MikroTik RouterOS X86 Firmware 6.42 RC 43 Download

Posted at December 22, 2024 by PCI-DB Team

MikroTik RouterOS X86 Firmware 6.42 RC 43 Description

What's new in 6.42rc43:

- tile - improved overall system performance and stability ("/system routerboard upgrade" required);
- crs326 - fixed known multicast flooding to the CPU;
- dhcp - improved DHCP service reliability when it is configured on bridge interface;
- ssh - generate SSH keys only on the first connect attempt instead of the first boot;
- ups - improved disconnect message handling between RouterOS and UPS;
- wireless - enable all chains by default on devices without external antennas after configuration reset;

Other changes since 6.41.3:

- bridge - added host aging timer for crs3xx and Atheros hw-bridges;
- bridge - added per-port forwarding options for broadcasts, unknown-multicasts and unknown-unicasts (CLI only);
- bridge - added per-port learning options (CLI only);
- bridge - added support for static hosts;
- bridge - fixed bridge port interface parameter under "/interface bridge host print detail";
- bridge - fixed false MAC address learning on hAP ac2 and cAP ac devices;
- bridge - fixed incorrect "fast-forward" enabling when ports were switched;
- bridge - fixed MAC learning for VRRP interfaces on bridge;
- bridge - fixed reliability on software bridges when used on devices without switch chip;
- bridge - hide options for disabled bridge features in CLI;
- bridge - show "hw" flags only on Ethernet interfaces and interface lists;
- capsman - added "allow-signal-out-of-range" option for Access List entries;
- capsman - added support for "interface-list" in Access List and Datapath entries;
- capsman - improved CAPsMAN responsiveness on systems with large amount of CAP interfaces;
- capsman - log "signal-strength" when successfully connected to AP;
- certificate - added PKCS#10 version check;
- certificate - dropped DES support and added AES instead for SCEP;
- certificate - dropped MD5 support and require SHA1 as minimum for SCEP;
- chr - added "open-vm-tools" on VMware installations;
- chr - added "qemu-guest-agent" and "virtio-scsi" driver on KVM installations;
- chr - added "xe-daemon" on Xen installations;
- chr - added support for Hyper-V ballooning, guest quiescing, host-guest file transfer, integration services and static IP injection;
- chr - added support for NIC hot-plug on VMware and Xen installations;
- chr - fixed additional disk detaching on Xen installations;
- chr - fixed interface naming order when adding more than 4 interfaces on VMware installations;
- chr - fixed suspend on Xen installations;
- chr - make additional disks visible under "/disk" on Xen installations;
- chr - make virtio disks visible under "/disk" on KVM installations;
- console - fixed "idpr-cmtp" protocol by changing its value from 39 to 38;
- console - improved console stability after it has not been used for a long time;
- crs1xx/2xx - added BPDU value for "ingress-vlan-translation" menu "protocol" option;
- crs212 - fixed Ethernet boot through CRS326 devices;
- crs3xx - added initial “hw-offload” support for 802.3ad and “balance-xor” bonding;
- crs3xx - added switch port "storm-rate" limiting options;
- detnet - fixed "detect-internet" feature unavailability if router had too long identity (introduced in v6.41);
- dhcpv4-server - added "dns-none" option to "/ip dhcp-server network dns";
- dhcpv6 - make sure that time is set before restoring bindings;
- dhcpv6-client - added info exchange support;
- dhcpv6-client - added possibility to specify options;
- dhcpv6-client - added support for options 15 and 16;
- dhcpv6-client - implement confirm after reboot;
- dhcpv6-server - added DHCPv4 style user options;
- email - set maximum number of sessions to 100;
- fetch - added "http-content-type" option to allow setting MIME type of the data in free text form;
- fetch - added "output" option for all modes in order to return result to file, variable or ignore it;
- fetch - increased maximum number of sessions to 100;
- filesystem - implemented additional system storage maintenance checks on ARM CPU based devices;
- flashfig - properly apply configuration provided by Flashfig;
- gps - improved NMEA sentence handling;
- health - log warning when switching between redundant power supplies;
- hotspot - improved HTTPS matching in Walled Garden rules;
- ike1 - display error message when peer requests "mode-config" when it is not configured;
- ike1 - do not accept "mode-config" reply more than once;
- ike1 - fixed wildcard policy lookup on responder;
- interface - improved interface configuration responsiveness;
- ippool - added ability to specify comment;
- ipsec - fixed AES-CTR and AES-GCM support on RB1200;
- ipsec - improved single tunnel hardware acceleration performance on MMIPS platform devices;
- ipsec - properly detect interface for "mode-config" client IP address assignment;
- kidcontrol - initial work on "/ip kid-control" feature;
- lte - added initial support for SIM7600 LTE modem interface;
- lte - added support for the user and password authentication for wAP-LTE-kit-US (R11e-LTE-US);
- lte - do not add DHCP client on LTE modems that doesn't use DHCP;
- lte - fixed DHCP client adding for MF823 modem;
- mac-ping - fixed duplicate responses;
- modem - added initial support for AC340U;
- netwatch - limit to read, write, test and reboot policies for Netwatch script execution;
- poe - hide PoE related properties on interfaces which does not provide power output;
- poe-out - do not show "poe-out-current" on devices which can not determine it;
- ppp - added initial support for NETGEAR AC340U and ZyXEL WAH1604;
- ppp - allow to override remote user PPP profile via "Mikrotik-Group";
- quickset - fixed NAT if PPPoE client is used for Internet access;
- quickset - properly detect LTE interface on startup;
- quickset - show "G" flag for guest users;
- r11e-lte - improved LTE connection initialization process;
- routerboard - added RouterBOOT "auto-upgrade" after RouterOS upgrade (extra reboot required);
- sniffer - fixed situation when "/tool sniffer packet" returned packets in incorrect order;
- snmp - added "/caps-man interface print oid";
- snmp - added "/interface w60g print oid";
- snmp - added "board-name" OID;
- snmp - improved request processing performance for wireless and CAP interfaces;
- ssh - improved key import error messages;
- ssh - remove imported public SSH keys when their owner user is removed;
- switch - hide "ingress-rate" and "egress-rate" for non-crs3xx switches;
- tile - added "aes-ctr" hardware acceleration support;
- tr069-client - added "DownloadDiagnostics" and "UploadDiagnostics";
- tr069-client - correctly return “TransferComplete” after vendor configuration file transfer;
- tr069-client - fixed "/tool fetch" commands executed with ".alter" script;
- tr069-client - fixed HTTPS authentication process;
- upgrade - improved RouterOS upgrade process and restrict upgrade from RouterOS older than v5.16;
- userman - added support for ARM and MMIPS platform;
- winbox - added "antenna" setting under GPS settings for MIPS platform devices;
- winbox - added "crl-store" setting to certficate settings;
- winbox - added "insert-queue-before" to DHCP server;
- winbox - added 160 MHz "channel-width" to wireless settings;
- winbox - added broadcast and flood settings to bridge ports;
- winbox - added DHCPv6 client info request type and updated statuses;
- winbox - added missing protocol numbers to IPv4 and IPv6 firewall;
- winbox - added possibility to delete SMS from inbox;
- winbox - allow to comment new object without committing it;
- winbox - allow to open bridge host entry;
- winbox - fixed name for "out-bridge-list" parameter under bridge firewall rules;
- winbox - fixed typo from "UPtime" to "Uptime";
- winbox - fixed Winbox closing when viewing graph which does not contain any data;
- winbox - improved stability when using trackpad scrolling in large lists;
- winbox - made UDP local and remote TX size parameter optional in Bandwidth Test tool;
- winbox - moved "ageing-time" setting from STP to General tab;
- winbox - removed “VLAN” section from “Switch” menu for CRS3xx devices;
- winbox - show Bridge Port PVID column by default;
- winbox - show CQI in LTE info;
- winbox - show only master CAP interfaces under CAPsMAN wireless scan tool;
- wireless - added "realm-raw" setting for "/interface wireless interworking-profiles" (CLI only);
- wireless - added initial support for "nstreme-plus";
- wireless - added support for "band=5ghz-n/ac";
- wireless - added support for "interface-list" for Access List entries;
- wireless - added support for legacy AR9485 chipset;
- wireless - fixed "wds-slave" channel selection when single frequency is specified;
- wireless - fixed incompatibility with macOS clients;
- wireless - fixed long "scan-list" entries not working for ARM based wireless interfaces;
- wireless - fixed nv2 protocol on ARM platform SXTsq devices;
- wireless - fixed RTS/CTS option for the ARM based wireless devices;
- wireless - improved compatibility with specific wireless AC standard clients;
- wireless - improved packet processing on ARM platform devices;
- wireless - improved wireless scan functionality;
- wireless - improved wireless stability on hAP ac2 devices while USB is being used;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.

Related MikroTik Drivers