MikroTik RouterOS ARM Firmware 6.35 Download

Posted at December 31, 2024 by PCI-DB Team

MikroTik RouterOS ARM Firmware 6.35 Description

What's new in 6.35:

- arp - apply Linux Kernel patch to stop RouterOS from randomly exhibiting misplaced ARPs;
- mipsbe - (excluding RB4xx and CRS series) fixed rare ethernet tx buffer corruption;
- nand - implemented once a week and refresh to improve stored data integrity (will increase sector writes);
- pppoe-client - implemented fastpath support;
- l2tp - implemented l2tp and lns fastpath/fasttrack support;
- queue - added bucket-size setting to queues (derived from max-limit);
- tile - fixed rare situation when some cores decide not to take part in packet processing till next reboot;
- tunnels - fixed performance slowdown on any other tunnel disable/enable;
- winbox - increased minimal required winbox version to 3.4;
- wireless - added new package "wireless-rep";
- wireless - improved 1-chain 802.11ac station compatibility with other vendor multi-chain APs;
- address-list - fixed crash in low memory situations;
- bonding - fixed crash when creating vlans on bonding interface;
- capsman - added 802.11g/n band;
- capsman - fixed capsman extension channel names;
- certificate - revoked certificates not showing as evoked;
- certificate - allow manual crl url addition;
- chr - added support for VLAN on Hyper-V;
- chr - fixed Hyper-V booting from SCSI;
- chr - fixed Hyper-V on windows 8/10 reboot loop;
- chr - fixed bridge firewall;
- chr - fixed kernel crash when virtual ethernet was not connected to anything in Hyper-V;
- chr - implemented automatic storage increase on disk image size increase;
- chr - implemented kernel crash saving to autosupout.rif (will utilize additional 24Mb of RAM);
- chr - make shutdown request from hyper-v work (might fix other hypervisor as well);
- chr - no more installation on first boot;
- chr - try to renew expired license once a hour instead of 100h;
- cloud - don't write minor status changes to storage;
- console - fixed print follow in "/ip dns cache" menu;
- console - show RouterOS Version in /interface wireless scan;
- console - sort completions/hints in natural order;
- console - update copyright notice;
- defconf - fixed default configuration for SXT LTE;
- dhcpv6-client - fixed wrong error message;
- dhcpv6-client - fix ia expiration and lifetime validation;
- dhcpv6-server - acquire binding on renew if it does not exist;
- dude - fixed dude login logging, no more shows as winbox login;
- email - fixed send cmd server addr override;
- ethernet - add option to see S-GPON-ONU module, GPON side SN in "/int eth mon sfp#";
- ethernet - do not allow to set self as master port;
- export - bonding did not show up in global export;
- export - exclude default values from export in "/interface l2tp-server server" menu;
- export - fixed export when ipv6 address was taken from pool;
- export - fixed rare situations when not whole config was exported;
- export - updated defaults for compact export;
- fastpath - fixed crash when packet arrives on disabled interface;
- fastpath - fixed show rx-bits-per-second on all VLAN interfaces;
- fastpath - improved vlan fastpath;
- fasttrack - fixed timer updating in connections table for fasttrack connections;
- fetch - decrease connection idle timeout;
- firewall - added experimental "action=route" in mangle prerouting - that forces packets to specific gateway by ignoring routing decisions (CLI only);
- health - always report fan speed (even if it is 0);
- health - swap fan2 and fan3 on CCR1072;
- hotspot - clean-up all dead entries at once;
- hotspot - fixed possible deadlock;
- hotspot - improved html page resistance against attacks;
- hotspot - make video tag work properly on hotspot login.html page
- ip - rename max-arp-entries to less confusing max-neighbor-entries;
- ippool6 - fixed potential crash;
- ipsec - always re-key ph1 because it was possible that ph1 without DPD would expire;
- ipsec - better flush on proposal change;
- ipsec - fixed crash on policy update;
- ipsec - fixed fast ph2 SA addition;
- ipsec - fixed larval SA refresh for display;
- ipsec - fixed multiple consecutive dynamic policy flush;
- l2tp & pppoe - fixed user traffic accounting when fastpath was used;
- l2tp - introduced per tunnel allow-fast-path option;
- l2tp - added support for Hidden AVP, it is needed for proxy authentication;
- l2tp - added support for max-sessions;
- l2tp - added support for proxy authentication when receiving forwarded PPPoE sessions;
- l2tp - fixed small memory leak on reconnects;
- lcd - fixed branding packet logo drawing on startup;
- led - fixed crash on assigned interface removal;
- led - turn on fault led on CCR1072 if CPU too hot;
- leds - fixed AP-CAP led blinking after successful association to CAPsMAN;
- lte - added ipv6 support for SXT LTE;
- lte - changed AT command processing;
- lte - changed AT parsing because supported Huawei modems use unsolicited events instead of polling;
- lte - fixed bandlux modem dialing;
- lte - fixed crash on early initialization;
- lte - improve situation when SXT modem never finds operator;
- lte - replaced signal-strength with rssi in info command;
- lte - support Alt38XX modem;
- lte - support for zte mf820s2;
- lte - supported modems now use unsolicited events for network monitoring;
- lte - use timer for modem info;
- map lite - added hardware WPS button support;
- mpls - do not reset VPLS on TE tunnel re-optimize;
- ntp - fixed ntp client hangs in reached state;
- ospf - fixed crash when getting neighbor router-id in NBMA area;
- ppp - fixed ppp interface reconnect when uPnP was used;
- ppp - close connection if peer wants to re-authenticate;
- ppp - fixed memory leak high number of pppoe clients to the same server;
- ppp - fixed ppp crash if lcp packets were lost and authentication got delayed;
- ppp - fixed some clients cannot connect due to LCP restart;
- pppoe - added rfc4679 support;
- pppoe - fixed crash when removing pppoe service;
- pppoe-server - added pado-delay option;
- profiler - classify certificate signing;
- proxy - fixed ftp request url decode;
- queue - improve "/queue interface" menu;
- quickset - fixed invalid date adjusted the signal threshold for the signal chart and refresh rate;
- quickset - fixed situations when hidden password was passed as ******* from winbox nd webfig;
- radius - warn radius client if incorrect secret is being used;
- rb3011 - fixed sfp compatibility with CCR when using direct attached cables;
- rb3011 - fixed time keeping;
- rb3011 - make ether6-ether10 work if SFP module is present on bootup;
- romon-ssh - fixed active addresses for romon user;
- route - do not show duplicate gateway on connected route;
- route - fixed filter by routing table;
- routing - fixed rare kernel failure on different dynamic routing configurations;
- routing - fixed routing-marks were not erased from memory when they are not being used;
- services - do not show ssh entry under ip services if security package is disabled;
- snmp - don't group oids for bulk get with maxreps > 1 ;
- snmp - fixed cpu load reporting to 1min average and change oid to 1.3.6.1.4.1.2021.11.10.0;
- snmp - fixed dhcpv4 lease hwaddr format according to mib;
- snmp - fixed getbulk result ordering with multiple request OIDs;
- ssh - simplify login process;
- ssl - optimized certificate update;
- system - log time changes;
- tile - corrected max-l2mtu;
- tile - fixed fastpath related memory leak;
- tile - fixed performance regression on switch chip (introduced in 6.33rc18);
- tile-crypto - fixed minor memory leak;
- tool fetch - fixed https cleanup on user stop while handshaking;
- trafficgen - fixed console arguments;
- trafficgen - fixed crash when unexpected stream reappears;
- trafflow - fixed potential deadlock;
- ups - fixed entering hibernate mode when below battery capacity limit;
- users - added separate RoMoN policy;
- webfig - fixed firewall rule sorting did not work in other chains except all;
- webfig - show single item groups as optional values;
- webfig - sort numeric columns numerically even if they contain some text;
- winbox - added "pw-type" to "/interface vpls bgp-vpls" menu;
- winbox - added "use-control-word" and "pw-mtu" to "/interface vpls cisco-bgp-vpls" menu;
- winbox - added /interface wireless setup-repeater;
- winbox - added all the rates settings to the capsman;
- winbox - added flip-screen option to lcd settings;
- winbox - added init-delay option to routerboard settings;
- winbox - added ipv6 firewall missing log option;
- winbox - added missing eap-ttls-mschamv2 method to wireless security profile;
- winbox - added mtu=auto support to eoipv6 tunnel;
- winbox - added sfp-mac for GPON interfaces;
- winbox - added support for new settings from wireless-rep package;
- winbox - added support for route action in mangle rules;
- winbox - allow to set additional-network-modes;
- winbox - allow to set multiple dh-groups;
- winbox - disable autostart for wireless scan,snooper,align etc. on open;
- winbox - do not show "enable-jumper-reset" setting on devices without serial port;
- winbox - do not show real-tx-power column in current-tx-power by default;
- winbox - fixed unset options in /routing ospf interface menu;
- winbox - hotspot default-trial user shows profile as "unknown" in Winbox;
- winbox - improved winbox connection loss detection, fixes winbox safe mode;
- winbox - limit ospf key to 16 symbols;
- winbox - make additional-network-mode optional for lte interface;
- winbox - make build with latest lte changes;
- winbox - make mrru disabled and set mtu+mru to auto by default on new servers;
- winbox - show "usb-power-reset" option on all boards that have it;
- wireless - fixed crash on nstreme-dual interface stats update;
- wireless-rep - added 802.11g/n only band;
- wireless-rep - added STEP feature for the scan-list;
- wireless-rep - added WPS client support;
- wireless-rep - added support for saving wireless scan results to file;
- wireless-rep - added support for wireless background scan for 802.11 protocol;
- wireless-rep - added support for wireless repeater mode for 802.11 protocol;
- wireless-rep - added support for wireless scan rounds setting;
- wireless-rep - adjust roaming scan times;
- wireless-rep - allow to connect to AP after scan;
- wireless-rep - do not allow empty ssid for AP modes;
- wireless-rep - fixed crash on non-HT clients;
- wireless-rep - fixed latency issues with Intel wireless clients;
- wireless-rep - fixed nv2 protocol;
- wireless-rep - fixed qos frame-priority when nv2 protocol used in station-wds mode;
- wireless-rep - fixed signal leds;
- wireless-rep - fixed speed issue when connected with Intel 802.11ac;
- wireless-rep - initial support for station roaming for station mode in 802.11 protocol;
- wireless-rep - request interface name for setup-repeater;
- wireless-rep - use full identity where possible;
- wireless-rep,capsman - added more configuration settings;
- wireless-rep,capsman - added rate config support.

Known issue:

- Some huawei lte modems might not get IP address after the reboot of the router - disable/enable of the modems interface fixes that

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you’re looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don’t power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don’t miss the update that will improve your device.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.

Related MikroTik Drivers