MikroTik RouterOS TILE Firmware 6.47 RC 35

What's new in 6.47beta35:

- The Dude server must be updated to monitor v6.47beta30+ RouterOS type devices.
- The Dude client must be manually upgraded after upgrading The Dude server.
- Make sure LTE APN Profile name does not match any of the DHCP server's names if LTE passthrough is used.

MAJOR CHANGES IN v6.47:

- socks - added support for SOCKS5 (RFC 1928);

Changes in this release:

- socks - added support for SOCKS5 (RFC 1928);
- chr - fixed graceful shutdown execution on Hyper-V (introduced in v6.46);
- crs3xx - fixed frame forwarding after disabling/enabling bridge hardware offloading for CRS354-48G-4S+2Q+ device;
- crs3xx - improved SFP+ DAC cable initialization for CRS326-24S+2Q+ device;
- dns - added support for exclusive dynamic DNS server usage from IPsec;
- health - fixed maximum SFP temperature reading under '/system health' menu;
- ipsec - added "use-responder-dns" parameter support (CLI only);
- ssh - added support for RSA keys with SHA256 hash (RFC8332);
- supout - improved PoE-out information reporting;
- system - improved system stability when receiving/sending TCP traffic on multicore devices;
- traffic-flow - added "postDestinationMacAddress" parameter support for IPFIX and Netflow v9;
- webfig - updated icon design;
- winbox - updated icon design;
- wireless - allow using "russia4" regulatory domain on RU locked devices;

Other changes since v6.46.3:

- arm - improved watchdog and kernel panic reporting in log after reboots on RB3011 and IPQ4018/IPQ4019 devices ("/system routerboard upgrade" required);
- bonding - improved slave interface MAC address handling;
- bonding - prefer primary slave MAC address for bonding interface;
- branding - allow forcing configuration script as default configuration (new branding packet required);
- branding - fixed "company-url" and "router-default-name" survival after system upgrade;
- branding - fixed WEB HTML page survival after system upgrade;
- bridge - added logging message when a host MAC address is learned on a different bridge port;
- certificate - fixed certificate verification when flushing CRL's;
- crs3xx - correctly remove switch rules on CRS317-1G-16S+ and CRS309-1G-8S+ devices;
- crs3xx - fixed "ingress-rate" property on CRS309-1G-8S+, CRS312-4C+8XG, CRS326-24S+2Q+ devices;
- crs3xx - fixed QSFP+ interface linking for CRS326-24S+2Q+ device (introduced in v6.47beta19);
- crs3xx - improved switch host table updating;
- defconf - added welcome note with common first steps for new users;
- defconf - fixed default configuration initialization if power loss occurred during the process;
- defconf - fixed "no-defaults=yes" applying default configuration (introduced in v6.47beta);
- dhcpv6-client - improved error logging when when renewed address differs;
- discovery - do not send CDP and LLDP packets on interfaces that does not have MAC address;
- discovery - do not send discovery packets on inactive bonding slave interfaces;
- discovery - do not send discovery packets on interfaces that are blocked by STP;
- disk - improved recently created file survival after reboots;
- dot1x - added hex value support for RADIUS switch rules;
- dot1x - added "radius-mac-format" parameter (CLI only);
- dot1x - added range "dst-port" support for RADIUS switch rules;
- dot1x - added support for lower case "mac-auth" RADIUS formats;
- dot1x - fixed dynamically created switch rule removal when client disconnects;
- dot1x - fixed port blocking when interface changes state from disabled to enabled;
- dot1x - fixed "reject-vlan-id" value range;
- dot1x - improved debug logging output to "dot1x" topic;
- dot1x - improved value validation for dynamically created switch rules;
- dude - updated The Dude to use new style authentication method;
- fetch - fixed "User-Agent" usage if provided by "homepage";
- health - added "gauges" submenu with SNMP OID reporting;
- ike1 - added support for "UNITY_DEF_DOMAIN" and "UNITY_SPLITDNS_NAME" payload attributes;
- ike2 - added support for "INTERNAL_DNS_DOMAIN" payload attribute;
- ike2 - fixed DHCP Inform package handling when received on PPPoE interface;
- ipsec - added "split-dns" parameter support for mode configuration (CLI only);
- ipsec - fixed minor spelling mistake in logs;
- ipsec - improved IPsec service stability when receiving bogus packets;
- lte - added interface name prefix for logging events;
- lte - added "phy-cellid" value support for LTE-US;
- lte - added support for multiple passthrough APN configuration;
- lte - do not allow running "scan" on R11e-4G;
- lte - do not allow using empty APN Profile names;
- lte - fixed "band" value setting when configuration is reset on R11e-4G;
- lte - fixed multiple APN reactivation after deactivation by operator;
- lte - improved all APN session activation after disconnect on R11e-LTE;
- lte - show "phy-cellid" value only in LTE mode;
- lte - use APN from network when blank APN used on R11e-4G;
- netinstall - removed "Flashfig" from Netinstall;
- netinstall - removed "Make Floppy" from Netinstall;
- netinstall - signed netinstall.exe with Digital Signature;
- quickset - removed "LTE band" setting from Quick Set;
- quickset - show "Antenna Gain" setting on devices without built-in antennas;
- quickset - use "station-wds" mode when connecting to AP with RouterOS flag;
- routing - improved IGMP-Proxy service stability when receiving bogus packets;
- sniffer - allow setting port for "streaming-server";
- snmp - added "dot1qTpFdbTable" OID reporting for Q-BRIDGE-MIB;
- snmp - fixed "dot1dBasePort" index offset for BRIDGE-MIB;
- snmp - fixed "routeros-version" value returning from registration table;
- snmp - fixed UPS battery voltage value scaling;
- snmp - improved OID policy checking and error reporting on "set" command;
- snmp - improved stability when polling MAC address related OID;
- supout - added "dot1x" section to supout files;
- supout - improved UPS information reporting;
- system - correctly handle Generic Receive Offloading (GRO) for MPLS traffic;
- telnet - improved telnet compatibility with other client implementations;
- tr069-client - removed warning log message when not using HTTPS;
- traceroute - improved stability when invalid packet is received;
- traffic-flow - added "postDestinationMacAddress" parameter support for IPFIX and Netflow v9;
- upgrade - fixed space handling in package file names;
- ups - improved compatibility with APC Smart UPS 1000 and 1500;
- user-manager - fixed signup enabling (introduced in v6.46);
- w60g - improved stability after multiple disconnections;
- w60g - use "arp" and "mtu" parameters from master interface when creating a new station;
- webfig - added default configuration confirmation window to WebFig;
- webfig - do not show WebFig menu when opening 'Check For Updates' in Quick Set;
- winbox - added "auto-erase" option to "Tool/SMS" menu;
- winbox - added support for inline bar graphs for LTE signal values;
- winbox - completely removed old style authentication method;
- winbox - fixed "invalid" flag presence under "System/Certificates/CRL" menu;
- winbox - removed duplicate "join-eui", "dev-eui", "counter", "chain", "size" and "payload" parameters under "Lora/Traffic";
- wireless - improved compatibility for "ETSI" wireless country profile;
- www - added "tls-version" parameter in "IP->Services" menu (CLI only);

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.