Auteur Sujet: Le fil des mises à jour Mikrotik RouterOS instable, 7.19beta2 (2025-Feb-28 08:58  (Lu 10164 fois)

0 Membres et 1 Invité sur ce sujet

zoc

  • Abonné Orange Fibre
  • *
  • Messages: 4 747
  • Antibes (06) / Mercury (73)
La version 7.15rc de RouterOS est sortie sur le canal "v7 testing" !
Ouais, enfin c'est pas la première rc, on en est déjà à la rc4, la rc1 est dispo depuis le 19 avril.

Perso je n'installe pas les rc. D'ailleurs au contraire, j'envisage maintenant d'attendre systématiquement les versions 7.x.1 avant d'installer, à tous les coups elle suit la 7.x.0 de quelques jours seulement... Mon switch coeur de réseau est d'ailleurs toujours en 7.13.1, pour le mettre à jour je suis obligé d'arrêter tous mes serveurs pour ne pas casser mes clusters.

La 7.15 est cependant intéressante, notamment en ce qui concerne les switch rules qui sont revues en profondeur pour tout ce qui concerne la QoS (on peut d'ailleurs maintenant changer le DSCP avec les switch rules et plus seulement la priorité des VLAN). Reste à voir si les premières versions seront assez stables.

Les changelogs sont aussi là: https://mikrotik.com/download/changelogs (plus facile d'accès que le forum selon moi)


Atmis

  • Abonné Orange Fibre
  • *
  • Messages: 95
  • Lot (46)
Je n'utilise normalement pas les beta et rc, sauf quand elle corrigent un point particulier.
Et pour le coup, c'est le cas pour moi sur cette version 7.15 avec les problèmes de fail de l'ONU FS.com quand il est utilisé avec le CRS305 qui ont totalement disparus (voir https://lafibre.info/remplacer-livebox/onu-fs-com-tx-power-a-40db/72/)
Après, je n'ai pas de grande exigences, juste un RB5009 et un CRS305 en remplacement de la Livebox, et pas de configuration réseau "complexe".

thsdrd

  • Abonné Bbox fibre
  • *
  • Messages: 103
La 7.15 est cependant intéressante, notamment en ce qui concerne les switch rules qui sont revues en profondeur pour tout ce qui concerne la QoS (on peut d'ailleurs maintenant changer le DSCP avec les switch rules et plus seulement la priorité des VLAN). Reste à voir si les premières versions seront assez stables.

J'espère qu'ils auront corrigé le problème au sujet du changement de priorité VLAN (avec les switch rules) dont je n'avais pas réussi à appliquer sur les requêtes DHCPv6 (sur Mikrotik hAP ac2, Atheros8327).
Mais j'en doute, j'avais d'ailleurs laissé un message au support mais sans réponses.

thsdrd

  • Abonné Bbox fibre
  • *
  • Messages: 103
D'ailleurs à ce sujet, j'ai eu une réponse du support.
Espérons que cela soit corrigé dans un futur proche.

Hello,
Thank you for the report!
We have managed to reproduce the issue locally in our labs and look forward to fixing it on upcoming RouterOS versions, unfortunately, I cannot provide a release date now.
Best regards,
Edgars P.


Florian

  • Abonné Bbox fibre
  • *
  • Messages: 2 183
  • 78
Avec la 7.18beta 2, l'ipv6 fastrack fait enfin son apparition :)

Testé sur un ccr1036, ça fonctionne après avoir créé la règle qui va bien (de la meme manière qu'en ipv4). C'est bien fastracké, avec une utilisation cpu moindre (pour un débit équivalent). Je saturais mon accès 2gb meme sans fastrack, mais c'est toujours bon à prendre pour les mono-session avec le 8gb qui arrive.

zoc

  • Abonné Orange Fibre
  • *
  • Messages: 4 747
  • Antibes (06) / Mercury (73)
Attention possible bug dans les switch rules sur la 7.17. Lors de la migration de ma configuration,

/interface ethernet switch rule add comment="Orange ICMPv6 and Multicast - Cos to 6" dst-address6=fe00::/7 mac-protocol=ipv6 new-qos-profile=orange-ftth ports=sfp4.downstream protocol=icmpv6 switch=switch1 vlan-id=832

A été changé en
/interface ethernet switch rule add comment="Orange ICMPv6 and Multicast - Cos to 6" dst-address6=fe00::/fe00:: mac-protocol=ipv6 new-qos-profile=orange-ftth ports=sfp4.downstream protocol=icmpv6 switch=switch1 vlan-id=832

dst-address6 contient à mon sens n'importe quoi. J'ai essayé de remettre la longueur de masque mais impossible, refusé par le switch.

J'ai ouvert un ticket à ce sujet chez Mikrotik. Affaire à suivre.

Atmis

  • Abonné Orange Fibre
  • *
  • Messages: 95
  • Lot (46)
J'avais vu ça aussi la semaine dernière, mais je ne l'ai pas remonté au support n'étant pas sûr que ce soit un bug. J'ai l'impression qu'il faut indiquer maintenant un intervalle.
Voici ce que j'ai mis :
/interface ethernet switch rule add comment="Orange : COS6 icmpv6 DST" dst-address6=fe00::/1ff:ffff:ffff:ffff:ffff:ffff:ffff:ffff mac-protocol=ipv6 new-qos-profile=orange-ftth ports=sfp-sfpplus1-onu protocol=icmpv6 switch=switch1 vlan-id=832

zoc

  • Abonné Orange Fibre
  • *
  • Messages: 4 747
  • Antibes (06) / Mercury (73)
J'avais vu ça aussi la semaine dernière, mais je ne l'ai pas remonté au support n'étant pas sûr que ce soit un bug. J'ai l'impression qu'il faut indiquer maintenant un intervalle.
Voici ce que j'ai mis :
/interface ethernet switch rule add comment="Orange : COS6 icmpv6 DST" dst-address6=fe00::/1ff:ffff:ffff:ffff:ffff:ffff:ffff:ffff mac-protocol=ipv6 new-qos-profile=orange-ftth ports=sfp-sfpplus1-onu protocol=icmpv6 switch=switch1 vlan-id=832
J'y ai pensé après avoir ouvert le ticket. L'autre possibilité c'est que ce soit le masque qui doit être renseigné ici et pas uniquement sa longueur, ce qui permet d'avoir un masque non "standard" (ou plutôt non usuel).

Quoi qu'il en soit ça devrait être clarifié au moins dans la documentation car actuellement elle indique "dst-address6 (IPv6 address/Mask)" sans vraiment expliquer ce que doit être Mask, et jusqu'à présent une taille de masque était valide. Si mon ticket peut au moins servir à ça alors ce n'est pas du temps perdu.

Paul

  • Abonné Bbox fibre
  • *
  • Messages: 4 451
  • FTTH 2 Gb/s sur Vannes (56)
    • Twitter
À ma connaissance, seul un masque CIDR est valide en IPv6, et cette syntaxe est tout sauf intuitive. Je ne vois pas comment ça ne peut pas être une erreur

zoc

  • Abonné Orange Fibre
  • *
  • Messages: 4 747
  • Antibes (06) / Mercury (73)
Le fil des mises à jour Mikrotik RouterOS instable, 7.17.1 (2025-Jan-30 12:29)
« Réponse #45 le: 02 février 2025 à 08:40:56 »
What's new in 7.17.1 (2025-Jan-30 12:29):

*) bgp - improved stability;
*) bridge - fixed endless MAC update loop (introduced in v7.17);
*) dhcpv4-server - fixed lease assigning when server address is not bind to server interface (introduced in v7.17);
*) igmp-proxy - fixed multicast routing after upstream interface flaps (introduced in v7.17);
*) ipsec - fixed chacha20 poly1305 proposal;
*) ipsec - fixed installed SAs update process when SAs are removed;
*) ipv6 - fixed an issue where bridge, IP, IPv6 and discovery settings were lost after upgrade due to conflicting IPv6 properties (introduced in v7.17);
*) ovpn - added requirement for server name when exporting configuration;
*) ppc - fixed HW encryption (introduced in v7.17);
*) queue - improved system stability when many simple queues are added (introduced in v7.17);
*) resolver - fixed static FQDN resolving (introduced in v7.17);
*) system,arm - automatically increase boot part size on upgrade or netinstall (fixed upgrade failed due to a lack of space on kernel disk/partition);
*) winbox - show warning messages for static DNS entries;

Sinon aucunes nouvelles de mon ticket...

zoc

  • Abonné Orange Fibre
  • *
  • Messages: 4 747
  • Antibes (06) / Mercury (73)
À ma connaissance, seul un masque CIDR est valide en IPv6, et cette syntaxe est tout sauf intuitive. Je ne vois pas comment ça ne peut pas être une erreur

Pour info:

Citer
Hello,

Thank you for contacting MikroTik Support.

It is related to this change in 7.17:
*) switch - allow matching network bitmask for IPv4 and IPv6 dst/src-address properties in switch rule;

Previously ACL rule was limited only by netmask (0..32 for IPv4 and 0..128 for IPv6), now you can configure the bitmask (as IP or IPv6 address). However, for easy of use, we will try to bring back the netmask for IPv6 in future RouterOS releases.


frederic.moreau

  • Abonné Free fibre
  • *
  • Messages: 272
  • Montmorency (95)
La 7.18 rc1 est disponible et elle apporte enfin le fastpath/Fasttrack IPv6.

What's new in 7.18rc1 (2025-Feb-18 08:57):

*) cloud - added "Back To Home Files" feature (additional fixes);
*) console - renamed "back-to-home-users" to "back-to-home-user";
*) disk - allow to set only type=raid devices as raid-master;
*) disk - cleanup raid members mountpoint, improve default name of file base block-device;
*) disk - do not allow configuring empty slot as raid member;
*) disk - fixed setting up dependent devices when file-based block-device becomes available;
*) disk - improved stability;
*) disk - mount multi-device btrfs filesystems more reliably at startup;
*) disk - set non-empty fs label when formatting by default;
*) file - improved handling of filesystems with many files (additional fixes);
*) l3hw - added initial HW offloading for VXLAN on compatible switches (additional fixes);
*) log - added CEF format support for remote logging (additional fixes);
*) lte - fixed interface recovery in mixed multiapn setup for MBIM modems;
*) lte - improved automatic link recovery and modem redial functions;
*) lte - reduce modem initialization time for R11e-LTE-US;
*) lte - reduced SIM slot switchover time for modems with AT control channel (except R11e-LTE) (additional fixes);
*) poe-out - fixed PoE-out not working on first boot after upgrade for CRS354 (introduced in v7.18beta2);
*) rose-storage - fixes for btrfs server;
*) smb - fixes for SMB server;
*) winbox - added "Reset Alert" button under "IP/DHCP Server/Alerts" menu;
*) winbox - added missing options under "System/Disk" menu;
*) winbox - do not show LTE "Antenna Scan" button on devices that do not support it;

Other changes since v7.17:

*) 60ghz - improved system stability;
*) bgp - fixed certain affinity options not working properly;
*) bgp - improved system stability when printing BGP advertisements;
*) bgp - make NO_ADVERTISE, NO_EXPORT, NO_PEER communities work;
*) bond - added transmit hash policies for encapsulated traffic;
*) bridge - added MLAG heartbeat property;
*) bridge - avoid duplicate VLAN entries with dynamic wifi VLANs;
*) bridge - do not reset MLAG peer port on heartbeat timeout (log warning instead);
*) bridge - fixed endless MAC update loop (introduced in v7.17);
*) bridge - fixed missing S flag on interface configuration changes;
*) bridge - improved stability when using MLAG with MSTP (introduced in v7.17);
*) bridge - improvements to MLAG host table updates;
*) bridge - process more DHCP message types (decline, NAK, inform);
*) bridge - removed controller-bridge (CB) and port-extender (PE) support;
*) bridge - show VXLAN remote-ip in host table;
*) btest - allow limiting access to server by IP address;
*) certificate - fixed localized text conversion to UTF-8 on certificate creation;
*) chr - fixed limited upgrades for expired instances;
*) chr/x86 - added network driver for Huawei SP570/580 NIC;
*) chr/x86 - fixed error message on bootup;
*) chr/x86 - fixed GRE issues with ice network driver;
*) chr/x86 - Realtek r8169 updated driver;
*) cloud,bth - use in-interface matcher for masquerade rule;
*) console - added dsv.remap to :serialize command to unpack array of maps from print as-value (additional fixes);
*) console - added file-name parameter to :serialize;
*) console - allow ISO timezone format in :totime command;
*) console - allow tab as dsv delimiter;
*) console - allow to toggle script error logging with "/console settings log-script-errors";
*) console - do not autocomplete arguments when match is both exact and ambiguous;
*) console - do not show numbering in print follow;
*) console - fixed "get" and "proplist" for certain settings;
*) console - fixed issue where ping command displays two lines at the same time;
*) console - fixed issue with disappearing global variable;
*) console - implement scriptable safe-mode commands and safe-mode handler;
*) console - improved hints;
*) console - log errors within scripts to the system log;
*) console - make non-pseudo terminals work with imports;
*) console - put !empty sentence when API query returns nothing;
*) container - add default registry-url=https://lscr.io;
*) container - allow HTTP redirects when accessing container registry;
*) container - allow specifying registry using remote-image property;
*) container - improved image arch choice;
*) container - use parent directory of container root-dir for unpack by default, so that container layer files are downloaded directly on target disk;
*) defconf - added IPv6 FastTrack configuration;
*) device-mode - do not allow changing CPU frequency if "routerboard" is not allowed by device mode (introduced in v7.17);
*) device-mode - fixed feature and mode update via power-reset on PPC devices;
*) dhcpv4-client - allow selecting to which routing tables add default route (additional fixes);
*) dhcpv4-client - fixed default option export output;
*) dhcpv4-server - fixed "active-mac-address" update when client has changed MAC address;
*) dhcpv4-server - fixed framed-route removal;
*) dhcpv4-server - fixed lease assigning when server address is not bind to server interface (introduced in v7.17);
*) dhcpv6-client - added "validate-server-duid" option;
*) dhcpv6-client - allow specifying custom DUID;
*) dhcpv6-client - do not run script on prefix renewal;
*) dhcpv6-relay - add routes for bindings passing through relay;
*) dhcpv6-server - respond to client in case of RADIUS reject;
*) discovery - advertise IPv6 capabilities based on "Disable IPv6" global setting;
*) discovery - improved stability during configuration changes;
*) discovery - report actual PSE power-pair with LLDP;
*) discovery - use power-via-mdi-short LLDP TLV only on pse-type1 802.3af;
*) disk - add disk trim command (/disk format-drive diskx file-system=trim);
*) disk - allow to add swap space without container package;
*) disk - fix detecting disks on virtual machines;
*) disk - fixed showing free space on tmpfs (introduced in v7.17);
*) disk - improved system stability when SMB interface list is used (introduced in v7.17);
*) dns - do not show warning messages for DNS static entries when they are not needed;
*) ethernet - fixed issue with default-names for RB4011 and RB1100Dx4 devices;
*) ethernet - improved link speed reporting on 2.5G-baseT and 10Gbase-T ports;
*) fetch - added "http-max-redirect-count" parameter, allows to follow redirects;
*) fetch - do not require "content-length" or "transfer-encoding" for HTTP;
*) fetch - fixed IPv6 handling in URL (introduced in v7.18beta2);
*) file - added "recursive" and "relative" parameters to "/file/print" for use in conjunction with "path" parameter;
*) file - allow printing specific directories via path parameter;
*) file - fixed missing meta information from special files such as packages (introduced in v7.18beta2);
*) file - hide store directories, such as container (introduced in v7.18beta2);
*) firewall - allow in-interface/in-bridge-port/in-bridge matching in postrouting chains;
*) firewall - fixed incorrectly inverted hotspot value configuration;
*) firewall - increased maximum connection tracking entry count based on device total RAM size;
*) hotspot - fixed an issue where extra "flash/" is added to html-directory for devices with flash folders (introduced in v7.17);
*) igmp-proxy - fixed multicast routing after upstream interface flaps (introduced in v7.17);
*) iot - added new "iot-bt-extra" package for ARM, ARM64 which enables use of USB Bluetooth adapters (LE 4.0+);
*) iot - improvements to LoRa logging and stability;
*) iot - limited MQTT payload size to 32 KB;
*) ip - added support for /31 address;
*) ippool - added pool usage statistics;
*) ipsec - added hardware acceleration support for hEX refresh (additional fixes);
*) ipsec - fixed chacha20 poly1305 proposal;
*) ipsec - fixed installed SAs update process when SAs are removed;
*) ipv6 - added ability to disable dynamic IPv6 LL address generation on non-VPN interfaces;
*) ipv6 - added FastTrack support;
*) ipv6 - added routing FastPath support (enabled by default) (additional fixes);
*) ipv6 - added support for neighbor removal and static entries;
*) ipv6 - fixed configuration loss due to conflicting settings after upgrade (introduced in v7.17);
*) l2tp - added IPv6 FastPath support;
*) l3hw - added neigh-dump-retries property;
*) l3hw - fixed /32 (IPv6 /128) route offloading when using interface as gateway;
*) l3hw - fixed partial route offloading for 98DX224S, 98DX226S, 98DX3236 switches;
*) l3hw - respect interface specifier (%) when matching a gateway;
*) log - added option to select TCP or UDP for remote logging;
*) lte - added at-chat support for EC21EU;
*) lte - added basic support for Quectel RG255C-GL modem in "at+qcfg="usbnet",0" USB composition;
*) lte - added confirmation-code parameter for eSIM provisioning;
*) lte - added initial eSIM management support (additional fixes);
*) lte - fixed Huawei ME909s-120 support;
*) lte - fixed missing 5G info for "/interface lte print" command;
*) lte - fixed missing IPv6 prefix advertisement on renamed LTE interfaces;
*) lte - fixed prolonged reboots on Chateau 5G ax;
*) lte - fixed R11eL-EC200A-EU modem RAT mode selection (introduced in v7.18beta2);
*) lte - fixed SIM slot initialization with multi-APN setups;
*) lte - lte monitor, show CQI when modem reports it as 0 - undetectable, no RX/down-link resource block assigned to modem by provider;
*) lte - R11eL-EC200A-EU fixed online firmware upgrade and added support for firmware update from local file;
*) lte - R11eL-EC200A-EU improved failed connection handling and recovery;
*) lte - removed nonexistent CQI reading for EC200A-EU modem;
*) net - added initial support for automatic multicast tunneling (AMT) interface (additional fixes);
*) netinstall - try to re-create socket if link status changes;
*) netinstall-cli - fixed DHCP magic cookie;
*) ospf - fixed DN bit not being set;
*) ospfv3 - fixed ignored metric for intra-area routes;
*) ovpn - added requirement for server name when exporting configuration;
*) ovpn - disable hardware accelerator for GCM on Alpine CPUs (introduced in v7.17);
*) ovpn-client - added 1000 character limit for password;
*) pimsm - fixed incorrect neighbor entry when using lo interface;
*) poe-out - added "power-pair" info to poe-out monitor (CLI only);
*) poe-out - added console hints;
*) poe-out - added new modes "forced-on-a" and "forced-on-bt", where old "forced-on" mean "forced-on-bt" (CLI only);
*) poe-out - fixed invalid poe-in status detection for RB5009 (introduced in v7.18beta2);
*) poe-out - upgraded firmware for 802.3at/bt PSE controlled boards (the update will cause brief power interruption to PoE-out interfaces);
*) port - improved handling of USB device plug/unplug events;
*) ppc - fixed HW encryption (introduced in v7.17);
*) ppp - add support for configuration of upload/download queue types in profile;
*) ppp - added support for random UDP source ports;
*) ppp - fixed setting loss when adding new ppp-client interface for BG77 modem from CLI;
*) ppp - properly cleanup failed inactive sessions on pppoe-server;
*) ptp - do not send packets on STP blocked ports;
*) qos-hw - fixed global buffer limits for 98CX8410 switch;
*) queue - improved system stability when many simple queues are added (introduced in v7.17);
*) queue - improved system stability;
*) queue - prevent CAKE bandwidth config from potentially causing lost connectivity to a device;
*) resolver - fixed static FQDN resolving (introduced in v7.17);
*) rip - fixed visibility of added key-chains in interface-template;
*) rose-storage - add btrfs filesystem add-device/remove-device/replace-device/replace-cancel commands to add/remove/replace disks to/from a live filesystem;
*) rose-storage - add btrfs filesystem balance-start/cancel commands;
*) rose-storage - add btrfs filesystem scrub-start, scrub-cancel commands (CLI only);
*) rose-storage - add btrfs transfers, supports send/receive into/from file for transferring subvolumes across btrfs filesystems;
*) rose-storage - add support to add/remove btrfs subvolumes/snapshots;
*) rose-storage - added support for advanced btrfs features: multi-disk support, subvolumes, snapshots, subvolume send/receive, data/metadata profiles, compression, etc;
*) rose-storage - allow to separately mount any btrfs subvolumes;
*) rose-storage - update rsync to 3.4.1;
*) rose-storage,ssh - support btrfs send/receive over ssh;
*) route - added /ip/route/check tool;
*) route - added subnet length validation on route add;
*) route - do not use disabled addresses when selecting routing id;
*) route - fixed busy loops (route lockups);
*) route - fixed incorrect H flag usage;
*) route - improved stability when polling static routes via SNMP;
*) route - properly resolve imported BGP VPN routes;
*) routerboot - disable packet switching during etherboot for hEX refresh ("/system routerboard upgrade" required);
*) routerboot - improved stability for IPQ8072 ("/system routerboard upgrade" required);
*) routing-filter - improved stability when using large address lists (>5000);
*) routing-filter - improved usage of quotes in filter rules;
*) sfp - fixed missing "1G-baseX" supported rate for NetMetal ac2 and hEX S devices;
*) sfp - improved linking with certain QSFP modules on CRS354 devices;
*) sfp - improved system stability with some GPON modules for CCR2004 and CCR2116 devices (additional fixes);
*) sfp,qsfp - improved initialization and linking;
*) smb - fixed connection issues with clients using older SMB versions (introduced in v7.17);
*) smb - improved system stability;
*) snmp - added "mtxrAlarmSocketStatus" OID to MIKROTIK-MIB;
*) snmp - added disk serial number through description field;
*) snmp - sort disk list and assign correct disk types;
*) supout - added IPv6 settings section;
*) supout - added per CPU load information;
*) switch - allow entering IPv6 netmask for switch rules (CLI only);
*) switch - fixed dynamic switch rules created by dot1x server (introduced in v7.17);
*) switch - fixed issues with inactive hardware-offloaded bond ports;
*) switch - improved egress-rate on QSFP28 ports;
*) switch - improved system stability for CRS304 switch;
*) switch - improvements to certain switch operations (port disable, shaper and switch initialization) (additional fixes);
*) system - added option to list and install available packages (after using "check-for-updates");
*) system - do not allow to install multiple wireless driver packages at the same time;
*) system - do not cause unnecessary sector writes on check-for-updates;
*) system - enable "ipv6" package on RouterOS v6 downgrade if IPv6 is enabled;
*) system - fixed a potential memory leak that occurred when resetting states after an error;
*) system - force time to be at least at package build time minus 1d;
*) system - improved HTTPS speed;
*) system - improved stability on busy systems;
*) system,arm - automatically increase boot part size on upgrade or netinstall (fixed upgrade failed due to a lack of space on kernel disk/partition);
*) tile - improved system stability;
*) traceroute - added "too many hops" error when max-hops are reached;
*) traceroute - limit max-hops maximum value to 255;
*) user - improved authentication procedure when RADIUS is not used;
*) vxlan - added disable option for VTEPs;
*) vxlan - added IPv6 FastPath support;
*) vxlan - added option to dynamically bridge interface and port settings (hw, pvid);
*) vxlan - added TTL property;
*) vxlan - changed default port to 4789;
*) vxlan - fixed unset for "group" and "interface" properties;
*) vxlan - replaced the "inherit" with "auto" option for dont-fragment property (new default);
*) webfig - added confirmation when quitting in Safe Mode;
*) webfig - do not reload form when failed to create new object;
*) webfig - fixed "TCP Flags" property when inverted flags are set in console;
*) webfig - fixed datetime setting under certain menus;
*) webfig - fixed displaying passwords;
*) webfig - fixed Switch/Ports menu not showing correctly;
*) webfig - hide certificate information in IP Services menu when not applicable;
*) webfig - remember expand/fold state;
*) wifi - added max-clients parameter;
*) wifi - avoid excessive re-transmission of SA Query action frames;
*) wifi - fix issue which made it possible for multiple concurrent WPA3 authentications to interfere with each other;
*) wifi - implement steering parameters to delay probe responses to clients in the 2.4GHz band;
*) wifi - log a warning when a client requests power save mode during association as this may prevent successful connection establishment;
*) wifi - re-word the "can't find PMKSA" log message to "no cached PMK";
*) wifi - try to authenticate client as non-FT client if it provides incomplete set of FT parameters;
*) wifi-qcom - fix reporting of radio minimum antenna gain for hAP ax^2;
*) wifi-qcom - fixed potentially lowered throughput for station interfaces if channel.width property is set (introduced in v7.18beta2);
*) winbox - added "Copy to Provisioning" button under "WiFi/Radios" menu;
*) winbox - added "Last Logged In/Out" and "Times Matched" properties under "WiFi/Access List" menu;
*) winbox - added L3HW Advanced and Monitor;
*) winbox - added TCP settings under "Tools/Traffic Generator/Packet Templates" menu;
*) winbox - do not show 0 Tx/Rx rate under "WiFi/Registration" menu when values are not known;
*) winbox - fixed locked input fields when creating new certificate template;
*) winbox - fixed usb power-reset bus selection for RB924iR-2nD-BT5&BG77 (introduced in v7.18beta2);
*) winbox - show LTE "CA Band" field only when CA info is available;
*) winbox - show warning messages for static DNS entries;
*) x86 - fixed "unsupported speed" warning (additional fixes);