MikroTik RouterOS MMIPS Firmware 6.48 RC 27

Changes in this release:

- arm - added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices;
- arm - improved stability when forcing 25G speed on unsupported interface;
- bridge - allow to exclude interfaces from extended ports (CLI only);
- bridge - fixed host table update on SNMP query;
- bridge - show error when switch do not support controlling bridge or port extension (CLI only);
- bridge - show "H" flag for extended bridge ports;
- certificate - clear challenge password on renew;
- crs3xx - added initial Bridge Port Extender support (CLI only);
- crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only);
- crs3xx - fixed "custom-drop-packet" and "not-learned" switch stats for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
- crs3xx - fixed hardware offloaded MPLS forwarding when using bonding interfaces;
- crs3xx - fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+;
- crs3xx - fixed QSFP+ interface linking after reboot for CRS326-24S+2Q+ (introduced in v6.47);
- crs3xx - fixed switch "not-learned" stats for CRS305, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, CRS318 devices;
- crs3xx - improved Ethernet port group traffic forwarding for CRS354 devices;
- crs3xx - improved system stability when using hardware offloaded MPLS;
- defconf - improved default configuration generation on devices with non-default wireless interface names;
- discovery - send the same "Chassis ID" on all interfaces for LLDP packets;
- discovery - use "static" interface list by default instead of "!dynamic";
- dot1x - fixed duplicate EAP request packets for server;
- dot1x - fixed EAP packet version numbering;
- fetch - show status "uploaded" instead of "downloaded" when uploading a file;
- filesystem - fixed repartition on non-first partition;
- filesystem - fixed repartition on RB4011 series devices;
- filesystem - improved long-term filesystem stability and data integrity;
- gps - fixed "init-channel" release when not used;
- health - changed PSU state parameter type to read-only;
- health - removed unused "heater-control" and "heater-threshold" parameters;
- hotspot - added "vlan-id" parameter support for hosts and HTML pages;
- hotspot - do not verify Hotspot interface status when detecting if HTTP/HTTPS login method is allowed;
- hotspot - ignore packets from host while MAC authentication is in progress;
- interface - added new builtin "static" interface list;
- ipsec - fixed client certificate usage when certificate is renewed with SCEP;
- kidcontrol - fixed "time-unlimited-rate" to engage in correct time;
- l2tp - fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47);
- lora - expose "joinEui" un "devEui" values in the log;
- lora - fixed "spoof-gps" parameter padding (introduced in v6.47.1);
- lte - added "comment" parameter for APN profiles;
- lte - fixed dynamic DHCP client creation when editing APN profile;
- lte - fixed multiple passthrough APN default route installation;
- lte - fixed RSCP value reporting;
- lte - validate interface existence on initiation;
- ospf - fixed case when changing one distribution metric changed metrics for other distribution options;
- ospf - fixed disappearing NSSA default route;
- ospf - fixed processing of "unknown" LSA type;
- ospf - optimized LSA printing for smaller message sizes;
- poe - fixed "power-cycle" functionality on RB960GSP;
- ppp - fixed PPP interface editing for the first time after reboot or after 20 seconds;
- routerboot - fixed etherboot FCS errors with 100Mbps rate for CRS309, CRS317 devices ("/system routerboard upgrade" required);
- routerboot - fixed memory test on CCR2004-1G-12S+2XS ("/system routerboard upgrade" required);
- sfp - stabilized CRS212 SFP port functionality and improved monitoring of optical modules;
- sftp - fixed "flash" directory access (introduced in v6.46);
- smb - fixed file path validation (introduced in v6.46);
- snmp - fixed "current" value reporting on CCR series devices;
- snmp - fixed "fan-speed" value reporting on CCR series devices;
- ssh - skip interactive authentication when not running in interactive mode;
- tr069-client - added additional wireless registration table parameters;
- tr069-client - added wireless "noise-floor" and "overall-tx-ccq" information parameters;
- traffic-flow - added NAT event logging support for IPFIX;
- webfig - fixed default value presence when creating new entries under "IP->Kid Control";
- webfig - fixed negative value usage in "spoof-gps" parameter (introduced in v6.47.1);
- wireless - added support for U-NII-2 for cAP ac;
- wireless - added support for U-NII-2 for wAP ac;
- wireless - updated "canada" regulatory domain information;
- wireless - updated "indonesia5" regulatory domain information;
- wireless - updated "no_country_set" regulatory domain information;
- wireless - updated "united states" regulatory domain information;
- www - improved WWW service stability when receiving bogus packets;

Other changes since v6.47.1:

- arm - added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices;
- arm - improved watchdog and kernel panic reporting in log after reboots on IPQ4018/IPQ4019 devices;
- bonding - added LACP monitoring (CLI only);
- bridge - added warning message when port is disabled by the BPDU guard;
- bridge - correctly remove dynamic VLAN assignment for bridge ports;
- bridge - fixed dynamic VLAN assignment when changing port "frame-type" property (introduced in v6.46);
- bridge - fixed dynamic VLAN assignment when changing port to tagged VLAN member;
- bridge - fixed local MAC address removal from host table when deleting bridge interface;
- bridge - improved BPDU guard logging;
- chr - improved interface loading on startup on XEN;
- chr - improved system stability when changing flow control settings on e1000;
- crs3xx - added initial Bridge Port Extender support (CLI only);
- crs3xx - added initial Controlling Bridge support for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (CLI only);
- crs3xx - fixed duplicate host entries when creating static switch hosts;
- dhcpv6-server - added ability to generate binding on first request;
- dns - do not use type "A" for static entries with unspecified type;
- dns - fixed listening for DNS queries when only dynamic static entries exist (introduced in v6.47);
- export - fixed RouterBOARD USB "type" parameter export;
- fetch - show status "uploaded" instead of "downloaded" when uploading a file;
- filesystem - improved long-term filesystem stability and data integrity;
- ike1 - allow using "my-id" parameter with XAuth;
- ike1 - fixed policy update with and without mode configuration;
- ike1 - rekey phase 1 as responder for Windows initiators;
- ike2 - added "prf-algorithm" support for phase 1;
- ike2 - improved child SA rekeying process;
- ipsec - added SHA384 hash algorithm support for phase 1 (CLI only);
- ipsec - fixed multiple warning message display for peers;
- ipsec - inactivate peer's policy on disconnect;
- kidcontrol - allow creating static device entries without assigned user;
- lte - added "age" column and "max-age" parameter to "cell-monitor" (CLI only);
- lte - added "comment" parameter for APN profiles (CLI only);
- ppp - added "ipv6-routes" parameter to "secrets" menu;
- ppp - added support for "Framed-IPv6-Route" RADIUS attribute;
- qsfp - fixed break-out cable linking after reboot (introduced in v6.47);
- route - improved stability when 6to4 interface is configured with disabled IPv6 package;
- smb - fixed possible memory leak;
- smb - fixed SMB server (introduced in v6.47);
- smb - limit active session count to 5 per connection;
- ssh - fixed returned output saving to file when "output-to-file" parameter is used;
- system - replace "3" in superscript to "^3" on RBD53GR devices;
- tr069-client - added LTE model and revision parameters;
- tr069-client - added "X_MIKROTIK_MimoRSRP" parameter for LTE RSRP value reporting;
- tr069-client - allow passing LTE firmware update URL as XML;
- winbox - allow performing "USB Power Reset" on "0" bus on RBM33G;
- winbox - fixed "IP->Kid Control->Devices" table automatic refreshing;
- winbox - fixed minor typo in "Users" menu;
- winbox - fixed "receive-errors" setting persistence under "Wireless/Wireless Sniffer/Settings" menu;
- winbox - fixed "tls-version" parameter setting under "IP/Services" menu;
- winbox - use health values reported by gauges for "System/Health" menu;
- wireless - create "connect-list" rule when address specified for "setup-repeater"; 

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.