MikroTik RouterOS x86 Firmware 6.33 RC 36 Download

Posted at December 22, 2024 by PCI-DB Team

MikroTik RouterOS x86 Firmware 6.33 RC 36 Description

What's new in 6.33rc36:

- l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
- webfig - some of the setting were shifted to the right;
- packages - allow to reinstall from bundle to separate packages & vice versa;
- packages - prefer out of bundle packages when both of them are installed;
- packages - fix a problem of upgrading bundle package to non bundled ones;
- ipsec - force flow cache validation once in 1h;
- dhcpv6-client - show current server address;
- dhcpv6-client - split out IA ops;
- winbox - make sure that all setting names get shown in full;
- winbox - added poe power-cycle-ping settings to ethernet interfaces;
- ppp - handle properly case were ppp client is given same address for local & remote end;
- winbox - added vlan-mode & vlan-id to virtual-ap interface;
- winbox - added timeout column to ipv6 address lists;
- winbox - show SFP Tx/Rx Power properly;
- winbox - added min-links to bonding interface;
- winbox - do not show health menu on RB951Ui-2HnD;
- winbox - added support for Login-Timeout & MAC-Auth-Mode in hotspot;
- cerm - added option to disable crl download in '/certificate settings';
- winbox - make user ssh key import work again;
- webfig - make "Copy to Access List" work in CAPsMAN Registration Table;
- userman - fix report generation problem which could result in some users being skipped from it;
- winbox - fix to allow cpu-port as mirror-target
- proxy - error.html parsing enhancement to improve performance
- CCR1072 - improve ether1 performance under heavy load
- routerboard - indicate RouterBOOT type in /system routerboard print;
- mpls - properly use mpls mtu for routes;
- cerm - fix key decription for signed certificates;
- trafflow - report flow addresses in v1 and v5 without NAT awerness;
- dhcpv6 - small fixes for dhcp-pd client and ippool6;
- hotspot - add mac-auth-mode setting for mac-as-passwd option;
- hotspot - add login-timeout setting to force login for unauth hosts;
- auto-upgrade - fixed auto upgrade for smipsbe;
- dns - do not create duplicate entries for same dynamic dns server addresses;
- ipsec - fix set on multiple policies which could result in adding non existent dynamic policies to the list;
- email - allow server to be specified as fqdn which is resolved on each send;
- fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path");
- ppp, pptp, l2tp, pppoe - fix ppp compression related crashes;
- cerm - also accept downloaded CRLs in PEM format;
- userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases whith hundreds of users;
- health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter;
- userman - added phone number support to signup form;
- ip pool6 - try to acquire the same prefix if info matches recently freed;
- ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
- ipsec - use local-address for phase 1 matching and initiation;
- route - fixed crash on removing route that was aggregated;
- ipsec - fix replay window, was accidently disabled since version 6.30;
- ssh - allow host key import/export;
- ssh - use 2048bit RSA host key when strong-crypto enabled;
- ssh - support RSA keys for user authentication;
- wlan - improved WMM-PowerSave support in wireless-cm2 package;
- pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
- auto upgrade - added ability to select which versions to select when upgrading;
- quickset - fixed HomeAP mode;
- lte - improved modem identification to better support multiple identical modems;
- snmp - fix system scripts table;
- tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
- fastpath - active mac-winbox or mac-telnet session no longer suspends fastpath;
- fastpath - added per interface fastpath counters;
- fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
- ppp - added on-up & on-down scripts to ppp profile;
- winbox - allow to specify dns name in all the tunnels;
- pppoe - added support for MTU > 1492 on PPPoE;
- cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
- ppp-client - added default channels for Alcatel OneTouch L100V;
- defconf - fix for boards that had bridge with only wlan ports;
- ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
- cerm - use certificate file name for imported cert name;
- fetch - fixed error message when error code 200 was received;
- cerm - rebuild crl for local ca if crl file does not exist;
- winbox - make directed broadcasts work for neighbor discovery;
- upnp: automatically adjust mappings to new external ip change;
- ppp - added ppp interface to upnp internals/externals if requested;
- ppp - when adding ipv6 default route use user provided distance;
- userman - allow to correctly enable CoA on router;
- cerm - also accept downloaded CRLs in PEM format;
- cerm - show crl nextupdate time;
- ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit, Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
- ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
- userman - refresh active sessions/users view dynamically;
- package - added version tag and show everywhere alongside of version number;
- wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you’re looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don’t power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don’t miss the update that will improve your device. 

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.

Related MikroTik Drivers