MikroTik RouterOS 6.37.x (Stable)

Материал из MikroTik Wiki
Перейти к навигации Перейти к поиску

Подробное описание изменений в MikroTik RouterOS 6.37.x (Stable). Официальный список исправленных ошибок, добавленного функционала и прочих доработок. Дата выхода первого набора изменений – 23 сентября 2016, дата выхода последнего набора изменений – 28 ноября 2016.

Чек-лист по настройке MikroTik
Проверьте свою конфигурацию по 28-ми пунктам

MikroTik RouterOS 6.37

Дата выхода: 23 сентября 2016

Важные примечания:

  • There will be only one "wireless" package starting from RouterOS v6.37.
  • DFS configuration in RouterOS has been redesigned, now device looks at specified country settings (/interface wireless info country-info), and applies corresponding DFS mode for each frequency range automatically, making dfs-mode setting unnecessary.
  • Please, check that your frequencies work with corresponding DFS settings before upgrade.

Важные изменения:

  • console - dfs-mode setting does not exist any more and all scripts with such setting will not be executed;
  • dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=110424);
  • dude - from now on dude will use winbox port and it will be changed automatically both in client loader and agent configuration;
  • ethernet - added new loop-protect feature for ethernet, vlan, eoip, eoipv6 interfaces, http://wiki.mikrotik.com/wiki/Manual:Loop_Protect ;
  • wireless - "wireless" package included in bundle "routeros" package;
  • wireless - "wireless-cm2" discontinued;
  • wireless - "wireless-rep" renamed to "wireless";
  • wireless - DFS option is removed, corresponding DFS mode for each frequency range applies automatically.


  • capsman - fixed kernel crash on cap while changing client-to-client forwarding;
  • capsman - report radio-name in registration table;
  • certificate - do not allow to remove certificate template while signing certificate;
  • console - hotspot setup show wrong certificate name;
  • defconf - fixed default configuration restore if virtual wireless interface were present;
  • defconf - fixed default configuration when wireless package is used;
  • defconf - using caps button now forces all wireless interfaces in caps mode;
  • dhcpv6 - improved interface status tracking;
  • dhcpv6 - reworked DHCP-PD server interface and route management;
  • dhcpv6 - update DUID when system-id changes (solves problem when cloned VM retains the same DUID);
  • dns - fixed crash when using regexp static dns entries;
  • ethernet - added support for LAN9514 ethernet dongle;
  • ethernet - allow to force mtu value when actual-mtu is already the same;
  • ethernet - fixed loop-protect on bridged ports;
  • ethernet - fixed never ending loop in CDP packet processing;
  • ethernet - fixed rare kernel failure on non-switch ethernet reset;
  • ethernet - rb44ge now have disabled-running-check=no by default;
  • firewall - added additional matchers for firewall raw rules;
  • firewall - fixed time based rules on time/timezone changes (again);
  • gps - always check NMEA checksum if available;
  • health - do not show psu and fan information for passive cooling devices;
  • hotspot - show comments from user menu also in active menu;
  • ipsec - fixed crash with enabled fragmentation;
  • ipsec - fixed dynamic policy not deleted on disconnect for nat-t peers;
  • ipsec - fixed fragmentation use negotiation;
  • ipsec - fixed kernel crash when sha512 was used;
  • ipv6 - fixed RA and RS processing on new interfaces after many interfaces have lost link during prolonged operation;
  • ipv6 - improved system responsiveness when ipv6 routes are frequently modified;
  • ipv6 - show multiple neighbors with the same address;
  • kvm - fix add/remove of disabled interfaces;
  • kvm - fixed guest crashing when using mtu bigger than 1504;
  • l2tp - fixed kernel failure when fastpath handles l2tp packets;
  • leds - added option to disable all leds on RBcAP2n;
  • lte - added ability to send/receive sms using '/tool sms';
  • lte - added dlink dwm-157 D, dwm-222 support;
  • lte - added huawei me909s variant;
  • lte - added initial deregistration only for bandrich modems;
  • lte - added logging for usb config switching;
  • lte - added Pantech UML295, Vodafone K4201-Z, ZTE MF823/MF831 support;
  • lte - added rndis for ZTE MF8xx;
  • lte - added support for more dlink dwm-222 configurations;
  • lte - added switch for Huawei K5160;
  • lte - added zte K5008-Z back;
  • lte - adjusted usb config for dlink dwm-157 D;
  • lte - fixed at chat condition storage;
  • lte - fixed band setting for sxt lte;
  • lte - fixed band unsetting;
  • lte - fixed default channels for dlink dwm-157;
  • lte - fixed ip activation when CREG (circuit switched) state remains in not registered state;
  • lte - fixed setting correct lte band for sxt lte;
  • lte - process initial state change to deregistred, when lockup occurs;
  • lte - reset if sms storage set fails;
  • mpls - fixed memory leak;
  • mpls - fixed vpls throughput issues caused by out-of-order packets;
  • ntp - fixed ntp server when local-clock used (like usb gps module);
  • partitions - added ability to add comments;
  • ppp - use default-route-distance when adding ipv6 default route;
  • ppp,lte - pin is now converted to string argument;
  • pppoe - fixed disconnects by idle timeout when fastpath is used;
  • quickset - added 2GHz-g/n band support;
  • quickset - fixed guest reporting in "home ap dual" mode;
  • quickset - fixed wireless frequency fields in "home ap dual" mode;
  • rb3011 - fixed rare occasions when router would hang while loading kernel;
  • routing - improved kernel performance in setups with large routing tables;
  • sfp - enabled eeprom printout in /interface ethernet monitor;
  • sfp - fixed initial eeprom reading on CCR1036-8G-2S+ and CCR1072-1G-8S+;
  • sfp - removed "sfp-rate-select" as command was not relevant to currently supported hardware;
  • sms - moved incorrectly logged message from async to gsm topic;
  • sms - report error when unsupported modem is being used;
  • snmp - added script table which executes script and returns it's output on get request;
  • snmp - require write permitions for script run table access;
  • snmp - skip forbidden oids on getnext completion;
  • sstp - allow to specify proxy by dns name;
  • sstp - now supports TLS_ECDHE algorithms;
  • supout - fixed bug that could cause enormous size supout.rif files;
  • supout - improved crash report generation for tile architecture;
  • switch - added comment field for CRS switch VLANs;
  • traffic-flow - allow ipv6 src address to be optional;
  • traffic-flow - fixed IPFIX packet timestamp;
  • traffic-flow - fixed IPFIX wrong flow sequence;
  • trafficgen - add per stream packet count setting;
  • trafficgen - show out-of-order packet counters in stats printouts;
  • tunnel - fixed communication via tunnel to router itself if fastpath was active;
  • tunnel - fixed ipv6 link-local address adding for gre;
  • tunnel - increased minimal MRRU to 1500 for PPP interfaces;
  • tunnel - ipv6 link-local address is now generated from tunnel local-address;
  • usb - added support for SMSC95XX USB Ethernet dongle on mipsbe;
  • usermanager - fixed rare crash on paypal payment;
  • users - fixed script policy checking against user policies when running scripts;
  • webfig - do not crash if radius server does not give out encryption keys;
  • webfig - fixed certificate signing;
  • winbox - added auto refresh for BFD neighbors;
  • winbox - added comment field support for switch vlan menu;
  • winbox - added default-authentication parameter for wireless station modes;
  • winbox - added src-address field for traffic-flow target;
  • winbox - adjust on-event field dynamically depending on window size;
  • winbox - adjusted allowed values for http-proxy field;
  • winbox - disabled MRRU by default for PPP interfaces;
  • winbox - display actual-mtu for tunnels in interfaces window;
  • winbox - fixed disconnect when no windows were opened for a while in unsecure mode;
  • winbox - fixed multiline read only fields not displaying new line characters;
  • winbox - fixed raw firewall showing jump targets from filter chains;
  • winbox - hide ethernet flow control settings for interfaces which does not support them;
  • winbox - removed health menu from devices that do not support it;
  • winbox - removed L2MTU field for PPP interfaces;
  • winbox - removed L2MTU field from PPP server binding settings;
  • winbox - removed unset button for L2MTU field;
  • winbox - show firmware-type in routerboard window;
  • wireless - display DFS flag in country info;
  • wireless - improved driver support for RB953, hAP ac, wAP ac;
  • wireless - send deauth to data frames in scan mode.
  • wireless - updated brazil country settings.

MikroTik RouterOS 6.37.1

Дата выхода: 30 сентября 2016

Важные изменения:

  • package - fixed wireless package status after upgrade to 6.37 (extra reboot after upgrade is necessary);
  • ssl - fixed peer address/dns verification from certificate (affects sstp, fetch, capsman);
  • winbox - now Winbox 3.6 is the minimum version that can connect to RouterOS.


  • console - fixed typo in web-proxy (passthru to passhtrough);
  • dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112599);
  • export - do not show mac-address in export when it is not necessary;
  • firewall - fixed dynamic dummy firewall rules appearance in raw tables;
  • hotspot - fixed nat rule dst-port by making it visible again;
  • led - fixed default led settings for wAP2nDr2;
  • snmp - do not allow to execute script if user does not have write permission;
  • tile - do not reboot device after watchdog disable/enable;
  • userman - always re-fetch table data when switching between different menus;
  • userman - fixed timezone adjustment in reports;
  • webfig - fixed channel selection in check-for-update menu in Firefox;
  • winbox - added loop-protect settings;
  • winbox - added passthrough state to web-proxy;
  • winbox - allow to unset http-proxy field for sstp client;
  • winbox - do not show health menu on RB951-2n;
  • winbox - fixed typo in dhcpv6 relay (DCHP to DHCP);
  • winbox - show address expiration time in dhcp client list;
  • wireless - show DFS flag in country-info command output.

MikroTik RouterOS 6.37.2

Дата выхода: 8 ноября 2016

Важные примечания:

It will be fixed in soon to be released v6.37.3

Важные изменения:

  • ethernet - optimized packet processing on low load when irq re-balance is not necessary;
  • fastpath - let one packet per second through slow path to properly update connection timeouts;
  • queues - significantly improved hashing algorithm in dynamic simple queue setups (fixes CPU load spikes on queue removal).


  • arm - improved watchdog reliability;
  • bonding - fixed 802.3ad load balancing over routed VLANs with fastpath enabled;
  • bonding - fixed mac address selection after upgrade;
  • crs - fixed port mirroring halt after L2MTU change;
  • dhcp - do not allow to create dhcp-server on slave interface;
  • ethernet - fixed interface speed reporting for x86 in log after reboot or if "disable-running-check=yes";
  • ethernet - fixed potential loopprotect crash;
  • export - fixed "/interface ethernet switch export" on some boards;
  • export - fixed CRS switch egress-vlan-tag export;
  • fastpath - fixed kernel failure when fastpath traffic goes into loop;
  • fastpath - improved connection tracking timeout updates;
  • firewall - do not allow to increase/decrease ttl and hop-limit by 0;
  • firewall - fixed "connection-state" value disappearance in rules that were created before v6.22;
  • firewall - fixed compact export (introduced in 6.37rc14);
  • firewall - improved "time" option (ranges like 22h-10h now are acceptable);
  • hotspot - fixed nat rule dst-port by making it visible again for Walled Garden ip return rules;
  • ipsec - changed logging topic from error to debug for ph2 transform mismatch messages;
  • ipv6 - increased default max-neighbor-entries value to 8192, same as ipv4;
  • mmips - improved watchdog reliability;
  • package - show minimal supported RouterOS version under "/system resource" menu if it is specified;
  • queue - fixed rare crash on statistic gathering in "/queue tree";
  • queue - improved "time" option (ranges like 22h-10h are now usable);
  • rb2011 - fixed crash on l2mtu changes;
  • sms - fixed crash after modem has failed to start;
  • ssl - fixed potential memory leak ( when using dude for example);
  • torch - fixed aggregate statistics appearance;
  • traffic-flow - fixed dst-port reporting if connection is not maintained by connection tracking;
  • userman - fixed memory leak on user limitation calculations;
  • winbox - added led settings menu;
  • winbox - fixed missing switch menu for mmips devices.

MikroTik RouterOS 6.37.3

Дата выхода: 28 ноября 2016


  • bgp - do not match all prefixes tagged with community 0:0 by routing filters;
  • bridge - fixed filter Ingress Priority option (broken in 6.36rc8);
  • chr - fixed crash on "/interface print" (introduced in 6.36.4);
  • chr - fixed crash on "/system reboot" and "/system shutdown";
  • crs226 - fixed sfp-sfpplus1 link re-negotiation (broken in 6.37rc28/v6.37.1);
  • disk - fixed issue when disk was renamed after reboot on devices with flash disks;
  • dns - do not resolve incorrect addresses after changes made in static dns entries;
  • dns - improved static dns entry add speed when regexp is being used;
  • dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112598);
  • firewall - fixed filter rule "limit" parameter by making it visible again;
  • firewall - fixed interface slave state recognition (broken in 6.37.2);
  • firewall - fixed timeout option on address lists with domain name;
  • log - ignore email topic if action is email;
  • mipsbe - improved memory allocation on devices with nand when file transfer and tcp traffic processing is on progress;
  • route - fixed memory leak when route cache is disabled;
  • tile - fixed rare kernel failure when IPv6 neighbor discovery packet is received;
  • traceroute - fixed crash when too many sessions are active;
  • tunnel - allow to force mtu value when actual-mtu is already the same;
  • winbox - recognize properly tcp in traffic-generator packet-template header type;
  • winbox - show HT MCS tab if 2GHz-G/N band is used.
Чек-лист по настройке MikroTik
Проверьте свою конфигурацию по 28-ми пунктам