MikroTik RouterOS 6.37.x (Stable)

Подробное описание изменений в MikroTik RouterOS 6.37.x (Stable). Официальный список исправленных ошибок, добавленного функционала и прочих доработок. Дата выхода первого набора изменений – 23 сентября 2016, дата выхода последнего набора изменений – 28 ноября 2016.

Полезные материалы по MikroTik

Углубленный курс "Администрирование сетевых устройств MikroTik"
Онлайн-курс по MikroTik с дипломом государственного образца РФ. Много лабораторных работ с проверкой официальным тренером MikroTik. С нуля и до уровня MTCNA.

На Telegram-канале Mikrotik сэнсей можно получить доступ к закрытой информации от официального тренера MikroTik. Подписывайтесь

MikroTik RouterOS 6.37.3

Дата выхода: 28 ноября 2016

Изменения:

bgp - do not match all prefixes tagged with community 0:0 by routing filters;
bridge - fixed filter Ingress Priority option (broken in 6.36rc8);
chr - fixed crash on "/interface print" (introduced in 6.36.4);
chr - fixed crash on "/system reboot" and "/system shutdown";
crs226 - fixed sfp-sfpplus1 link re-negotiation (broken in 6.37rc28/v6.37.1);
disk - fixed issue when disk was renamed after reboot on devices with flash disks;
dns - do not resolve incorrect addresses after changes made in static dns entries;
dns - improved static dns entry add speed when regexp is being used;
dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112598);
firewall - fixed filter rule "limit" parameter by making it visible again;
firewall - fixed interface slave state recognition (broken in 6.37.2);
firewall - fixed timeout option on address lists with domain name;
log - ignore email topic if action is email;
mipsbe - improved memory allocation on devices with nand when file transfer and tcp traffic processing is on progress;
route - fixed memory leak when route cache is disabled;
tile - fixed rare kernel failure when IPv6 neighbor discovery packet is received;
traceroute - fixed crash when too many sessions are active;
tunnel - allow to force mtu value when actual-mtu is already the same;
winbox - recognize properly tcp in traffic-generator packet-template header type;
winbox - show HT MCS tab if 2GHz-G/N band is used.

MikroTik RouterOS 6.37.2

Дата выхода: 8 ноября 2016

Важные примечания:

Dude client auto-upgrade to this version will not work. Use http://www.mikrotik.com/download_for_6.37.2_client_download/install.

It will be fixed in soon to be released v6.37.3

Важные изменения:

ethernet - optimized packet processing on low load when irq re-balance is not necessary;
fastpath - let one packet per second through slow path to properly update connection timeouts;
queues - significantly improved hashing algorithm in dynamic simple queue setups (fixes CPU load spikes on queue removal).

Изменения:

arm - improved watchdog reliability;
bonding - fixed 802.3ad load balancing over routed VLANs with fastpath enabled;
bonding - fixed mac address selection after upgrade;
crs - fixed port mirroring halt after L2MTU change;
dhcp - do not allow to create dhcp-server on slave interface;
ethernet - fixed interface speed reporting for x86 in log after reboot or if "disable-running-check=yes";
ethernet - fixed potential loopprotect crash;
export - fixed "/interface ethernet switch export" on some boards;
export - fixed CRS switch egress-vlan-tag export;
fastpath - fixed kernel failure when fastpath traffic goes into loop;
fastpath - improved connection tracking timeout updates;
firewall - do not allow to increase/decrease ttl and hop-limit by 0;
firewall - fixed "connection-state" value disappearance in rules that were created before v6.22;
firewall - fixed compact export (introduced in 6.37rc14);
firewall - improved "time" option (ranges like 22h-10h now are acceptable);
hotspot - fixed nat rule dst-port by making it visible again for Walled Garden ip return rules;
ipsec - changed logging topic from error to debug for ph2 transform mismatch messages;
ipv6 - increased default max-neighbor-entries value to 8192, same as ipv4;
mmips - improved watchdog reliability;
package - show minimal supported RouterOS version under "/system resource" menu if it is specified;
queue - fixed rare crash on statistic gathering in "/queue tree";
queue - improved "time" option (ranges like 22h-10h are now usable);
rb2011 - fixed crash on l2mtu changes;
sms - fixed crash after modem has failed to start;
ssl - fixed potential memory leak ( when using dude for example);
torch - fixed aggregate statistics appearance;
traffic-flow - fixed dst-port reporting if connection is not maintained by connection tracking;
userman - fixed memory leak on user limitation calculations;
winbox - added led settings menu;
winbox - fixed missing switch menu for mmips devices.

MikroTik RouterOS 6.37.1

Дата выхода: 30 сентября 2016

Важные изменения:

package - fixed wireless package status after upgrade to 6.37 (extra reboot after upgrade is necessary);
ssl - fixed peer address/dns verification from certificate (affects sstp, fetch, capsman);
winbox - now Winbox 3.6 is the minimum version that can connect to RouterOS.

Изменения:

console - fixed typo in web-proxy (passthru to passhtrough);
dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112599);
export - do not show mac-address in export when it is not necessary;
firewall - fixed dynamic dummy firewall rules appearance in raw tables;
hotspot - fixed nat rule dst-port by making it visible again;
led - fixed default led settings for wAP2nDr2;
snmp - do not allow to execute script if user does not have write permission;
tile - do not reboot device after watchdog disable/enable;
userman - always re-fetch table data when switching between different menus;
userman - fixed timezone adjustment in reports;
webfig - fixed channel selection in check-for-update menu in Firefox;
winbox - added loop-protect settings;
winbox - added passthrough state to web-proxy;
winbox - allow to unset http-proxy field for sstp client;
winbox - do not show health menu on RB951-2n;
winbox - fixed typo in dhcpv6 relay (DCHP to DHCP);
winbox - show address expiration time in dhcp client list;
wireless - show DFS flag in country-info command output.

MikroTik RouterOS 6.37

Дата выхода: 23 сентября 2016

Важные примечания:

There will be only one "wireless" package starting from RouterOS v6.37.
DFS configuration in RouterOS has been redesigned, now device looks at specified country settings (/interface wireless info country-info), and applies corresponding DFS mode for each frequency range automatically, making dfs-mode setting unnecessary.
Please, check that your frequencies work with corresponding DFS settings before upgrade.

Важные изменения:

console - dfs-mode setting does not exist any more and all scripts with such setting will not be executed;
dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=110424);
dude - from now on dude will use winbox port and it will be changed automatically both in client loader and agent configuration;
ethernet - added new loop-protect feature for ethernet, vlan, eoip, eoipv6 interfaces, http://wiki.mikrotik.com/wiki/Manual:Loop_Protect ;
wireless - "wireless" package included in bundle "routeros" package;
wireless - "wireless-cm2" discontinued;
wireless - "wireless-rep" renamed to "wireless";
wireless - DFS option is removed, corresponding DFS mode for each frequency range applies automatically.

Изменения:

capsman - fixed kernel crash on cap while changing client-to-client forwarding;
capsman - report radio-name in registration table;
certificate - do not allow to remove certificate template while signing certificate;
console - hotspot setup show wrong certificate name;
defconf - fixed default configuration restore if virtual wireless interface were present;
defconf - fixed default configuration when wireless package is used;
defconf - using caps button now forces all wireless interfaces in caps mode;
dhcpv6 - improved interface status tracking;
dhcpv6 - reworked DHCP-PD server interface and route management;
dhcpv6 - update DUID when system-id changes (solves problem when cloned VM retains the same DUID);
dns - fixed crash when using regexp static dns entries;
ethernet - added support for LAN9514 ethernet dongle;
ethernet - allow to force mtu value when actual-mtu is already the same;
ethernet - fixed loop-protect on bridged ports;
ethernet - fixed never ending loop in CDP packet processing;
ethernet - fixed rare kernel failure on non-switch ethernet reset;
ethernet - rb44ge now have disabled-running-check=no by default;
firewall - added additional matchers for firewall raw rules;
firewall - fixed time based rules on time/timezone changes (again);
gps - always check NMEA checksum if available;
health - do not show psu and fan information for passive cooling devices;
hotspot - show comments from user menu also in active menu;
ipsec - fixed crash with enabled fragmentation;
ipsec - fixed dynamic policy not deleted on disconnect for nat-t peers;
ipsec - fixed fragmentation use negotiation;
ipsec - fixed kernel crash when sha512 was used;
ipv6 - fixed RA and RS processing on new interfaces after many interfaces have lost link during prolonged operation;
ipv6 - improved system responsiveness when ipv6 routes are frequently modified;
ipv6 - show multiple neighbors with the same address;
kvm - fix add/remove of disabled interfaces;
kvm - fixed guest crashing when using mtu bigger than 1504;
l2tp - fixed kernel failure when fastpath handles l2tp packets;
leds - added option to disable all leds on RBcAP2n;
lte - added ability to send/receive sms using '/tool sms';
lte - added dlink dwm-157 D, dwm-222 support;
lte - added huawei me909s variant;
lte - added initial deregistration only for bandrich modems;
lte - added logging for usb config switching;
lte - added Pantech UML295, Vodafone K4201-Z, ZTE MF823/MF831 support;
lte - added rndis for ZTE MF8xx;
lte - added support for more dlink dwm-222 configurations;
lte - added switch for Huawei K5160;
lte - added zte K5008-Z back;
lte - adjusted usb config for dlink dwm-157 D;
lte - fixed at chat condition storage;
lte - fixed band setting for sxt lte;
lte - fixed band unsetting;
lte - fixed default channels for dlink dwm-157;
lte - fixed ip activation when CREG (circuit switched) state remains in not registered state;
lte - fixed setting correct lte band for sxt lte;
lte - process initial state change to deregistred, when lockup occurs;
lte - reset if sms storage set fails;
mpls - fixed memory leak;
mpls - fixed vpls throughput issues caused by out-of-order packets;
ntp - fixed ntp server when local-clock used (like usb gps module);
partitions - added ability to add comments;
ppp - use default-route-distance when adding ipv6 default route;
ppp,lte - pin is now converted to string argument;
pppoe - fixed disconnects by idle timeout when fastpath is used;
quickset - added 2GHz-g/n band support;
quickset - fixed guest reporting in "home ap dual" mode;
quickset - fixed wireless frequency fields in "home ap dual" mode;
rb3011 - fixed rare occasions when router would hang while loading kernel;
routing - improved kernel performance in setups with large routing tables;
sfp - enabled eeprom printout in /interface ethernet monitor;
sfp - fixed initial eeprom reading on CCR1036-8G-2S+ and CCR1072-1G-8S+;
sfp - removed "sfp-rate-select" as command was not relevant to currently supported hardware;
sms - moved incorrectly logged message from async to gsm topic;
sms - report error when unsupported modem is being used;
snmp - added script table which executes script and returns it's output on get request;
snmp - require write permitions for script run table access;
snmp - skip forbidden oids on getnext completion;
sstp - allow to specify proxy by dns name;
sstp - now supports TLS_ECDHE algorithms;
supout - fixed bug that could cause enormous size supout.rif files;
supout - improved crash report generation for tile architecture;
switch - added comment field for CRS switch VLANs;
traffic-flow - allow ipv6 src address to be optional;
traffic-flow - fixed IPFIX packet timestamp;
traffic-flow - fixed IPFIX wrong flow sequence;
trafficgen - add per stream packet count setting;
trafficgen - show out-of-order packet counters in stats printouts;
tunnel - fixed communication via tunnel to router itself if fastpath was active;
tunnel - fixed ipv6 link-local address adding for gre;
tunnel - increased minimal MRRU to 1500 for PPP interfaces;
tunnel - ipv6 link-local address is now generated from tunnel local-address;
usb - added support for SMSC95XX USB Ethernet dongle on mipsbe;
usermanager - fixed rare crash on paypal payment;
users - fixed script policy checking against user policies when running scripts;
webfig - do not crash if radius server does not give out encryption keys;
webfig - fixed certificate signing;
winbox - added auto refresh for BFD neighbors;
winbox - added comment field support for switch vlan menu;
winbox - added default-authentication parameter for wireless station modes;
winbox - added src-address field for traffic-flow target;
winbox - adjust on-event field dynamically depending on window size;
winbox - adjusted allowed values for http-proxy field;
winbox - disabled MRRU by default for PPP interfaces;
winbox - display actual-mtu for tunnels in interfaces window;
winbox - fixed disconnect when no windows were opened for a while in unsecure mode;
winbox - fixed multiline read only fields not displaying new line characters;
winbox - fixed raw firewall showing jump targets from filter chains;
winbox - hide ethernet flow control settings for interfaces which does not support them;
winbox - removed health menu from devices that do not support it;
winbox - removed L2MTU field for PPP interfaces;
winbox - removed L2MTU field from PPP server binding settings;
winbox - removed unset button for L2MTU field;
winbox - show firmware-type in routerboard window;
wireless - display DFS flag in country info;
wireless - improved driver support for RB953, hAP ac, wAP ac;
wireless - send deauth to data frames in scan mode.
wireless - updated brazil country settings.

Полезные материалы по MikroTik

Углубленный курс "Администрирование сетевых устройств MikroTik"
Онлайн-курс по MikroTik с дипломом государственного образца РФ. Много лабораторных работ с проверкой официальным тренером MikroTik. С нуля и до уровня MTCNA.

На Telegram-канале Mikrotik сэнсей можно получить доступ к закрытой информации от официального тренера MikroTik. Подписывайтесь