TikDude

Lots of improvements and bufixes in the new RouterOS 3.23:

*) fixed installation on fresh disks or VMs;
*) add 802.1ad Service Tag support for VLAN;
*) wireless - fix for RTS/CTS when used together with dynamic ACK timeout;
*) serial ports are now grouped per USB device;
*) added gsm info command to ppp-client;
*) added URL support to fetch tool;
*) added dial-on-demand mode to PPTP & L2TP clients;
*) ssh - now non-interactive console commands can reference variables;
*) fixed TFTP server logging;
*) fixed problem - “/system upgrade” (autoupgrade) did not show proper package
architecture and was unable to fetch new packages;
*) fixed bug - hotspot ‘walled garden ip’ rules did not work on some boards
after reboot;
*) added ‘/interface print stats’ command;
*) improved support for OSPF as PE-CE routing protocol;
*) added OSPF sham links;
*) fixed a bug in set-bgp-prepend-path routing filter;
*) fixed some MPLS TE reoptimize bugs;
*) added MPLS TE bandwidth management features;
*) netwatch - ignore items with interval 0s, this value was causing
netwatch to fail;
*) routing-test - added new type of gateway argument: ip address together with interface;
*) api - ‘disabled’ property was not available from api since 3.21, fixed;
*) api - added support for retrieving OID values;
*) api - removed special behaviour of ‘find’ command under API. Use
‘print’ command with queries instead of ‘find’. This change fixes
scripts that are started from API and contain ‘find’ command.
*) console - removed support for octal numbers, now string of digits with
a leading zero is interpreted as decimal number;
*) console - added binary ~ operator that matches value against
POSIX extended regular expression;
*) console now accepts decimal numbers with k/K M G T P suffixes for
values of some properties;
*) console - fixed export problems:
if long line is wrapped just before space charater, the space character
has to be escaped, otherwise it is lost;
errors during export generated a comment line that was incorrectly enclosed
in quotes;
*) console - added binary ~ operator that matches value against
POSIX extended regular expression;
*) scheduler - added owner and policy properties; all existing
scheduler entries will get owner name “*sched” and policy
read,write,test;
*) routing-test - allow to specify that route gateway is in the main routing table;
*) added route cache statistics;
*) fixed mesh protocol;
*) graphing - fixed IP address mask display issue for low endian architectures;

RouterOS version 3.22 was released today with some new features:

*) added advanced switch features for RB450G;
*) added support for MetaROUTER on RB450G;
*) added support for adding physical interfaces to Metarouters;
*) added set-bgp-prepend-path action to routing filters;
*) added WinBox OSPFv3 support to routing-test package;
*) added WinBox IPv6 routes support to routing-test package;
*) console - added ‘hide-sensitive’ option to the export command;
*) user manager - fixed customer remove interface bug;
*) fixed Cisco BGP VPLS autodiscovery in mpls-test package;
*) fixed LDP to not disconnect on unknown capabilities of remote
peer (should help establish LDP session with Junos);
*) fixed ethernet port name reordering on RB493;
*) bonding mode balance-alb now works on RB1xx, RB4xx, RB616, RB600, RB750,
RB1000;
*) added ‘/interface ethernet print stats’ command for RB450G and RB750;
*) fixed CSPF in routing-test to properly interpret link bandwidth;
*) added support for C-motech CNU-680 CDMA 1x EV-DO 450Mhz USB Modem;

RouterBOARD 1000 comes with an onboard encryption engine, however RouterOS releases before version 3.20 couldn’t use it’s full potential. Now the 3.20 software puts the encryption hardware into full use thus providing a fantastic 11 times speedup with 3DES encryption and 6,5 times speedup when using AES128 encryption!

MikroTik  testing results state the following:

v3.19
AES128: 79Mbps
3DES: 45Mbps

v3.20
AES128: 510Mbps
3DES: 500Mbps

Version 3.21 brings a lot of fixes and few improvements:

*) backported MetaROUTER support for RB4xx from v4;
*) added WinBox MPLS & VPLS support mpls-test package;
*) added WinBox BGP support to routing-test package;
*) api - added query support for ‘print’ command;
*) added support for bsd-syslog;
*) added TFTP server;
*) added authorization and TLS support to email tool;
*) added pppoe-scanner;
*) added tftp protocol support to fetch tool;
*) fixed ipsec policy priority to work as documented;
*) fixed BGP route selection in routing package;
*) allow to use IPsec aggressive mode with pre-shared keys;
*) fixed some problems in mesh protocol;
*) fixed https proxying with parent proxy;
*) fixed Prism shared IRQ issue;
*) fixed multiple MPLS/VPLS bugs in mpls-test;
*) fixed boot problems on some RB1000s;
*) added /interface mesh traceroute command;
*) fixed web proxy source address selection;
*) fixed pcq queue - pcq sometimes could get through more traffic
than specified in max-limit;

Important IPv6 bugfix and lots of new features in MikroTik RouterOS 3.20:

*) added support for IPsec hardware acceleration on RB1000,
increases IPsec SHA1-3DES encryption from 45Mbps to 500Mbps
and SHA1-AES from 79Mbps to 500Mbps;
*) fixed IPv6 on RB1xx and RB5xx;
*) added support for ZTE MY 39, CDMA EVDO USB card;
*) added clear-df action to firewall;
*) fixed bug - sometimes netinstall could fail to install RouterBOARD
with “ERROR: could not format partitions”;
*) fixed PCQ bug - pcq-rate < 70000 did not work correctly (broken in 3.17);
*) added radius-mac-format setting in hotspot server profile;
*) allow to use ip firewall for encapsulated PPPoE packets;
*) graphing - fixed 10Gbit card bug;

New version of RouterOS 3.19 brings the following changes:

*) fixed problem - web proxy used up all router memory
if unlimited ram caching was enabled;
*) fixed problem - some log topics got swapped in configuration;
*) reduced maximum supported memory for RB1000 to 1.5Gb (was 1.75Gb);
*) interface mesh was not working in 3.18, fixed;
*) fixed Prism crash;
*) fixed VPLS interface related crash in mpls-test;
*) allow to enter range in BGP instance confederation peers;
*) console - fixed ‘/system backup save’ command, name argument is
optional, and backup file name is automatically generated if empty;
*) sped up IPv6 forwarding on RB4xx, RB1xx and RB5xx;
*) fixed BGP route selection in routing-test;
*) fixed dhcp server to update agent-circuit-id and agent-remote-id for lease
whenever it changes;

Mikrotik 3.18 came out today with a lot of fixes:

*) IPv6 address auto-configuration: added recursive DNS server option;
*) fixed problem - sometimes firewall did not work after reboot on RB1xx;
*) do not send IPv6 packets over PPTP, L2TP or PPPoE - could confuse some
servers or clients;
*) allow queues to have all traffic, not only ip (for example vpn);
*) added ability to specify dns name in bandwidth test in WinBox;
*) fixed problem - sometimes RB1xx (and RB4xx) could not start up or startup was very long;
*) improved ipv6 sniffing;
*) improve torch and sniffer behavior under high load;
*) improved queue statistics;
*) fix xen make-routeros-image command;
*) fix potential wireless crash under load when negotiating encryption;
*) fix several MPLS issues in mpls-test;
*) fixed support for Novatel Wireless Ovation MC950D HSUPA;
*) fixed some bugs in routing-test OSPF;
*) added support for D-Link DUB-E100 USB Ethernet adapter;
*) fixed user-manager database rebuild command to succeed in case of
malformed database disk image;
*) sms - added descriptions for error codes;
*) sms - added automatic ’smsc’ (service centre address) value detection,
to work around first time error when sending SMS without specifying
an ’smsc’ value;
*) fixed - during uptime 4:20 .. 5:00 interface traffic (byte and packet
count) was being reported 100 times larger than the actual value;
*) provide L2TP server address in Called-Station-Id when doing authentication over RADIUS;
*) added support for Sierra Wireless MC8790;
*) recalibrated noise floor adjustment for R5H;
*) updated drivers & kernel - fixed fast clock issue on x86;

Here’s what’s new in RouterOS 3.17:

*) added support for Intel 10Gb PCI Express driver;
*) made Huawei E220 USB modem work again;
*) added support for Novatel Wireless Ovation MC950D HSUPA;
*) fixed PCQ fairness when pcq-total-limit is reached;
*) fixed fetch tool to work when dst-path is not specified (broken in 3.16);
*) fetch tool - added keep-result command line argument;
*) allow to specify routing-table for ping, trace-route, and telnet;
*) fixed an IPsec bug;
*) fixed /ip firewall address-list;
*) added propagate-ttl option for MPLS;
*) fix very long wireless scan-list issues;
*) fixed problem - sometimes PCQ could stop data pass-through if pcq-rate was set;
*) fixed problem - L2TP could stop working when one of clients stopped responding
at wrong time;
*) fixed problem - reduced size of supout.rif files;
*) graphing - support for 10 Gbit interfaces;
*) routing-test - added support for multi-instance OSPF;
*) user manager - fixed bug for PayPal payments with long parameter list;
*) user manager - database load command supports external storage
for temporary files;
*) user manager - added support for all UTC time-zone offsets,
including +5:30, +5:45, etc.;

Version 3.16 was released earlier today with the following changes:

*) added support for IGMP proxy;
*) improved Nstreme polling in wireless-test;
*) routing-test - routing filters now use regular expressions
to match BGP AS_PATH; use ‘_’ (underscore) to match any of:
comma, space, beginning of line, end of line, parentheses, braces;
*) make secondary disk contents visible under /file;
*) console - allow use of ‘/’ and ‘.’ characters in backup, export
and print output file names;
*) fixed bug - hotspot universal client did not work for clients
with IP address ending with 127 or with 224-239;
*) fixed problem - x86 clock was 10 times faster then it should be on some boards;
*) fixed kernel panic on RB1000;
*) console - fixed wrapping of long lines in GNOME Terminal;
*) console - autodetect Mac OS X Leopard Terminal.app, fixes condition
when only the bottom line of the terminal was used;
*) console - ‘find’ commands could not match some properties, like
‘routing-mark’ of the ‘/ip route find’ command. Fixed;

3.15 came out today with lots of fixes:

*) added workaround for non-standards compliant CPE with timestamp issue;
*) added ability to manage multiple disks & stores under /store;
*) added support for storing user-manager database on secondary media via /store;
*) /store should be used to set up secondary disk as web proxy cache;
*) added support for Mesh in WinBox;
*) fixed client roaming in mesh protocol;
*) fixed bug in MME routing protocol:
routes sometimes were lost from routing table;
*) fixed some bugs in routing-test;
*) fixed traffic forwarding when VRF (virtual routing and forwarding) is used;
*) fixed problem - USB did not work on Geode LX boards;
*) fixed problem - farsync cards did not negotiate links;
*) added support for Novatel EU870D;
*) added support for Intel 82575EB & 8257GB gigabit ethernet PCI-Express cards;
*) removed support for all synchronous cards but farsync;
*) graphing - all target (source) addresses displayed in queue statistics page;
*) bridge firewall broute table is removed - it did not work as expected anyway;
*) ingress-priority matcher added to bridge firewall
*) fixed use-dns property of console traceroute command, default now is
use-dns=no;
*) updated UK 5.8 FIXED regulatory domain info;
*) /system ssh now by default uses name of logged in user instead of “admin”;
*) fixed support for some microSD cards on RB400;
*) include Relay-Session-ID in packets sent by PPPoE client if required;
*) added ability to specify src. address for radius client;
*) dns cache - improved static entry behavior;
*) fixed dial-on-demand on ppp interfaces;