MikroTik RouterOS ARM64 Firmware 6.49 RC 11

What's new in 6.49beta11:

- chr - improved stability when changing "flow-control" settings on interfaces with e1000 drivers;
- crs312 - fixed missing SwOS firmware on revision 2 devices;
- crs3xx - fixed packet duplication when multiple bonding interfaces are created for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - fixed packet transmit in 5Gbps link rate for CRS312 device;
- crs3xx - fixed port-isolation on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - fixed port-isolation on ether37-ether48 ports for CRS354 device;
- crs3xx - improved LACP linking between CRS3xx series switches;
- crs3xx - improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - improved load balancing on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - improved packet transmit on SFP+ interfaces;
- crs3xx - improved system stability when bonding and IGMP snooping is used (introduced in v6.48);
- defconf - fixed minor typo in configuration description;
- dot1x - fixed "reject-vlan-id" for MAC authentication (introduced in v6.48);
- dot1x - fixed MAC authentication fallback (introduced in v6.48);
- ethernet - fixed cable-test for some devices (e.g. RB2011, RB951G-2HnD);
- fastpath - fixed IP packet receive on bridge and bonding interfaces when destination MAC address match with slave port MAC;
- hotspot - fixed "idle-timeout" usage with RADIUS authentication;
- hotspot - fixed special character parsing in "target" variable (CVE-2021-3014);
- ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
- ike2 - fixed EAP MSK length validation (introduced in v6.48);
- ike2 - fixed phase 2 rekeying with enabled PFS (introduced in v6.48);
- ike2 - improved stability when invalid certificate is configured (introduced in v6.48);
- ike2 - properly register packet time after expensive CPU operations;
- interface - fixed pwr-line interface linking (introduced in v6.48);
- ipsec - improved stability when processing IPv6 packets larger than interface MTU;
- led - fixed default LED configuration for RB911-5HnD;
- netinstall - improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present;
- ntp - use correct IPv6 multicast group for SNTP client;
- package - always allow to uninstall package even if there is no free disk space left;
- package - do not include multiple The Dude packages in HDD installer;
- sfp - added "sfp-rate-select" setting (CLI only);
- sfp - fixed GPON module linking (introduced in v6.47);
- sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
- snmp - fixed "send-trap" functionality (introduced in v6.48);
- snmp - fixed SNMP trap agent address;
- switch - fixed interface toggling for devices with multiple QCA8337, Atheros8327 or RTL8367 switch chips (introduced in v6.48);
- switch - improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device;
- tr069-client - added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting;
- upgrade - fixed free space checking on flash type memories when installing new packages;
- webfig - fixed new interface addition;
- winbox - do not show empty "CPU Frequency" parameter under "System/Resources" menu;
- winbox - fixed enable/disable button presence for "Bridge/Hosts" menu;
- winbox - renamed IP protocol 41 to "ipv6-encap";
- wireless - renamed "macedonia" regulatory domain information to "north macedonia"; 

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.