The Dude 7.2

What's new in this version:

- api - accept "Content-Type" with specified charset
- arm - fixed "auto" CPU frequency setting
- arm - fixed "shutdown" command on hAP ac^2
- arm64 - improved Watchdog initiated reboot reason reporting
- arm64 - improved low disk space handling condition on upgrade
- backup - added "force-v6-to-v7-configuration-upgrade" option on backup load to clear RouterOS v7 configuration and trigger reimport of RouterOS v6 route configuration (CLI only)
- backup - fixed automatic backup generation when resetting configuration
- backup - fixed cloud backup's creation timezone
- bgp - added BGP advertisements display (requires output.keep-sent-attributes to be set)
- bgp - do not export default BGP values
- bgp - fixed VPNv4 route sending to remote peer
- bgp - fixed link-local iBGP address selection
- bgp - fixed network advertisement from address-lists after reboot
- bgp - fixed routing table and BGP configuration order in export
- bgp - improvements on detecting peers local address when IPv6 link-local addresses are used
- bluetooth - allow to export device, advertiser and scanner configuration
- bluetooth - disable scanning by default
- bridge - added fast-path and inter-VLAN routing FastTrack support when vlan-filtering is enabled
- bridge - fixed FastPath when using "frame-types=admit-only-untagged-and-priority-tagged" setting
- bridge - fixed PPPoE packet forwarding when using "use-ip-firewall-for-pppoe" setting
- bridge - fixed bridge filter and NAT rules on ARM64 and TILE devices
- bridge - fixed destination NAT when using "use-ip-firewall" setting
- bridge - fixed filter and NAT "set-priority" action
- bridge - fixed filter and NAT "set-priority" on ARM64 devices
- bridge - fixed filter rules when using interface lists
- bridge - fixed firewall "ingress-priority" matcher and "new-priority=from-ingress" action settings from VLAN tagged frames
- bridge - fixed priority tagged frame forwarding when using "frame-types=admit-only-untagged-and-priority-tagged" setting
- capsman - improved stability when running background scan on CAP
- capsman - improved system stability when processing CAP packet by Mangle
- ccr2004 - improved PCI timeout handling on CCR2004-1G-2XS-PCIe
- ccr2004 - improved system stability on CCR2004-12S+2XS
- certificate - allow to choose digest algorithm for CSR signing
- certificate - made "fingerprint" parameter read-only
- chr - improved system stability when writing into memory
- chr - temporarily suspended downgrade to RouterOS v6
- clock - properly notify all instances about time changes
- conntrack - properly detect helper status
- console - fixed "print" command with additional "where" condition
- console - improved console responsiveness when processing received characters
- console - made "password" parameter mandatory when creating a new user
- console - properly erase CLI history after configuration reset
- console - updated copyright notice
- crs1xx/2xx - fixed static switch host addresses after link down
- crs1xx/2xx - ignore static bridge host addresses (switch unicast-fdb should be used instead)
- crs3xx - fixed CPU load balancing for ARM dual core devices
- crs3xx - fixed QSFP+ interface LEDs
- crs3xx - fixed watchdog timer functionality
- crs3xx - improved SFP+ interface linking after reboot for CRS312 device
- crs3xx - improved maximum allowed ACL rule calculation
- crs3xx - improved system stability when creating many ACL rules on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices
- defconf - made "192.168.188.1/24" the default LAN IP address for LTE CPE devices
- dhcp-server - fixed DHCP Option decimal value parsing
- dhcp-server - fixed statistics sending in "Accounting Stop" packets
- dhcp-server - send "Class" attribute in "Accounting Request" when provided by RADIUS
- dhcpv4-server - allow adding comments
- dhcpv4-server - remove dynamic leases when server configuration is removed
- dhcpv4-server - reset dynamic "bcast" flag when receiving offer from DHCP relay
- dhcpv4-server - reset offer counter when receiving offer from DHCP relay
- dhcpv6 - added VRF support
- dot1x - added "server-fail-vlan-id", "guest-vlan-id" and "reauth-timeout" settings for dot1x server
- dot1x - added "src-address", "src-mac-address" and "src-port" settings for dynamic switch rules
- dot1x - added NAS-Port-ID attribute for RADIUS Access-Request
- dude - fixed The Dude client compatibility with RouterOS v7
- dude - fixed The Dude compatibility with ARM64
- ethernet - improved system stability when receiving large packets on devices with 88F3720 CPU (nRAY, LHGG)
- firewall - improved available port lookup for source NAT when free port range is exhausted
- graphing - properly generate interface graph for traffic higher than 2.1Gbps
- hotspot - fixed login page over HTTPS
- hotspot - fixed memory leak on every web page loading
- hotspot - fixed web page loading using HTTPS
- ike2 - ignore "INITIAL-CONTACT" payload on responder when "send-initial-contact" is disabled
- interface - fixed minor memory leak when interface or connected route is changed
- ipsec - added hardware acceleration support for CCR2116
- ipsec - fixed "identities" menu emptying after RouterOS upgrade/reboot
- ipv6 - do not add duplicate dynamic prefix when static already exists
- ipv6 - fixed "retransmissit-interval" unit value
- ipv6 - fixed VLAN tagged PPPoE packet receiving on RB5009
- l2tp - fixed CHAP challenge packet processing over IPsec
- l2tp - improved service stability when disabling L2TP server with connected clients
- l2tp - improved system stability when processing L2TP control messages
- l3hw - added HW offloaded FastTrack support for inter-VLAN routing
- l3hw - fixed HW offloaded NAT
- l3hw - fixed HW offloaded routing when using 7 or more VLAN interfaces
- l3hw - fixed ICMP message when routed packet exceeds MTU and DF flag is set
- l3hw - fixed bonding source MAC address
- l3hw - fixed default route offloading for CRS305, CRS326-24G-2S+, CRS328, netPower, netFiber devices
- l3hw - improved routing table offloading for CRS305, CRS326-24G-2S+, CRS328, netPower, netFiber devices
- l3hw - improved system stability when using 7 or more VLAN interfaces
- led - fixed LED behavior on Audience
- led - reduced LTE signal LED range to -70
- leds - fixed user LED on RB750Gr3
- log - added warning message when connection tracking table is full
- log - include message also in e-mail body
- lora - fixed "antenna-gain" parameter unit
- lte - add IPv6 address on interface as well
- lte - added 3 APN profile support and APN name re-using on R11e-LTE6
- lte - added MAC address and IPv6 LL address persistence after reboot on EG12 and EG18 modems
- lte - added basic information support for Telit LM960 and LM940 in MBIM mode
- lte - added class based support for configless RNDIS LTE modems
- lte - added support for Uplink CA reporting
- lte - changed "CS/PS" registration type from "both" to "any" on R11e-LTE un R11e-LTE6
- lte - do not loose "band" configuration after reboot on Chateau 5G
- lte - do not show external antenna selector on devices that does not support it
- lte - enabled multi-APN and name re-use support for Chateau
- lte - expose diagnostics channel for all modems
- lte - fixed "monitor" command to not report old info
- lte - fixed AT command response handling on R11e-LTE
- lte - fixed IPv6 address addition after startup on R11e-LTE6
- lte - fixed MBIM modem reset on AT timeout
- lte - fixed link flapping when loosing cellular signal on R11e-LTE un R11e-LTE6
- lte - fixed packet forwarding on R11e-4G and R11e-LTE-US
- lte - fixed possible timeouts when sending SMS in LTE only mode on R11e-LTE
- lte - fixed support for Sierra MC7710
- lte - fixed support for Telit 960
- lte - improved stability on "+EGMR" response in MBIM mode
- lte - improved stability when modem disappears during firmware upgrade
- lte - improved support for sending/receiving SMS in LTE only mode on R11e-LTE6
- lte - made "no" the default value for "use-network-apn" parameter
- lte - properly recognize MBIM modem in USB port as LTE on Chateau 5G
- ntp - allow adding duplicate server address if dynamic entry exists
- ntp - fixed multicast mode support
- ntp - improved IPv6 address support
- ntp - improved service stability when none of the NTP servers are reachable for a while
- ntp - improved source address usage for reply packets
- ntp - print log change time with time-zone applied
- ospf - added "ptmp-broadcast" interface type (compatible with RouterOSv6 PTMP type)
- ospf - convert ospf "static" redistribute to "static,dhcp,modem,vpn" after update from RouterOS v6
- ospf - fixed MD5 authentication
- ospf - fixed NBMA hello's not being sent if priority is set to 0
- ospf - fixed default route origination when "default-originate=if-installed" "redistribute" is enabled
- ospf - fixed default type-3 LSA's not being injected to stub area
- ospf - fixed distance if "originate-default" is set to "always"
- ospf - fixed external LSA not updating after prefix netmask change
- ospf - fixed incorrect LSA types when changing area types
- ospf - fixed neighbor election failure
- ospf - fixed neighbor stuck in ExStart
- ospf - fixed simple authentication
- ospf - general stability improvements
- ospf - improved DB retransmit logging
- ospf - improved logging
- ospf - improved overall stability
- ospf - improved stability for very large LSDB
- ospf - improved stability on OSPFv3 instance disabling
- ospf - improved stability when DR goes down
- ospf - improves stability when handling looped back OSPF packets
- ospf - properly set VRF for gateway
- ospf - send notifies for neighbors
- ovpn - added SHA2 authentication algorithm support
- ovpn - added hardware acceleration support for IPQ4018/IPQ4019 and AL* series chipsets
- ovpn - added option to send disconnect message in UDP mode
- ovpn - fixed large option message parsing
- ovpn - improved UDP session handling
- ovpn - improved memory allocation on Tile in "ethernet" mode
- ovpn - improved system stability in high load scenarios
- pimsm - fixed menu prints
- pimsm - general stability improvements
- poe - fixed PoE driver loading on CRS354-48P-4S+2Q+
- poe - update PoE firmware only on devices that support it
- ppp - added "comment" option for PPPoE servers
- ppp - fixed AT+CPIN chat when SIM PIN is specified
- ppp - improved stability when handling large amount of connections simultaneously
- ppp - show local and remote IPv6 addresses (CLI only)
- pppoe - added option to configure "host-uniq" parameter
- pppoe - added option to ignore PADI messages with empty service name
- pppoe - use default MTU of 1492
- pptp - added insecure connection warning
- pptp - show insecure connection warning on dynamic interfaces
- qsfp - correctly display auto-negotiation status
- queue - fixed queued IPv6 traffic considered as "invalid" by Firewall
- queue - improved system stability when processing traffic
- queue - improved system stability when using more than 255 unique packet marks
- rb4011 - fixed jumbo frame processing on SFP+ port when using 1G module
- rip - added logging
- rip - fixed route metrics
- rip - fixed route redistribution
- rip - use nexthop with interface
- route - allow OSPF and RIP redistributed routes to be matched by routing filters
- route - fixed "min-prefix" configuration when set to 0
- route - fixed "suppress-hw-offload" update
- route - fixed "table" menu emptying after RouterOS upgrade
- route - fixed BGP atomic aggregate value
- route - fixed ECMP load balancing in FastPath
- route - fixed ECMP route removal
- route - fixed route addition to VRF from BGP
- route - fixed router's LSA for PTP networks
- route - fixed routing configuration export on SMIPS devices
- route - general stability improvements
- route - improved routing table print speed
- route - show OSPF and RIP specific attributes in "/routing route" table
- route-filter - fixed "return" action
- route-filter - fixed complex matchers with "|| or and &&"
- route-filter - fixed incorrect invert-match configuration upgrade from RouterOS v6
- route-filter - fixed range conversion after update from RouterOS v6
- route-filters - allow to filter and modify default route if "originate-default" is set to "always"
- route-filters - fixed possible address list race condition and memory leak
- route-filters - renamed "*-set" to "*-list"
- routerboard - fixed "ether2" interface presence on some RBwAPGR devices
- routerboard - fixed WPS button functionality on Audience
- routing - added PCAP viewer tool for BGP advertisements debugging purposes
- routing-filter - fixed "bgp-*-communities-empty" matcher
- rpki - made RPKI verify non-strict, introduces new state "unverified"
- rpki - show expire timer
- sfp - improved SFP module detection on CRS106 and CRS112
- smb - fixed SMB2.0 disk size reporting
- smips - improved RAM allocation
- sms - increased "at-chat" timeout when sending SMS
- snmp - added SFP vendor name to optical table
- snmp - added support for "ipv6AddrPrefixTable" and "ipv6RouteNumber" OID's
- snmp - allow two level nesting for vlan, bonding speed query
- socks - fixed SOCKS5 support
- ssh - fixed forwarding with IPv6 link-local addresses
- ssl - fixed CA certificate processing when "subjAltName" is marked as critical
- supout - added "port-controller" bridge section
- switch - added "rx-overflow" counter for 88E6393X (RB5009) and 88E6191X (CCR2004-16G-2S+) switch chips
- switch - fixed port-isolation misconfiguration detection when using multiple switches
- switch - improved packet forwarding with enabled "cpu-flow-control" setting between different rate interfaces for 88E6393X (RB5009) and 88E6191X (CCR2004-16G-2S+) switch chips
- switch - improved switch chip initialization process on bootup for CCR2004-16g-2s+ devices
- switch - properly limit maximum number of switch rules to 256 on RB5009
- system - fixed license loss on some RB1100Dx4 and RB4011 devices
- tr069-client - accept 200-299 codes for HTTP diagnostics
- tr069-client - added support for 5G band configuration
- tr069-client - added support for wireless "skip-DFS" configuration
- tr069-client - added support for wireless client uptime reporting
- tr069-client - fixed RPC download of "3 Vendor Configuration File" with branding package
- traffic-flow - do not handle NAT events when "nat-events" is disabled
- traffic-generator - fixed transmit speed for multiple asymmetric streams
- upgrade - improved 404 error handling when checking for new versions
- upgrade - improved downgrade prompt message
- ups - fixed UPS support
- usb - fixed display of incorrect port count for USB serial ports
- user - removed obsolete "tikapp" policy
- user - send "Class" attribute in "Accounting Request" when provided by RADIUS
- vlan - fixed improper VLAN priority addition for routed packets
- vxlan - allow unsetting "group" and "interface" properties
- vxlan - fixed running state after reboot when using "interface" and "group" settings
- webfig - do not show side menu if WebFig is disabled by skin
- webfig - fixed default configuration popup presence
- webfig - fixed user policy lookup for skin designer
- wifiwave2 - added "client-isolation" feature
- wifiwave2 - added support for handling disconnect request messages from RADIUS servers
- wifiwave2 - fixed calling "scan" and "frequency-scan" commands through the API
- winbox - added "Disconnect Notify" checkbox to "Interface/OVPN Client" menu
- winbox - added "Freq. Usage" and "Scan" buttons for WifiWave2 interfaces
- winbox - added "Ignore Missing" selector to "System/Packages" menu
- winbox - added "Mode" parameter under "Wireless" menu with WifiWave2 package
- winbox - added "Routing Table" parameter for IPv6 routes
- winbox - added "TLS Version" parameter for "Interface/OVPN"
- winbox - added "VPN" tab to "Routing/BGP" menu
- winbox - added "VRF" parameter for "SSH" and "Telnet" menus
- winbox - added "VRF" parameter to "IP/Services" menu
- winbox - added "comment" parameter to "User Manager/Users" menu
- winbox - added "host-uniq" parameter to PPPoE client interface
- winbox - added MLAG support
- winbox - added SHA256 and SHA512 "Auth" values for OVPN menu's
- winbox - added ZeroTier support
- winbox - added explicit "Upload" and "Download" names for "Bucket Size" parameters under "Queues" menu
- winbox - added interface list support for "IP/Traffic Flow" menu
- winbox - added local/remote CPU load parameters for "Bandwidth Test"
- winbox - added missing "3GGP RAW" parameter under "Interface/Wireless/Interworking Profile" menu
- winbox - added missing "accounting", "interim-update" and "radius-password" parameters under "IP/DHCP Server" menu
- winbox - added support for "Tool/Speedtest" menu
- winbox - added support for W60G align tool
- winbox - allow adding more than 100 tagged/untagged interfaces under "Bridge/VLAN" menu
- winbox - allow configuring "VTEP" under "Interface/VXLAN" menu
- winbox - allow setting "Interface" parameter for 100G LED types
- winbox - changed "Accept Redirects" parameter type under "IPv6/Settings" menu
- winbox - do not require "name" and "file name" parameters for certificate import/export
- winbox - do not show "Antenna Scan" button on devices that do not support it
- winbox - do not show connection tracking table if it has more than 10000 entries
- winbox - fixed "00:00:00" time printing
- winbox - fixed "Switch" menu on Chateau devices
- winbox - fixed "action" field in "IP/Web Proxy/Access" menu
- winbox - fixed "expires-after" certificate parameter value
- winbox - fixed CHR License renewing process
- winbox - fixed address list type parameters in "Routing" menu
- winbox - fixed content filtering in "Tools/Packet Sniffer/Packets" menu
- winbox - fixed entry order in "Tools/Packet Sniffer/Packets" menu
- winbox - fixed error message when adding NTH rule with "0" value
- winbox - fixed minor typo under "LTE" interface menu
- winbox - fixed switch related settings for MT7621 switch chip (hEX, hEX S, RBM33G, RBM11G, LtAP)
- winbox - made "9" the default value for "Target" parameter under "IP/Traffic Flow" menu
- winbox - made "Routing Filters/Rules" table sortable
- winbox - made OSPF interface type names consistent between CLI and GUI
- winbox - moved "IP/Route/Nexthops" and "IPv6/Route/Nexthops" menus to "Routing/Nexthops"
- winbox - moved IPv4 and IPv6 "Rules" menus under "Routing" menu
- winbox - properly limit "Disconnect Timeout" value under "CAPsMAN/Configuration" menu
- winbox - properly save "IPv6/Settings" menu in session file
- winbox - properly show "v" flag instead of "y" under "IP/Route" menu
- winbox - properly update ethernet auto negotiation status on CHR
- winbox - properly update server list under "System/NTP Client/Servers" menu
- winbox - renamed "Keep user configuration" to "Keep users" under "System/Reset Configuration" menu
- winbox - renamed "MBPS" to "Mbps" value unit name in "Tools/Traffic Generator" menu
- winbox - renamed "Revoked" parameter to "Revoked Time" under "System/Certificates" menu
- winbox - report local terminal session as "local" instead of "telnet"
- winbox - require existing pool for "Address Pool" parameter under "IPv6/DHCP Server" menu
- winbox - require non empty "Packet Mark" value under "Queues" menu
- winbox - show "H" flag for offloaded connections in "IP/Firewall/Connections" menu
- winbox - show "Lost Ratio" column by default under "Tools/Traffic Generator" menu
- winbox - show "Routes" column by default under "PPP/Secrets" menu
- winbox - show "System/Health/Settings" only on boards that have configurable values
- winbox - show "System/SwOS" menu only on boards that have dual boot
- winbox - show additional columns by default for "Wireless" menu with WifiWave2 package
- winbox - sort "Address List" parameter values alphabetically in "IP/DHCP Server/Leases" menu
- winbox - updated default "Routing/BGP/Peer Cache" table appearance
- winbox - use "total" as default value for "Tools/Profile"
- wireguard - allow same peer's public key for different interfaces
- wireguard - fixed IPv6 LL address generation
- wireguard - fixed IPv6 traffic processing with multiple peers
- wireguard - made "preshared-key" and "private-key" values sensitive
- wireless - added "3gpp-info" parameter to interworking configuration
- wireless - added EAP-AKA to interworking's realm configuration
- wireless - added information about client signal strength to log messages about disconnections
- wireless - correctly preserve WMM priority when receiving packets
- wireless - fixed frequency range information for IPQ4019 interfaces
- wireless - fixed interface initialization on Metal 2SHPn
- wireless - improved nv2 link stability
- wireless - improved wireless connection stability during background scans
- www - fixed "tls-version" for SSL
- x86 - added support for Intel E810 NIC
- x86 - allow to select disk for install image
- x86 - fixed NVME partition path
- x86 - fixed VLAN tagged packet transmit
- x86 - made "no" the default value for "disable-running-check" ethernet parameter
- x86 - properly distinguish multiple NICs that share the same PCI bus number
- zerotier - fixed IPv6 support
- zerotier - made MAC and MTU values read-only
- zerotier - properly handle IP address change