MikroTik RouterOS MIPS-BE Firmware 6.39 RC 54

What's new in 6.39rc54:

- ike1 - fixed ph2 ID logging;
- ipsec - allow mixing aead algorithms in proposal;
- ipsec - show hardware accelerated authenticated SAs;
- lte - added initialization for Cinterion;
- netinstall - fixed typos;
- ppp-client - added support for Datacard 750UL, DWR-730 and K4607-Zr;
- snmp - added optical table;
- snmp - added fan-speed OIDs in "/system health print oid";
- snmp - fixed rare crash;
- snmp - improved getall filter;
- tr069-client - added "Device.WiFi.NeighboringWiFiDiagnostic." support;
- tr069-client - added Upload RPC "2 Vendor Log File" support;
- tr069-client - fixed "Device.ManagementServer." value update;
- tr069-client - fixed crash on =acs-url change special case;
- userman - allow "name-for-user" to be empty and not unique;
- wireless - fixed false positive DFS radar detection caused by iPhone 6s devices;

Other changes since 6.38.5:

- bridge - added "fast-forward" setting and counters (enabled by default only for new bridges) (CLI only);
- bridge - added support for special and faster case of fastpath called "fast-forward" (available only on bridges with 2 interfaces);
- filesystem - fixed rare situation when filesystem failed to read all configuration on startup;
- filesystem - fixed rare situation when filesystem went into read-only mode (some configuration might have gotten lost on reboot);
- firewall - discontinued support for p2p matcher (old rules will become invalid);
- l2tp - added fastpath support when MRRU is enabled;
- ppp - completely rewritten internal fragmentation algorithm (when MRRU is used), optimized for multicore;
- ppp - implemented internal algorithm for "change-mss", no mangle rules necessary;
- pppoe - added fastpath support when MRRU and MLPPP are enabled;
- quickset - configuration changes are now applied only on "OK" and "Apply" (not on mode change);
- tile - fixed IPsec hardware acceleration out-of-order packet problem, significantly improved performance;
- winbox - minimal required version is v3.11;
- address - fixed crash when address is assigned to another bridge port;
- capsman - added CAP discovery interface list support;
- capsman - added save-channel option to speed up frequency selection on CAPsMAN restart;
- capsman - added support for static virtual interfaces on CAP;
- capsman - improved CAP status querying;
- capsman - improved support for communicating frame priority between CAP and CAPsMAN;
- certificate - allow CRL address to be specified as DNS name;
- defconf - fixed Groove 52 ac band settings;
- defconf - fixed default configuration generation when wireless package is disabled;
- dhcp-client - added "script" option which executes script on state changes;
- dhcpv4-server - added "lease-hostname" script parameter;
- dhcpv4-server - do some lease checks only on enabled object;
- email - check for errors during SMTP exchange process;
- ethernet - renamed "rx-lose" to "rx-loss" in ethernet statistics;
- gps - added "fix-quality" and "horizontal-dilution" parameters;
- graphing - fixed graph disappearance after power outage;
- hotspot - added access to HTTP headers using $(http-header-name);
- ike2 - always replace empty TSi with configured address if it is available;
- ike2 - check child state before allowing rekey;
- ike2 - default to /32 peer address mask;
- ike2 - fixed EAP message length;
- ike2 - fixed ISA handler object removal on SA delete;
- ike2 - fixed ph2 state when sending notify;
- ike2 - fixed state when sending delete packet;
- ike2 - send EAP identity as user-name RADIUS attribute;
- ike2 - update "calling_station_id" radius attribute;
- ike2 - update peer identity after successful EAP authentication;
- ippool - return proper error message when trying to create duplicate name;
- ipsec - added "last-seen" parameter to active connection list;
- ipsec - better responder flag calculator for console;
- ipsec - fixed "/ip ipsec policy group export verbose";
- ipsec - fixed "mode-cfg" verbose export;
- ipsec - updated tilera classifier for UDP encapsulated ESP;
- l2tp-server - added "use-ipsec=required" option;
- leds - added LTE modem access technology trigger;
- leds - changed error message on unsupported board;
- leds - do not update single LED state when it is not changed;
- leds - show warning on print when "modem-signal-threshold" is not available;
- log - added "gps" topic;
- log - added "tr069" topic;
- log - added warning when Winbox/Dude sessions were denied;
- log - make SNMP logs more compact;
- lte - added LTE signal level reading for Cinterion modems;
- lte - added error handling for remote AT execute;
- lte - added initial support for Quectel ec25;
- lte - added support for Vodafone R216 (Huawei);
- lte - buffer AT events while info command is active;
- lte - fixed "/interface lte info X once";
- lte - fixed IPv6 address prefix on interface
- lte - fixed network mode selection for me909u, mu609;
- lte - fixed older standard CEREG parsing;
- lte - fixed support for Huawai R216;
- lte - fixed user-command;
- ppp - fixed rare kernel failure on PPP client connection;
- pppoe - set default keepalive 10s for newly created PPPoE clients;
- rb1100ahx2 - fixed random counter resets for ether12,13;
- rb3011 - added partitioning support;
- snmp - "No Such Instance" error message is replaced with "No Such Object";
- snmp - improved response speed when multiple requests are received within short period of time;
- snmp - optimized bridge table processing;
- tile - added initial support for NVMe SSD disk drives;
- tr069-client - added "Device.Hosts.Host.{i}." support;
- tr069-client - added "Ethernet.Interface.{i}.MACAddress" parameter;
- tr069-client - added DHCP server support;
- tr069-client - added architecture name parameter (X_MIKROTIK_ArchName - vendor specific);
- tr069-client - added basic stats parameters for some interface types;
- tr069-client - added basic support for "/ip firewall filters";
- tr069-client - added connection request authentication;
- tr069-client - added parameters for DNS client management support;
- tr069-client - added ping diagnostics support;
- tr069-client - added support for escaped entity references (& < > ' ");
- tr069-client - added support for managing "/system/identity/" value;
- tr069-client - added support for memory and CPU load parameters;
- tr069-client - added traceroute diagnostics support;
- tr069-client - close connection if CPE considers XML as invalid;
- tr069-client - fixed "AddObjectResponse" “InstanceNumber” value;
- tr069-client - fixed special escape characters on XML data send;
- tr069-client - fixed write for "Device.ManagementServer.URL";
- tr069-client - general improvements on reducing storage space;
- tr069-client - generate random connection request target path;
- tr069-client - increased performance on GetParameterValues;
- tr069-client - set CHR license ID as ".SerialNumber" value to avoid "no serial number" error in ACS;
- traceroute - small fix;
- usb - added support for more CP210X devices;
- userman - fixed rare crash when User Manager requested file does not exist on router;
- wAP ac - improved 2.4GHz wireless performance;
- webfig - added menu bar to quickly select between Webfig, Quickset and Terminal;
- webfig - allow shorten bytes to k,M,G in firewall "connection-bytes" and "connection-rates";
- webfig - fixed delays on key press in terminal;
- webfig - fixed tab ordering on Google Chrome;
- webfig - improved field layout;
- webfig - make Terminal window work within Webfig window;
- winbox - added "group-key-update" to CAPsMAN security settings;
- winbox - added "save-selected" setting under CAPsMAN channels;
- winbox - added "static-virtual" to wireless CAP;
- winbox - added GPS menu;
- winbox - allow shorten bytes to k,M,G in firewall "connection-bytes" and "connection-rates";
- winbox - allow to change user password to empty one;
- winbox - allow to not specify certificate in IPSec peer settings;
- winbox - allow to specify certificate type when exporting it;
- winbox - allow to specify interfaces that CAPsMAN can use for management;
- winbox - allow unhide SNMP passwords;
- winbox - do not create time field when copying CAPsMAN access list entry;
- winbox - do not show empty LTE fields in Info menu;
- winbox - do not try to disable dynamic items from firewall tables;
- winbox - fixed misleading error when trying to export certificate;
- winbox - increased maximal number of Winbox sessions 20->100;
- winbox - properly name CAP Interface on new interface creation;
- winbox - removed "sfp-rate-select" setting from ethernet interface;
- wireless - added Egypt 5.8 country settings;
- wireless - apply broadcast bit to DHCP requests when using "station-pseudobridge" mode;
- wireless - do not allow equal MAC addresses between multiple Virtual APs when same "master-interface" is used;
- wireless - fixed RBSXT5HacD2nr2 small channel support;
- wireless - fixed issue when wireless interfaces might not show up in CAP mode;
- wireless - fixed occasional crash on interface disabling;
- wireless - fixed rare crash on nv2 configurations;
- wireless - fixed rare wireless ac interface lockup;
- x86 - added support for NVMe SSD disk drives;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you’re looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don’t power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don’t miss the update that will improve your device.