MikroTik RouterOS 6.32.x
Подробное описание изменений в MikroTik RouterOS 6.32.x. Официальный список исправленных ошибок, добавленного функционала и прочих доработок. Дата выхода первого набора изменений – 31 августа 2015, дата выхода последнего набора изменений – 9 февраля 2016.
Полезные материалы по MikroTik
Секреты настройки MikroTik
Более 18.000 подписчиков самого большого telegram-канала «MikroTik-сэнсэй» первыми узнают секреты настройки MikroTik от автора этой статьи.
MikroTik RouterOS 6.32.4 Long term
Дата выхода: 9 февраля 2016
Изменения:
- address-list - properly remove unused address-lists from drop-downs;
- arp - show incomplete ARP entries;
- bridge - fixed power-cycle-ping for bridge ports (was affecting all bridge);
- bridge firewall - fixed crash when jump rule points to disabled custom chain;
- btest - fix potential crash after btest release;
- btest - improve UDP tx rate precision;
- crypto - fixed kernel failure in talitos HW encryption;
- dhcpv6-client - fix DNS address assignement;
- dhcpv6-client - set correct parameters when rapid commit is used
- e-mail - do not reset server address after changing configuration;
- email - make password field sensitive in console.
- ethernet - fixed link resetting on power-cycle-ping value change;
- fastpath - fixed possible kernel failure on multi core systems;
- fastpath - show fp counters in /interface monitor aggregate;
- fetch - added 30 second connection time-out;
- fetch - fixed closure after 30 seconds;
- hotspot - added missing favicon.ico in hotspot html pages;
- hotspot - fixed missing image at login;
- ipsec - fixed kernel failure after underlying tunnel has been disabled/enabled;
- kernel - general improvement for core process scheduling;
- lcd - fixed LCD crash on fast disable/enable;
- lcd - refresh LCD after display command is executed;
- led - add WLAN led to RB951Ui
- log - log link up/down events only when link actually has changed its state;
- log - reopen log file if deleted;
- lte - improve support Sierra Wireless 320U;
- lte - speed up first time connection to LTE network on SXT LTE;
- net - apply slave config only if master config has been changed;
- net - do not show L2MTU in VLAN compact export;
- netinstall - fix branding pack parsing;
- netwatch - make work with ping time-out more precise;
- packages - show version tag when no bundle is installed.
- packing - fix tcp/udp checksums when simple packing is used;
- ppp - do not allow empty name ppp secrets;
- ppp - fixed dynamic filter rule adding on some firewall filter configurations;
- ppp - make PPP active print radius & !radius conditions work;
- romon - allow to see device identity if it is longer than 31 character;
- romon - do not accept multicast id;
- romon - fixed crash on RoMON if fast-path was active;
- smb - fix crash when changing user which has open session;
- smb - fixed SMB share crash when connection was cancelled;
- smb - show correct interface name in SMB debug logs;
- ssh - avoid double session clean-up;
- ssh - fix active user accounting;
- ssh - fix key exchange when first kex packet follows.
- ssh - fix session clean-up;
- sshd - resolved shared secret mismatch issue;
- tile - fix ipsec freeze after SA updates;
- tile - fixed kernel failure on HW encryption;
- upnp - fixed memory leak;
- upnp - fixed missing in-interface option for dynamic dst-nat rules;
- vrrp - allow VRRP to work behind firewall and NAT rules;
- vrrp - do not warn about version mismatch if VRID does not match;
- vrrp - fix arp=reply-only;
- vrrp - fix enabling disabled vrrp interface when vrrp program has exited;
- vrrp - fixed on-backup script;
- vrrp - make sure that VRRP gets state on bootup;
- webfig - didn't show zero values in CRS ingress/egress VLAN translation rules;
- webfig - fixed firewall connection-bytes option;
- webfig - show correctly SFP Tx/Rx;
- winbox - added + & - to IGMP proxy MFC;
- winbox - allow to specify traffic-monitor threshold in k & M units + specify that those are bits;
- winbox - do not send any changes on OK button press if nothing has been changed;
- winbox - fixed tab names to correspond to console;
- winbox - fixed tab names to correspond to console;
- winbox - renamed power-cycle-ping-interval to power-cycle-ping-timeout;
- winbox - show dhcp server name in dhcp leases;
- winbox - show fast-path per interface counters;
- winbox - show only actual switch-cpu ports in switch setting combobox;
- winbox - show properly route-distinguisher for bgp vpn4;
- winbox/webfig - fixed version column ordering in ip neighbors list.
MikroTik RouterOS 6.32.3 Long term
Дата выхода: 19 октября 2015
Изменения:
- switch - fixed CRS settings set back to defaults after a reboot;
- netinstall - include missing RB1200 drivers;
- firewall - fixed connection-rate matcher;
- ppp, pptp, l2tp, pppoe: fixed router dead locked if compression was enabled on link;
- quickset - create proper firewall rules when PPPoE is used for address acquisition;
- sstp - fixed kernel crash when other party started to fragment ppp packets in the middle;
- ippool6 - optimize same prefix acquisition;
- winbox - Shift+Ins & Shift+Del did not work in multi entry fields;
- winbox - allow to specify ipv6 address in traffic flow target;
- winbox - allow to specify eap-radius-accounting in CAPsMAN;
- winbox - allow to enter dns name in email server;
- ups - fix console oid print;
- tunnel - fix loopback keepalives on gre and ipip;
- pptp,l 2tp, sstp, pppoe: do not send data packets before we have negotiated connection with other side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers;
- pptp, l2tp, sstp - make it work when add-default-route & dial-on-demand both are enabled;
- pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped;
- nv2 - fixed kernel failure with frame size accounting;
- ovpn client - fixed crash when ovpn didn't receive it's ip address;
- lcd - fix slideshow for CCR1072, and possible sign issues for temperatures;
- winbox - make console notice correct screen size;
- ssh - allow to specify pass as argument for private key import;
- winbox - refetch hotspot walled garden hit counter;
- winbox - added client-connections & server-connections to web proxy status;
- cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
- bgp - specific BGP networks were changed to different ones;
- cerm - allow export for all types except templates;
- wlan - update brazil-anatel country;
- winbox - fixed context menu actions to apply to all selected items.
MikroTik RouterOS 6.32.2 Stable
Дата выхода: 17 сентября 2015
Изменения:
- cerm - guard template from parallel use
- mipsle - fixed missing second level menu in CLI;
- sstp - avoid routing loops on client when adding default route;
- sstp - fixed problem where sometimes sstp ip addresses were invalid;
- switch - fixed bogus log messages about excessive broadcasts/multicasts on master-port;
- tftp - fix request file name reading from packet
- pptp encryption - better handling for out-of-order packets;
- ethernet - added support for new ASIX USB Ethernet dongles;
- CAPsMAN - fix 100% CPU usage when trying to upgrade RouterOS on CAP;
- upgrade - fixed default configuration export;
- ppp - fixed ppp interface stuck in not running state;
- ipsec - fixed kernel failure when packets were not ordered on first call;
- upnp - randomize action urls to fix "filet-o-firewall" vulnerability;
- RB532/RB564 - fixed no link after ethernet disable/enable;
- romon - fixed default configuration export;
- tile - fixed occasional deadlock on module unload;
- mesh - fix router lock-up when interface is added/removed;
- ipsec - fix sockaddr buf size on id generation for ipv6 address;
- health - show correct voltage for CRS109,CRS112,CRS210 when powered through PSU and show voltage up to 27V when powered through PoE;
- email - resolve server address;
- snmp - show firmware upgrade info;
- upgrade - report status in check-for-updates.
MikroTik RouterOS 6.32.1 Stable
Дата выхода: 7 сентября 2015
Изменения:
- RB911/912 - fixed lock-up;
- RB493G - fixed reboot loop;
- firewall - do not lose firewall mangle rules on start-up;
- defconf - fix default configuration for routers without wireless package.
MikroTik RouterOS 6.32 Stable
Дата выхода: 31 августа 2015
Изменения:
- trafflow - added support for IPv6 targets;
- switch - fixed port flapping on switch ports of RB750, RB750UP, RB751U-2HnD and RB951-2N (introduced in 6.31)
- ipsec - added compatibility option skip-peer-id-check;
- flash - fix kernel failure (exposed by 6.31);
- bridge firewall - add ipv6 src/dst addr, ip protocol, src/dst port matching to bridge firewall;
- RB911/RB912 - fix SPI bus lock after fast led blink;
- ipsec - fix potential memory leak;
- bridge firewall - vlan matchers support service tag - 0x88a8;
- ippool6 - try to acquire the same prefix if info matches recently freed;
- crs switch - allow to unset port learn-limit, new default is unset to allow more than 1023 hosts per port;
- x86 - fixed 32bit multi-cpu kernel support;
- chr - add hotspot,btest,traffgen support;
- revised change that caused reboot by watchdog problems introduced in v6.31;
- ipsec - use local-address for phase 1 matching and initiation;
- ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
- certificates -fixed bug where crl stopped working after a while;
- ip accounting - fixed kernel crash;
- snmp - fix system scripts get;
- hotspot - ignore PoD remote requests if no HotSpot configured;
- hotspot - fix kernel failure when www plugin aborts on broken html source;
- torch - add invert filter for src/dst/src6/dst6 addresses ;
- bonding - add min_links property for 802.3ad mode;
- snmp - get vlan speed from master interface;
- hotspot - fix html-directory path on small flash devices;
- mipsbe - make system shutdown work again;
- lcd - fixed parallel port LCD display support on multi-cpu x86;
- bridge - fixed use-ip-firewall-for-vlan in setups with multiple bridges;
- ipv6 - fixed DHCP-PD client skips some steps when renewing lease;
- upnp - fixed protocol port selection for upnp protocol comunications;
- firewall - fixed limit and dst-limit options.
- winbox - fixed wireless interface l2mtu (VirtualAP and WDS interface creation in winbox)
- winbox - fixed multiple firewall rule moving in Winbox 2
- simple queues - restrict all changes in dynamic simple queues.
Полезные материалы по MikroTik
Секреты настройки MikroTik
Более 18.000 подписчиков самого большого telegram-канала «MikroTik-сэнсэй» первыми узнают секреты настройки MikroTik от автора этой статьи.