Download Download MikroTik RouterOS ARM Firmware 7.9 RC 2 for OS Independent Free

Changes in this release:

– snmp – fixed several OIDs returning null values ​​(introduced in v7.9beta4);
– ssh – added support for exporting and importing Ed25519 keys in PKCS8 format;
– wifiwave2 – fixed group key update for VLAN tagged clients (introduced in v7.9beta4);

Other changes since v7.8:

– bgp – replicates all well-known and optional transitive attributes of BGP VPNv4 (introduced in v7.9beta4);
– bgp – fixed BGP VPNv4 origin attribute (introduced in v7.9beta4);
– bgp – improved BGP VPN selection;
– Bridge – Added warning log when “aging time” exceeds hardware limit supported by 98DX224S, 98DX226S and 98DX3236 switch chips;
– Bridging – Fixed FastPath when setting “use-ip-firewall-for-vlan” or “use-ip-firewall-for-pppoe” without enabling “use-ip-firewall”;
– Certificates – fixed bogus log messages;
– chr – fixed pulling public SSH keys when running on AWS;
– Console – Added “/task” submenu (CLI only);
– Console – Added option to create new file with “/file add” command (CLI only);
– Console – fixed syntax highlighting when editing scripts (introduced in v7.9beta4);
– Console – improved stability when doing “/console inspect” in some menus;
– Console – improved stability when editing long strings;
– Console – improved system stability;
– Console – Removed fake “reset” command from “/system resources usb” menu;
– Console – Renamed flag “seen reply” to “seen-reply” under “/ipv6 firewall connection” menu;
– Console – Replace “fingerprint” with “skid” in “/certificate print”;
– Console – displays Ethernet advertisement, speed and duplex settings based on configured auto-negotiation;
– Containers – fixed calling “container shell” multiple times;
– Containers – Improved “Container Pull” to support OCI manifest format;
– detnet – fixed interface state detection after reboot;
– dhcp – change the default lease time of newly created DHCP servers to 30 minutes;
– dhcpv4-server – release lease if “check-status” shows no conflicts;
– Disk – Improved system stability when removing USB while formatting;
– Ethernet – Fixed 10Mbps and 100Mbps half duplex forced mode on ether1 for RB5009, Chateau 5G ax and hAP ax3 devices;
– File system – fixed partition “Copy to” function;
– Firewall – added “connection-nat-state” for IPv6 mangle and filter rules;
– Health – Added limited manual control of fans for CRS3xx, CRS5xx, CCR2xxx devices;
– Health – Fixed false value reporting for CRS510 equipment;
– ike1 – improved service stability when handling non-RSA keys (introduced in v7.9beta4);
– ike2 – minor log typo fixed;
– ipsec – add error log message when peer ID does not match certificate;
– ipsec – fixed packet handling by hardware encryption engine on RB850Gx2 devices;
– ipsec – improved handling of configurations referencing non-existent certificates (introduced in v7.9beta4);
– ipsec – Refactored X.509 implementation;
– ipv6 – added “Validity” and “Lifetime” parameters for SLAAC IPv6 addresses;
– ipv6 – Fixed IPv6 ND config change storage (introduced in v7.9beta4);
– ipv6 – send RA packets with “preferred-lifetime” set to “0” when an IPv6 address is deactivated;
– l3hw – improved routing offload for 98DX224S, 98DX226S and 98DX3236 switches;
– leds – disable LEDs after “/system shutdown”;
– lte – SLAAC addresses have a maximum lifetime capped at 1 hour;
– lte – fixed CA band clearing on RAT mode change;
– lte – fixed duplicate IPv6 routes for lte interface when using “ipv6-interface” setting;
– lte – Fixed LTE interface not showing when resetting RouterOS configuration;
– lte – fixed passthrough mode when used with another APN for Chateau 5G;
– lte – Fixed R11-LTE-US in LTE passthrough mode;
– lte – fixed R11e-LTE-US reporting of RSSI in LTE mode;
– lte – fixed reconnection in some cases where modules would stay in non-running state after network detachment;
– lte – Fixed second modem stalling in dual R11e-LTE6 setup;
– mpls – fixed LDP “preferred-afi” parameter;
– netinstall-cli – improved device reinstallation on failed attempts;
– netwatch – Added “Startup Delay” setting (CLI only);
– netwatch – improved ICMP status evaluation when there is no reply;
– netwatch – limit the “startup delay” range;
– ospf – Fixed handling of fragmented LSAs;
– ovpn – added support for OVPN server configuration export and client configuration import from .ovpn files;
– quickset – fixed display “SINR” when value is 0;
– rose-storage – added nvme-discover option with hostname (CLI only);
– rose-storage – fixed crash when nvme-tcp is disabled;
– rose-storage – fixed rsync transfer permissions;
– rose-storage – various stability fixes;
– Routing – Fixed “Dynamic ID” for VRF tables;
– Routing – improved system stability when making routing decisions;
– Routing – shows SLAAC routes under the “/routing route” menu;
– Route Filters – Improved stability when matching blackhole routes;
– routerboot – added “preboot-etherboot” and “preboot-etherboot-server” settings (requires “/system routerboard upgrade”) (CLI only);
– sfp – Added log warning about failed auto-init on RB4011, RB5009, CCR2004-1G-12S+2XS, CCR2004-16G-2S+, CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
– sfp – module that allows to keep “TX_FAULT” high signal all the time on RB4011, RB5009, CCR2004-1G-12S+2XS, CCR2004-16G-2S+, CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
– sfp – On RB4011, RB5009, CCR2004-1G-12S+2XS, CCR2004-16G-2S+, CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices, allow with bad or no EEPROM in force mode module;
– sfp – fixed “rate select” feature on CCR2004-16G-2S+ and CCR2004-1G-12S+2XS devices (introduced in v7.8);
– sfp – fixed combination ethernet link monitor for CRS328-4C-20S-4S+ switches;
– sfp – improved module initialization and showed more detailed initialization status on RB4011, RB5009, CCR2004-1G-12S+2XS, CCR2004-16G-2S+, CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
– sfp – improved SFP28 interface stability with some optical modules for CRS518 switches;
– sfp – improved system stability for some SFP GPON modules on RB4011, RB5009, CCR2004-1G-12S+2XS, CCR2004-16G-2S+, CCR2116-12G-4S+, CCR2216-1G-12XS-2XQ devices;
– snmp – improved routing output;
– socks – added VRF support;
– ssh – Added Ed25519 host key support;
– ssh – does not allow SHA1 with strong encryption enabled;
– ssh – Improved service responsiveness when changing SSH service settings;
– ssh – improved SSH key import process;
– ssh – Improved system stability when using SSH tunnels (introduced in v7.9beta4);
– Storage – install RAM drive for devices with 32MB flash memory;
– supout – Added DHCP server networking section;
– switch – fixed ACL rules matching IPv6 packets when using only IPv4 matchers;
– Switches – Improved system stability for 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches;
– timezone – updated timezone information from “tzdata2023c” version;
– vrrp – added “self” value to “group-master” setting;
– vxlan – add forwarding table;
– vxlan – fixed packet loss when host moves between remote VTEPs;
– webfig – added inline comments;
– webfig – Fixed “Destination” value under “MPLS/Forwarding-Table” menu;
– webfig – Fixed the problem that the “Certificate” value disappeared under the “IP/Service” menu;
– webfig – Fixed possible missing entries under the “IP/DHCP-Server” menu;
– webfig – various stability fixes;
– wifiwave2 – added “radio/reg-info” command to show regulatory requirements (currently enforced for 802.11ac interfaces) (CLI only);
– wifiwave2 – added ability to configure antenna gain;
– wifiwave2 – added ability to configure beacon interval and DTIM period;
– wifiwave2 – added information about additional interface capabilities for radio parameters;
– wifiwave2 – automatically add VLAN-tagged interfaces to the appropriate bridged VLAN;
– wifiwave2 – exit sniffer command and return error when trying to sniff unsupported channels;
– wifiwave2 – fixed 802.11r roaming for clients using AP to perform initial authentication, since restarted;
– wifiwave2 – fixed some supported channels not listed in radio parameters;
– wifiwave2 – fixed an issue that caused VLAN-tagged wireless clients to receive tagged traffic from other VLANs;
– wifiwave2 – Fixed key handshake timeout for reassociation of client devices on 802.11ac interface;
– wifiwave2 – fixed VLAN tagging for unencrypted (open) APs;
– wifiwave2 – improved general interface stability;
– wifiwave2 – improved compliance for hAP ax^2, hAP ​​ax^3 and Chateau ax;
– wifiwave2 – Increase the maximum value of “channel.frequency” to 7300;
– wifiwave2 – displays information about captured packets and adds the ability to save them locally in a pcap file;
– winbox – added “MTU” and “Hoplimit” properties under “IPv6/Routes” menu;
– winbox – Added “Preferred AFI” attribute under “MPLS/LDP-Instance” menu;
– winbox – Added “S” flag under “IPv6/Firewall/Connections” menu;
– winbox – Added “Tx Power” property under “Wifiwave2/Status” menu;
– winbox – Added “Tx Queue Drops” property under interface settings “Traffic” tab;
– winbox – Added “Username” and “Password” properties under Container/Configuration menu;
– winbox – Added “Active” and “Preferred” properties under “IPv6/Address” menu;
– winbox – Added missing property for “Remote ID Type” under “IP/IPsec/Identities” menu;
– winbox – changed routing flag name from “inactive” to “inactive”;
– winbox – Fixed “TLS” properties under “Tools/Email” menu;
– winbox – Fixed “Type” property under “System/Disks” menu when installing “rose-storage” package;
– winbox – Fixed changing slot names under the System/Disks menu;
– winbox – Fixed default value of “Allow managed” property under “Zerotier” menu;
– winbox – Fixed duplicate “My ID” column under “IP/IPsec/Identities” menu;
– winbox – fixed small typo in “WifiWave2/Radios” menu;
– winbox – fixed missing “Sector Write” for some devices under “System/Resources” menu (introduced in v7.8);
– winbox – improved ethernet advertisement, speed and duplex settings;
– winbox – only show countries allowed by wifiwave2 interface;
– winbox – show missing “Specified bridge” and “Specified port number” monitoring data under “Bridge/Port menu”;
– www – allows insecure HTTP access to the REST API;
– x86 – fixed change software ID (introduced in v7.7);
– zerotier – upgrade to version 1.10.3;

About router firmware:

Before you consider downloading this firmware, go to your router’s system information page and make sure that the currently installed version is neither newer nor matches this version.

Due to the variety of router models and device upgrade methods, it is strongly recommended that you read and most importantly understand the installation steps before applying new firmware, even if you are an advanced user.

In theory, these steps shouldn’t be too much of a hassle for anyone, as manufacturers try to make them easy, even if they don’t always succeed. Basically, you have to upload new firmware to the router and allow it to upgrade via its admin page.

If you install the new version, you can expect a higher level of security, fixes for different vulnerabilities, improved overall performance and transfer speed, enhanced compatibility with other devices, added support for newly developed technologies, and several other changes.

If you’re looking for some measure of security, remember it’s best to perform uploads using an Ethernet cable rather than a wireless connection, which can easily be interrupted. Also, make sure not to power off the router or use its buttons during the installation process if you wish to avoid any glitches.