ipsec - added new "identity" menu with common peer distinguishers;
speedtest - added "/tool speed-test" for ping latency, jitter, loss and TCP and UDP download, upload speed measurements (CLI only);
telnet - do not allow to set "tracefile" parameter;
bgp - properly update keepalive time after peer restart;
bridge - fixed BOOTP packet forwarding when DHCP Snooping is enabled;
bridge - fixed IPv6 link-local address generation when auto-mac=yes;
capsman - always accept connections from loopback address;
certificate - added support for multiple "Subject Alt. Names";
cloud - added "ddns-update-interval" parameter;
conntrack - added new "loose-tcp-tracking" parameter (equivalent to "nf_conntrack_tcp_loose" in netfilter);
console - properly remove system note after configuration reset;
crs3xx - improved fan control stability;
crs3xx - improved stability when adding ACL rules on CRS326 and CRS328 devices (introduced in 6.44beta39);
defconf - fixed default configuration loading on RB4011iGS+5HacQ2HnD-IN;
defconf - fixed IPv6 link-local address range in firewall rules;
dhcp - added "allow-dual-stack-queue" setting for IPv4/IPv6 DHCP servers to control dynamic lease/binding behaviour;
dhcpv4-server - added "parent-queue" parameter (CLI only);
dhcpv6-server - properly handle DHCP requests that include prefix hint;
discovery - detect proper slave interface on bounded interfaces;
discovery - fixed malformed neighbor information for routers that has incomplete IPv6 configuration;
discovery - send master port in "interface-name" parameter;
discovery - show neighbors on actual bridge port instead of bridge itself for LLDP;
ethernet - fixed VLAN1 forwarding on RB1100AHx4 and RB4011 devices;
export - fixed "silent-boot" compact export;
fetch - added "http-header-field" parameter;
gps - added "coordinate-format" parameter (CLI only);
ike2 - allow to match responder peer by "my-id=fqdn" field;
ipsec - improved invalid policy handling when a valid policy is uninstalled;
kidcontrol - added IPv6 support;
kidcontrol - added statistics web interface for kids (
http://router.lan/kid-control);led - fixed default LED configuration for RBMetalG-52SHPacn;
lte - added "ecno" field for "info" command;
lte - disallow setting LTE interface as passthrough target;
lte - fixed passthrough functionality when interface is removed;
lte - improved SimCom 7100e support;
lte - increased reported "rsrq" precision;
lte - reset USB when non-default slot is used;
package - use bundled package by default if standalone packages are installed as well;
ppp - added "at-chat" command;
resource - fixed "total-memory" reporting on ARM devices;
snmp - added "tx-ccq" ("mtxrWlStatTxCCQ"and "rx-ccq" ("mtxrWlStatRxCCQ"values;
snmp - changed fan speed value type to Gauge32;
snmp - removed "rx-sector" ("Wl60gRxSector"value;
ssh - fixed public key format compatibility with RFC4716;
switch - fixed MAC learning when disabling interfaces on devices with Atheros8327 and QCA8337 switch chips;
system - fixed situation when all configuration was not properly loaded on bootup;
timezone - fixed "Europe/Dublin" time zone;
traceroute - improved stability when sending large ping amounts;
upgrade - automatically uninstall standalone package if already installed in bundle;
user - require "write" permissions for LTE firmware update;
watchdog - allow specifying DNS name for "send-smtp-server" parameter;
webfig - do not show bogus VHT field in wireless interface advanced mode;
winbox - added "allow-roaming" parameter in "Interface/LTE" menu;
winbox - added "challenge-password" field when signing certificate with SCEP;
winbox - added "conflict-detection" parameter in "IP/DHCP server" menu;
winbox - added src/dst address and in/out interface list columns to default firewall menu view;
winbox - added support for dynamic devices in "IP/Kid Control/Devices" tab;
winbox - allow to change VHT rates when 5ghz-n/ac band is used;
winbox - fixed missing w60g interface status values;
winbox - renamed "Radius" to "RADIUS";
winbox - show "R" flag under "IPv6/DHCP Server/Bindings" tab;
winbox - show "Switch" menu on RB4011iGS+5HacQ2HnD;
wireless - fixed conformity with EU regulatory domain rules;
wireless - improved system stability for all ARM devices with wireless;