MikroTik RouterOS MIPSBE Firmware 6.43 RC 29

MAJOR CHANGES IN v6.43:

- api - changed authentication process ;
- backup - do not encrypt backup file unless password is provided;
- btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
- cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
- mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
- radius - use MS-CHAPv2 for "login" service authentication;
- romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
- webfig - improved authentication process;
- winbox - improved authentication process excluding man-in-the-middle possibility (Winbox v3.14 required);

Changes in this release:

- dhcp - reduced resource usage of DHCP services;
- ipsec - improved reliability on IPsec hardware encryption for RB1100Dx4;
- led - added "dark-mode" functionality for SXTsq 5 ac devices;
- led - use routers uptime as a starting point when turning off LEDs if option was not enabled on boot;
- sfp - fixed DDM data with SFP+ modules on CRS328-4C-20S-4S+ (introduced in v6.43rc10);
- sms - do not require "port" and "interface" parameters when sending SMS if already present in configuration;
- swos - implemented "/system swos" menu that allows to upgrade, reset, save or load configuration and change address for dual-boot CRS devices (CLI only);
- w60g - improved maximum link distance;
- w60g - improved RAM memoy allocation processes;
- wireless - improved Nv2 reliability on ARM devices;

Other changes since v6.42.3:

- backup - generate proper file name when router identity is longer than 32 symbols;
- bridge - add dynamic CAP interface to tagged ports if "vlan-mode=use-tag" is enabled;
- bridge - added ingress filtering options to bridge interface;
- bridge - added initial Q-in-Q support;
- bridge - allow to make changes for bridge port when it is interface list;
- bridge - fixed bridge hw-offloading on MMIPS devices (introduced in v6.43rc10);
- bridge - fixed dynamic VLAN table entries when using ingress filtering;
- bridge - fixed FastPath for bridge master interfaces (introduced in v6.42);
- capsman - allow to change "radio-name" (CLI only);
- capsman - increase timeout for the CAP to CAPsMAN communication;
- certificate - added "expires-after" parameter;
- certificate - fixed "add-scep" template existence check when signing certificate;
- chr - added checksum offload support for Hyper-V installations;
- chr - added large send offload support for Hyper-V installations;
- chr - added multiqueue support on Xen installations;
- chr - added support for multiqueue feature on "virtio-net";
- chr - added virtual Receive Side Scaling support for Hyper-V installations (might require more RAM assigned than in previous versions);
- chr - by default enable link state tracking for virtual drivers with "/interface ethernet disable-running-check=no";
- chr - do not show IRQ entries from removed devices;
- chr - fixed adding MSTI entries;
- chr - fixed boot on hosts older than Windows Server 2012 when running CHR on Hyper-V;
- chr - fixed interface name assign process when running CHR on Hyper-V;
- chr - fixed MTU changing process when running CHR on Hyper-V;
- chr - fixed NIC hotplug for "virtio-net";
- chr - fixed various network hang scenarios when running CHR on Hyper-V;
- chr - improved boot time for Hyper-V installations;
- chr - provide part of network interface GUID at the beginning of "bindstr2" value when running CHR on Hyper-V;
- console - fixed script permissions if script is executed by other RouterOS service;
- crs3xx - added initial Q-in-Q hardware offloading support (CLI only);
- crs3xx - fixed ACL rate rules (introduced in v6.41rc27);
- crs3xx - fixed packet forwarding on SFP+ interfaces (introduced in v6.43rc11);
- crs3xx - fixed VLAN filtering when there is no tagged interface specified;
- defconf - fixed missing bridge ports after configuration reset;
- dhcp - added dynamic IPv4/IPv6 "dual-stack" simple queue support, based on client's MAC address;
- dhcp - fixed DHCP server stuck in invalid state;
- dhcpv4-client - fixed DHCP client that was stuck on invalid state;
- dhcpv4-server - added "allow-dual-stack-queue" implementation (CLI only);
- dhcpv4-server - do not allow override lease "always-broadcast" value based on offer type;
- dhcpv4-server - fixed DHCP server functionality (introduced in v6.43rc);
- dhcpv4-server - fixed DHCP server that was stuck on invalid state;
- dhcpv4-server - improved performance when "rate-limit" and/or "address-list" setting is present;
- dhcpv6-client - added missing "Server identifier" parameter in release message;
- dhcpv6-server - added "allow-dual-stack-queue" implementation (CLI only);
- dhcpv6-server - added initial dynamic simple queue support;
- filesystem - improved software crash handling on devices with FLASH type memory;
- health - changed "PSU-Voltage" to "PSU-State" for CRS328-4C-20S-4S+;
- health - fixed incorrect PSU index for CRS328-4C-20S-4S+;
- ike1 - purge both SAs when timer expires;
- interface - improved reliability on dynamic interface handling;
- ipsec - added "responder" parameter for "mode-config" to allow multiple initiator configurations;
- ipsec - added "src-address-list" parameter for "mode-config" that generates dynamic "src-nat" rule (CLI only);
- ipsec - added warning messages for incorrect peer configuration;
- ipsec - do not allow removal of "proposal" and "mode-config" entries that are in use;
- ipsec - improved reliability on generated policy addition when IKEv1 or IKEv2 used;
- ipsec - install all DNS server addresses provided by "mode-config" server;
- ipsec - separate phase1 proposal configuration from peer menu;
- ipsec - use monotonic timer for SA lifetime check;
- kidcontrol - added dynamic accept firewall rules in order to allow limit bandwidth when FastTrack is enabled;
- kidcontrol - allow to edit discovered devices;
- kidcontrol - fixed dynamically created firewall rules order;
- led - added "dark-mode" functionality for hEX S devices;
- led - fixed CCR1016-12S-1S+ LED behaviour after Netinstall (introduced in v6.41rc58);
- led - improved w60g alignment trigger;
- log - show interface name on OSPF "different MTU" info log messages;
- lte - added additional ID support for SIM7600 modem;
- lte - added extended LTE signal info for SIM7600 modules;
- lte - added extended signal information for Quectel LTE EC25 and EP06 modem;
- lte - added ICCID reading for info command R11e-LTE and R11e-LTE-US (CLI only);
- lte - added roaming status reading for info command (CLI only);
- lte - added support for Novatel USB730LN modem with new ID;
- lte - added support for Quanta 1k6e modem;
- lte - allow to execute concurrent internal AT commands;
- lte - allow to use multiple PLS modems at the same time;
- lte - do not allow to remove default APN profile;
- lte - do not allow to send "at-chat" commands for configless modems;
- lte - expose GPS channel for PLS modems;
- lte - fixed SIM7600 registration info;
- lte - improved modem event processing;
- lte - improved r11e-LTE and r11e-LTE-US dialling process;
- lte - improved r11e-LTE configuration exchange process;
- lte - improved reading of SMS message after entering running state;
- lte - improved readings of info command results for the SXT LTE;
- lte - improved stability of USB LTE interface detection process;
- lte - renamed LTE scan tool field "scan-code" to "mcc-mnc" (CLI only);
- lte - use "/32" address for the Passthrough feature when R11e-LTE module is used;
- lte - use alphanumeric operator format in info command;
- ntp - allow to specify link-local address for NTP server;
- ppp - added support for additional ID for E3531 modem;
- ppp - fixed "hunged up" grammar to "hung up" within PPP log messages;
- ppp - show comments from "/ppp secrets" menu within "/ppp active" menu when client is connected;
- quickset - added missing wireless "channel-width" settings;
- quickset - added support for "5ghz-a/n" band when CPE mode is used;
- quickset - recognize 160 MHz channel as HomeAP mode;
- romon - fixed RoMON services becoming unavailable after disabled once during active scanning process;
- routerboard - allow to fill up to half of the RAM memory with files on devices with FLASH storage;
- routerboard - fixed "protected-routerboot" feature (introduced in v6.42);
- smb - fixed valid request handling when additional options are used;
- snmp - added "rssi" and "tx-sector-info" value support for w60g type interfaces;
- snmp - added remote CAP count OID for CAPsMAN;
- snmp - fixed readings for CAPsMAN slave interfaces;
- ssh - disconnect all active connections when router gets rebooted or turned off;
- supout - added "partitions" section to supout file;
- switch - added support for port isolation by switch chip;
- tr069-client - fixed setting of "DeviceInfo.ProvisioningCode" parameter;
- usb - fixed power-reset for hAP ac^2 devices;
- usb - properly detect USB 3.0 flash on RBM33G when jumper is removed;
- user - all passwords are now hashed and encrypted, plaintext passwords are kept for downgrade (will be removed in later upgrades);
- userman - improved unique username generation process when adding batch of users;
- vrrp - improved reliability on VRRP interface configured as a bridge port when "use-ip-firewall" is enabled;
- w60g - added 4th 802.11ad channel (CLI only);
- w60g - added distance measurement (CLI only);
- w60g - general stability and performance improvements;
- w60g - improved link stability;
- w60g - improved maximal achievable distance;
- w60g - removed distance lock for wAP 60G devices;
- webfig - properly display time interval within Kid Control menu;
- webfig - properly show NTP clients "last-adjustment" value;
- winbox - added "poe-fault" LED trigger;
- winbox - added "secondary-channel" setting to wireless interface if 80 MHz mode is selected;
- winbox - added bridge Fast Forward statistics counters;
- winbox - added missing "dscp" and "clamp-tcp-mss" settings to IPv6 tunnels;
- winbox - allow to specify full URL in SCEP certificate signing process;
- winbox - by default specify keepalive timeout value for tunnel type interfaces;
- winbox - fixed arrow key handling within table filter fields;
- winbox - fixed bridge port MAC learning parameter values;
- winbox - properly close session when uploading multiple files to the router at the same time;
- winbox - removed duplicate "20/40/80MHz" value from "channel-width" setting options;
- winbox - show "scep-url" for certificates;
- winbox - show "Switch" menu on hAP ac^2 devices;
- winbox - show "System/Health" only on boards that have health monitoring;
- winbox - show firmware upgrade message at the bottom of "System/RouterBOARD" menu;
- winbox - show HT MCS tab when "5ghz-n/ac" band is used;
- wireless - added option for RADIUS "called-station-id" format selection;
- wireless - do not disconnect clients when WDS master connects with MAC address "00:00:00:00:00:00";
- wireless - fixed wireless interface lockup after period of inactivity;
- wireless - improved Nv2 stability for 802.11n interfaces on RB953, hAP ac and wAP ac devices;
- wireless - updated "germany 5.8 ap" and "germany 5.8 fixed p-p" regulatory domain information;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.