-all" by default for extended bridge ports
- cap - fixed L2MTU setting from CAPsMAN
- certificate - clear challenge password on renew
- certificate - fixed CRL URL length limit
- certificate - fixed private key verification for CA certificate during signing process
- certificate - generate CRL even when CRL URL not specified
- certificate - properly flush expired SCEP OTP entries
- chr - fixed SSH key import on Azure
- chr - fixed VLAN tagged packet transmit on bridge for Hyper-V installations
- chr - improved interface loading on startup on XEN
- chr - improved system stability when changing flow control settings on e1000
- cloud - improved backup generation process
- conntrack - automatically reduce connection tracking timeouts when table is full
- console - allow "once" parameter for bonding monitoring
- crs3xx - added initial Bridge Port Extender support
- crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices
- crs3xx - added switch-cpu port VLAN filtering (switch-cpu port is now mapped with bridge interface VLAN membership when vlan-filtering is enabled)
- crs3xx - correctly filter packets by L2MTU size
- crs3xx - fixed "custom-drop-packet" and "not-learned" switch stats for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices
- crs3xx - fixed "mirror-source" property on switch port disable for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices
- crs3xx - fixed "storm-rate" traffic limiting for switch-cpu port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices
- crs3xx - fixed "switch-cpu" VLAN membership on bridge disable
- crs3xx - fixed CDP packet forwarding for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices
- crs3xx - fixed duplicate host entries when creating static switch hosts
- crs3xx - fixed port isolation for "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices
- crs3xx - fixed port isolation removal for "switch-cpu" port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices
- crs3xx - fixed switch "copy-to-cpu" property for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices
- crs3xx - fixed switch "not-learned" stats for CRS305, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, CRS318 devices
- crs3xx - improved system stability on CRS354 devices
- crs3xx - improved system stability when receiving large frames for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v6.47.5)
- defconf - fixed default configuration loading on RBcAP-2nD and RBwAP-2nD
- defconf - fixed static IP address setting in case default configuration loading fails
- defconf - improved CAP interface bridging
- defconf - improved default configuration generation on devices with non-default wireless interface names
- detnet - fixed malformed dummy DHCP User Class option
- detnet - use MAC address from bridge interface instead of slave port
- dhcp - fixed DHCP packet forwarding to IPsec policies
- dhcpv4-server - improved "client-id" value parsing
- dhcpv6 server - added support for "Delegated-IPv6-Prefix" for PPP services
- dhcpv6-server - added ability to generate binding on first request
- dhcpv6-server - added support for "option18" and "option37" for RADIUS managed clients
- dhcpv6-server - allow loose static binding "pool" parameter (introduced in v6.46.8)
- dhcpv6-server - make sure that calling station ID always contains DUID
- discovery - added "lldp-med-net-policy-vlan" property for assigning VLAN ID
- discovery - allow choosing which discovery protocol is used
- discovery - fixed discovery on mesh ports
- discovery - fixed discovery packet sending on newly bridged port with "protocol-mode=none"
- discovery - fixed discovery when enabled only on master port
- discovery - send the same "Chassis ID" on all interfaces for LLDP packets
- discovery - use interface MAC address when sending MNDP from slave port
- disk - fixed external EXT3 disk mounting on x86 systems
- dns - added IPv6 support for DoH
- dns - do not use type "A" for static entries with unspecified type
- dns - end ongoing queries when changing DoH configuration
- dns - fixed listening for DNS queries when only dynamic static entries exist (introduced in v6.47)
- dot1x - accept priority tagged (VLAN 0) EAP packets on dot1x client
- dot1x - fixed reauthentication after server rejects a client into VLAN
- dot1x - fixed unicast destination EAP packet receiving when a client is running on a bridge port
- dude - fixed configuration menu presence on ARM64 devices
- export - fixed RouterBOARD USB "type" parameter export
- filesystem - fixed repartition on RB4011 series devices
- filesystem - fixed repartition on non-first partition
- filesystem - improved long-term filesystem stability and data integrity
- gps - fixed "init-channel" release when not used
- health - changed PSU state parameter type to read-only
- health - removed unused "heater-control" and "heater-threshold" parameters
- hotspot - added "vlan-id" parameter support for hosts and HTML pages
- hotspot - added support for captive portal advertising using DHCP (RFC7710)
- hotspot - fixed "html-directory" parameter export
- hotspot - improved management service stability when receiving bogus packets
- ike1 - fixed "my-id=address" parameter usage together with certificate authentication
- ike1 - fixed 'rsa-signature-hybrid' authentication method
- ike1 - fixed memory leak on multiple CR payloads
- ike1 - fixed policy update with and without mode configuration
- ike1 - rekey phase 1 as responder for Windows initiators
- ike2 - added "prf-algorithm" support for phase 1
- ike2 - added support for IKEv2 Message Fragmentation (RFC7383)
- ike2 - fixed EAP MSK length validation
- ike2 - fixed too small payload parsing
- ike2 - improved EAP message integrity checking
- ike2 - improved child SA rekeying process
- interface - added temperature warning and interface disable on overheat for SFP and SFP+ interfaces (CLI only)
- interface - fixed pwr-line running state (introduced in v6.45)
- ipsec - added SHA384 hash algorithm support for phase 1
- ipsec - do not kill connection when peer's "name" or "comment" is changed
- ipsec - fixed client certificate usage when certificate is renewed with SCEP
- ipsec - fixed multiple warning message display for peers
- ipsec - inactivate peer's policy on disconnect
- ipsec - refresh peer's DNS only when phase 1 is down
- kidcontrol - allow creating static device entries without assigned user
- led - fixed state persistence after device reboot on NetMetal 5 ac devices
- lora - fixed device going into "ERROR" state caused by FSK modulated downlinks
- lora - limited output power in RU region for range 868.7 MHz - 869.2 MHz according to regulations
- lte - added "age" column and "max-age" parameter to "cell-monitor" (CLI only)
- lte - added "comment" parameter for APN profiles
- lte - added support for Alcatel IK41VE1
- lte - fixed "band" value reporting
- lte - increased "at+cops" reply timeout to 90 seconds
- m33g - added support for "/system gpio" menu (CLI only)
- metarouter - allow creating RouterOS metarouter instances on devices with 16MB flash storage
- metarouter - fixed memory leak when tearing down metarouter instance
- ppp - added "bridge-learning" parameter support
- ppp - added "ipv6-routes" parameter to "secrets" menu
- ppp - added support for "Framed-IPv6-Route" RADIUS attribute
- ppp - store "last-caller-id" for PPP secrets
- ppp - store "last-disconnect-reason" for PPP secrets
- profile - added "lcd" process classificator
- profile - improved idle process detection on x86 processors
- profile - improved process classification on ARM devices
- quickset - added "Port Mapping" to QuickSet
- quickset - fixed local IP address setting on master interface
- route - improved stability when 6to4 interface is configured with disabled IPv6 package
- routerboard - fixed PCIe bus reset during power-on on MMIPS devices ("/system routerboard upgrade" required)
- routerboard - force power-down on PCIe bus during reboot on LHGR devices ("/system routerboard upgrade" required)
- script - added error message in the logs if startup script runtime limit was exceeded
- snmp - added information from IPsec "active-peers" menu to MIKROTIK-MIB
- snmp - added new LTE monitoring OID's to MIKROTIK-MIB
- snmp - fixed value types for "dot1dStp"
- snmp - fixed value types for "dot1qPvid"
- ssh - fixed returned output saving to file when "output-to-file" parameter is used
- ssh - skip interactive authentication when not running in interactive mode
- supout - added bonding interface monitor information
- supout - improved autosupout.rif file generation process
- timezone - updated timezone information from "tzdata2020d" release
- tr069-client - added "X_MIKROTIK_MimoRSRP" parameter for LTE RSRP value reporting
- tr069-client - added LTE model and revision parameters
- tr069-client - added additional wireless registration table parameters
- tr069-client - added branding package build time parameter
- tr069-client - added wireless "noise-floor" and "overall-tx-ccq" information parameters
- tr069-client - allow passing LTE firmware update URL as XML
- tr069-client - fixed RouterOS downgrade procedure
- tr069-client - fixed TotalBytesReceived parameter value
- tr069-client - send correct "ConnectionRequestURL" when using IPv6
- traffic-flow - added "sys-init-time" parameter support
- traffic-flow - added NAT event logging support for IPFIX
- traffic-generator - fixed 32Gbps limitation
- user-manager - do not allow creating limitation that crosses midnight
- user-manager - updated PayPal's root certificate authorities
- webfig - allow hiding QuickSet mode selector
- webfig - allow hiding and renaming inline buttons
- webfig - fixed default value presence when creating new entries under "IP/Kid Control"
- webfig - properly stop background processes when switching away from QuickSet tab
- winbox - added "src-mac-address" parameter under "IP/DHCP-Server/Leases" menu
- winbox - added missing IGMP Snooping settings to "Bridge" menu
- winbox - added missing MSTP settings to "Bridge" menu
- winbox - added support for LTE Cell Monitor
- winbox - allow adding bonding interface with one slave interface
- winbox - allow performing "USB Power Reset" on "0" bus on RBM33G
- winbox - do not show "network-mode" parameter for LTE interfaces that do not support it
- winbox - fixed "IP->Kid Control->Devices" table automatic refreshing
- winbox - fixed "interface" and "on-interface" parameter presence under "Bridge/Hosts" menu
- winbox - fixed "receive-errors" setting persistence under "Wireless/Wireless Sniffer/Settings" menu
- winbox - fixed "tls-version" parameter setting under "IP/Services" menu
- winbox - fixed minor typo in "Users" menu
- winbox - provide sane default values for bridge "VLAN IDs" parameter
- winbox - use health values reported by gauges for "System/Health" menu
- wireless - added U-NII-2 support for US and Canada country profiles for mANTBox series devices
- wireless - create "connect-list" rule when address specified for "setup-repeater"
- wireless - do not override MTU and ARP values from CAPsMAN with local forwarding
- wireless - improved WPS process stability
- wireless - increased "group-key-update" maximum value to 1 day
- wireless - updated "indonesia5" regulatory domain information
- wireless - updated "no_country_set" regulatory domain information