modified on 8 May 2013 at 02:02 ••• 167,054 views

MikroTik RouterOS/Feature Requests

From MikroTik Wiki

Jump to: navigation, search

Please add your vote to an existing feature request, or add a new one. Add your USERNAME below each suggestion to vote: Please provide links to provide further detail on your request.

Contents

Features Requests

Not yet implemented

  • Hardware support for 155Mb SFP. (CCR1016, CCR1036, RB2011)


  • Hardware support. USB 4G LTE cards - new Huawei E3276s, also konwn as M150-1 (Megafon) and K5007 (Vodafone) as older Huawei E398 (E398 supported from v5.9 and higher as 3G) may be used with RB751, RB951 and others for main or alternative internet connection
    • --Senux 23:40, 06 March 2013
  • SNMPGET within RouterOS. Simple SNMP client to probe itself and other RouterBoards for data from known OIDs. Possibility to probe for variable signal strengths etc to use as variables in routing decisions.
    • --Degree 16:16, 21 November 2012 (CET)
  • DHCPv6 Relay Agent. This is a "MUST HAVE" for a router operating system. Currently everybody is sticked to the routeros dhcpv6 server. People with centralized DHCPv6 servers can't use DHCPv6 with RouterOS, yet.
    • --Kokel 14:47, 10 November 2012 (CET)
  • DNS name in 'Connect To:' and ipsec dst addresses. PPP type interfaces can take DNS name but resolve it and store IP. Would like to keep the DNS name in these various 'connect to/dst address' entries.
    • --Syadnom 21:12, 1 June 2012 (UTC)
  • Triggers. This may replace a number of requests below. On each interface, wds, server (PPTP/SSTP/OVPN etc), and router (maybe more) add an up trigger and down trigger that would fire off a script. Static interfaces would have the config in the interface while dynamically added interfaces (inbound PPTP for instance) would have the config in the PPTP server dialog and those triggers would be applied to dynamically created interfaces. Additionally, put triggers in for firewall events like the 'add src to address list' but rather 'trigger script with src/dst address variable'.
    • --Syadnom 21:06, 1 June 2012 (UTC)
  • ability to add a power output % selection for wireless interfaces. For example, 751u has high output, I move this to 80%. PITA to change to manual and set every single tx output, much nicer to say '80% default'
    • --Syadnom 20:51, 1 June 2012 (UTC)
  • add ability to select interface(s) for any dialer (PPTP/L2TP/SSTP). This would allow 1 tunnel to be forced out 1 interface and a different tunnel of the same type forced out a 2nd interface.
    • --Syadnom 20:49, 1 June 2012 (UTC)
  • Enable TEE action for firewall mangle rules. This feature is available in iptables, and should be easily enabled, to allow ROS to act as a powerful traffic probe for remote analysis. This feature (see man iptables) would be available for all hardware, and more powerful (more possibilities) than using the mirror feature of any switch chipset.
    • --MFX 10:45, 22 May 2012 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • MDNS / Zeroconf / DNS-SD announcements of the services in the network. Very useful for giving users a "start" in a public wlan network.
    • --DL9SAU 07:13, 21 May 2012 (UTC)
  • DHCP Client: Add the ability to automatically run a script(s) upon IP address change.
    • --hjoelr 14:11, 14 May 2012 (GMT -5)
  • Netwatch: Add the ability to specify which routing-table the netwatch uses. *additionally/alternatively, add src-address to netwatch
  • Add support for 802.11u and Hotspot 2.0. Video overview at http://www.ruckuswireless.com/asset/watch/411.
    • --Mr.vicc 18:46, 3 April 2012 (UTC)
    • --MMorier 10:36, 27 Jully 2012 (GMT -5)


  • MLPPP client support for PPTP/L2TP: MLPPP client is already supported on PPPOE but not on PPTP/L2TP, which makes it unusable to provide a true aggregation/redundant solution using different ISP. Adding support for at least PPTP would makes us able to develop some nice services built around MK RB products.
    • --Gled 19:11, 3 april 2012 (CET)
    • --Syadnom 21:07, 1 June 2012 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • Source address list to be available from web proxy access
  • Route Uptime: Provide the Uptime of the active routes, like cisco does it. This will make it easier to discover route flapping.
    • --Lehonk 09:07, 22 March 2012 (UTC)
  • OpenVPN Route Push Support: The OpenVPN protocol has the capability of pushing static routes to connecting clients. This is an incredibly important feature as it allows an OpenVPN server administrator to tell connecting clients what networks should be accessible via the VPN. Without this feature, administrators are forced to maintain these rules in the client configuration files, which are normally out of their reach since they live on remote devices. In a large VPN environment, this could mean managing revisions of thousands of files in inaccessible locations. Please support the route push feature.
  • mLACP/LACP VSS: To be able to run redundant network over multiple hardwares supporting virtual enviroments relying heavily on ie NFS, without any downtime just less capacity in case of failure.
    • --mhugo 14:44, 18 March 2012 (GMT+1)
  • Netwatch: Inside the netwatch script, give us access to a self variable so we can write generic netwatch scripts such as :log warning "$[get $self host] is $[get $self status] - $[get $self comment]". This would make life VERY easy when you are netwatching a large number of devices on the network. It would also allow the use of generic scripts that could really get fancy when dealing with internal network monitoring.
  • Firewall: Implement/enhance classification of encrypted p2p protocols (Bittorrent, eMule, etc,) by using the algorithm/technique described in: [1]
  • Winbox: Implement the function to make several connects to different systems in a tab view like a browser, so there is not so much window waste in the taskbar.
    • --Mthoma 15:25, 12 January 2012 (UTC)
  • Add proxy support for openvpn client like in sstp-client
  • SwOS: Add Netmask & Gateway very helpful in an routed network to access the switch
    • --Mthoma 15:14, 12 January 2012 (UTC)
  • Implement in firewall filter rules and nat sections which can be collabse and uncollabse to get an better overview of the rulebase.
    • --Mthoma 15:12, 12 January 2012 (UTC)
  • Implement a mini CA (Certificate Authority) for creating router and client certificates.
  • Implement the possibility to choose which AAA type of auth method will be used (PAP/CHAP/MS-CHAP) for winbox,ssh,telnet,ftp,api and/or bring all services on the same auth method. Background: I have a token solution (Yubico, others to it on the same way) and this system only supports PAP requests. I find this very useful because the user can logon on ftp winbox or ssh with his userid and the token over radius.
    • --Mthoma 14:54, 12 January 2012 (UTC)
    • --Russ 16:05, 12 November 2012 (GMT)
  • Implement CRL support for certificates to revoke invalid certificates. Background: You can enable in the sstp server that he verify the client certificate, thats very good but when a client router will be stolen i want to block the client certificate to avoid a dailin. Sure you can disable the user, but if i can disable the client certificate via CRL it is more secure and the "check client certificate" option make sense.
    • --Mthoma 14:52, 12 January 2012 (UTC)
  • Make Mikrotik configurations to keep and store the hostname/server enties in optional FQDN format (i.e. duck.mikrotik.xxx). This is critical (for example) to Mikrotik VPN client configurations, where the destination VPN-server has a dynamic IP address (with a dynamic DNS entry). Currently (Winbox and Webmin will) resolve the hostnames to an IP address once upon applying the configuration, and thus use current static IP-address. This is apparently a feature, but it does not honor the principal ideology of the DNS, where hostnames are supposed to be resolved to the currently valid IP-addresses when the actual numeric IP-address is needed. This is an issue on most of the fields where hostnames/ip-addresses are used. Potential anad rare DNS server overloading can be avoided with Mikrotik local DNS resolver caching.
    • --arttu 02:11, 9 Jan 2012 (UTC)
    • --Mthoma 14:50, 12 January 2012 (UTC)
    • --Syadnom 01:25, 24 July 2012 (UTC)
  • alternate to above (cisco dmvpn). ANY DMVPN type support. mikrotik specific is ok with me.
  • add support for 6rd for providing IPv6 connectivity over an IPv4-only backbone (6rd client with DHCPv4 Option support)
    • --Steffann 10:57, 15 August 2011 (UTC)
    • --syadnom 9:47, 28 September 2011
    • --MFX 10:45, 22 May 2012 (UTC)
    • --Pylon 10:53, 27 May 2012 (UTC)
    • --Kris2k 18:29, 07 Aug 2012 (UTC)
    • --Zylantha 11:53, 16 Dec 2012 (GMT +10:00)
  • add support for DS-Lite for providing IPv4 connectivity over an IPv6-only backbone
    • --Steffann 10:57, 15 August 2011 (UTC) -- B4 functionality
    • --Pylon 08:23, 22 October 2012 (UTC)
  • add support for A+P for providing IPv4 connectivity over an IPv6-only backbone
    • --Steffann 10:57, 15 August 2011 (UTC)
  • modify remote logging: Include " System Identity" in the log message. Actually, on the log server, only the IP gives some idea about the origin of the message. But in case of dynamic IPs, like for my hotspots, it is difficult to figure out the source of the message. Having "System Identity" included in a fixed position of the message, it is easy on the logserver, runing syslog-ng for example, to automatically assemble all log messages of one MT-box into one log file.
  • add magic all interface to /ip dhcp-server alert add interface=all,!ether1. on a device with lots of interfaces (also dynamic) it is hard to maintain the list. for example on mikrotik witch is a bridge with lots of wireless intrfaces and dynamic wds-es and only one interface that is trusted to receive dhcp packets.
    • --ukasz 00:00, 11 August 2011 (UTC)
  • add support for batman-adv in RouterOS. it is included in recent linux kernels and should be a straight forward add. extremely simply management commands also.
    • --syadnom 12:34, 24 July 2011 (GMT -6)
    • --JShadow 03:49, 2 August 2011 (UTC)
    • --BUMPSyadnom 20:55, 1 June 2012 (UTC)
  • Better control of user manager through API and CLI. We manage lots of routers with user manager through API connection. There is no way with existing 5.x firmware to control user manager through API. Specifically is control of adding a user to a group. In 4.x I could set a group-name=group to a user and attach that user to a hotspot user profile on login. Can't do this w/ 5.x. This is very important for us and is preventing us from upgrading to 5.x.
    • --webasdf 15:07, 14 July 2011 (GMT -5)
    • --arttu 02:11, 9 Jan 2012 (UTC)
  • Add support for SSH TUN/TAP VPN.
    • --marcon 11:21, 13 July 2011 (GMT +1)
    • --arttu 02:11, 9 Jan 2012 (UTC)
    • --Mthoma 15:01, 12 January 2012 (UTC)
  • Add support for mini-PCI Wi-Max cards.
  • Save wireless scan/snooper/freq.usage details to file. For download to central after re association of remote unit. Heavily needed feature for troubleshooting interferences at remote client without the need to visit that client.
  • More control over the ssh daemon - disallow password authentication (that is, require SSH keys) for certain connections (mask by source IP, packet tags, whatever). Or, perhaps, (optionally) just disallow passwords altogether - but for SSH only.
    • --Nsayer 16:36, 20 June 2011 (UTC)
    • --JShadow 03:49, 2 August 2011 (UTC)
    • --arttu 02:11, 9 Jan 2012 (UTC)
    • --Mthoma 15:01, 12 January 2012 (UTC)
    • --Pylon 19:16, 27 February 2012 (UTC)
  • Native MacOS X port of Winbox. While it does run under WINE, it requires firing up the X server, and its MDI nature is clunky on the mac. [syadnom]:Alternatively, a java port for Winbox so that it is cross platform. I was going to put in a feature request for linux support (again, Winbox in wine sucks) but a java version would be much more prefered for cross platform support.
  • Ability to run script when all kind of ppp client interface changes state. Something like: on interface up run script A, on interface down run script B. With this ability we do not need a script scheduled to verify it's state, it will be on the fly, and will save cpu resources.
    • --Jorge 13:18, 9 June 2011 (UTC)
    • --Ros1 21:48, 14 June 2011 (UTC) more general: event triggered scripts
    • --arttu 02:11, 9 Jan 2012 (UTC)
    • --Mthoma 15:01, 12 January 2012 (UTC)
  • Our ADSL subscribers are served by a Huawei/Cisco Access Concentrator using PPPoE and assigns dynamic IP addresses which change with every session establishment. This is the kind of behaviour the customer expects. Some subscribers actually demand that their IP address change when they intentionally restart their ADSL modem. On the other hand, our wireless subscribers are served by Mikrotik RouterOS machines also using PPPoE with dynamic address pools. For some reason they receive the SAME IP address each and every time, unless of course that IP address is no longer available. Can this behaviour be changed to dole out a different IP address (i.e. not the same address) available from the pool to the same MAC client for each session?
    • --Sabit 14:11, 6 June 2011 (UTC)
    • --Oeyre 00:11, 23 June 2011 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • For SwitchOS - Ethernet port description text fields (a user defined label for each interface). Additionally, the port description could be displayed on the VLAN port configuration tab.
    • --Jdad 13:39, 18 May 2011 (UTC)
  • Cursor location in winbox script and scchedule editor (row,col)
    • --Tplecko 15:01, 27, April 2011(UTC)
    • --arttu 02:11, 9 Jan 2012 (UTC)
  • Ability to resolve IP to hostname if DHCP is not on the same device
    • --Tplecko 15:01, 27, April 2011(UTC)
  • support multiple Mikrotik-Address-List attributes in RADIUS reply.
    • --Lavv17 09:51, 22 April 2011 (UTC)
  • allow to change irq smp_affinity to arbitrary masks. It will allow distribution of interrupts over the cores. With NAPI it won't reorder packets. E.g. system resource irq set 9 cpu=0,1
    • --Lavv17 09:51, 22 April 2011 (UTC)
  • DHCP Relay on VRF interfaces. DHCP request should be routed inside VRF.
    • --Russ 18:30, 21 April 2011 (GMT +12)
  • Colours for routers - allow specifying background colour in winbox and on console so that important devices like core routers can be coloured red are easily identifiable. Helps to reduce experiencing an oh-no second when you've changed something on the wrong router.
    • --Russ 12:00, 11 April 2011 (GMT +12)
    • --DjM 14:40, 3 May 2011 (GMT +1
    • --arttu 02:11, 9 Jan 2012 (UTC)
  • For interfaces, output the comment of each interface to SNMP as ifAlias from IF-MIB
    • --Oeyre 09:00, 7 March 2011 (UTC)
  • Add option for IP Pool that tries to give out a different address every time vs the current behaviour of trying to give out the same address every time
    • --Oeyre 09:00, 7 March 2011 (UTC)
    • --JShadow 03:49, 2 August 2011 (UTC)
  • Support for Hotspot Trial Access based on a number of free MBytes
  • Support for RADIUS CoA requests to modify properties of an active PPPoE session, specifically the Mikrotik-Rate-Limit attribute. This will allow for changes to a connected user's speed control - without the need for a Disconnect/Reconnect cycle.
    • --cpwp 21:26, 17 February 2011 (UTC)
    • --Oeyre 08:51, 7 March 2011 (UTC)
    • --Lavv17 09:51, 22 April 2011 (UTC)
    • --Conchalnet 09:51, 19 Mar 2012 (UTC)
  • Support for Ethernet OAM to monitor link performance and provide transparency to customers, [2]
  • Implement LLQ (Low Latency Queuing). Important for giving priority to one type of traffic over another, not just reserving bandwidth for each type. Especially important for growing number of VoIP implementations around the world.
    • --FIP-Tech 21:43, 19 April 2011 (UTC)
    • --shados 18:05, 6 May 2011 (UTC)
    • --Adenter 03:06, 24 June 2011 (UTC)
    • --Rjickity 17:54, 18 May 2012 (GMT +8)
  • Amend the dns-update tool so that as well as adding records to a zone, it can remove them also. This would be useful when keeping a DNS zone synchronised with DHCP leases handed out by the RouterOS DHCP server.
    • --Ingestre 18:00, 18 January 2011 (UTC)
  • Implement a port-knocking client in RouterOS. Can be handy when autonomously connecting VPN nodes to each other secured by a port-knocking daemon.
    • --THG 12:00, 7 January 2011 (UTC)
  • Limit the number of MAC addresses that a bridge or bridge port may learn, in order to prevent a user from flooding the bridge table.
    • --Oeyre 23:43, 24 November 2010 (UTC)
    • --arttu 02:11, 9 Jan 2012 (UTC)
    • --Mag 12:00, 27 September 2012 (UTC)
  • Support for OpenVPN server over UDP. Any VPN using TCP transport can result in serious TCP-meltdown. User-plane TCP and UDP will take care of possible retransmissions anyway. The VPN tunnels (or any classic Internet transmission) has no need to guarantee packet delivery. Also, loadbalancing and a virtual interface would be nice. Generally - simply make the most popular VPN services such as perfect-privacy.com totally usable with RouterOS as a client!
    • --arttu 00:21, 02 Feb 2009 (EET)
    • --Pada 18:50, 08 February 2009 (CET)
    • --leonset 09:37, 08 February 2009 (CET)
    • --Eed 16:43, 29 November 2009 (UTC)
    • --calman 16:43, 29 November 2009 (UTC)
    • --gr0mit 15:00, 30 November 2009 (UTC)
    • --noeto78 23:30, 30 November 2009 (EET)
    • --Dahuafschmied 19:29, 16 December 2009 (UTC)
    • --netrat 13:30, 17 December 2009 (EST)
    • --FIP-Tech 14:13, 19 December 2009 (UTC)
    • --designd15 20:24, 14 Januar 2009 (CET)
    • --omidkosari 17:10, 09 February 2010 (GMT)
    • --roadracer96 22:00, 10 February 2010 (EST)
    • --Djelibeybi 22:57, 21 February 2010 (UTC)
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --Doug 02:47, 25 March 2010 (UTC)
    • --Nejko 13:42, 30 March 2010 (UTC)
    • --klarsen 13:38 1 April 2010 (GMT+4)
    • --shlema 10:25 28 April 2010 (UTC)
    • --zenit 13:54 28 April 2010 (MSK)
    • --Marsark 14:22, 6 June 2010 (UTC)
    • --benesm1 21:37, 6 June 2010 (UTC)
    • --Engiman 16:43, 8 October 2010 (UTC)
    • --Void 17:21, 19 October 2010 (CET)
    • --dignome 01:58, 21 October 2010 (CST)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --Pgarcia 13:15, 29 October 2010 (GMT -3)
    • --mattx86 03:57, 31 October 2010 (UTC)
    • --Breili 07:36, 10 November 2010 (UTC)
    • --Dani.user 21:05, 10 November 2010 (GMT+2)
    • --Ciza 16:05, 9 December 2010 (UTC)
    • --yffud 09:55, 13 December 2010 (GMT)
    • --Crean , 13:52:21, 1 January 2010 (UTC)
    • --Omahtld 13:50, 12 January 2011 (UTC)
    • --NotObvious 22:50 15 January 2011 (UTC)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --Barryo 20:11, 18 April 2011 (UTC)
    • --Swordforthelord 01:53, 17 April 2011 (UTC)
    • --Aleix.sole 10:23, 24 April 2011 (UTC)
    • --DjM 14:40, 3 May 2011 (GMT +1)
    • --mudshark79 16:43, 15 June 2011 (GMT +1)
    • --jmeiring 11:36, 07 July 2011 (GMT +2)
    • --EMOziko 12:57, 25 June 2011 (UTC)
    • --adamplato 01:04, 20 May 2011 (EST)
    • --miro9970 19:43, 11 Aug 2011 (UTC)
    • --Steffann 10:57, 15 August 2011 (UTC)
    • --Krackpot 23:56, 7 August 2011 (UTC)
    • --Windriver 19:06, 20 Oct 2011 (GMT)
    • --ekka 15:53, 14 Nov 2011 (GMT)
    • --MattR 04:23 29 Nov 2011 (UTC)
    • --gigi6161 11:29, 30 Nov 2011 (GMT+1)
    • --Saik0 11:04, 15 March 2012 (UTC)
    • --mhugo 14:34, 18 March 2012 (GMT+1)7
    • --Gled 19:11, 3 april 2012 (CET)
    • --netvicious 9:54, 23 April 2012 (GMT +1)
    • --MFX 10:45, 22 May 2012 (UTC)
    • --Kokel 17:42, 30 May 2012 (CET)
    • --Mag 12:00, 27 September 2012 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • Implement LAC functionality and MLPPP server, so PPP "realms" can route to different concentrators via L2TP e.g. user@bob.com tunnels to 172.19.55.66 but user@acme.com tunnels to 10.99.7.254
    • --intersaar 01:51, 07 March 2011 (CET)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --Nz monkey 23:54, 21 May 2009 (EEST)
    • --Gerard 17:28, 22 May 2009 (EEST)
    • --Cdemers 04:19, 23 May 2009 (EEST)
    • --Slebrun 11:51, 4 Jun 2009 (EEST)
    • --Ceesco53 14:04, 25 Jun 2009 (EST)
    • --Marlow 13:07, 28 June 2009 (EEST)
    • --purepages 13:18, 17 July 2009 (EEST)
    • --Jonesy 05:32, 16 August 2009 (EEST)
    • --c_studt 10:06, 26 August 2009 (MST)
    • --Mrchiless 10:00, 13 Sept 2009 (EST)
    • --Tristan 3:40, 14 Sept 2009 (EST)
    • --Ph 22:38, 14 October 2009 (EEST)
    • --Jauer 03:39, 23 November 2009 (UTC)
    • -- timoid 21:03, 28 November 2009 (AEST)
    • --Fuhur81 08:09, 2 January 2010 (UTC)
    • --sten 11:52, 10 February 2010 (CET)
    • --Brady77 19:14, 21 February 2010 (UTC)
    • --lzwilliam 23:23, 10 March 2010 (GMT)
    • --ggiesen 10:43, 23 April 2010 (EST)
    • --butche 1:47pm, June 1 2010 (CST)
    • --Pcletson 06:53, 30 June 2010 (UTC)
    • --Bhaal 09:54, July 1 2010 (EST)
    • --djsmith 08:47, July 6 2010 (EET)
    • --paulwollner 11:48, 1 September 2010 (SAST)
    • --Oeyre 07:06, 27 October 2010 (UTC)
    • --Omega-00 06:27, 4 November 2010 (UTC)
    • --Dani.user 21:05, 10 November 2010 (GMT+2)
    • --FIP-Tech 21:45, 19 April 2011 (UTC)
    • --Jonatasmv 12:08, 18 May 2011 (GMT-3)
    • --MFX 10:45, 22 May 2012 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • DHCPv6 (client/server) support (also IPv6 provisioning - prefix delegation)
    • --DjM 14:40, 3 May 2011 (GMT +1)
    • -- Glenno 13 March 2010 - ^^^ biggest impediment to deployment of IPV6 across client networks
    • -- JanZorz_go6 21:50, 08 February 2010 (CET)
    • --sten 11:52, 10 February 2010 (CET)
    • --Djelibeybi 22:57, 21 February 2010 (UTC)
    • --Nz monkey
    • --TemporalFlux Feb 25 2010
    • --Marlow 13:41, 20 March 2010 (UTC)
    • --Nejko 13:42, 30 March 2010 (UTC)
    • --MCT 03:11, 17 April 2010 (UTC)
    • --Omega-00 08:52, 10 June 2010 (UTC)
    • --cpwp 22:49, 20 July 2010 (UTC)
    • --Jeeves 14:26, 12 August 2010 (CET)
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --mattx86 16:46, 28 October 2010 (UTC)
    • --mitchellj 11:08, 30 October 2010 (BST)
    • --Cste005
    • --Octo 10:11, 21 November 2010 (UTC)
    • --Jauer 16:06, 16 December 2010 (UTC)
    • --Crean , 13:52:21, 1 January 2010 (UTC)
    • --Frogale , 16:54:21, 23.1.2011 (UTC)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --konstantin 13:18, 30 March 2011 (GMT +7)
    • --adamfulcher2000 20:14, 12 April 2011 (UTC)
    • --xtremetoonz 20:27, 12 April 2011 (UTC)
    • --Barryo 20:11, 18 April 2011 (UTC)
    • --vaelen 08:34, 27 May 2011 (UTC)
    • --hekr 04:02, 06 June 2011 (CEST)
    • --si 19:20, 24 June 2011 (CET)
    • --Steffann 10:31, 15 August 2011 (UTC)
    • --Andyfletcher 10:25 October 12 2011 (UTC)
    • --MattR 04:23 29 Nov 2011 (UTC)
    • --Mthoma 15:01, 12 January 2012 (UTC)
    • --Mag 12:00, 27 September 2012 (UTC)
  • Implement IPSEC "Virtual Tunnel Interface", and "Next-Hop Tunnel Binding" allowing easy dynamic routing across IPSEC, point-to-multipoint routing from a single tunnel interface and better compatibility with Cisco/Juniper/Fortinet see [4]
    • --Nz monkey 23:54, 21 May 2009 (EEST)
    • --Trm3 19:59, 22 May 2009 (EEST)
    • --Astib 9:59, 1 Jun 2009 (CEST)
    • --c_studt 10:06, 26 August 2009 (MST)
    • --taylorc 17:07, 14 October 2009 (EST)
    • --gregsowell 08:07, 11 November 2009 (CST)
    • --sten 11:52, 10 February 2010 (CET)
    • --optionpc
    • --Nejko 13:42, 30 March 2010 (UTC)
    • --delmarh 17:28, 11 April 2010 (CST)
    • --Senux 23:28, 30 June 2010 (CST)
    • --Void 17:21, 19 October 2010 (CET)
    • --mattx86 01:07, 03 November 2010 (UTC)
    • --bballard 9:30, 25 January 2011 (UTC)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --mgeorgiev 21:20, 07 March 2011 (GMT +2)
    • --Martell 14:21, 27 April 2011 (GMT +1)
    • --shados 18:05, 6 May 2011 (UTC)
    • --peson 18:42, 25 May 2011 (CET)
    • --si 19:20, 24 June 2011 (CET)
    • --Cste005 20:20, 13 March 2012 (NZDT)
    • --Jlcoccoz 17:43, 21 March 2012 (UTC)
    • --Martyz 13:08, 27 March 2012 (GMT+1)
    • --Syadnom 21:06, 1 June 2012 (UTC)
    • --Jjd2478 09:40, 4 August 2012 (CST)
  • GPS Sync on Nstreme - multiple AP's per tower without self-interference.
    • --CiTiZeN 13:44, 11 July 2011
    • --intersaar 01:51, 07 March 2011 (CET)
    • --dallasweitzel
    • --InfoWest 12:02, 05 Jun 2009 (MST)
    • --Nz monkey 12:40, 7 June 2009 (EEST)
    • --deepq 12:16, 10 July 2009 (EEST)
    • --Stutteringp0et 20:09, 29 July 2009 (EEST)
    • --ne0031
    • --Vince 13:36, 12 November 2009
    • --xxiii 23:48, 19 January 2010 (UTC)
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --frontiersteve
    • --butche 1:47pm, June 1 2010 (CST)
    • --HaQs 15:49, 13 June 2010 (UTC)
    • --Perit 13:12, 3 December 2010 (UTC)
    • --corky 5:00pm, Jan 12 2011 (CST)
    • --P1 p1 p1 18:34, 22 January 2011 (UTC)
    • --ilnicchio 3:35, 16 April 2011 (CET)
  • Add the ability to separate 802.1q tagged and untagged traffic on a single ethernet interface using VLAN pseudo-interfaces by sending untagged traffic to bogus vlan zero. So "/interface vlan add disabled=0 interface=ether1 vlan-id=0 name=e1_v0_untagged" would create a VLAN subinterface/pseudointerface on port ether1 and capture any inbound untagged traffic and source any outbound untagged traffic.
    • --astounding 20:05, 11 December 2009 (GMT)
    • --igsys 23:00, 15 December 2009 (GMT)
    • --Ph 21:49, 21 January 2010 (UTC)
    • --Tofs 21:38, 6 February 2010 (UTC)
    • --Nz monkey
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --xahil 15:30, 29 March 2010 (GMT+2)
    • --Omidkosari 13:30, 22 October 2010 (GMT +3:30)
    • --mattx86 17:18, 28 October 2010 (UTC)
    • --pedja 05:42, 3 November 2010 (CET)
    • --xxiii 16:04, 3 November 2010 (UTC)
    • --Breili 07:36, 10 November 2010 (UTC)
    • --Perit 13:12, 3 December 2010 (UTC)
    • --AndrewLuck 14:35, 5 November 2010 (GMT)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --xtremetoonz 20:29, 12 April 2011 (EST)
    • --FIP-Tech 21:43, 19 April 2011 (UTC)
    • --Lavv17 09:51, 22 April 2011 (UTC)
    • --JShadow 03:49, 2 August 2011 (UTC)
    • --Mag 12:00, 27 September 2012 (UTC)
  • Nstreme - adaptive polling. Poll less-active clients less often, save cycles for more active clients based on activity, not necessarily bandwidth usage (ie: voip stream more important than download), and / or build nstreme in hardware / FPGA (add-on card?). More than 50 cpe's per AP.
    • --CiTiZeN 13:44, 11 July 2011
    • --InfoWest 12:02, 05 Jun 2009 (MST)
    • --Nz monkey 12:42, 7 June 2009 (EEST)
    • --Ph 22:38, 14 October 2009 (EEST)
    • --ne0031
    • --Vince 13:36, 12 November 2009
    • --NetworkPro 21:49, 21 March 2010 (UTC) Is this relevant with v5 NV2?
    • --butche 1:47pm, June 1 2010 (CST)
    • --HaQs 15:49, 13 June 2010 (UTC)
  • Improved High Availability, e.g. automated config sync, garp on failover, failover based on criteria e.g. interface status, ping monitoring, HA cluster groups (multiple HA groups, multiple devices per group)
    • -- 4isp 16:16, 22 February 2010 (UTC)
    • --Nz monkey
    • --NetworkPro 21:49, 21 March 2010 (UTC) Improved HA - always need more of that!
    • --Gartoffel 15:39, 25 August 2010 (UTC)
    • --Isi 12:55, 21 October 2010
    • --Omidkosari 13:30, 22 October 2010 (GMT +3:30)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --Pylon 19:59, 3 November 2010 (UTC)
    • --AndrewLuck 14:35, 5 November 2010 (GMT)
    • --Insidertech 10:43, 11 February 2011 (GMT)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --xtremetoonz 20:29, 12 April 2011 (EST)
    • --DjM 14:40, 3 May 2011 (GMT +1)
    • --shados 18:05, 6 May 2011 (UTC)
    • --Mthoma 15:01, 12 January 2012 (UTC)
  • OpenDNS update client
    • --arttu 02:11, 9 Jan 2012 (UTC)
    • --Tplecko 15:41, 28 May 2009 (EEST)
    • --dingsingo 10:45, 01 july 2009 (CEST)
    • --arttu 00:21, 2 Nov 2009 (EET)
    • --NotLim 02:01, 28 Nov 2009 (GMT -3)
    • --ReaL 05:11, 20 Jan 2010 (GMT -3)
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --HaQs 15:49, 13 June 2010 (UTC)
    • --Engiman 22:58, 6 January 2011 (UTC)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --xtremetoonz 20:29, 12 April 2011 (EST)
    • --si 21:10, 22 December 2011 (CEST)
    • --netvicious 9:54, 23 April 2012 (GMT +1)
  • 1-wire support perhaps via serial port, usb, and/or future routerboard hardware interface 1-wire devices include temperature sensors, a/d converters, digital i/o sensors, humidity, and weather.
    • --Jp 23:17, 12 June 2009 (EEST)
    • --Foldii 19:19, 23 June 2009 (EEST)
    • --Steve 11:16, 24 June 2009 (EEST)
    • --dingsingo 10:45, 01 july 2009 (CEST)
    • --arttu 00:21, 2 Nov 2009 (EET)
    • --HaQs 15:49, 13 June 2010 (UTC)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --Pedja 10:17, 4 April 2011 (UTC)
    • --suhl 02:13, 27 May 2011 (UTC)
    • --arttu 20:38, 1 Aug 2011 (UTC)
    • --Mthoma 15:01, 12 January 2012 (UTC)
    • --Ibersystems 12:41, 06 august 2012 (UTC)
  • Export/import config scripts to MicroSD on RB433AH, ability to change router config by changing MicroSD.
    • --RubahFox 13:45, 19 Jun 2009 (EEST)
    • --Eed 16:43, 29 November 2009 (UTC)
    • --NetworkPro 21:49, 21 March 2010 (UTC) More about exports and backups management needs to be done
    • --HaQs 15:49, 13 June 2010 (UTC)
    • --mattx86 16:54, 28 October 2010 (UTC) - Not necessarily just for the RB433AH, but any RouterBOARD with a MicroSD slot (perhaps even USB)
    • --pedja 05:44, 3 November 2010 (CET)
    • --P1 p1 p1 18:34, 22 January 2011 (UTC)
    • --shados 18:05, 6 May 2011 (UTC)
  • New UPS module with support for AC/DC UPS and Solar Charge Controllers via USB and Serial. Support at least APC, Eaton PowerWare, Innovative Energies, MorningStar, Steca
    • --Nz monkey 23:54, 21 May 2009 (EEST)
    • --RubahFox 13:45, 19 Jun 2009 (EEST)
    • --Steve 11:16, 24 June 2009 (EEST)
    • --dingsingo 10:45, 01 july 2009 (CEST)
    • --NetworkPro 05:44, 13 October 2010 (UTC) make a framework and let manufacturers provide the plugin/definitions for their own hardware
    • --Breili 07:36, 10 November 2010 (UTC)
    • --P1 p1 p1 18:34, 22 January 2011 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • Support for SMTP TLS for encrypted email (ie Gmail support etc)
    • --heathrwil 14:44, 25 September 2009 (ACST)
    • --arttu 00:21, 2 Nov 2009 (EET)
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --Engiman 16:43, 8 October 2010 (UTC)
    • --pedja 05:44, 3 November 2010 (CET)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --arttu 20:38, 1 Aug 2011 (UTC)
    • --Mthoma 15:01, 12 January 2012 (UTC)
  • Default WinBox behavior to make a backup and save to desktop/somewhere with us, instead of saving in the router. Including the name of the router in the backup file name to differentiate between backups. Include the name of the user in the filename.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Isi 12:58, 21 October 2010, eg. write backup/export to a tftp server (would be very useful to us)
    • --pedja 05:45, 3 November 2010 (CET), drag&drop sometimes does not work, so Save As.. would be great
    • --mattx86 15:24, 03 November 2010 (UTC)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --WirelessRudy 22:12, 18 April 2011 (UTC)
    • --arttu 20:38, 1 Aug 2011 (UTC)
    • --JShadow 03:49, 2 August 2011 (UTC)


  • For WinBox - right click - send to top - for firewall, mangle rules etc.
    • --NetworkPro 21:49, 21 March 2010 (UTC) !!!
    • --Oeyre 07:06, 27 October 2010 (UTC)
    • --pedja 05:47, 3 November 2010 (CET), any method to make it easy to move items in very long lists without dragging would be wellcome
    • --mattx86 15:25, 03 November 2010 (UTC) - This would actually be a nice feature to have.
    • --Omega-00 06:27, 4 November 2010 (UTC)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --Insidertech 10:55, 25 March 2011 (GMT)
    • --WirelessRudy 22:38, 18 April 2011 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • Support for SIXXS-AICCU or heartbeat-tunnels would be great
    • --joachimgr 14:00, 8. April 2010 [GMT +2)
    • --saik0 23:15, 16 October 2010 (GMT +2)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --docmarius 12:15, 6 November 2010 (GMT +2)
    • --Sitron 09:50, 20 November 2010 (UTC)
    • --Crean , 13:52:21, 1 January 2011 (UTC)
    • --Mitrucs 13:59, 13 January 2011 (GMT +1)
    • --konstantin 13:14, 30 March 2011 (GMT +7)
    • --Bilson 22:54, 9 June 2011 (UTC)
    • --si 19:20, 24 June 2011 (CET)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • Snort rules integration, network intrusion prevention and detection
  • Hotspot - More access to variables in pages (ex. user's User-Profile (aka group in RADIUS)). Also some additional variables or access to global variables within RouterOS. Better ad display system, such as an ad bar across the top of all pages via HTML injection.
  • User-Manager - Ability to customize pages (and support for variables and IF-Thens like Hotspot pages)
    • ----Dsswiki 10:25, 30 June 2009 (EEST)
    • ----xxiii 23:48, 19 January 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
  • Device driver : More device driver to support recent Intel's Gigabit and 10 Gigabit ethernet. It'll let ROS to be a realy good MPLSVPLS core
    • --Bino 01:53, 8 April 2010 (UTC)
    • --Matush 09:55, 23 April 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --MFX 10:45, 22 May 2012 (UTC)
  • Add "Maximum Transmission Unit Signalling Extensions for LDP" (http://www.faqs.org/rfcs/rfc3988.html). To efficiently exploit large MTU sizes in the MPLS cloud.
    • --sten 11:52, 10 February 2010 (CET)
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --Matush 09:55, 23 April 2010 (UTC)
    • --Jauer 16:06, 16 December 2010 (UTC)
  • The ability to "add a port to a port list" just like the address list.
    • --NetworkPro 13:50, 25 April 2010 (UTC) Should be useful for QoS and other things.
    • --Omidkosari 13:30, 22 October 2010 (GMT +3:30)
    • --pedja 05:47, 3 November 2010 (CET)
    • --ukasz 00:00, 3 February 2011 (UTC) multiple in interfaces and in bridge ports in firewall. also in-interface=!wlan1,wlan2,!ether3
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --xtremetoonz 20:29, 12 April 2011 (EST)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • ROS proper support for aliases, so that IPs, subnets, ports, and protocols, and sets of them can be named. Perhaps in a similar manner to pfSense, which does it really well. This feature is very useful for readability, and for saving dozens of IP etc. edits by changing the alias definition.
    • --Hardings 23:05, 26 March 2010 (UTC)
    • --NetworkPro 03:42, 30 March 2010 (UTC)
    • --pedja 05:50, 3 November 2010 (CET), this is specially needed for setting items like pptp, eoip, and similar, where destination address may change anytime, and should be automaticaly resolved
    • --ukasz 00:00, 3 February 2011 (UTC) Possibilty to specify dns fqdn host name in radius,toot
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)

email, system logging action, system ntp client etc. but not firewall rules. this would solve problems when for example radius ip address has changed the you would have to reconfigure all mikrotik devices to use new one

  • Logging of changes to interface status: add capability to log changes of speed, duplex and connection status. ie: 29 Oct 2010 16:02 +10:00 Interface ether1 changed from no link to connected 100/full (auto)
    • --Oeyre 05:05, 29 October 2010 (UTC)
    • --mattx86 08:32, 29 October 2010 (UTC) - As of 5.0rc3, only a simple "ether1 link up/down" message is logged. It should also log the type of interface, e.g. "Status of Ethernet Interface ether1 has changed to: 100 Mbps Full-Duplex (Auto-Negotiation)" and when the interface has been disabled: "Status of ... has changed to: Admin Disabled".
    • --xxiii 16:15, 3 November 2010 (UTC)
    • --Omega-00 06:27, 4 November 2010 (UTC)
    • --P1 p1 p1 18:34, 22 January 2011 (UTC)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --pedja 10:26, 4 April 2011 (CET)
  • PPPoE connection rate throttling: That is to ignore certain MAC addresses if they try to connect to PPPoE more than a certain threshold, overloading the router and RADIUS server. In cisco this can be done on the bba-group, "PDF link"
    • --Oeyre 07:50, 27 October 2010 (UTC)
    • --Omidkosari 19:40, 27 October 2010 (GMT +3:30)
    • --Omega-00 06:27, 4 November 2010 (UTC)
    • --arminvox 03:04 , 14 November 2010 (GMT +3:30)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • Unicast Reverse Path Forwarding (URPF) support for interfaces and PPPoE server
    • --Oeyre 07:37, 27 October 2010 (UTC)
    • --mattx86 18:42, 28 October 2010 (UTC)
    • --Omega-00 06:27, 4 November 2010 (UTC)
    • --Norman 06:17, 9 November 2010 (UTC)
    • --Lavv17 09:51, 22 April 2011 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • Link Layer Topology Discovery (LLDP) support.
    • --marcon
    • --Ojsa 10:15, 21 October 2010 (GMT +1)
    • --mattx86 18:07, 28 October 2010 (UTC) - LLDP with LLDP-MED would be a good addition
    • --docmarius 12:15, 6 November 2010 (GMT +2)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --Ivand 12:33, 21 April 2011 (UTC)
    • --shados 18:05, 6 May 2011 (UTC)
    • --Steffann 10:57, 15 August 2011 (UTC)
    • --Reza.moghadam 20:48, 19 November 2012 (GMT +3:30)
  • Full VMWare support and certification as a separate platform with own optimized NPKs. New High-Availability options based on virtual environments.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --gcakici 10:17, 8 December 2010 (GMT +2)
    • --Mthoma 15:12, 12 January 2012 (UTC)
  • Address-List that consists of other Address-Lists. Or multiple Address-List matching in a Mangle rule. Also an automatic Address-List provided by router itself "Directly Connected Networks" and "Directly Connected Private Networks" using the info from route table. IP Pool matcher as Address-List matcher. Address-List set to IP Pool name instead of IP address.
  • To be possible to use address-lists and ip-pools in web-proxy as source or destination :).
    • --NetworkPro 05:07, 4 March 2011 (UTC)
    • --pedja 10:27, 4 April 2011 (CET) - I was surprised when found out that this actually is not implemented. What is needed more that to set proxy rules for GROUP of users? NOw, we have toi set rules for each user or group them by net masking, which is, usually, not an option.
  • High-Availability: A conntrack sync mechanism for stateful Firewalls (for example when using VRRP)
    • --Gartoffel 15:38, 25 August 2010 (UTC)
    • --NetworkPro 05:44, 13 October 2010 (UTC) Also in virtual environments
    • --xtremetoonz 20:29, 12 April 2011 (EST)
    • --JShadow 03:49, 2 August 2011 (UTC)
    • --Mthoma 15:12, 12 January 2012 (UTC)
    • --Daan99 16:23, 6 August 2012 (UTC)
  • Web-Proxy packet-mark / connection-mark support.
    • ----Dsswiki 10:25, 30 June 2009 (EEST)
    • --NetworkPro 21:49, 21 March 2010 (UTC) What comes from cache is marked DSCP 4 by default, can't use that?
  • User-Manager - External db backend using PgSQL or MySql, to let smooth sync betwen numbers of UM
    • --Bino 01:53, 8 April 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --Mthoma 15:12, 12 January 2012 (UTC)
  • Support of TACACS+ for Multi-Admin Environments
    • --Vebis 18:50, 19 July 2009 (EEST)
    • --sten 11:52, 10 February 2010 (CET)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --xtremetoonz 20:29, 12 April 2011 (EST)
    • --Barryo 20:11, 18 April 2011 (UTC)
    • --shados 18:05, 6 May 2011 (UTC) Although You can authenticate Mikrotik users and assign privilege levels via radius (ask me how if you don't know) i will give vote for this
    • --Mthoma 15:12, 12 January 2012 (UTC)
  • Part time working with polling / without polling - to be able to connect mikrotik clients with polling and Nstream and other devices without these features. Or something like Virtual AP with polling and master radio interface without it. Or vice versa.
    • --CiTiZeN 13:44, 11 July 2011
    • --Rus123 12:39, 19 Januar 2010 (GMT)
    • --NetworkPro 21:49, 21 March 2010 (UTC) Radio in nstreme mode can be interrupted to go to normal mode? Don't think so.
  • More colors in text everywhere - for example the Log can be colored similar to the v3-&-up Terminal syntax. This should improve readability by 100 times. It aslo should improve overall quality of the MikroTik experience.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --Mthoma 15:12, 12 January 2012 (UTC)
  • Fully usable CPU graphs inside WinBox.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Oeyre 07:06, 27 October 2010 (UTC)
    • --Omega-00 06:27, 4 November 2010 (UTC)
  • Sending different vendor encapsulated DHCP options to different vendors. Needed to support provisioning of a mix of VoIP devices. Alternatively, sending different options in general, based on the first 6 digits of the MAC address. (Ability to specify dhcp-client rq/tx options like dhcp vendor class code 60). This is required to get an IP address for some service providors.
  • The ability to just add HDDs to increase the storage for Proxy - Web Proxy using more than one HDD for more space, more speed etc. Including USB and including with cheap USB hubs to increase ports.
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --MFX 10:45, 22 May 2012 (UTC)
  • Better graphs - when I look at the CPU usage, I need to know how many the connections were at those CPU spikes for example. Also - the ability to make a graph not only by an interface or a simple queue, but by client's IP address as well - useful when they dont have simple queues and their own PPPoE itnerfaces.
    And very very important - PPPoE and dynamic interfaces should be always visible in graphs!!! And the graphs should be saved for earlier sessions as well.
    • --NetworkPro 21:49, 21 March 2010 (UTC) !!!!
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --JShadow 03:49, 2 August 2011 (UTC)
  • Ability for traceroute tool to resolve names. Ability to see MTU information and other information like tracepath linux tool etc.
    • --NetworkPro 04:29, 13 October 2010 (UTC)
    • --mattx86 07:12, 28 October 2010 (UTC) - INFO: The ability to resolve names is already there, at least in 5.0rc[1,2]: /tool traceroute use-dns=yes www.google.com
    • --ukasz 00:00, 3 February 2011 (UTC)
  • A big Web Proxy NPK for x86 that surpasses Squid+videocache capabilities.
    • --NetworkPro 04:28, 13 October 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
  • The ability to automatically do monitoring and reporting for IP SLA without external monitoring solutions. Some new RouterOS NPK.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --xtremetoonz 20:29, 12 April 2011 (EST)
    • --AtreX 09:48, 29 April 2011 (CET)
    • --Kawu 14:24, 22 Nov 2011 (SAST)
  • PPPoE Options just like DHCP Options . When we have a large pppoe network the only way to detect that which user is where. also the only way to prevent "layer2 attacks which described at MUM" . There is a topic [5] and also a "good article"
    • --Omidkosari 13:20, 22 October 2010 (GMT +3:30)
    • --pedja 05:52, 3 November 2010 (CET), and option to set distance for default route
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
  • Rework of WinBox columns, which are shown by default, and how they are turned on, and their naming.
    • --NetworkPro 04:32, 10 October 2010 (UTC)
    • --pedja 05:52, 3 November 2010 (CET), option to change order of displayed coluns is very needed
    • --WirelessRudy 22:38, 18 April 2011 (UTC), we want to set our own default winbox columns/windows/screen!
  • Separate store for Graphing and Sniffer and everything that can wear out our main Store, it being a USB Flash. Currently only Proxy and The Dude and User Manager can have separate stores.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --pedja 05:53, 3 November 2010 (CET), I was bit surprised when I saw this is not implemented
    • --ukasz 00:00, 3 February 2011 (UTC)
  • Please rework the adding-a-bridge behavior. It would save our life if we could just add an interface to a bridge, and we could retain all attributes and connections - ip address, ppp interfaces, vlans, running connections, MAC address. So when we would click to add a bridge, nothing would change but now we would be able to use the bridge functionality. Currently adding a bridge is dangerous or impossible remotely because we would loose connectivity the moment we add the interface as a port. If important traffic is running on that interface.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --pedja 05:55, 3 November 2010 (CET), maybe as on option "Convert to Bridge"
    • --JShadow 03:49, 2 August 2011 (UTC), I vote for an option "Convert to Bridge"
  • WinBox to handle disconnects more gracefuly. To auto reconnect and to save windows sizes and columns locally as well as in the router. No more loosing opened windows and columns inside WinBox! Saving opened windows and columns and their sizes before Restart and Shutdown.
    • --NetworkPro 21:49, 21 March 2010 (UTC) !!!
    • --pedja 05:57, 3 November 2010 (CET)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --WirelessRudy 22:38, 18 April 2011 (UTC)Have winbox setting saved locally on PC. When router reboots same setting as before becomes available.
    • --Mthoma 15:12, 12 January 2012 (UTC)
  • Detailed undo/redo history for WinBox
    • --unknown original author of idea
    • --mattx86 10:59, 29 October 2010 (UTC) - What about making the undo/redo buttons act like the back/forward buttons in modern web browsers: you click undo or redo and get a drop-down list of undo-able or redo-able actions. Also, although it's weird that undo/redo actions are available even after closing winbox and reconnecting with winbox, I suppose that's a useful feature - but I think it would help to know what exactly you're undoing or redoing ahead of time.
  • VRF aware btest: allow btest server/client to operate inside VRF, since main routing table might have sub optimal path (tromboning) when compared to VRF
    • --Oeyre 07:55, 30 October 2010 (UTC)
    • --Omega-00 06:27, 4 November 2010 (UTC)
  • Firewall/list management hotkeys for WinBox: Kind of like NetworkPro's request but more, have several options (with hotkeys) available for managing items in lists where the order of appearance matters (ie firewall, nat etc). Options should include: send to top, send to bottom, up one, down one, up page & down page. This will make it easier to manage ordered lists when they get very large.
    • --Oeyre 07:01, 27 October 2010 (UTC)
    • --Omega-00 06:27, 4 November 2010 (UTC)
    • --NetworkPro 00:34, 4 March 2011 (UTC)
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
  • signal monitoring and storage of the report to a file. Without having to rely on "dude" or any application outside RouterOS. It would also be useful to have this resource graphing
  • Add support for IPv6 blackholes and (simple queue/ queue tree/mangle/policy routing) stuff. Simple things, but extremely needed if you take IPv6 deployment seriously.
    • --Ozelo 14:22, 5 November 2010 (GMT -3)
    • --NetworkPro 00:34, 4 March 2011 (UTC)
    • --Lavv17 09:51, 22 April 2011 (UTC)
    • --arttu 20:38, 1 Aug 2011 (UTC)
    • --Mthoma 15:12, 12 January 2012 (UTC)
  • UPnP - to be able to see the identity of the software that made the dynamic NAT entries
  • UPnP Dynamic NAT rules that would catch traffic coming from multiple WAN interfaces (different dst-addresses). UPnP for dual-WAN load balancing configurations. Screw the RFC just make it work. Then publish own RFC.
  • Dynamic rules for example the UPnP ones to have several modes: middle, top, bottom, instead of just bottom. This would help with NAT management.
  • A new RouterOS installer that overwrites the current running OS or adds ROS as a second OS similar to the wubi Ubuntu insatller. Silent switches for this installer so no mouse interaction would be needed to turn a remote host into a router, entirely over the network. Example: we have a linux root shell or a Win RDP. We run a binary - the machines turns into a router in one restart. RouterOS would automatically boot up, and maybe could keep an option to return to the previously working OS with one restart.
  • The ultimate power to rewrite parts of packets and frames, for example NAT without connection tracking (just replacing the dst-addr without a conntrack entry)
  • Add support for IGMP snooping on switched/bridged interfaces
    http://tools.ietf.org/rfc/rfc4541.txt and support for static IGMP joins/groups
    • --femur 11:05, 29 August 2010 (GMT +2)
    • --P1 p1 p1 18:34, 22 January 2011 (UTC)
    • --kyob 15:51, 16 March 2011 (GMT +1)
    • --Djrzulf 12:03, 27 April 2011 (UTC)
    • --szastan 14:26, 11 May 2011 (UTC)
    • --Suran 23:11, 4 April 2012 (UTC)
    • --neuperg 20:50 , 15 August 2012 (GMT+4)
    • --nozicka 15:11, 06 September 2012 (GMT+1)
  • Ability to make "/system routerboard upgrade" from within a script - currently it waits for y/n prompt
    • --ukasz 00:00, 3 February 2011 (UTC)
  • Ability to make "/system reboot" from within a script - currently it waits for y/n prompt
    • --P1 p1 p1 18:34, 22 January 2011 (UTC)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --arttu 20:38, 1 Aug 2011 (UTC)
  • Add ability to turn off LED/time-related control on RB hw. Unpleasant light during night time indoor.
  • Windows users, can download OpenVPN Client settings from webpage of MT router and connect to OpenVPN server quickly.
    • --Nejko 13:42, 30 March 2010 (UTC)
    • --Engiman 23:10, 6 January 2011 (UTC)
  • Add remote-random in OpenVPN-client configuration to add failover solution and load-balancing.
  • Implement the "user-class" option in the dhcp-server, see [6]
  • Cisco or UT Starcom PDSN functionality (PPP over GRE support)
  • User-Manager - remove/relax L5 license limitation for active sessions.
  • easy UM High-Avaliability+real time replication config example or if not possible - add functionality and make example
  • Simple windows utility to: telnet-mac to new (unconfigured) device, (set ip), upload .rsc script and import that script. It's great to simplify template based configuration of new MikroTik devices.
    • -- Viktorc 16:15, 7 July 2009 (EEST)
  • MAC-WinBox fix for newer versions of Windows. Currently MAC-WinBox, scanning and connecting is broken under Windows 7
  • Hotspot - Allow authenticated hotspot user profiles to inherit address-pool from ip hotspot. This allows a single user+profile to "roam" between different hotspots with 1:1 NAT. [i.e. address-pool (name | none | inherit from hotspot; default: none)]
    • -- sean 17:09, 22 October 2009 (UTC)
  • Support for SIP Proxy, FXO Ports and SIP User Agent. For example by PCI pass-through to kvm, similar to VMWare ESX, so PCI FXS/FXO cards would be usable to a KVM Asterisk installation. Or something to allow to utilise a x86 machine resources for VoIP and not just a router. Currently x86 resources are wasted free.
  • MAC Address functionality for Torch
  • For WinBox - the ability to search and find and copy and paste etc from the Log window (now I think I need to open a New Terminal for this and copy all and paste in texteditor and search there)
  • Colored syntax even with pre-v3 RouterOS WinBox connections. WinBox automatic online update. WinBox DLLs automatic online update of even old pre-v3 dlls to be able to increase speed and add features such as colorisation. When connecting to a router - the DLLs could be downloaded from mikrotik.com instead of the router - this should make work faster and it would allow for improvements to old WinBox engines.
  • WinBox buttons on top - on the free grey area, for one-click access to firewall mangle, firewall filter and ip-addresses etc, like the WinRAR one-click button ribbon, only smaller to fit in the empty grey space ontop of WinBox.
  • WinBox ability to select a group of mangle rules and clone them for different interface or different 'something'. Example- right click on the group of rules and choose "Clone for.." - a dropbox appears and we select from it "out-interface" for example, and right after that - the interface itself.
  • Automatic best practice config suggestions inside WinBox. Or when I upload a .backup to my mikrotik.com account.
  • For WinBox - right click tools inside Tools->IP Scan
    • --NetworkPro 21:49, 21 March 20-up Terminal syntax. This should improve readability by 100 times. It aslo should improve overall quality of the MikroTik experience.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --Mthoma 15:12, 12 January 2012 (UTC)
  • Fully usable CPU graphs inside WinBox.
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Oeyre 07:06, 27 October 2010 (UTC)
    • --Omega-00 06:27, 4 November 2010 (UTC)
  • Sending different vendor encapsulated DHCP options to different vendors. Needed to support provisioning of a mix of VoIP devices. Alternatively, sending different options in general, based on the first 6 digits of the MAC address. (Ability to specify dhcp-client rq/tx options like dhcp vendor class code 60). This is required to get an IP address for some service providors.
  • The ability to just add HDDs to increase the storage for Proxy - Web Proxy using more than one HDD for more space, more speed etc. Including USB and including with cheap USB hubs to increase ports.
  • Better graphs - when I look at the CPU usage, I need to know how many the connections were at those CPU spikes for example. Also - the ability to make a graph not only by an interface or a simple queue, but by client's IP address as well - useful when they dont have simple queues and their own PPPoE itnerfaces.10 (UTC)
  • Remove telnet from right click and make SSH the default.
  • Full SNMP (v3) configuration support under WinBox dialogs. Currently WinBox can only manage community name, location, owner and enabled/disabled so to set SNMPv3 you have to use console. Use dude snmp profile dialog for inspiration.
  • Ability to select from the list of valid IP addresses an address to be used as the source IP of DHCP relay requests. e.g. currently all dhcp relay requests appear from the IP of the egress interface. It would be extremely useful to be able to use the IP of say the interface the DHCP relay is listening on.
  • Sticky neighbors that don't vanish when no packet is recieved. Ability to only listen to neighbor protocols, to be invisible. Ability to drop every ethernet protocol (like CDP) from firewall. Listen to everything - general passive scanning, Secure from DoS. Ability to see the CISCO CDP longer strings that currently don't fit. Arpwatch powers inside MT to defeat the need of a separete box for that.
  • NAT matcher by CPU utilisation - useful for not sending connections to Web Proxy when the CPU usage is high. Generally - the ability to max out all of the boxes CPU for the benefit of web cache or some optimisation technique.
  • When having many DNS servers specified - the ability to ask them all at once so that the fastest reply is used - a parralel use of DNS servers. This will be extremely useful to improve website performance.
  • A technology is needed to help improve DNS resolving times. For example - sticky DNS cache - that can prolong the DNS entries, for longer then their official specified times. Or instead of expiring - the DNS entry can be auto refreshed inside RouterOS to keep a fresh and fast copy in the local cache. Also - saving the DNS cache for after a restart. Also - a DNS server auto-selector - from 5 configured servers, to automatically choose and inform of the fastest.
  • Web Proxy prefetch - ability to automatically crawl the web to build up the cache. Ability to be scheduled for low traffic times and maybe detect these by itself.
  • Web Proxy improved performance maybe through utilising as much RAM as available.
  • A way to manage backups. A way to compare backups in WinBox or in mikrotik.com account - to know what is new since the selected backup, to know what is different between two backups. A way to name each backup file, to comment it. Or at least to be able to view and collect backups inside my mikrotik.com account. If comparison can be done there, that would be great. If this means a new .backup file format - its totally worth it.
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --shados 18:05, 6 May 2011 (UTC) somthing like Cisco's archive functionality neede
  • Some way to detect when a link is influenced by noise so that the Queue on it automatically starts dropping low prio packets and lets the high prio right through. For radio and cable if possible, pretty please :)
  • The full power of the tools fping and hrping inside ROS.
    • --NetworkPro 08:12, 1 April 2010 (UTC)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --shados 18:05, 6 May 2011 (UTC)
    • --arttu 20:38, 1 Aug 2011 (UTC)
  • The ability to evaluate connections/interfaces based on the TCP RTT - a TCP "ping" tool.
  • HTTP ping. Also for use in scripts.
  • MikroTik product as a WAN optimizer. Maybe ready-made scripts and abilities for RouterOS right out of the box. Defeat the need to use cFosSpeed in a Windows box for WAN optimisation. Defeat the need for VoIP WAN optimiziers.
    • --Solaris 03:38, 26 October 2010 (GMT +7)
  • ready-made kvm image for torrenting, appropriate storage management capabilities for RouterOS - the kvm to have access to a HDD of its own.
  • Support for HTTPS on the fetch tool (/tool fetch url=https://...). Good for secure Dynamic DNS updates, secure Dynamic Endpoint updates for IPv6 Tunnels and the like.
    • --mattx86 07:01, 28 October 2010 (UTC)
    • --NotObvious 23:18, 30 November 2010 (UTC)
    • --Crean , 13:52:21, 1 January 2010 (UTC)
    • --mjjochen, 14:51, 09 March 2012 (UTC)
  • The Manual button in WinBox should probably open the MikroTik Wiki in the user's default browser. (Although, I'm not sure how this would affect Linux and Mac users running WinBox through Wine.) The built-in Manual browser is limited in functionality, and the back/forward buttons do not work at present. (Using WinBox Loader 2.2.16)
    • --mattx86 16:11, 28 October 2010 (UTC)
  • Add the words "Undo" and "Redo" to the undo/redo buttons at the top-left of WinBox, and move them to the right so they're positioned above the work space, in order to make them more visible.
    • --mattx86 18:55, 28 October 2010 (UTC)
  • Winbox: add button to manually save config at will
    • --pedja 06:01, 3 November 2010 (CET)
  • Winbox: Add option to display proper command syntax for selected item (that would really help learning or making tutorials)
  • Create means to see what exact connections are handled by single queue. That would really help debugging configuration. Torch does not help as it is related to interface, not queue.
  • Create means to see what exact connections are handled by single items in routing table. That would really help debugging routing configuration.
  • When item in routing table is automaticaly set inactive, provide information why it happened. It is not always obvious, and sometimes it may even seem that there is no reason. In such cases hints would really help.
    • --pedja 06:08, 3 November 2010 (CET)
    • --JShadow 03:49, 2 August 2011 (UTC)
  • Provide better ways to issue feature requests, and vote for them. Wiki is simply inapropriate.
    • --pedja 06:10, 3 November 2010 (CET)
    • --ukasz 00:00, 3 February 2011 (UTC)!!!!!!!!!!!!
    • --WirelessRudy 22:38, 18 April 2011 (UTC)Just the option to open a Poll for some suggestion. With points to give, one per username
  • Provide Bug tracking system. Provide complete release notes with detailed information about linux kernels used and packages. Provide complete information about security vulns in RoS. Provide bug description for each confirmed bug (versions affected, fixed versions, workarounds)
    • --shados 18:05, 6 May 2011 (UTC)
    • --JShadow 03:49, 2 August 2011 (UTC)
  • Winbox: When any item is displayed as invalid (coloured red), provide more useful explanation. It is not always obious why it is invalid. Try to suggest correct value for invalid field, if possible.
    • --pedja 06:06, 3 November 2010 (CET)
    • --xxiii 19:13, 7 December 2010 (UTC)
  • Winbox: When copying configuration from one device to another, usual problem is that all settings depending on interface names are invalid. When one opens such item to edit it, Winbox automaticaly replaces invalid value with name of some of the existing interfaces. That does not help. Leave it invalid, as that would help user see what was the wrong value and thus know how to deal with it. When it is automaticaly replaced, user does not know what was original value, and has no clue how to set it up.
    • --pedja 06:17, 3 November 2010 (CET)
    • --xxiii 19:13, 7 December 2010 (UTC) In other cases, "unknown" is shown, add ability to see what original value was.
    • --arminvox 08:22, 06 March 2011 (GMT +3:30)
    • --WirelessRudy 22:38, 18 April 2011 (UTC)
    • --hjoelr 14:03, 22 December 2011 (EST)
  • Winbox: Each device may have several IP addresses it may be accessed to. Admin usualy saves some or all of them in Winbox loader so he can access device regarding what is accessible to him. As number of devices grows, number of connections expands progressively. It would be good, if it is possible to group all connections that belong to the same device, and set default connection for the group. So, only default connection is displayed, and others are not, but they available if needed.
    • --pedja 06:22, 3 November 2010 (CET)
    • --xxiii 19:13, 7 December 2010 (UTC)
  • Improve Torch so that we can filter connections by in and out interface at the same time, queues, routing table items, marks, address lists, and other useful means not supported now.
    • --pedja 06:32, 3 November 2010 (CET)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --xtremetoonz 20:29, 12 April 2011 (EST)
  • Add support for RADIUS Subscriber Assigned VLAN attribute in 802.1x. This allows isolation of wireless users/groups per VLAN based on login credentials using a single SSID.
    • --joefat 08:28, 10 November 2010 (GMT)
    • --bor.del 14:44, 11 April 2011 (GMT)
    • --Grg 23:30, 20 May 2011 (UTC)
    • --si 19:20, 24 June 2011 (CET)
    • --tomspappola 09:35, 02 July 2011 (CET)
    • --Glendale2x 23:17, 30 October 2011 (UTC)
    • --minfrin 17:17, 10 January 2012 (UTC)
    • --MFX 10:45, 22 May 2012 (UTC)
    • --jorgeamaral 01:45, 9 Nov 2012 (UTC)
  • Add 802.1x support for ethernet connections (supplicant).
    • --core 09:31, 30 May 2011 (EEST)
    • --rem_lex 07:07, 30 May 2011 (UTC)
    • --.tornado 11:28, 30 May 2011 (EEST)
    • --si 19:20, 24 June 2011 (CET)
    • --JShadow 03:49, 2 August 2011 (UTC)
  • Add ability to peek or dump out list of streams in a PCQ entry to make sure its classifying properly
    • --Docteh 18:26, 20 November 2010 (UTC)
  • Add MAC-Accounting feature to account traffic from different BGP peers talking on the same LAN (typical NAP scenario)
    • --Perit 13:12, 3 December 2010 (UTC)
  • Add built-in geolocation support. This allows for users to filter traffic based on location. (Attempting to manually import all IP Subnets into address-lists proved to be very tedious)
  • Add Radius support for Wireless with "secured password (EAP-MSCHAP v2)". (Integrate Mikrotik wireless AP with Radius and authenticate clients from Radius using username and password from active directory)
    • --Rukicc 13:45, 4 January 2011 (UTC)
    • --netstablellc 8:34, 21 December 2010 (EST)
    • --THG 21:30, 18 January 2011 (UTC)
    • --ukasz 00:00, 3 February 2011 (UTC)


  • Add option when specifying DNS servers to set which domains they are authoritative for. There is sometimes need to direct DNS query for specific domains to specific DNS server. Example: if I use 8.8.8.8 and 8.8.8.4 as DNS severs I would like to be able to add 4.4.4.4 as DNS for domain somedomain.loc and his subdomains. That would allow Mikrotik to generaly use first two DNS servers but if there is request for somedomain.loc or it's subdomains it will use third DNS. This is needed for handling internal DNS for large networks, where there are several local DNS servers each handling his own local (sub)domain. This would be similar in function to the dnsmasq --server feature.
  • Add option to log Web Proxy rules
    • --pedja 10:50, 4 April 2011 (CET)
  • There is error.html that is displayed to user if his connection is denied through Web Proxy. However, it is usual that not just html is blocked. If user tries to open other type of content he also gets html message which is in inapropriate form. Allow error message to be displayed in apropriate form: if gif is denied, then display error.gif, if jpg is denied, then error.jpg, if .png is denied then error.png, and similar other error message forms.
    • --pedja 10:45, 4 April 2011 (CET)
  • Add native MPLS support for inter-AS LDP exchange (it currently only works within a single AS), so that VPLS tunnels and MPLS-TE can span across a network backbone composed of multiple private autonomous systems
  • Tunnel Header DSCP replication - replication of the ip packet dscp value into the encapsulating ipip tunnel header
    • --yoniel 9:05, 9 June 2011 (CET)
    • --MFX 10:45, 22 May 2012 (UTC)
  • integrate udpxy [7], maybe as an additional package. It is the best way to send IPTV over WiFi as unicast.
    • --Lavv17 11:09, 14 March 2012 (UTC)
    • --sanya 16:32, 1 April 2012 (UTC) - [8]
  • Link-local IPv6 addresses for GRE interfaces (to make OSPF and BGP work across them).
    • --M0kct 20:53, 19 March 2012 (UTC)

Existing Features

  • Confirmations for connection-sensitive actions in winbox or cli. For example before actually disabling an interface, a confirmation is essential. Accidental brick-outs happen for many people time to time. This behavior could be optional, so ability to customize winbox would also be nice. (RouterOS has safemode, can be toggled from CPI and winbox.)


  • Allow setting more than just two parent DNS servers
    • --pedja 06:03, 3 November 2010 (CET)
    • --mattx86 16:11, 03 November 2010 (UTC) - In WinBox, if you're talking about IP -> DNS -> Static (Tab) -> Settings (Button): This is already available: click the down arrow of the 'up/down arrow' to the right of the last Servers entry, and a new entry box will appear. (On the console, you can use a comma to separate DNS servers: /ip dns set servers=8.8.8.8,8.8.4.4,4.2.2.2 <- Google Public DNS and GTEI/Verizon's Public DNS)
  • Allow more than two DNS servers to be used in ipv6 router advertisements - currently only the first two configured DNS servers are actually advertised
    • --cdp 13:38, 28 July 2011 (GMT)
  • Important basic information like Packet Flow diagram, best practice configs, to be somehow always quickly accessible from WinBox.
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --mattx86 15:50, 28 October 2010 (UTC) - Although not available offline, the Manual button in WinBox loads up the MikroTik Wiki inside WinBox. Your computer needs internet access (and not necessarily the router you're logged into). On the Manual on the Wiki, you can find the Packet Flow diagram under the Traffic Control section. (Moved to Existing Features section at 01:58, 03 November 2010 (UTC))
  • Stop thinking small for all platforms and start making features that consume resources for x86. Currently x86 resources are unused. This should allow for ultimate "power" and more granular control. Always need more of those ;)
    • --NetworkPro 05:44, 13 October 2010 (UTC)
    • --Solaris 03:38, 26 October 2010 (GMT +7)
    • --mattx86 18:46, 28 October 2010 (UTC) - Is this not yet provided with the new x86 and x86 multicore features of RouterOS 5.0? (Moved to Existing Features section at 01:35, 03 November 2010 (UTC))
  • Add timeout field to firewall address list entries so one can see how much time is remaining before an entry expires.
    • -- xxiii 19:13, 7 December 2010 (UTC)
    • -- otgooneo 09:57, 8 May 2013 (GMT+8)
  • Add configuration options to ping-watchdog to specify how many pings should be performed and how far apart before triggering a reboot. This can help avoid false positives when another node along the route reboots and doesn't get routing back up in time to satisfy the ping watchdog, and will let people taylor the ping watchdog to their needs (reboot immediately if things look broke, or, wait a little while and see if things work out).

In routing filters, "set-bgp-prepend=0" does exactly the same.

  • Ability to write reusable scripts (something like Functions with or without a return value - in BASIC). And the ability to run such scripts by simply calling their name (eg. not /system/script(function?)/run script_name but /system/script(function?)/script_name)
    • --Tplecko 15:40, 28 May 2009 (EEST)
    • --Dsswiki 01:16, 1 October 2009 (EEST)
    • --sten 11:52, 10 February 2010 (CET)

Sort of possible already by using ":parse" command


  • Log Windows: Separate "memory" Log windows per topics, to keep the main log clean from nonstop ppp reconnects.. Currently only possible to configure different logging actions and assigning topics to each "action" but not view different topics in different Log windows inside WinBox.

This is possible by ading new /system logging action, and then open new terminal in winbox and do /log print follow where buffer=<action> That way you can open several new terminals and have as manu logging windows as you want with different topics in them.

  • Modify remove/edit/comment/disable commands to be variants of add, so that you can do for example "/ip address add interface=ether1 address=172.16.0.1/12; /ip address remove interface=ether1 address=172.16.0.1/12" (to be clear, this is similar to the cisco "no" functionality which is used to negate a previous config line that exists)
    • --[User:froztbyte|froztbyte]] 14h20, 12 May 2011 (UTC+2)

Already possible /ip address remove [find interface=ether1 address=172.16.0.1/12]

Already done

  • Add BFD and MPLS-TE to winbox in appropriate places. (There is an OSPF TE tab, but most of the other TE related configuration is missing from winbox)
    • -- xxiii 17:31, 26 January 2010 (UTC)
    • --NetworkPro 21:49, 21 March 2010 (UTC) Even Better WinBox needed. Good job for v5 WinBox. Keep it up!!!
    • --Matush 09:55, 23 April 2010 (UTC)
    • --Oeyre 03:14, 13 December 2010 (UTC) Please also add echo support to enable cisco interoperation
    • --Jauer 16:06, 16 December 2010 (UTC)


  • Tool to send backup and export files to remote host via ftp (also encrypted). make it usable in scripts and shedule it. for example after specyfiing /tool backup (or export in any place in tree) file=backup add another option like address=172.16.1.1 username=admin password=topsecret method ftp. if this method would be used then do not writ those files into storadge but to memory and then send (faster on devices that lack real hdd)
    • --ukasz 00:00, 3 February 2011 (UTC)

"/tool fetch" can be used to send files to the servers


  • add a small smb/samba/cifs server. Could be used for basic, local fileshare for usb attached storage.
  • (i voted twice, i really want this. This is one of 2 things (VoIP/Asterisk/FreeSwitch). Need to store local scans from scanner on site)
    • --Syadnom 16:05, 28 September 2011 (UTC)
    • --Syadnom 16:07, 28 September 2011 (UTC)
  • Add more details in the log when for example an sstp client connect fails, the message http request error is not very helpful when you search an error. In my case the time of the router was not correct and so the client certificate and the CA were invalid.
    • --Mthoma 15:19, 12 January 2012 (UTC)
  • Add comment capability to items that currently lack it, such as OSPF and BGP networks, OSPF areas, etc.

(I can add comments to bgp peers, ospf areas, instances, etc, so I have moved this to 'done' -- PhilB 13:00, 5 March 2012 (UTC))

    • -- xxiii 17:28, 26 January 2010 (UTC)
    • --sten 11:52, 10 February 2010 (CET)
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --ukasz 00:00, 3 February 2011 (UTC)
    • --arttu 20:38, 1 Aug 2011 (UTC)
  • Extend ssh functionality to allow commands to be sent to hosts and returned. Eg. \ssh address=192.168.1.1 command="whoami" This way ssh could be incorporated into scripts, which at the moment is not possible.
    • --MojoMax 19:00, 27 March 2011 (UTC)
    • --arttu 20:38, 1 Aug 2011 (UTC)
  • Hardware support for the intel 82574 ethernet interfaces
    • --gcakici 01:36, 28 February 2010 (GMT+2)
  • IPv6 support over PPPoE
  • Support GRE tunnels that are compatible with Cisco/Juniper, including tunnel key values. Perhaps a selection of IPIP/GRE tunnel mode.
  • Add ability to see what subsystems are using what percentage/quantity of CPU and memory. If a router is at or near maxing out this would help to figure out what the problem is. Currently the only option is to generate a supout.
    • -- xxiii 21:34, 17 February 2010 (UTC)
    • --NetworkPro 21:49, 21 March 2010 (UTC)
    • --butche 1:47pm, June 1 2010 (CST) - VERY good idea and one that has been asked for a number of times.
    • --Laurinkus 09:31, 4 June 2010 (UTC)
    • --NZ monkey 09:31, 4 June 2010 (UTC)
  • Allow to specify dns server in the :resolve command, something like this :resolve domain-name=google.com dns-server=8.8.8.8
  • New policy in /user group for api only connections. currently (as of this writing version 4.16) only winbox policy is used for api and winbox. please separate those two. this would enable to create a special api user that can login only via api. i have hundrets of routeros devices and some groups of them has different password. if i create an separate api user and grant him winbox policy i am toasted when api password leaks. someone could have global winbox access to routeros devices.
    • --ukasz 00:00, 3 February 2011 (UTC)
Retrieved from "http://wiki.mikrotik.com/wiki/MikroTik_RouterOS/Feature_Requests"