MikroTik RouterOS MIPS-BE Firmware 6.40 RC 15

What's new in 6.40rc15:

- ipsec - added support for dynamic "action=notrack" RAW rules for policies;
- defconf - added accept ICMPv6 in forward and DHCP discover in RAW prerouting;
- ike2 - added pfkey kernel return checks;
- ipsec - added information in console XML for "mode-config" menu;
- ipsec - fixed connections cleanup on policy or proposal modification;
- ipsec - removed policy priority;
- ppp - fixed MLPPP over multiple channels/interfaces (introduced in v6.39);

Other changes since 6.39.1:

- 6to4 - fixed wrong IPv6 "link-local" address generation;
- arp - fixed "make-static";
- bonding - do not add bonding interface if "could not set MTU" error is received;
- btest - fixed crash when packet size has been changed during test;
- capsman - fixed EAP identity reporting in "registration-table";
- capsman - set minimal "caps-man-names" and "caps-man-certificate-common-names" length to 1 char;
- chr - maximal system disk size now limited to 16GB;
- conntrack - load IPv6 connection tracking independently of IPv4;
- console - fixed "No such file or directory" warnings on upgrade reboots;
- defconf - added IPv6 firewall configuration (IPv6 package must be enabled on reset);
- defconf - renamed 192.168.88.1 address static DNS entry from "router" to "router.lan";
- defconf - replaced IPv4 firewall configuration with improved one;
- dns - remove all dynamic cache RRs of same type when adding static entry;
- ethernet - fixed forced 10Mbps full-duplex linking on 100Mbps Ethernet ports;
- export - added "terse" option;
- export - removed spare "caller-id-type" value from compact export;
- fetch - added "src-address" parameter for HTTP and HTTPS;
- fetch - fixed user and password argument parsing from URL for FTP;
- firewall - "address-list" entry “creation-time” adjusted to timezone;
- firewall - do not allow to set "rate" value to 0 for "limit" parameter;
- firewall - fixed "address-list" entry changing from IP to DNS and vice versa;
- firewall - fixed IPv6 all address list entries becoming "::/0" (introduced in 6.40rc1);
- firewall - fixed cosmetic "inactive" flag when item was disabled;
- gps - removed duplicate logs;
- hotspot - require "dns-name" to contain "." symbol under Hotspot Server Profile configuration;
- ike1 - fixed crash on xauth message;
- ike1 - fixed minor memory leak on peer configuration change;
- ike1 - removed xauth login length limitation;
- ike2 - by default use "/24" netmask for peer IP address in split net;
- ike2 - fixed rare kernel failure on address acquire;
- ike2 - fixed situation when traffic selector prefix was parsed incorrectly;
- ipsec - enabled modp2048 DH group by default;
- ipsec - fixed generated policy priority;
- ipsec - fixed peer "my-id" address reset;
- ipsec - optimized logging under IPSec topic;
- ipsec - renamed "remote-dynamic-address" to "dynamic-address";
- ipv6 - fixed address becoming invalid when interface was removed from bridge/mesh;
- led - fixed ethernet LEDs on CCR1009 and RB1100AHx2 (introduced in v6.40rc1);
- led - fixed turning off LED when interface is lost;
- log - added "poe-out" topic;
- log - work on false CPU/RAM overclocked alarms;
- lte - added additional driver support for DWR-910;
- lte - added initial support for "NTT DoCoMo" modem;
- lte - fixed configless modem running state (introduced in 6.40rc);
- lte - improved info channel background polling;
- lte - replaced "user-command" with "at-chat" command;
- ppp - fixed "change-mss" functionality (introduced in 6.39);
- ppp - send correct IP address in RADIUS "accounting-stop" messages (introduced in 6.39);
- pppoe - fixed warning on PPPoE server, when changing interface to non-slave interface;
- pppoe-client - removed false warning from client interface if it starts running on non-slave interface;
- pppoe-server - fixed "one-session-per-host" issue where 2 simultaneous sessions were possible from the same host;
- proxy - fixed potential crash;
- queue - fixed queuing when at least one child queue has "default-small" and other/s is/are different (introduced in 6.35);
- quickset - added "Band" setting to "CPE" and "PTP CPE" modes;
- quickset - fixed LTE "signal-strength" graphs;
- quickset - use active user name and permissions when applying changes;
- routing - allow to disable "all" interface entry in BFD;
- sniffer - fixed VLAN tags when sniffing all interfaces;
- snmp - fixed crash on interface table get;
- snmp - added "ifindex" on interface traps;
- snmp - added ability to set "src-address";
- snmp - fixed limited walk;
- switch - fixed disabling of MAC learning on CRS1xx/CRS2xx;
- tile - fixed EoIP keepalive when tunnel is made over VLAN interface;
- tile - fixed rare encryption kernel failure when small packets are processed;
- ups - show correct "line-voltage" value for usbhid UPS devices;
- winbox - added "eap-identity" to CAPsMAN registration table;
- winbox - added "no-dad" setting to IPv6 addresses;
- winbox - added "reselect-channel" to CAPsMAN interfaces;
- winbox - added TR069 support;
- winbox - do not allow to open multiple same sub-menus at the same time;
- winbox - fixed LTE info button;
- winbox - fixed firewall port selection with Winbox v2;
- winbox - removed spare values from "loop-protect" setting for EoIPv6 tunnels;
- wireless - NAK any methods except MS-CHAPv2 as inner method in PEAP;
- wireless - added option to change "nv2-downlink-ratio" for nv2 protocol;
- wireless - added option to set "fixed-downlink" mode for nv2 protocol;
- wireless - always use "multicast-helper" when DHCP is being used;
- wireless - do not skip >2462 channels if interface is WDS slave;
- wireless - fixed 802.11u wireless request processing;
- wireless - fixed EAP PEAP success processing;
- wireless - fixed compatibility with "AR5212" wireless chips;
- wireless - reduced load on CPU for high speed wireless links;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you’re looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don’t power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don’t miss the update that will improve your device.