Added
- Topology: a named device can now be marked as a network controller, single-board computer, IoT device, TV, soundbar or speaker, each with its own icon on the map.
- MCP:
mikr_backupscan list one device's backups with their dates, sizes and whether any was cut short, and the fleet summary gives the newest backup's date next to its age. - API keys: a superadmin can let every other user create one API key of their own in Settings, for an AI assistant or a script. The key can see and do only what its owner can, and stops working when the owner's account is turned off. Off by default.
- Needs attention: CVE, Offline and Updates filters next to the heading, and devices running a RouterOS with known CVEs are listed with the count and the worst match.
- Needs attention: acknowledge an item with a reason, for 1 to 30 days or, for an upgrade, until a newer release. It moves to an Acknowledged list with who, why and until when, and comes back by itself. Operators and above.
- Syslog forwarding: send logs to several collectors at once, for example Wazuh and Graylog, each with its own port and level and its own on/off switch (Settings → Syslog → Collectors). An existing single collector carries over as the first one.
Fixed
- Two-factor sign-in: a code that has just rolled over is accepted, so a phone clock a few seconds off no longer stops the sign-in.
- Auto-block (IDS): a block made by hand or through the API now respects the whitelist and accepts only an IP address, IPv6 addresses go to the IPv6 address-list, a block counts as applied only once the router has the entry, a failed push is retried until the block expires, and an admin limited to some sites blocks and unblocks on those sites only. The API shows each block's delivery per device.
- PoE budget: netPower 16P now counts two groups of 8 ports, each with its own limit, up to 160 W in total, instead of one limit for the whole switch.