MikroTik RouterOS PPC Firmware 6.36 RC 27 Download

Posted at November 23, 2024 by PCI-DB Team

MikroTik RouterOS PPC Firmware 6.36 RC 27 Description

What's new in 6.36rc27:

- dude - server package is now made smaller. client side content upgrade is now removed from it and is downloaded straight from our cloud. So workstations on which client is used will require access to wan. Alternatively upgrade must be done by reinstalling the client on each new release;
- address-list - make "dynamic=yes" as read-only option;
- bonding - fixed bonding privmary slave assignment for ovpn interfaces after startup;
- disk - added support for Plextor PX-G128M6e(A) SSD on CCR1072;
- firewall - do not show disabled=no in export;
- firewall - fixed spelling in built-in firewall commentary;
- gps - fixed longitude seconds part;
- lcd - reduced lowest backlight-timeout value from 5m to 30s;
- logs - increase excessive multicast/broadcast warning threshold every time it is logged;
- lte - removed option allow-roaming for Huawei ME909u and MU609 devices;
- userman - fixed crash on database upload;
- wireless-rep - fixed crash on nv2 reconnect;
- icmp - fixed kernel failure when icmp packet could not be processed on high load;
- lte - Huawei MU609 must use latest firmware to work correctly;
- lte - use only creg result codes as network status indications;
- proxy - limit max ram usage to 80% for tile and x86 devices;
- rb3011 - fixed reset button functionality;
- snmp - fixed interface stats branch from MikroTik MIB;
- snmp - report current access technology and cell id for lte modems;
- dude - (changes discussed here: forum.mikrotik.com/viewtopic.php?f=8&t=108083 );
- ippool6 - fixed crash on acquire when prefix length is equal with pool prefix length;
- rb3011 - improved performance on high cpu usage;
- snmp - report ram memory as ram instead of other;
- certificate - added automatic scep renewal delay after startup to avoid all requests accessing CA at the same time;
- certificate - cancel pending renew when certificate becomes valid after date change;
- certificate - force scep renewal on system clock updates;
- clock - save current time to configuration once per day even if there are no time zone adjustments pending;
- console - show message time in echo log messages;
- defconf - changed channel extension to 20/40/80mhz for all ac boards;
- fetch - support tls host name extension;
- kernel - fixed possible kernel deadlock when Sierra USB mode is being used;
- address - allow multiple equal ip addresses to be added if neither or only one is enabled;
- bonding - fixed 802.3ad load balancing mode over tunnels ;
- certificate - display issuer and subject on check failure;
- cloud - fixed export order;
- dhcpv6-server - fixed binding last-seen update;
- e-mail - removed subject and body length limit;
- ethernet - fixed memory leak when setting interface without changing configuration;
- firewall - added "/interface list" menu which allows to create list of interfaces which can be used as in/out-interface-list matcher in firewall;
- firewall - added pre-connection tracking filter - "raw" table, that allow to protect connection-tracking from unnecessary traffic;
- firewall - allow to add domain name to address-lists (dynamic entries for resolved addresses will be added to specified list);
- ipsec - fixed checks before accessing ph1 nat options;
- ipsec - store udp encapsulation type in proposal;
- ovpn - enable perfect forwarding secrecy support by default;
- ovpn - fixed compatibility with OpenVPN 2.3.11;
- rb3011 - fixed port flapping on ether6-ether10;
- snmp - fixed get function for snmp>=v2 when oid does not exist;
- winbox - report correctly dude users in active users list;
- wireless-rep - treat missing SSID element as hidden SSID;
- dhcpv6 client - fixed ia lifetime validation when it is set by dhcpv6 client;
- health - fixed incorrect voltage after reboot on RB2011UAS;
- health - fixed broken factory voltage calibration data for some hAP ac boards;
- log - added whole scep certificate chain print;
- lte - fix crash on SXT LTE while resetting card while at high traffic;
- lte - added allow-roaming option for Huawei MU709, ME909s, ME909u devices;
- lte - changed driver loading for class 2 usb rndis devices;
- userman - use ipnpb.paypal.com for payment verification;
- capsman - fixed crash when running over ovpn;
- dhcp-pd - correct server listing for commands;
- fastpath - fixed kernel failure when fastpath handles packet with multicast dst-address;
- ipsec - don't register temporary ph2 on dead list;
- ipsec - fixed mode-config export;
- ipsec - fixed route cache overflow when using ipsec with route cache disabled;
- sniffer - fixed ipv6 address matching;
- ssh - add rsa host key size parameter;
- ssh-keygen - add rsa key size parameter;
- usb - I-tec U3GLAN3HUB usb hub/ethernet dongle now shows up correctly as ethernet interface;
- usb - implement possibility to recognize usb hubs/ethernet-dongles; (if usb hubs/ethernet-dongles are not recognized with this version - send supout.rif file)
- wireless-rep - added initial API support for snooper;
- bonding - fixed crash on RoMON traffic transmit;
- bonding - implemented l2mtu value == smallest slave interfaces l2mtu;
- ipsec - added dead ph2 reply detection;
- ipsec - fixed AH with SHA2;
- arm - added Dude server support;
- arm - fixed kernel failure on low memory;
- lte - added cinterion pls8 support;
- ssl - fixed memory leak on ssl connect/disconnect (fetch, ovpn, etc.);
- trafficflow - allow to filter with interface lists;
- chr - fixed stalling services (introduced in 6.36rc6);
- dhcp-server - fixed radius framed route addition after reboot on client renew;
- lte - improved multiple same model modems identification;
- route - fixed ospf-v3 crash (introduced in 6.36rc6);
- traffic-flow - added ipfix support (RFC5101 and RFC5102);
- ipsec - fix initiator modecfg dynamic dns;
- nand - improved nand refresh feature to enhance stored data integrity;
- route - fixed ospf by handling ipv6 encoded prefixes with stray bits;
- arp - added arp-timeout option per interface;
- ntp - fixed time keeping on SXT ac, RB911L, cAP and wAP
- tunnel - added option to auto detect tunnel local-address;
- wireless-rep - fixed scan-list unset;
- firewall - added udplite, dccp, sctp connection tracking helpers;
- switch - fixed switch compact export;
- wireless - wireless-fp is discontinued, it needs to be uninstalled/disabled before upgrade;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you’re looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don’t power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don’t miss the update that will improve your device. 

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.

Related MikroTik Drivers