MikroTik heeft versie 7.25 van RouterOS uitgebracht. RouterOS is een besturingssysteem dat zich richt op het uitvoeren van routertaken en meer. Denk daarbij aan het routeren van netwerkverkeer, maar ook aan een firewall, bandbreedtemanagement, het aansturen van accesspoints, een vpn-server en een hotspotgateway. Het kan zowel op de hardware van MikroTik als op x86- of virtuele machines zijn werk doen. Voor het gebruik is een licentie nodig, die bij de aankoop van MikroTik-hardware is inbegrepen. De changelog voor deze uitgave kan hieronder worden gevonden.
What's new in 7.25:
- app - add the networkRouterIP variable for container apps
- app - allow the privileged mode to be enabled per service in the container app YAML
- app - fix CHR apps getting stuck on "starting" on slower boards
- app - show an error when an app variable cannot be resolved
- app - update the environment variables of the docker-with-komodo app
- bgp - add the always-compare-med setting
- bgp - fix BGP unnumbered connections within a VRF
- bgp - include the VNI number in outgoing EVPN routes
- bgp - log failed BGP connection attempts
- bgp - show interface names and VRF names in BGP logs
- bridge - add dynamic ARP inspection
- bridge - add IP source guard
- bridge - add mlag-lacp-fallback and mlag-init-delay settings for MLAG
- bridge - fix a false "already added as bridge port" error
- bridge - fix an MLAG peer getting stuck in the disabled state after config changes
- bridge - fix bridge ports not forwarding
- bridge - fix fragmented IPv6 traffic being dropped by DHCPv6 snooping (introduced in v7.23)
- bridge - fix VRRP MAC behavior in MLAG setups
- bridge - improve FDB synchronization between MLAG peers when VLANs are added
- bridge - make MVRP work with MLAG dual bonds
- bridge - make the DHCP snooping log messages clearer and informative
- bridge - rename the IGMP last-member-interval property to last-member-query-interval
- bridge - warn about VLAN entries when vlan-filtering is disabled
- bth - add default client DNS and allowed IPs settings
- bth - add resumable file uploads
- bth - check the available disk space before a file upload
- bth - fix file share issues when enabled through WinBox files menu
- bth - fix the file share getting stuck when disabling
- bth - return upload errors in JSON format
- capsman - add hw-protection-threshold
- capsman - fix the last-ip value being shown backwards
- certificate - fix ACME certificate issuance for wildcard domains
- certificate - refactor certificate internal processes
- console - allow the array access operator to accept arrays of indices or keys
- console - expose globals in the API
- console - fix background ":execute as-string" jobs not terminating on interrupt
- console - fix comment wrapping in the monitor command
- console - fix inconsistent /ip/firewall/filter print with src-address-list and dst-address-list
- console - fix the where filter ignoring flags set to false
- console - improve export order
- console - improve stability when running scripts from Dude
- console - prevent an out-of-memory condition when ":execute as-string" produces large output
- console - prevent duplicate entries in /port/remote-access
- container - add a Ctrl-] escape sequence to exit a stuck container shell
- container - fix container interface handling on CHR
- container - fix veth interface left running after restarting a stopped container
- container - require the container device-mode to enable swap
- crypto - fix a possible crash during IPsec processing on Qualcomm devices
- defconf - fix button script policies
- defconf - fix default configuration generation when CRS8xx series switch ports initialize late
- detnet - use a single random source port
- dhcpv4-client - ignore forcerenew packets that are not unicasted to client
- dhcpv4-server - add ipv6-only-preferred parameter to respect option 108
- dhcpv4-server - show DHCP option 82 parameters in ASCII in addition to hex
- dhcpv6-client - add option 39 with the client hostname
- dhcpv6-client - fix DHCPv6 client address handling after prefix-hint changes
- dhcpv6-client - remove a duplicate dhcp-options parameter
- dhcpv6-relay - use the packet's source MAC for option 79 if relay and client are on the same link layer
- dhcpv6-server - add option 39 (FQDN) support and add-dns-entries option
- dhcpv6-server - fix send-reconfigure for DHCPv6 clients behind a relay
- disk - fix all-zero NGUIDs on NVMe over TCP exported namespaces
- disk - improve RAID5/6 throughput
- dns - fix resolving domain names that end with a dot
- dot1x - rename the reauth-timeout to reauth-period
- dude - fix the server not starting at boot when data-directory is on a USB disk
- email - fix server certificate verification
- email - show certificate related errors in the log
- ethernet - add the arp-accept parameter for interfaces with MAC
- ethernet - fix a stability issue on RB1100AHx2 under heavy traffic
- ethernet - fix bogus fast-path Rx traffic reported on an unconnected ether8 port on RB5009
- ethernet - fix link flap and unexpected reboots on RB5009
- ethernet - fix occasional packet loss on hAP be3 Media
- ethernet - fix PPPoE link flapping on Intel X710
- ethernet - fix PPPoE over VLAN not working on Mellanox ConnectX-4
- ethernet - fix SFP compatibility on hAP ax S and hEX S (2025) devices
- ethernet - improve stability on x86 routers with Mellanox NICs
- evpn - publish MAC-IP routes (RT-2) for neighbors
- fetch - improve upload state reporting when using sftp
- fetch - never set a cookie jar for HTTP requests
- fetch - show a clearer error when keep-result and output are both used
- firewall - add NAT-related fields to CEF format logging
- hardware - show the device name and location in /system/resource/hardware menu
- igmp-proxy - improve stability when changing /routing/igmp-proxy parameters
- iot - add a GPIO menu in WinBox
- iot - add Bluetooth output power control
- iot - allow custom radio plan usage under regional lock
- iot - enforce the fixed antenna gain on boards with an embedded antenna
- iot - fix round-trip-time timing issues in LoRaWAN Basic Station
- ip-service - fix services becoming unreachable after their VRF is disabled and re-enabled
- ipsec - add XFRM interface support
- ipsec - fix IKEv1 tunnels failing to establish when the commit bit is set
- ipsec - fix IKEv2 EAP-TTLS client failing with invalid trust store (introduced in v7.21)
- ipsec - fix IPsec tunnels failing after migration from the old QKD settings
- ipsec - fix policy and SA handling after moving it to netlink
- ipv6 - fix a failure when releasing DHCPv6 prefix delegation pools
- ipv6 - fix cases when address is lost after reboot if prefix was taken from pool
- ipv6 - fix missing IPv6 link-local addresses on some interfaces when the device is busy during boot
- ipv6 - fix the DNS timer in router advertisements
- ipv6 - ignore router advertisements received on interfaces not in the accepting list
- l3hw - fix IPv6 link-local traffic being routed incorrectly
- l3hw - improve stability of L3 hardware offload when using IPv4-mapped IPv6 addresses
- l3hw - optimize ECMP nexthop offloading
- lcd - improve stability when an SFP reports an unknown link speed
- leds - add dark-mode support for L41
- leds - fix missing LED triggers when an R11e card is installed
- lte - accept both y and yes for eSIM confirmation
- lte - add band display support for Huawei ME909s modems
- lte - add missing network error messages for MBIM modems
- lte - add the sms-protocol=qmi option for sending and reading SMS
- lte - do not force reconfiguration on roaming network when roaming is disabled
- lte - fix LTE interfaces disappearing after FOTA updates
- lte - fix missing MAC address on QMI LTE interfaces after the interface is recreated (introduced in v7.24.4)
- lte - fix missing new firmware update notification on some modems
- lte - fix multi-APN connections not passing traffic on AT modems
- lte - fix the subscriber number not updating after switching SIM slots
- lte - improve system stability when using Quectel EP06-E MBIM modem
- lte - improve system stability with eSIM-capable MBIM modems
- lte - remove leftover APN slave interfaces when the master LTE interface is removed
- lte - use also the network reported ipv6 MTU on MBIM interfaces when "auto" mtu option used
- lte - use RA for IPv6 acquisition for FG621
- netinstall - add branding-and-custom-packages parameter for custom NPK packages
- netinstall - fix a duplicate device entry on RB2011 with SFP
- netinstall - fix adding and exporting server comments
- netinstall - fix multiple active interfaces inheriting the first interface's settings
- netinstall - fix Netinstall failing to reinstall RB850Gx2 devices
- netinstall - fix Netinstaller's memory check failing downloads to disk
- ospf - fix DR/BDR traffic not being received with multiple instances
- ospf - improve stability when a neighbor is lost
- ovpn - improve stability in UDP mode when the TX queue is full
- pim - add MLD support for PIM
- pim - fix duplicate PIM configuration parameters
- pim - fix PIM-SM issues with IPv6
- pim - fix wrong or missing PIM configuration by separating PIM and GMP per interface
- poe-out - add port-type field to poe monitor and print output
- poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces)
- poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces)
- poe-out - fix PoE fault led behavior
- poe-out - fix PoE ports entering overload state when a PSU is fed from a UPS
- poe-out - remove the class limit for LLDP power requests on forced ports
- port - accumulate incoming data in log file even without TCP clients connected
- port - add an FTDI latency_timer option for low-latency serial applications
- ppp - add port interface info to PPP outbound channel defaults
- ppp - fix a packet leak during dial-on-demand connection of a ppp-out interface
- ppp - fix BG77 modem port name and channel count
- ppp - fix the offline firmware-update notification for BG77/BG770 modems
- ppp - fix the SINR value reported for BG77 and BG770 modems
- ptp - add support for fixed master and slave port roles
- ptp - add transparent clock mode
- ptp - fix dropped packets on bridges with IGMP snooping and add vlan-id port setting
- qos - fix PFC and lossless buffer issues (introduced in v7.23)
- queue - fix a typo in the cake-overhead-scheme parameter value
- route - improve static route handling performance
- routing-filter - fix any-regexp community matcher matching an empty community attribute
- routing-filter - fix community delete, filter and modify with regexp-only community lists
- sfp - fix QSFP28 optical modules failing to establish a link on CCR2216 and CRS520
- sfp - improve QSFP-DD link establishing to NVIDIA DGX Spark and other devices
- sniffer - improve packet time resolution
- snmp - add an OID and logging for blacklisted program access
- snmp - add CAPsMAN radio data to SNMP
- snmp - add dynamic SNMP engine ID assignment
- snmp - add interface table with mtu and l2mtu OIDs
- snmp - add IP pool OIDs
- snmp - add IPv6 address and interface name to the MNDP neighbour table
- snmp - add OID blacklisting
- snmp - add OIDs for Netwatch probes
- snmp - add OSPF MIB tables
- snmp - add ospfAdminStat and ospfRouterId to the OSPF MIB
- snmp - add SHA-2 authentication for SNMPv3
- snmp - add transmit drop counters
- snmp - add VRRP status OIDs for monitoring
- snmp - fix the reported capability flags in LLDP-MIB
- snmp - fix the snmp tools timing out when authentication is used
- snmp - log a warning when the src-address family does not match the request
- snmp - remove an interface OID that should not be accessible
- ssh - add a connection id to SSH log entries
- ssh - add host key verification for the SSH client
- ssh - limit server output to the client's window size
- ssh - show router host key fingerprint
- ssh - switch the default host key type to Ed25519
- ssh - warn users when weak RSA key is being used
- ssl - enabled hardware accelerated GCM on Alpine CPUs
- ssl - improve logging
- switch - add packet and byte counters for ACL rules on Marvell Prestera switches
- switch - fix degraded slow-path throughput on CRS304 switch (introduced in v7.22)
- switch - fix VLAN-tagged traffic being looped back in MLAG setups on CRS8xx series switches
- system - fix the frequency units from Mhz to MHz
- system - improve stability (includes CVE-2026-31431, CVE-2026-67280)
- system - reboot automatically when the boot process fails to start
- system - reduce the fan control interval on multi-core boards
- system - remove the channel label from the RouterOS version
- system - show health settings and overtemp options based on device capabilities
- system - warn about a missing wifi driver package on BE boards
- tftp - add VRF support
- traffic-flow - fix a kernel failure when disabling traffic flow on a busy system
- user - fix removal of inactive REST API sessions (introduced in 7.21)
- userman - improve stability when importing database files
- vlan - add a forced-mac-address option for VLAN interfaces
- vlan - warn when a VLAN interface is created on a slave interface
- webfig - add a generic table and union group support
- webfig - add column resizing to embedded tables
- webfig - hide the left menu only on QuickSet and Terminal pages
- webfig - improve comboboxes to select the first matching option while typing
- webfig - update style
- webfig - update the login page Help link
- wifi - add a stream-port argument to configure the sniffer streaming server port
- wifi - add fast transition support for MLD devices
- wifi - add interworking, aaa and steering settings to the network configuration
- wifi - add more steering debug logs
- wifi - add network 'labels' parameter to WinBox and WebFig
- wifi - do not preserve branding package on cap when upgrading via capsman
- wifi - fix CAPsMAN failing when mangle marking is used with encrypted data channels
- wifi - fix channel reselect interval/time operation for wifi-qcom-be and wifi-mediatek interfaces
- wifi - fix incorrect scan results for 320 MHz access points
- wifi - fix MLD link type change and SA query in station mode
- wifi - fix per-link client statistics for MLO connections
- wifi - fix SAE authentication using a wrong cached PMK
- wifi - fix station statistics not updating after switching MLD links
- wifi - fix the interworking network type
- wifi - fix the wrong band shown in the registration table
- wifi - fix traffic processing on CAPsMAN after an interface is disabled
- wifi - perform a channel switch instead of dropping clients on radar detection
- wifi - preserve dude package on cap when upgrading via capsman
- wifi - report channel in log messages
- wifi - report management frame protection (MFP) usage in registration-table
- wifi - reuse freed station association IDs
- wifi - show the EAP user identity in the registration table
- wifi - show the MLD links and SSID in MLO client log messages
- wifi-mediatek - fix 4.9 GHz band operation on the A42
- wifi-mediatek - fix roaming between APs belonging to the same MLO group
- wifi-mediatek - fix the 5 GHz access point failing to start after reconfiguration on the A42
- wifi-mediatek - improve MLO client reconnection
- wifi-qcom - fix disconnects during fast transition roaming
- wifi-qcom - fix station mode association failures
- wifi-qcom - improve IP multicast delivery to wireless clients
- wifi-qcom-ac - fix a regression in station MAC address handling
- wifi-qcom-ac - reduce package size
- wifi-qcom-be - add hw-protection-mode support
- wifi-qcom-be - add the distance setting for 802.11be devices
- wifi-qcom-be - fix the block ack request being declined after a channel switch
- wifi-qcom-be - fix Wi-Fi intermittently unavailable after reboot
- wifi-qcom-be - improve throughput in dense client environments
- winbox - add a filtered LLDP tab to neighbor discovery
- winbox - add a Security tab and reorganize bridge and port dialogs
- winbox - add a wifi radio regulatory info (reg-info) view
- winbox - add device-mode configuration
- winbox - add ISIS support
- winbox - add progress bar support to the GUI
- winbox - add the client MTU option for WireGuard peers
- winbox - add the container save option
- winbox - add wifi Spectral Scan support
- winbox - allow power-cycling multiple interfaces at once
- winbox - allow tuple fields with more than two values and multiple separators
- winbox - fix bridge filter window disabling valid fields for IPv6 rules
- winbox - fix SFP optical power values of 0.0 dBm not being shown
- winbox - fix the channel.reselect-interval range field in CAPsMAN
- winbox - fix the EC/IO signal quality graph
- winbox - fix the ISIS neighbor level type being empty for "l2"
- winbox - fix the Memory Limit field of fq_codel to use bytes
- winbox - fix the Min Prefix field in the routing rule dialog
- winbox - fix the MPLS TE tunnel path hops field
- winbox - fix the range field displayed in route filters
- winbox - fix the signal indication graphs for ppp-out interfaces
- winbox - fix the Skins menu for user groups opening a non-existent window
- winbox - fix the system note display on startup
- winbox - fix the wifi Authentication Types and Encryption fields
- winbox - fix wg-import creating a WireGuard interface without a config file
- winbox - improve status reporting under Tools/Email menu
- winbox - make the Power Cycle button act only on the selected interface
- winbox - open the Format Drive panel only for supported disks
- winbox - remove the redundant empty status field from the License window
- winbox - rename "send" to "transmit" in the Bandwidth Test window
- winbox - rework the switch QoS statistics table
- winbox - set minimal supported WinBox version to 4.3
- winbox - show warning messages under "System/Users/SSH Keys" and "System/Users/SSH Private Keys" menu
- winbox - show WireGuard peer information
- wireguard - add the client-mtu parameter
- wireguard - allow referencing a peer by its name
- wireguard - allow unsetting the client-listen-port
- wireguard - fix a peer that would not work after import when no endpoint address is set
- wireguard - improve error message reporting when adding a new peer
- wireguard - keep peer rx/tx counters when the peer is disabled and enabled
- wireguard - support comment lines in wg-import configuration files
- wireguard - treat empty private-key and preshared-key values as none
- wireguard - use the MTU value when importing a configuration
- wireguard - warn when an allowed-address overlaps another peer
- www - add the remote client IP and domain to HTTPS log messages
- www - fix a memory leak when parsing authentication headers
- www - improve URI parsing
:strip_exif()/i/2003203918.png?f=thumbmedium)
:strip_icc():strip_exif()/u/35664/crop5ebbe7c9cc8ef_cropped.jpeg?f=community)
/u/125506/link-8bit.png?f=community)
/u/197786/crop64b2f2dc4d188.png?f=community)
