MikroTik RouterOS ARM Firmware 6.46.7

Important note!!!

- The Dude server must be updated to monitor v6.46.4+ and v6.47beta30+ RouterOS type devices.
- The Dude client must be manually upgraded after upgrading The Dude server.
- The Dude requires "winbox" policy instead of "dude" to monitor v6.46.4+ and v6.47beta30+ RouterOS type devices.

Changes since 6.46.6:

- arm - improved stability when forcing 25G speed on unsupported interface;
- bridge - fixed host table update on SNMP query;
- bridge - fixed STP alternate and backup port states for devices with switch chip;
- crs3xx - fixed hardware offloaded MPLS forwarding when using bonding interfaces;
- crs3xx - fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+;
- crs3xx - fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices;
- crs3xx - improved 10G interface initialization on CRS312 devices;
- crs3xx - improved Ethernet port group traffic forwarding on CRS354 devices;
- crs3xx - improved system stability when using hardware offloaded MPLS;
- defconf - fixed default configuration loading on RBmAPL-2nD;
- dhcpv6-server - disallow changing binding's "prefix-pool";
- dhcpv6-server - do not require "server" parameter for bindings;
- discovery - do not send discovery packets on inactive bonding slave interfaces;
- discovery - do not send discovery packets on interfaces that are blocked by STP;
- dot1x - fixed duplicate EAP request packets for server;
- dot1x - fixed EAP packet version numbering;
- email - added support for multiple "to" recipients;
- export - fixed HotSpot "address-per-mac" parameter export;
- fetch - show status "uploaded" instead of "downloaded" when uploading a file;
- ftp - fixed possible buffer overflow;
- hotspot - ignore packets from host while MAC authentication is in progress;
- ike1 - improved stability when performing policy lookup on non-existant peer;
- ike2 - fixed local side NAT detection;
- ike2 - fixed policy reference for pending acquire;
- ike2 - retry RSA signature validation with deduced digest from certificate;
- interface - added new builtin "static" interface list;
- kidcontrol - fixed "time-unlimited-rate" to engage in correct time;
- lcd - improved general system stability when LCD is not present;
- lte - fixed modem initialization when multiple modems are used simultaneously;
- lte - fixed PDP authentication configuration for SIM7600;
- lte - improved stability during firmware upgrade;
- metarouter - fixed image importing (introduced in v6.46);
- ospf - fixed disappearing NSSA default route;
- ospf - fixed processing of "unknown" LSA type;
- ospf - improved route tag processing for OSPFv3;
- poe - fixed "power-cycle" functionality on hEX PoE, PowerBox Pro and OmniTIK 5 PoE ac;
- port - removed serial console port on hEX S;
- ppp - removed "comment", "set" and "edit" commands from "PPP->Active" menu;
- profile - added support for CCR2004-1G-12S+2XS;
- qsfp - fixed auto-negotiation status;
- quickset - fixed invalid configuration applying when performing changes during LTE modem initialization process;
- quickset - show "Antenna Gain" setting on devices without built-in antennas;
- route - improved stability when 6to4 interface is configured with disabled IPv6 package;
- routerboard - fixed "reset-button" menu presence on all devices;
- routerboot - fixed etherboot FCS errors with 100Mbps rate for CRS305, CRS309 and CRS317 devices ("/system routerboard upgrade" required);
- sfp - stabilized CRS212 SFP port functionality and improved monitoring of optical modules;
- smb - fixed file path validation (introduced in v6.46);
- smb - fixed possible memory leak;
- smb - limit active session count to 5 per connection;
- sniffer - allow setting port for "streaming-server";
- snmp - added "dot1qTpFdbTable" OID reporting for Q-BRIDGE-MIB;
- switch - correctly enable and disable CPU Flow Control on RB3011UiAS;
- switch - fixed MAC address learning on switch-cpu port for Atheros8316, Atheros8227 and Atheros7240 switch chips;
- upgrade - fixed space handling in package file names;
- w60g - added "mdmg-fix" parameter for RBwAP60Gx3 (CLI only);
- w60g - improved rate selection in low traffic conditions;
- webfig - fixed 5 GHz wireless interface "frequency" parameter value list on Audience;
- winbox - added "region" parameter for W60G interfaces;
- winbox - allow to specify any Ethernet like interface under "Tool/WoL" menu;
- winbox - do not allow to enter empty strings in "caps-man-names" and "common-name" parameters;
- winbox - fixed "Tx/Rx Signal Strength" value presence for 4 chain interfaces;
- winbox - fixed wireless interface "HT" tab setting presence when "band=5ghz-n/ac";
- winbox - fixed wireless sniffer parameter setting;
- winbox - hide irrelevant switch port parameters;
- wireless - added support for U-NII-2 for cAP ac;
- wireless - added support for U-NII-2 for wAP ac;
- wireless - allow setting "tx-power" up to 40;
- wireless - changed "station-roaming" default setting from "enabled" to "disabled";
- wireless - fixed potential wireless driver issue related to CVE-2020-3702;
- wireless - improved management service stability when receiving bogus packets;
- wireless - updated "bangladesh" regulatory domain information;
- wireless - updated "canada" regulatory domain information;
- wireless - updated "egypt" regulatory domain information;
- wireless - updated "indonesia5" regulatory domain information;
- wireless - updated "united states" regulatory domain information;
- www - added "tls-version" parameter in "IP->Services" menu;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.