MikroTik RouterOS MMIPS Firmware 6.46

MAJOR CHANGES IN v6.46:

- lora - added support for LoRaWAN low-power wide-area network technology for MIPSBE, MMIPS and ARM;
- package - accept only packages with original filenames (CVE-2019-3976);
- package - improved package signature verification (CVE-2019-3977);
- security - fixed improper handling of DNS responses (CVE-2019-3978, CVE-2019-3979);

Changes in this release:

- backup - fixed automatic backup file generation when configuration reset by button;
- backup - store automatically created backup file in "flash" directory;
- bonding - correctly remove HW offloaded bonding with ARP monitoring;
- bonding - properly handle MAC addresses when bonding WLAN interfaces;
- bridge - disable/enable bridge port when setting bpdu-guard;
- bridge - do not add bridge as untagged VLAN member when frame-types=admit-only-vlan-tagged;
- bridge - do not add dynamically VLAN entry when changing "pvid" property for non-vlan aware bridge;
- bridge - include whole VLAN-id in DHCP Option 82 message;
- btest - removed duplicate "duration" parameter;
- capsman - fixed background scan showing incorrect regulatory domain mismatch error (CAP upgrade required);
- capsman - fixed channel auto reselection;
- capsman - fixed MAC address detection for "common-name" parameter in certificate requests;
- capsman - improved DFS channel switching when radar detected;
- capsman - improved radar detection algorithm;
- ccr - improved general system stability;
- certificate - added progress bar when creating certificate request;
- certificate - added support for certificate request signing with EC keys;
- certificate - allow specifying "file-name" parameter for export (CLI only);
- certificate - allow specifying "name" parameter for import (CLI only);
- certificate - improved CRL updating process;
- certificate - removed "key-size" parameter for "create-certificate-request" command;
- chr - added support for Azure guest agent;
- console - added bitwise operator support for "ip6" data type;
- console - fixed "address" column width when printing DHCPv4 leases;
- console - fixed IP conversion to "num" data type;
- console - fixed "tobool" conversion;
- console - properly detect IPv6 address as "ip6" data type;
- crs1xx/2xx - allow to set trunk port as mirroring target;
- crs3xx - correctly handle L2MTU change;
- crs3xx - do not send pause frames when ethernet "tx-flow-control" is disabled on CRS326/CRS328/CRS305 devices;
- crs3xx - improved interface initialization;
- crs3xx - improved switch-chip resource allocation on CRS317-1G-16S+, CRS309-1G-8S+, CRS312-4C+8XG, CRS326-24S+2Q+ devices;
- crs3xx - improved system stability on CRS309-1G-8S+, CRS312-4C+8XG, CRS326-24S+2Q+ devices;
- crs3xx - remove previously set mirror-source property before changing it;
- defconf - fixed default configuration loading on RBmAPL-2nD (introduced in v6.45);
- defconf - require "policy" permission to print default configuration;
- dhcpv4-client - allow empty "dhcp-options" parameter when adding new client;
- dhcpv4-client - fixed "dhcp-options" parameter setting when adding new client;
- dhcpv4-server - improved stability when RADIUS Interim update is sent;
- dhcpv6-client - fixed timeout when doing rebind;
- dhcpv6-client - properly update bind time when unused prefix received from the server;
- dhcpv6-client - properly update IPv6 address on rebind;
- dhcpv6-server - fixed logged error message when using "address-pool=static-only";
- dhcpv6-server - ignore prefix-hint from client's DHCPDISCOVER if static prefix received from RADIUS;
- dhcpv6-server - include "User-Name" parameter in accounting requests;
- dhcpv6-server - made "calling-station-id" contain MAC address if DUID contains it;
- dot1x - added "reject-vlan-id" server parameter (CLI only);
- dot1x - added support for dynamic switch rules from RADIUS;
- dot1x - added support for "mac-auth" authentication type (CLI only);
- ethernet - automatically detect interface when using IP address for power-cycle-ping;
- ethernet - do not enable interface after reboot that is already disabled;
- ethernet - send requests only from ethernet interface when using MAC address for power-cycle-ping;
- export - always export "ssid" value for w60g interfaces;
- fetch - do not allocate extra 500KiB on SMIPS;
- fetch - improved stability when processing large output data;
- gps - use "serial1" as default port on RBLtAP-2HnD;
- hotspot - fixed non-local NAT redirection to port TCP/64873;
- hotspot - fixed RADIUS CoA "address-list" update;
- ike1 - fixed minor spelling mistake in logs;
- ike2 - improved CHILD SA rekey process with Apple iOS 13;
- ike2 - improved stability when retransmitting first packet as responder;
- ipsec - added "error" topic for identity check failure logging messages;
- ipsec - fixed DNS resolving when domain has only AAAA entries;
- ipsec - fixed policy "sa-src-address" detection from "local-address" (introduced in v6.45);
- ipv6 - changed "advertise-dns" default value to "yes";
- led - fixed default LED configuration for RBLHG-2nD and RBLHG-5HPnD;
- log - increased log message length limit to 1024 characters;
- lte - added support for D402 modem;
- lte - added support for LM960A18;
- lte - added support for Telit LM960 and LE910C1 modems;
- lte - do not allow setting 3G and GSM modes on LTE only modems;
- lte - fixed band setting on R11e-4G;
- lte - fixed network registration on R11e-LTE-US;
- lte - fixed Sierra WP7601 driver loading;
- lte - fix "operator" names not being displayed properly;
- lte - improved modem initialization;
- lte - show "primary-band" only for LTE modems;
- lte - use /128 prefix for IPv6 address on LTE interface;
- lte - use interface from RA when "ipv6-interface=none" and IPv6 enabled;
- ppp - added 3GPP IoT "access-technology" definitions;
- ppp - added support for Sierra WP7601;
- ppp - disable DTR send when using at-chat;
- quickset - added "LTE AP Dual" mode support;
- quickset - added "LTE APN" dropdown support;
- quickset - fixed "LTE Band" checkbox display;
- route - fixed area range summary route installation in VRF;
- routerboard - fixed default CPU frequency on RB750r2 ("/system routerboard upgrade" required);
- routerboard - fixed USB configuration export on RBLtAP-2HnD;
- routerboard - hide "memory-frequency" parameter for RBLtAP-2HnD;
- sniffer - allow filtering by packet size;
- snmp - added "disabled" and "comment" parameters for communities;
- snmp - added option to monitor "link-downs" parameter using MIKROTIK-MIB;
- snmp - fixed "dot1dBasePort" index offset for BRIDGE-MIB;
- snmp - fixed "ifLastChange" OID reporting for IF-MIB;
- snmp - fixed "radio-name" (mtxrWlRtabRadioName) OID support;
- snmp - improved interface status reporting for IfOperStatus OID;
- snmp - improved LLDP interface returned index and type;
- snmp - return only interfaces with MAC addresses for LLDP;
- snmp - use "src-address" also for traps;
- ssh - fixed output printing when "command" parameter used;
- supout - include information from all LTE interfaces;
- supout - removed "file" option from "/system sup-output" command;
- switch - added "comment" property for switch vlan menu (CLI only);
- switch - correctly update dynamic switch rule when dhcp-snooping is enabled;
- switch - ignore "default-vlan-id" property after switch reset on RTL8367 switch chip;
- switch - show "external" flag for bridge hosts on MT7621, RTL8367 switch chips;
- timezone - updated time zone database to version 2019c;
- tr069-client - added CellDiagnostics parameter support;
- tr069-client - added LTE band and cellular technology selection parameters;
- tr069-client - added LTE RSCP, ECNO and ICCID parameter support;
- tr069-client - added multiple LTE monitoring parameters;
- tr069-client - reconnect to ACS when "ConnectionRequestURL" is updated;
- upgrade - improved auto package updating using "check-for-updates";
- ups - improved compatibility with APC UPS's;
- usb - general USB modem stability improvements;
- userman - updated Authorize.Net to use SHA512 hashing;
- w60g - added "region" setting to limit allowed frequencies (CLI only);
- w60g - do not reset link when changing comment on station;
- w60g - fixed "monitor" command on disabled interfaces;
- w60g - move stations to new bridge when "put-in-bridge" parameter is changed;
- webfig - fixed link to Winbox download;
- winbox - added "ip-address" and stats columns in "IP/Kid-Control/Devices" menu;
- winbox - added "public-address-ipv6" parameter to "IP/Cloud" menu;
- winbox - added "reset-counters" button to "IP/Kid Control/Devices" menu;
- winbox - added "tx-info-field" parameter to "Wireless/W60G" menu;
- winbox - added "Vendor Classes" tab in "IP/DHCP Server" menu;
- winbox - added wireless alignment LED types to "System/LEDs" menu;
- winbox - fixed allowed range for bridge filter "new-priority" parameter;
- winbox - fixed "CAPs Scanner" stopping;
- winbox - fixed "cluster-id" parameter setting in "Routing/BGP/Instances" menu;
- winbox - fixed file locking when uploading multiple files at once;
- winbox - fixed firewall limit parameter support for rates more than 4G;
- winbox - fixed invalid flag presence in "IP/SMB/Shares" menu;
- winbox - fixed "Routing" menu icon presence when there is no routing package installed;
- winbox - improved stability when transfering multiple files between multiple windows;
- winbox - properly show timestamp in file "Creation Time" field;
- winbox - removed "Set CA Passphrase" button from "Certificate" menu;
- winbox - renamed "Queue Limit" to "Queue Size" for "pcq-upload-default" and "pcq-download-default" parameters;
- winbox - replaced "kb" with "KiB" in "Tools/Packet Sniffer" menu;
- winbox - show "Switch" menu on RBwAPGR-5HacD2HnD;
- winbox - show "System/RouterBOARD/Mode Button" on devices that have such feature;
- wireless - added 4 chain MCS support for 802.11n wireless protocol (CLI only);
- wireless - added "ETSI" regulatory domain information;
- wireless - added "indonesia4" regulatory domain information;
- wireless - added "push-button-5s" value for "wps-mode" parameter;
- wireless - added U-NII-2 support forRBSXTsqG-5acD, RBLHGG-5acD-XL, RBLHGG-5acD, RBLDFG-5acD, RBDiscG-5acD;
- wireless - allow using "canada2" regulatory domain on US lock devices;
- wireless - fixed 802.11n rate selection when managed by CAPsMAN;
- wireless - fixed RX chain selection;
- wireless - fixed sensor MAC address reporting in TZSP header;
- wireless - improved 802.11ac stability for all ARM devices with wireless;
- wireless - improved IPQ4019, QCA9984, QCA9888 wireless interface stability;
- wireless - updated "ukraine" regulatory domain information;
- wireless - updated "united-states" regulatory domain information;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.