MikroTik RouterOS ARM Firmware 7.8 Beta 3

Important note!!!

- Version is not recommended on CRS3xx devices.

Changes in this release:

- storage - added new "rose-storage" package support for extended disk management and monitoring functionality (ARM, ARM64, Tile and x86) (CLI only);
- bridge - fixed adding disabled MSTI;
- bridge - improved HW offloading logic;
- certificate - fixed PBES2 certificate import;
- certificate - improved multiple certificate import process;
- console - improved ":execute" command to output a string when a file is not specified;
- dhcpv4-client - send DHCPv4 unicast requests to DHCPv4 relay, instead of server when it is being used;
- dns - fixed CNAME reading from the cache;
- dns - respond with "NOERROR" to DNS requests for static domain names when appropriate type record is not configured or found on upstream server;
- health - fixed "temperature" and "power-consumption" readings for RB1100AHx4;
- ike2 - fixed active SA flush on responder after an unsuccessful peer connection attempt;
- ipsec - fixed peer matcher for incoming connection with unresolved DNS;
- ipv6 - improved handling of "advertise" IPv6 address status changes;
- led - fixed signal reading for KNOT device;
- lte - LtAP improved modem detection in lower mini-PCie slot ("/system routerboard upgrade" required);
- pimsm - improved system stability;
- poe - added LLDP power management support for 802.3at PSE;
- pppoe - fixed PPPoE client scan showing only one server;
- route - added hoplimit and metric parameters to SLAAC routes;
- routerboot - fixed format storage for RBM33G device ("/system routerboard upgrade" required);
- routerboot - fixed protected routerboot for RBM33G device ("/system routerboard upgrade" required);
- sfp - improved optical modules SFP compatibility on CCR2004-16G-2S+, CCR2004-1G-12S+2XS, CCR2116-12G-4S+ devices;
- switch - fixed "switch-cpu" counters (introduced in 7.8beta2);
- usb - changed USB auto detect behavior to default to the external USB, when no internal USB devices detected
- vxlan - added FastPath support;
- webfig - improved terminal operation;
- wifiwave2 - adjust monitoring of station interfaces to report when an interface is authorized, not just connected;
- wifiwave2 - fixed 802.11r fast transition when using wpa3-psk authentication (introduced in 7.8beta2);
- winbox - added "Connect" button under "WifiWave2/Scan" menu;
- winbox - added "Disable/Enable" buttons under "WifiWave2" menu;
- winbox - added "Provision" button under "WifiWave2" menu;
- winbox - added "Start On Boot" checkbox under "Container" menu;
- winbox - added "Tx Rate" and "Rx Rate" columns under "WifiWave2/Registration" menu;
- winbox - added missing cipher properties for OVPN server and client;
- winbox - added missing filtering properties under "Tools/Packet Sniffer" menu;
- winbox - added missing properties when setting "Use DoH Server";
- winbox - added support for manual RAM file system (TMPFS) creation under "System/Disk" menu;
- winbox - added Type "https-get" parameter under "Tools/Netwatch" menu;
- winbox - allow selecting bridge for static entries under "Bridge/MDB" menu;
- winbox - hide "TTL" value for static DNS entries with FWD type;
- winbox - hide unnecessary properties for virtual interfaces under "WifiWave2" menu;
- winbox - rename "Multicast Router" monitoring property to "Is Multicast Router" under "Bridge" menu;
- zeroter - fixed routes after VRF change;

Other changes since v7.7:

- bgp - fixed setting of "default-prepend" parameter;
- bridge - fixed PVID warning typo;
- certificate - improved certificate management, signing and storing processes;
- conntrack - improved system stability when changing connection tracking state;
- container - added authentication option for registry (CLI only);
- container - fixed ".type" file ownership;
- container - fixed file ownership after system upgrade for containers running on internal disk;
- container - fixed multiple container automatic startup on boot;
- disk - limit maximum TMPFS size;
- dns - added configurable DoH concurrent query limitation parameters (CLI only);
- dns - do not cache results from ":resolve" command with specific server;
- dns - limited "DoH max concurrent queries reached" logging messages to once per minute;
- firewall - fixed bridge priority target;
- firewall - fixed DSCP priority target for IPv6 Mangle;
- firewall - fixed netmap range maximum address calculation for IPv6 NAT;
- graphing - fixed hiding of target queues when "allow-target" is disabled;
- graphing - fixed sorting of interface and queue graphs;
- graphing - properly handle disabled and static-binding interface graphs;
- graphing - removed "move" command for graphing rules;
- hotspot - fixed setting of "address" parameter for IP binding;
- hotspot - restore cookie timeout on reboot;
- ike2 - added support for "address", "key-id" and "dn" for Remote ID matching (CLI only);
- ipsec - added support for "Framed-Route" RADIUS attribute support;
- ipsec - do not match incoming IKE requests by unresolved DNS name peers;
- ipv6 - added "pref64" option configuration for RA;
- ipv6 - limited "hop-limit" parameter value range to 255;
- ipv6 - made distributed DNS lifetime RFC8106 compliant;
- l3hw - added destination MAC address check for offloaded FastTrack connections;
- lte - added AT support for Telit LE910C4 in MBIM mode;
- lte - fixed APN setting usage on initial connection attempt for AT based Quectel and Neoway modems;
- lte - fixed automatic antenna selection on Chateau LTE12/LTE18;
- lte - fixed dialing for Fibocom L850-GL module;
- lte - fixed displaying of "subscriber-number";
- lte - improved AT port matching for SIMCom, Huawei, WeLink, Cinterion, BandLuxe and Sierra modems;
- lte - improved modem detection speed in lower mini-PCIe slot on LtAP;
- lte - parse USSD even if encoding is unsupported;
- mpls - fixed handling of more than 9 VRF's;
- mpls - fixed LDP listen socket creation before IPv6 address is ready for use;
- mpls - improved stability when neighboring router reboots;
- ospf - fixed "ospf-type" parameter for OSPFv3 routes;
- ospf - fixed simple auth for OSPFv3;
- ovpn - added AES-GCM and multicore encryption support (CLI only);
- poe - properly turn off power when link not detected on hAP ax2 and hAP ax3;
- port - fixed modem channel number on KNOT;
- resource - show filesystem related statistics on CCR2004;
- route - fixed IPv6 default route presence when received from RA;
- route - fixed printing of routing table's "count-only" parameter;
- sfp - fixed false link detection with S+RJ10 on RB5009;
- sfp - fixed reading of SFP EEPROM on single SFP port devices;
- sms - improved reporting of SMS sending errors;
- sms - log USSD response when USSD is sent over MBIM;
- sniffer - added additional filtering parameters (CLI only);
- snmp - do not show identity in LLDP when branding is used with hide SNMP data;
- snmp - fixed handling of disabled routes;
- snmp - fixed reporting of total number of routes counter;
- ssh - hard-coded "localhost" address for forwarding requests;
- sstp - fixed TLS session establishment when "connect-to" is DNS name;
- switch - fixed SFP rate select for CRS354 devices;
- switch - improved system stability for 98DXxxxx switch chips;
- torch - allow "without-paging" parameter for Torch;
- traffic-generator - increased maximum allowed stream count;
- upgrade - show error message when license prohibits upgrade;
- vxlan - added "dont-fragment" setting that allows managing fragmentation;
- webfig - allow setting numeric values in time interval fields;
- webfig - fixed accessing of WebFig when "Interface" menu is disabled by skin;
- webfig - fixed editing of multi-field parameters with "not" checkbox;
- webfig - fixed handling of empty skin files;
- webfig - improved navigation responsiveness;
- webfig - improved skin file parsing;
- webfig - properly escape all reserved URI characters;
- webfig - updated WebFig and graph web pages to HTML5;
- wifiwave2 - added wireless sniffer tool to capture wireless transmissions (CLI only);
- wifiwave2 - enabled additional channels in UNII-3 and UNII-4 bands for Europe and USA on hAP ax^2, hAP ax^3 and Chateau ax;
- wifiwave2 - implement 802.11w management protection SA Query procedures;
- wifiwave2 - improve protections from denial-of-service attacks on WPA3;
- winbox - added "Match Subdomain" parameter under "IP/DNS/Static" menu;
- winbox - added missing WifiWave2 related parameters under "WifiWave2" menu;
- winbox - fixed displaying of "Default Prepend" value under "Routing/BGP/Sessions" menu;
- winbox - fixed displaying of "Tx/Rx CCQ" values under "Wireless/Registration" menu;
- winbox - fixed displaying of flags under "System/Console" menu;
- winbox - fixed displaying of multiple character flags;
- winbox - fixed usage of IPv6 family addresses under "IP/Web Proxy/Access" menu;
- winbox - improved mouseover hint for "local" policy under "System/Users/Groups" menu;
- winbox - show "Gateway" column by default under "IPv6/Routes" menu;
- x86 - added support for TP-Link TG-3468;
- x86 - fixed SR-IOV support for Intel X710 series NIC;
- x86 - improved Intel 500 series 10G SFP module support;
- x86 - improved stability for Intel X550 series NIC with SR-IOV;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.