MikroTik RouterOS MMIPS Firmware 6.40 RC 21

What's new in 6.40rc21:

- wireless - added Nv2 AP synchronization feature (for experimental use)(CLI only);
- capsman - added "current-registered-clients" and "current-authorized-clients" count for CAP interfaces (CLI only);
- certificate - added "crl-use" setting to disable CRL use (CLI only);
- crs212 - fixed Optech sfp-10G-tx module compatibility with SFP ports;
- dude - fixed server crash;
- export - added default "init-delay" setting for "/routerboard settings" menu;
- ping - fixed ping getting stuck (after several thousands of ping attempts);
- rb750gr3 - fixed USB power;
- userman - lookup language files also in "/flash" directory;

Other changes since 6.39.2:

- btest - fixed crash when packet size has been changed during test;
- capsman - fixed EAP identity reporting in "registration-table";
- capsman - set minimal "caps-man-names" and "caps-man-certificate-common-names" length to 1 char;
- chr - maximal system disk size now limited to 16GB;
- conntrack - fixed IPv6 connection tracking enable/disable;
- defconf - added IPv6 default firewall configuration (IPv6 package must be enabled on reset);
- defconf - improved IPv4 default firewall configuration;
- defconf - renamed 192.168.88.1 address static DNS entry from "router" to "router.lan";
- dhcp - added "debug" logs on MAC address change;
- dhcpv4-server - fixed server state on interface change in Winbox and Webfig;
- dns - remove all dynamic cache RRs of same type when adding static entry;
- ethernet - fixed forced 10Mbps full-duplex linking on 100Mbps Ethernet ports;
- export - added "terse" option;
- fastpath - improved performance when packets for slowpath are received;
- fetch - added "src-address" parameter for HTTP and HTTPS;
- firewall - fixed cosmetic "inactive" flag when item was disabled;
- hotspot - added "address-list" support in "walled-garden" IP section;
- hotspot - require "dns-name" to contain "." symbol under Hotspot Server Profile configuration;
- ike1 - added support for "framed-pool" RADIUS attribute;
- ike1 - fixed minor memory leak on peer configuration change;
- ike1 - kill phase1 instead of rekey if "mode-config" is used;
- ike1 - removed SAs on DPD;
- ike1 - send phase1 delete;
- ike2 - added RADIUS attributes "Framed-Pool", "Framed-Ip-Address", "Framed-Ip-Netmask";
- ike2 - added pfkey kernel return checks;
- ike2 - added support for "Mikrotik_Address_List" RADIUS attribute;
- ike2 - added support for "mode-config" static address;
- ike2 - by default use "/24" netmask for peer IP address in split net;
- ike2 - prefer traffic selector with "mode-config" address;
- ipsec - added "firewall=add-notrack" peer option (CLI only);
- ipsec - added information in console XML for "mode-config" menu;
- ipsec - enabled modp2048 DH group by default;
- ipsec - fixed connections cleanup on policy or proposal modification;
- ipsec - optimized logging under IPSec topic;
- ipsec - removed policy priority;
- l2tp - fixed handling of pre-authenticated L2TP sessions with CHAP authentication;
- l2tp-server - added "one-session-per-host" option;
- log - added "poe-out" topic;
- log - improved "l2tp" logs;
- log - optimized "wireless,info" topic logs;
- log - work on false CPU/RAM overclocked alarms;
- lte - added "accounting" logs for LTE connections;
- lte - added additional driver support for DWR-910;
- lte - added initial support for "NTT DoCoMo" modem;
- lte - improved SMS delivery report;
- lte - improved reliability on SXT LTE;
- ovpn - improved performance when receiving too many options;
- ppp - improved MLPPP packet forwarding performance;
- proxy - fixed potential crash;
- quickset - added "Band" setting to "CPE" and "PTP CPE" modes;
- quickset - use active user name and permissions when applying changes;
- routing - allow to disable "all" interface entry in BFD;
- snmp - fixed crash on interface table get;
- snmp - added "ifindex" on interface traps;
- snmp - added ability to set "src-address";
- socks - fixed crash while processing many simultaneous sessions;
- tr069-client - fixed lost HTTP header on authorization;
- ups - show correct "line-voltage" value for usbhid UPS devices;
- winbox - added "eap-identity" to CAPsMAN registration table;
- winbox - added "no-dad" setting to IPv6 addresses;
- winbox - added "reselect-channel" to CAPsMAN interfaces;
- winbox - added TR069 support;
- wireless - NAK any methods except MS-CHAPv2 as inner method in PEAP;
- wireless - added option to change "nv2-downlink-ratio" for nv2 protocol;
- wireless - added option to set "fixed-downlink" mode for nv2 protocol;
- wireless - allow VirutalAP on Level0 (24h demo) license;
- wireless - always use "multicast-helper" when DHCP is being used;
- wireless - do not skip >2462 channels if interface is WDS slave;
- wireless - fixed 802.11u wireless request processing;
- wireless - fixed EAP PEAP success processing;
- wireless - fixed compatibility with "AR5212" wireless chips;
- wireless - fixed rare crash on cap disable;
- wireless - fixed registration table "signal-strength" reporting for chains when using nv2;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.