MikroTik RouterOS X86 Firmware 6.42 RC 11 Download

Posted at December 26, 2024 by PCI-DB Team

MikroTik RouterOS X86 Firmware 6.42 RC 11 Description

What's new in 6.42rc11:

- bridge - fixed IGMP Snooping after disabling/enabling bridge;
- bridge - fixed allowed MSTI priority values;
- certificate - do not use utf8 for SCEP challange password;
- chr - automaticly generate new systemID on first startup;
- crs326 - fixed possible packet leaking from CPU to switch ports;
- dhcpv4-server - added "dns-none" option to "/ip dhcp-server network dns";
- dhcpv6-client - implement confirm after reboot;
- filesystem - fixed situations when "/flash" directory lost files after upgrade;
- ipsec - fixed AES-CTR and AES-GCM support on RB1200;
- kidcontrol - added initial support for "/ip kid-control" feature;
- ppp - changed default value of "route-distance" to 1;
- ppp - fixed change-mss funcionality in some specific traffic (introduced in v6.41);
- webfig - fixed MAC address ordering;
- webfig - fixed wireless snooper address, SSID and other column ordering;
- winbox - added "dhcp-option-set" to DHCP server;
- winbox - added "insert-queue-before" to DHCP server;
- winbox - added DHCPv6 client info request type and updated statuses;
- winbox - show Bridge Port PVID column by default;
- wireless - fixed nv2 (introduced in v6.42rc);

Other changes since 6.41:

- bridge - fixed bridge related settings conversation during upgrade from pre-v6.41 bridge implementation (introduced v6.41);
- bridge - fixed hw-offload disabling for Mediatek and Realtek switches when STP/RSTP configured;
- bridge - fixed hw-offload disabling when adding a port with "horizon" set;
- bridge - fixed interface list moving in "/interface bridge port" menu;
- bridge - fixed repetitive port "priority" set;
- bridge - fixed situation when packet could be sent with local MAC as dst-mac;
- bridge - properly update "actual-mtu" after MTU value changes (introduced v6.41);
- btest - fixed TCP test accuracy when low TX/RX rates are used;
- capsman - improved CAPsMAN responsiveness on systems with large amount of CAP interfaces;
- crs1xx/2xx - added BPDU value for "ingress-vlan-translation" menu "protocol" option;
- crs317 - improved transmit performance between 10G and 1G ports;
- crs3xx - hide deprecated VLAN related settings in "/interface ethernet switch port" menu;
- detnet - additional work on "detect-internet" implementation;
- detnet - fixed "detect-internet" feature unavailability if router had too long identity (introduced v6.41);
- dhcpv4-server - fixed framed and classless route received from RADIUS server;
- dhcpv6-client - added info exchange support;
- dhcpv6-client - added possibility to specify options (CLI only);
- dhcpv6-client - added support for options 15 and 16;
- dhcpv6-server - added DHCPv4 style user options;
- discovery - fixed discovery related settings conversation during upgrade from pre-v6.41 discovery implementation (introduced v6.41);
- dude - fixed e-mail notifications when default port is not used;
- firewall - fixed "tls-host" firewall matcher (introduced v6.41);
- firewall - limited maximum "address-list-timeout" value to 35w3d13h13m56s;
- ike1 - display error message when peer requests "mode-config" when it is not configured;
- ike1 - do not accept "mode-config" reply more than once;
- ike1 - fixed "aes-ctr" and "aes-gcm" encryption algorithms (introduced v6.41);
- ike2 - delay rekeyed peer outbound SA installation;
- ike2 - improve half-open connection handling;
- interface - improved interface configuration responsiveness;
- ipsec - properly update IPsec secret for IPIP/EoIP/GRE dynamic peer;
- log - properly report bridge interface MAC address changes;
- lte - do not add DHCP client on LTE modems that doesn't use DHCP;
- lte - fixed DHCP client adding for MF823 modem;
- mac-ping - fixed duplicate responses;
- modem - added initial support for AC340U;
- poe-out - do not show "poe-out-current" on devices which can not determine it;
- ppp - allow to override remote user PPP profile via "Mikrotik-Group";
- quickset - show "G" flag for guest users;
- radius - added warning if PPP authentication over RADIUS is enabled;
- radius - increase allowed RADIUS server timeout to 60s;
- rb1100ahx4 - fixed reset button responsiveness when regular firmware is used;
- routerboot - fixed missing upgrade firmware for "ar7240" devices;
- snmp - added w60g support;
- snmp - allow also IPv6 on default public community;
- snmp - fixed SNMP for W60G interfaces;
- ssh - improved key import error messages;
- tile - added "aes-ctr" hardware acceleration support;
- tile - fixed USB device speed detection after reboot;
- tile - improved stability in high throughput HW accelerated IPsec setups ("/system routerboard upgrade" required);
- tr069-client - added "DownloadDiagnostics" and "UploadDiagnostics";
- tr069-client - fixed HTTPS authentication process;
- traffic-flow - do not count single extra packet per each flow;
- webfig - added support for proper default policies when adding script or scheduler job;
- webfig - fixed bridge port sorting order by name;
- winbox - added possibility to delete SMS from Inbox;
- winbox - allow to open bridge host entry;
- winbox - allow to specify "to-ports" for "action=masquerade";
- winbox - do not show "hw" option on non-ethernet interfaces;
- winbox - do not show VLAN related settings in switch port menu on CRS3xx boards;
- winbox - fixed "/tool e-mail send" attachment behaviour;
- winbox - improved stability when using trackpad scrolling in large lists;
- wireless - fixed nv2 protocol on ARM platform SXTsq devices;
- wireless - improved wireless scan functionality for devices with multiple wireless interfaces;
- wireless - updated "Czech Republic" country 5.8 GHz frequency range;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.

Related MikroTik Drivers