The official Mikrotik router thread

Anyone here had any experience with the Mikrotik range of wireless AP's? Coming from a Unifi AP AC LR, what would I miss if I got one of these?


Having everything manageable from one system (Winbox) would be nice, but I have heard the Mikrotik stuff can be tricky to setup and get going. Also, I think the Unifi stuff has spoilt me but my unit seems to be flaking more and more lately, granted it is 7 years old now.

Probably eyeing something like the u6-Lite if I don't decide to go the Tik route.
Not too bad to setup.
But I would rather get a newer Unifi.
Use Mikrotik for routing and Unifi for WiFi.
 
I hope this information helps someone in the future - I spent a bit of time stuck on this.

I'm running DHCPv6 relay on a MikroTik and needed devices to use their DHCPv6-assigned addresses instead of SLAAC addressing.

To prevent the Mikrotik from advertising the prefix information while still sending Router Advertisements (so devices can get a default gateway), you need to disable the autonomous flag (A-Flag) under /ipv6/nd/prefix

Example:
/ipv6 nd prefix default
set autonomous=no

Alternatively, use advertise=no and add prefix in /ipv6/nd/prefix manually with whatever parameters you need.
 
5/22 13:57
RouterOS 7.19 [stable]

What's new in 7.19 (2025-May-22 10:53):

*) arm64 - fixed possible transmit queue timeout on CCR2216, CCR2116, RDS2216;
*) arp - added warning, when "Published" ARP entry used on an interface with "reply-only" ARP mode enabled;
*) bgp - added input.filter-community;
*) bgp - fixed excessive CPU usage;
*) bgp - fixed input.accept-community;
*) bgp - fixed memory leak on receiving notify and closing session;
*) bgp - improved performance on BGP input;
*) bonding - added setting for LACP active/passive modes;
*) bridge - added new STP monitoring fields for bridge and ports (Tx/Rx BPDU, Tx/Rx TC, forward/discard transitions, last topology change, message-age, max-age, remaining-hops, bridge-id);
*) bridge - fixed bridge port hang when using invalid port IDs;
*) bridge - fixed dhcp-snooping in QinQ setups;
*) bridge - fixed issue when local MACs were removed unnecessarily;
*) bridge - fixed minor memory leak on link down;
*) bridge - fixed multicast packet flow on hardware offloaded bridge which acts as "multicast-router";
*) bridge - improved default bridge and port layout on console and GUI;
*) bridge - improved stability in case of configuration error (introduced in v7.15);
*) bridge - moved "TCHANGE" logs from bridge,stp to bridge,stp,debug;
*) bridge - offload VXLAN only if another HW offloaded port exists in the bridge;
*) bridge - properly flush bridge hosts when bonding is used as bridge port and loses hw-offloading status;
*) bridge - rename "ports" to "interface" under MDB table for configuration consistency with other menus;
*) bridge - renamed STP monitor fields (port-number to port-id, designated-port-number to designated-port-id, designated-bridge to designated-bridge-id);
*) bridge - show designated-* monitor field for all port roles;
*) bridge - show warning instead of causing error when using multicast MAC as admin-mac (introduced in v7.17);
*) bth - properly specify "in-interfac...
 
5/22 13:57
RouterOS 7.19 [stable]

What's new in 7.19 (2025-May-22 10:53):

*) arm64 - fixed possible transmit queue timeout on CCR2216, CCR2116, RDS2216;
*) arp - added warning, when "Published" ARP entry used on an interface with "reply-only" ARP mode enabled;
*) bgp - added input.filter-community;
*) bgp - fixed excessive CPU usage;
*) bgp - fixed input.accept-community;
*) bgp - fixed memory leak on receiving notify and closing session;
*) bgp - improved performance on BGP input;
*) bonding - added setting for LACP active/passive modes;
*) bridge - added new STP monitoring fields for bridge and ports (Tx/Rx BPDU, Tx/Rx TC, forward/discard transitions, last topology change, message-age, max-age, remaining-hops, bridge-id);
*) bridge - fixed bridge port hang when using invalid port IDs;
*) bridge - fixed dhcp-snooping in QinQ setups;
*) bridge - fixed issue when local MACs were removed unnecessarily;
*) bridge - fixed minor memory leak on link down;
*) bridge - fixed multicast packet flow on hardware offloaded bridge which acts as "multicast-router";
*) bridge - improved default bridge and port layout on console and GUI;
*) bridge - improved stability in case of configuration error (introduced in v7.15);
*) bridge - moved "TCHANGE" logs from bridge,stp to bridge,stp,debug;
*) bridge - offload VXLAN only if another HW offloaded port exists in the bridge;
*) bridge - properly flush bridge hosts when bonding is used as bridge port and loses hw-offloading status;
*) bridge - rename "ports" to "interface" under MDB table for configuration consistency with other menus;
*) bridge - renamed STP monitor fields (port-number to port-id, designated-port-number to designated-port-id, designated-bridge to designated-bridge-id);
*) bridge - show designated-* monitor field for all port roles;
*) bridge - show warning instead of causing error when using multicast MAC as admin-mac (introduced in v7.17);
*) bth - properly specify "in-interfac...
7.19 is now the latest update you can get on any of the channels.
The dev channel is running 7.19rc3 which is older than 7.19.

RouterOS v7 has a very different dev cycle to v6. The v6 days were wild in comparison.
 
RouterOS 7.19.1 [stable]
May 26th 2025, 07:51
What's new in 7.19.1 (2025-May-23 17:27):

*) certificate – fixed support for certificates imported or added in RouterOS v7.4 or earlier (introduced in v7.19);
*) console - improved stability when a running script is removed;
*) container - stability improvements;
*) disk - fixed RAID component size to match the value in the superblock;
*) disk - improved handling of RAID spare disks;
*) disk - improved stability when using RAID;
*) ethernet - fixed flow-control for RB5009;
*) iot - fixed incorrectly shown LoRa payload RSSI values;
*) poe-out - fixed PoE-out reset when inserting specific SFP modules on RB5009;
*) poe-out - upgraded firmware for 802.3at PSE controlled boards (the update will cause brief power interruption to PoE-out interfaces);
*) routing-filter - use zero as default as-path length (allows matching empty as path);
*) sfp - correctly classify 100Mbps modules as "100M-baseFX";
 
Anyone experiencing any stability issues on 7.19.1?

I've now had the router lock up twice this weekend where I needed to do a power-off restart to get it back up again. Earlier today it hung as well but recovered (was unresponsive to pings for 1-2mins) so I don't know what to make of this. Nothing in the logs and everything else with the router seems to be working as it should.

Mikrotik hEX S.
 
What's new in 7.19.2 (2025-Jun-20 10:55):



*) bfd - fixed socket leak;

*) bgp - fixed withdraw when input.accept-nlri is non-existent;

*) btest - properly close unsuccessful TCP test sockets;

*) console - added prompt to /disk/format command;

*) disk - do not allow to start Btrfs replace command when a Btrfs replace process is already running;

*) disk - improve disk file system detection;

*) hotspot - allow only "http:" and "https:" schemas in dst field;

*) iot - added LoRa interface recovery mechanism;

*) iot - LoRa stability improvement;

*) iot - LR8G/9G firmware update;

*) ip-service - fixed "print count-only interval" when dynamic entries are added (introduced in v7.19);

*) ip-service - fixed setting services by name (introduced in v7.19);

*) ipsec - fixed responder on key exchange compute failure (introduced in v7.19);

*) ipv6 - do not show IPv6 FastPath as active when connection tracking or IPsec is used;

*) l2tp-ether - fixed interface creation/removal process;

*) lte - added support for R11e-LTE6 v039 firmware release;

*) lte - do not dial further if modem detects eSIM without profiles;

*) lte - fixed eSIM management function for mmips and mipsbe architecture CPUs;

*) lte - fixed eSIM provisioning for servers that do not send content-length in the HTTP response;

*) route - fixed destination ordering for SNMP;

*) route - fixed SNMP probing of IPv6 routes;

*) route - make routing table print faster with hw-offload, gateway and blackhole queries;

*) switch - fixed ACL rules when ports are not specified (fixes dynamic rules for RoMON);

*) switch - fixed advertise and speed settings for ether1 on RB5009 (introduced in v7.19.1);

*) webfig - improved screen reader support for WiFi fields in Quickset;

*) webfig - make combobox accessible to screen readers;

*) webfig - more space to branding logo;

*) wifi-qcom - fixed beacon loss issues and improved stability for IPQ-6018;

*) wifi-qcom - improved regulatory compliance;

*) winbox - fixed "Last Topology Change" for bridge port monitor;
 
7.19.3 dropped:


*) bridge - allow IPv6 FastPath when dhcp-snooping is enabled;
*) iot - LoRa LNS stability improvement;
*) lte - AT modems, fixed typos in commands sent to modem when APN with authentication is used (AT+CGAUTH; AT$QCPDPP);
*) lte - R11e-LTE and R11e-LTE6, fixed possible crash on device unexpected removal or during RouterOS shutdown;
*) mpls - improved stability when handling VPLS packets;
*) radius - fixed RADIUS client section becoming unresponsive when RadSec is configured, but server is not responding;
*) radius - fixed wrong RadSec port number in logs;
*) radius - properly verify certificate when RadSec is used;
*) sfp - added sfp-power-class and sfp-max-power monitor values for QSFP;
*) supout - added IPv6 NAT section;
*) switch - fixed ACL rules with "redirect-to-cpu" (introduced in v7.19.2);
*) switch - fixed bonding issues after switch reset (introduced in v7.18);
*) switch - fixed port blocking with spanning tree on EN7523 switch (introduced in v7.19);
*) swos - changed firmware file location (URL) for software update checks;
*) system - reduced RouterOS ARM package size;
*) winbox - show/hide corresponding fields when switching RADIUS client mode between RadSec and UDP;
 
7.19.3 dropped:


*) bridge - allow IPv6 FastPath when dhcp-snooping is enabled;
*) iot - LoRa LNS stability improvement;
*) lte - AT modems, fixed typos in commands sent to modem when APN with authentication is used (AT+CGAUTH; AT$QCPDPP);
*) lte - R11e-LTE and R11e-LTE6, fixed possible crash on device unexpected removal or during RouterOS shutdown;
*) mpls - improved stability when handling VPLS packets;
*) radius - fixed RADIUS client section becoming unresponsive when RadSec is configured, but server is not responding;
*) radius - fixed wrong RadSec port number in logs;
*) radius - properly verify certificate when RadSec is used;
*) sfp - added sfp-power-class and sfp-max-power monitor values for QSFP;
*) supout - added IPv6 NAT section;
*) switch - fixed ACL rules with "redirect-to-cpu" (introduced in v7.19.2);
*) switch - fixed bonding issues after switch reset (introduced in v7.18);
*) switch - fixed port blocking with spanning tree on EN7523 switch (introduced in v7.19);
*) swos - changed firmware file location (URL) for software update checks;
*) system - reduced RouterOS ARM package size;
*) winbox - show/hide corresponding fields when switching RADIUS client mode between RadSec and UDP;
Updated 2 devices and all good.
 
Top
Sign up to the MyBroadband newsletter