Documentation updates - November 2, 2026
Summary of documentation changes made on November 2, 2026.
Wireless
- WiFi CAPsMAN: New MLO guidance for Wi-Fi 7 CAPs. All interfaces that form an MLD must use the same SSID; a new example provisions the radios with
multi-link-mode=auto(ormasterto keep the virtual interfaces non-MLO), and an MLO CAP needsmld-datapath=capdpunder/interface/wifi/cap. For MLO with VLANs, enable onlywpa3-psk, match the Wi-Fi 7 bands in the provisioning rules (or use one rule for all bands), and setmulti-link-mode. CAPsMAN forwarding (traffic-processing=on-capsman) does not support MLO yet, which the Wi-Fitraffic-processingdescription also notes. The CAP example covers both thewifi-qcomandwifi-mediatekpackages.
VPN
- IPsec: New "Route-based IPsec with XFRM interfaces" section. An XFRM interface is bound to an IPsec policy group, and traffic is routed into the interface instead of being matched only by the policy selectors, so dynamic routing protocols can run over the tunnel and routing marks or a VRF can steer traffic into it. A two-router example covers the configuration on both sides and how to verify it. The
/interface/xfrmreference describes the flags and arguments (mtudefaults to1400). Also in the 7.25 manual.
Hardware
- NetMetal ax: Corrected powering: the Ethernet port accepts passive PoE (18–28 V), not 802.3af/at. Added a specifications table (IPQ-5010 CPU, 256 MB RAM, 128 MB NAND, 2.4 and 5 GHz 802.11ax radios, a 2.5G SFP port, miniPCIe and a Nano SIM slot, operating temperature −40 °C to +70 °C).