MikroTik RouterOS 6.33.x (Stable)

Материал из MikroTik Wiki
Перейти к навигации Перейти к поиску

Подробное описание изменений в MikroTik RouterOS 6.33.x (Stable). Официальный список исправленных ошибок, добавленного функционала и прочих доработок. Дата выхода первого набора изменений – 6 ноября 2015, дата выхода последнего набора изменений – 28 декабря 2015.

Чек-лист по настройке MikroTik
Проверьте свою конфигурацию по 28-ми пунктам

MikroTik RouterOS 6.33

Дата выхода: 6 ноября 2015


  • dns - initial fix for situation when dynamic dns servers could disappear;
  • winbox - dropped support for winbox v3.0beta and v3.0rc (use winbox v3.0);
  • dhcpv6 - various improvement and fixes for dhcp-pd client and ippool6;
  • defconf - fixed rare situation where configuration was only partially loaded;
  • net - fix possible never ending loop when bad CDP discovery packet is received;
  • log - make default disk file name to reside in flash dir if it exists;
  • romon - change port list to be not ordered in export;
  • capsman - limit number of simultaneous DTLS handshakes;
  • capsman - fixed memory leak on CAP joining CAPsMAN when ssld is used;
  • winbox - added allow-fast-path to eoip, gre & ipip;
  • winbox - do not show power-cycle properties on non poe ports;
  • l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
  • webfig - some of the setting were shifted to the right;
  • packages - allow to reinstall from bundle to separate packages & vice versa;
  • packages - prefer out of bundle packages when both of them are installed;
  • packages - fix a problem of upgrading bundle package to non bundled ones;
  • ipsec - force flow cache validation once in 1h;
  • winbox - make sure that all setting names get shown in full;
  • winbox - added poe power-cycle-ping settings to ethernet interfaces;
  • ppp - handle properly case were ppp client is given same address for local & remote end;
  • winbox - added vlan-mode & vlan-id to virtual-ap interface;
  • winbox - added timeout column to ipv6 address lists;
  • winbox - show SFP Tx/Rx Power properly;
  • winbox - added min-links to bonding interface;
  • winbox - do not show health menu on RB951Ui-2HnD;
  • winbox - added support for Login-Timeout & MAC-Auth-Mode in hotspot;
  • cerm - added option to disable crl download in '/certificate settings';
  • winbox - make user ssh key import work again;
  • webfig - make "Copy to Access List" work in CAPsMAN Registration Table;
  • userman - fix report generation problem which could result in some users being skipped from it;
  • winbox - fix to allow cpu-port as mirror-target
  • proxy - error.html parsing enhancement to improve performance
  • CCR1072 - improve ether1 performance under heavy load
  • routerboard - indicate RouterBOOT type in /system routerboard print;
  • mpls - properly use mpls mtu for routes;
  • cerm - fix key description for signed certificates;
  • trafflow - report flow addresses in v1 and v5 without NAT awareness;
  • hotspot - add mac-auth-mode setting for mac-as-passwd option;
  • hotspot - add login-timeout setting to force login for unauth hosts;
  • auto-upgrade - fixed auto upgrade for smipsbe;
  • dns - do not create duplicate entries for same dynamic dns server addresses;
  • ipsec - fix set on multiple policies which could result in adding non existent dynamic policies to the list;
  • email - allow server to be specified as fqdn which is resolved on each send;
  • fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path");
  • ppp, pptp, l2tp, pppoe - fix ppp compression related crashes;
  • cerm - also accept downloaded CRLs in PEM format;
  • userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases with hundreds of users;
  • health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter;
  • userman - added phone number support to signup form;
  • ip pool6 - try to acquire the same prefix if info matches recently freed;
  • ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
  • ipsec - use local-address for phase 1 matching and initiation;
  • route - fixed crash on removing route that was aggregated;
  • ipsec - fix replay window, was accidentally disabled since version 6.30;
  • ssh - allow host key import/export;
  • ssh - use 2048bit RSA host key when strong-crypto enabled;
  • ssh - support RSA keys for user authentication;
  • wlan - improved WMM-PowerSave support in wireless-cm2 package;
  • pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
  • auto-upgrade - added ability to select which versions to select when upgrading;
  • quickset - fixed HomeAP mode;
  • lte - improved modem identification to better support multiple identical modems;
  • snmp - fix system scripts table;
  • tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
  • fastpath - active mac-winbox or mac-telnet session no longer suspends fastpath;
  • fastpath - added per interface fastpath counters;
  • fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpath;
  • ppp - added on-up & on-down scripts to ppp profile;
  • winbox - allow to specify dns name in all the tunnels;
  • pppoe - added support for MTU > 1492 on PPPoE;
  • cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
  • ppp-client - added default channels for Alcatel OneTouch L100V;
  • defconf - fix for boards that had bridge with only wlan ports;
  • ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
  • cerm - use certificate file name for imported cert name;
  • fetch - fixed error message when error code 200 was received;
  • cerm - rebuild crl for local ca if crl file does not exist;
  • winbox - make directed broadcasts work for neighbor discovery;
  • upnp: automatically adjust mappings to new external ip change;
  • ppp - added ppp interface to upnp internals/externals if requested;
  • ppp - when adding ipv6 default route use user provided distance;
  • userman - allow to correctly enable CoA on router;
  • cerm - show crl nextupdate time;
  • ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit, Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
  • ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
  • userman - refresh active sessions/users view dynamically;
  • package - added version tag and show everywhere alongside of version number;
  • wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

MikroTik RouterOS 6.33.1

Дата выхода: 17 ноября 2015


  • licensing - fix unneeded connection attempts to 169.254.x.x must be CHR only (introduced in 6.33);
  • pppoe - fixed compliance to RFC4638 for MTU larger than 1488 (introduced in 6.33);
  • CRS2xx - fixed occasional switchip resets (broken in 6.33);
  • fastpath - fixed wireless interface fastpath (broken in 6.33);
  • smb - fixed SMB share crash when connection was cancelled;
  • lcd - fixed LCD crash on fast disable/enable;
  • lcd - refresh LCD after display command is executed;
  • vrrp - fix enabling disabled vrrp interface when vrrp program has exited;
  • winbox - do not send any changes on OK button press if nothing has been changed;
  • www - put correct path to Winbox v3.0 for new installations with branding package;
  • webfig - show correctly SFP Tx/Rx;
  • winbox - renamed power-cycle-ping-interval to power-cycle-ping-timeout;
  • hotspot - fixed missing image at login;
  • netinstall - fix branding pack parsing;
  • packages - show version tag when no bundle is installed.

MikroTik RouterOS 6.33.2

Дата выхода: 27 ноября 2015


  • bridge - fixed power-cycle-ping for bridge ports (was affecting all bridge);
  • ethernet - fixed link resetting on power-cycle-ping value change;
  • ppp - fixed dynamic filter rule adding on some firewall filter configurations;
  • pppoe - improved MTU discovery compatibility with other vendors;
  • pppoe - made MTU discovery more robust;
  • pppoe - fixed compliance to RFC4638 (MTU larger than 1488) again;
  • vrrp - fix arp=reply-only;
  • vrrp - do not warn about version mismatch if VRID does not match;
  • vrrp - allow VRRP to work behind firewall and NAT rules;
  • vrrp - fixed on-backup script;
  • dhcpv4 server - fix kernel crash when restoring lease with queue for non-existent server;
  • dhcpv4-client - support /32 address assignment;
  • ssh - fix key exchange when first kex packet follows.

MikroTik RouterOS 6.33.3

Дата выхода: 3 декабря 2015


  • ethernet - fixed 10/100Mbps auto-negotiation fails on RB922UAGS ether1 (introduced in v6.33.2);
  • upnp - fixed memory leak;
  • ssh - avoid double session clean-up;
  • email - make password field sensitive in console.

MikroTik RouterOS 6.33.4

Дата выхода: --

Релиз только для внутреннего использования компанией MikroTik.

MikroTik RouterOS 6.33.5

Дата выхода: 28 декабря 2015


  • mipsle - architecture support dropped (last fully supported version 6.32.3);
  • wireless - regular “wireless” package is now retired and replaced by "wireless-fp" and "wireless-cm2";
  • arp - show incomplete ARP entries;
  • btest - fix potential crash after btest release;
  • btest - improve UDP tx rate precision;
  • crypto - fixed kernel failure in talitos HW encryption;
  • dhcpv6-client - fix DNS address assignement;
  • dhcpv6-client - set correct parameters when rapid commit is used
  • e-mail - do not reset server address after changing configuration;
  • fastpath - fixed possible kernel failure on multi core systems;
  • fetch - added 30 second connection time-out;
  • hotspot - added missing favicon.ico in hotspot html pages;
  • kernel - general improvement for core process scheduling;
  • led - add WLAN led to RB951Ui
  • log - log link up/down events only when link actually has changed its state;
  • lte - improve support Sierra Wireless 320U;
  • lte - speed up first time connection to LTE network on SXT LTE;
  • net - apply slave config only if master config has been changed;
  • net - do not show L2MTU in VLAN compact export;
  • netwatch - make work with ping time-out more precise;
  • ppp - make PPP active print radius & !radius conditions work;
  • romon - do not accept multicast id;
  • romon - fixed crash on RoMON if fast-path was active;
  • smb - show correct interface name in SMB debug logs;
  • ssh - fix session clean-up;
  • sshd - resolved shared secret mismatch issue;
  • tile - fixed kernel failure on HW encryption;
  • webfig - didn't show zero values in CRS ingress/egress VLAN translation rules;
  • winbox - added + & - to IGMP proxy MFC;
  • winbox - added LCD menu for RB3011;
  • winbox - allow to specify traffic-monitor threshold in k & M units + specify that those are bits;
  • winbox - show fast-path per interface counters.

MikroTik RouterOS 6.33.6

Дата выхода: --


  • winbox - show properly route-distinguisher for bgp vpn4;
  • winbox - show dhcp server name in dhcp leases;
  • ppp - make CoA work correctly with address-lists;
  • winbox - fixed tab names to correspond to console;
  • winbox - show only actual switch-cpu ports in switch setting combobox;
  • winbox/webfig - fixed version column ordering in ip neighbors list;
  • webfig - fixed switch port "default vlan id" has missing "auto" value;
  • webfig - fixed firewall connection-bytes option;
  • ipsec - fixed kernel failure after underlying tunnel has been disabled/enabled;
  • romon - allow to see device identity if it is longer than 31 character;
  • fastpath - show fp counters in /interface monitor aggregate;
  • bridge firewall - fix chain check (broken since 6.33.2);
  • bridge firewall - fixed crash when jump rule points to disabled custom chain;
  • smb - fix crash when changing user which has open session;
  • address-list - properly remove unused address-lists from drop-downs;
  • fetch - fixed closure after 30 seconds;
  • capsman - fix radius accounting stop message;
  • log - reopen log file if deleted;
  • packing - fix tcp/udp checksums when simple packing is used;
  • tile - fix ipsec freeze after SA updates;
  • upnp - fixed missing in-interface option for dynamic dst-nat rules;
  • tunnel - fix complaining about loop after ~248 days;
  • vrrp - make sure that VRRP gets state on bootup;
  • ppp - fixed rare kernel crash (introduced in v6.33);
  • ppp - do not allow empty name ppp secrets;
  • ssh - fix active user accounting.
Чек-лист по настройке MikroTik
Проверьте свою конфигурацию по 28-ми пунктам