MikroTik RouterOS X86 Firmware 6.48 RC 40

What's new in 6.48beta40:

- arm64 - improved reboot reason reporting in log;
- bridge - added minor fixes and improvements for IGMP snooping with HW offloading;
- bridge - fixed link-local multicast forwarding when IGMP snooping and HW offloading is enabled;
- bridge - fixed MDB entry removal when using bridge port "fast-leave" property;
- conntrack - automatically reduce connection tracking timeouts when table is full;
- console - allow "once" parameter for bonding monitoring;
- crs3xx - added initial Bridge Port Extender support (CLI only);
- crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only);
- crs3xx - added switch-cpu port VLAN filtering (switch-cpu port is now mapped with bridge interface VLAN membership when vlan-filtering is enabled);
- crs3xx - fixed IGMP snooping for CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - fixed switch "copy-to-cpu" property for CRS305, CRS318, CRS326-24G-2S+, CRS328 devices;
- detnet - fixed malformed dummy DHCP User Class option;
- detnet - use MAC address from bridge interface instead of slave port;
- dhcpv4-server - improved "client-id" value parsing;
- ipsec - refresh peer's DNS only when phase 1 is down;
- leds - fixed LED type setting;
- smb - fixed possible memory leak;
- sms - fixed SMS sending when both "interface" and "smsc" parameters are specified;
- snmp - added information from IPsec "active-peers" menu to MIKROTIK-MIB;
- snmp - fixed "/tool snmp-get" functionality (introduced in v 6.46beta43);
- snmp - fixed value types for "dot1qPvid";
- supout - added bonding interface monitor information;
- switch - fixed Ethernet padding for small packets;
- tr069-client - allow passing LTE firmware update URL as XML;
- user-manager - do not allow creating limitation that crosses midnight;
- user-manager - updated PayPal's root certificate authorities;
- wireless - improved WPS process stability;

Other changes since v6.47.3:

- arm - added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices;
- arm - improved watchdog and kernel panic reporting in log after reboots on IPQ4018/IPQ4019 devices;
- bonding - added LACP monitoring (CLI only);
- bonding - removed "sys-id" and "sys-priority" from monitor-slaves command;
- bridge - added warning message when port is disabled by the BPDU guard;
- bridge - allow to exclude interfaces from extended ports (CLI only);
- bridge - correctly remove dynamic VLAN assignment for bridge ports;
- bridge - fixed BPDU guard port disable/enable on HW offloaded interfaces;
- bridge - fixed dynamic VLAN assignment when changing port "frame-type" property (introduced in v6.46);
- bridge - fixed dynamic VLAN assignment when changing port to tagged VLAN member;
- bridge - fixed local MAC address removal from host table when deleting bridge interface;
- bridge - fixed multicast table printing;
- bridge - fixed packet forwarding for CAP and BCP controlled interfaces (introduced in v6.48beta12);
- bridge - fixed STP alternate and backup port states for devices with switch chip (introduced in v6.47);
- bridge - improved BPDU guard logging;
- bridge - increased multicast table size to 4K entries;
- bridge - show error when switch do not support controlling bridge or port extension (CLI only);
- bridge - show "H" flag for extended bridge ports;
- certificate - clear challenge password on renew;
- chr - improved interface loading on startup on XEN;
- chr - improved system stability when changing flow control settings on e1000;
- crs3xx - added initial Bridge Port Extender support (CLI only);
- crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only);
- crs3xx - fixed "custom-drop-packet" and "not-learned" switch stats for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - fixed duplicate host entries when creating static switch hosts;
- crs3xx - fixed "mirror-source" property on switch port disable for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
- crs3xx - fixed port isolation for "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
- crs3xx - fixed port isolation removal for "switch-cpu" port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - fixed "storm-rate" traffic limiting for switch-cpu port on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - fixed switch "not-learned" stats for CRS305, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, CRS318 devices;
- crs3xx - fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
- crs3xx - fixed VLAN tagged packet forwarding on "switch-cpu" port for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices (introduced in v6.48beta12);
- defconf - improved CAP interface bridging;
- defconf - improved default configuration generation on devices with non-default wireless interface names;
- defconf - improved default configuration generation on devices without wireless package installed;
- dhcpv6-server - added ability to generate binding on first request;
- discovery - added "lldp-med-net-policy-vlan" property for assigning VLAN ID (CLI only);
- discovery - allow choosing which discovery protocol is used (CLI only);
- discovery - fixed discovery on mesh ports;
- discovery - fixed discovery packet sending on newly bridged port with "protocol-mode=none";
- discovery - fixed discovery when enabled only on master port;
- discovery - send the same "Chassis ID" on all interfaces for LLDP packets;
- discovery - use interface MAC address when sending MNDP from slave port;
- dns - added IPv6 support for DoH;
- dns - do not use type "A" for static entries with unspecified type;
- dns - fixed listening for DNS queries when only dynamic static entries exist (introduced in v6.47);
- export - fixed RouterBOARD USB "type" parameter export;
- fetch - fixed "src-address" usage for SFTP;
- filesystem - fixed repartition on non-first partition;
- filesystem - fixed repartition on RB4011 series devices;
- filesystem - improved long-term filesystem stability and data integrity;
- gps - fixed "init-channel" release when not used;
- health - changed PSU state parameter type to read-only;
- health - removed unused "heater-control" and "heater-threshold" parameters;
- hotspot - added support for captive portal advertising using DHCP (RFC7710);
- hotspot - added "vlan-id" parameter support for hosts and HTML pages;
- hotspot - ignore packets from host while MAC authentication is in progress;
- hotspot - improved management service stability when receiving bogus packets;
- ike1 - allow using "my-id" parameter with XAuth;
- ike1 - fixed policy update with and without mode configuration;
- ike1 - rekey phase 1 as responder for Windows initiators;
- ike2 - added "prf-algorithm" support for phase 1;
- ike2 - improved child SA rekeying process;
- ipsec - added SHA384 hash algorithm support for phase 1 (CLI only);
- ipsec - do not kill connection when peer's "name" or "comment" is changed;
- ipsec - fixed client certificate usage when certificate is renewed with SCEP;
- ipsec - fixed multiple warning message display for peers;
- ipsec - inactivate peer's policy on disconnect;
- ipsec - refresh peer's DNS only when phase 1 is down;
- kidcontrol - allow creating static device entries without assigned user;
- kidcontrol - fixed "time-unlimited-rate" to engage in correct time;
- lora - expose "joinEui" un "devEui" values in the log;
- lte - added "age" column and "max-age" parameter to "cell-monitor" (CLI only);
- lte - added "comment" parameter for APN profiles;
- lte - added support for Alcatel IK41VE1;
- ospf - optimized LSA printing for smaller message sizes;
- ppp - added "ipv6-routes" parameter to "secrets" menu;
- ppp - added support for "Framed-IPv6-Route" RADIUS attribute;
- route - improved stability when 6to4 interface is configured with disabled IPv6 package;
- snmp - fixed value types for "dot1dStp";
- ssh - fixed returned output saving to file when "output-to-file" parameter is used;
- ssh - skip interactive authentication when not running in interactive mode;
- system - replace "3" in superscript to "^3" on RBD53GR devices;
- tr069-client - added additional wireless registration table parameters;
- tr069-client - added LTE model and revision parameters;
- tr069-client - added wireless "noise-floor" and "overall-tx-ccq" information parameters;
- tr069-client - added "X_MIKROTIK_MimoRSRP" parameter for LTE RSRP value reporting;
- tr069-client - allow passing LTE firmware update URL as XML;
- tr069-client - send correct "ConnectionRequestURL" when using IPv6;
- traffic-flow - added NAT event logging support for IPFIX;
- traffic-flow - added "sys-init-time" parameter support;
- webfig - fixed default value presence when creating new entries under "IP->Kid Control";
- winbox - allow performing "USB Power Reset" on "0" bus on RBM33G;
- winbox - fixed "IP->Kid Control->Devices" table automatic refreshing;
- winbox - fixed minor typo in "Users" menu;
- winbox - fixed "receive-errors" setting persistence under "Wireless/Wireless Sniffer/Settings" menu;
- winbox - fixed "tls-version" parameter setting under "IP/Services" menu;
- winbox - use health values reported by gauges for "System/Health" menu;
- wireless - added support for U-NII-2 for wAP ac;
- wireless - create "connect-list" rule when address specified for "setup-repeater";
- wireless - updated "canada" regulatory domain information;
- wireless - updated "no_country_set" regulatory domain information;
- wireless - updated "united states" regulatory domain information; 

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.