MikroTik RouterOS MMIPS Firmware 6.41 RC 52 Download

Posted at December 18, 2024 by PCI-DB Team

MikroTik RouterOS MMIPS Firmware 6.41 RC 52 Description

Important note!!! Backup before upgrade!

- RouterOS (v6.40rc36-rc40 and) v6.41rc1+ contains new bridge implementation that supports hardware offloading (hw-offload).
- This update will convert all interface "master-port" configuration into new bridge configuration, and eliminate "master-port" option as such.
- Bridge will handle all Layer2 forwarding and the use of switch-chip (hw-offload) will be automatically turned on based on appropriate conditions.
- The rest of RouterOS Switch specific configuration remains untouched in usual menus for now.
- Please, note that downgrading to previous RouterOS versions will not restore "master-port" configuration, so use backups to restore configuration on downgrade.

What's new in 6.41rc52:

- bridge - general implementation of hw-offload bridge (introduced in v6.40rc36);
- discovery - use "/interface list" instead of interface name under neighbor discovery settings;
- hotspot - fixed Walled Garden IP functionality when address-list is used;
- ovpn-server - do not periodically change automatically generated server MAC address;
- poe - added new "poe-out" status "controller-error";
- poe - fixed false positive excessive logs in auto-on mode when connected to 100 Mbps device powered from another power source;
- poe - log PoE status related messages under debug topic;
- ppp - do not disconnect PPP connection after "idle-timeout" even if traffic is being processed;
- quickset - added support for "/interface list" in firewall, neighbor discovery, MAC-Telnet and MAC-Winbox;
- quickset - fixed situation when Quickset automatically changes mode to CPE;
- w60g - general work on PtMP implementation for 60 GHz connections;
- wireless - added "indonesia3" regulatory domain information;
- wireless - added passive scan functionality (CLI only);

Other changes since 6.40.5:

- bridge - implemented software based vlan-aware bridges;
- switch - "master-port" conversion into a bridge with hardware offload "hw" option;
- detnet - implemented "/interface detect-internet" feature;
- routerboot - RouterBOOT version numbering system merged with RouterOS;
- arm - minor improvements on CPU load distribution for RB1100 series devices;
- arp - fixed invalid static ARP entries after reboot on interfaces without IP address;
- bgp - added 32-bit private ASN support;
- bridge - added comment support for VLANs (CLI only);
- bridge - added initial support for hardware "igmp-snooping" on CRS1xx/2xx;
- bridge - added support for "/interface list" as a bridge port;
- bridge - assume "point-to-point=yes" for all Full Duplex Ethernet interfaces when STP is used (as per standard);
- bridge - automatically turn off "fast-forward" feature if both bridge ports have "H" flag;
- bridge - changed "Host" and "MDB" table column order;
- bridge - fixed "fast-forward" counters;
- bridge - fixed ARP setting (introduced in v6.40rc36);
- bridge - fixed connectivity issues when there are multiple VLAN interfaces on bridge;
- bridge - fixed multicast forwarding (introduced in v6.40rc36);
- bridge - implemented dynamic entries for active MST port overrides;
- bridge - implemented software based "igmp-snooping";
- bridge - implemented software based MSTP;
- bridge - removed "frame-types" and "ingress-filtering" for bridge interfaces (introduced in v6.40rc36);
- bridge - set "igmp-snooping=no" by default on new bridges;
- bridge - show "admin-mac" only if "auto-mac=no";
- bridge - show bridge interface local addresses in the host table;
- btest - improved reliability on Bandwidth Test when device`s RAM is almost full;
- capsman - added "vlan-mode=no-tag" option;
- capsman - return complete CA chain when issuing new certificate;
- certificate - fixed SCEP "get" request URL encoding;
- certificate - show "Expired" flag when initial CRL fetch fails;
- chr - added KVM memory balloon support;
- chr - added suspend support;
- console - do not stop "/certificate sign" process if console times out in 1 minute;
- console - removed "/setup";
- crs317 - added initial support for HW offloaded MPLS forwarding;
- crs326 - fixed packet processing speed on switch chip if individual port link speed differs;
- crs3xx - added ingress/egress rate input limits;
- crs3xx - switch VLAN configuration integrated within bridge VLAN configuration with hw-offload;
- dhcp - fixed DHCP services failing after reboot when DHCP option was used;
- dhcp - fixed unresponsive DHCP service caused by inability to read not set RAW options;
- dhcp - require DHCP option name to be unique;
- dhcp-client - limited DHCP client "default-route-distance" minimal value to 1;
- dhcp-server - added "option-set" argument (CLI only);
- dhcpv4-client - add dynamic DHCP client for mobile clients which require it;
- dhcpv4-client - allow to use DUID for client as identity string as the option 61;
- e-mail - do not show errors when sending e-mail from script;
- eoip - made L2MTU parameter read-only;
- ethernet - removed "master-port" parameter;
- export - fixed interface list export;
- fetch - accept all HTTP 2xx status codes;
- health - fixed bogus voltage readings on CCR1009;
- ike1 - fixed crash on xauth if user does not exist;
- ike1 - release mismatched PH2 peer IDs;
- ike2 - check identities on "initial-contact";
- ike2 - fixed initiator DDoS cookie processing;
- ike2 - fixed responder DDoS cookie first notify type check;
- ike2 - use peer configuration address when available on empty TSi;
- interface - added "/interface reset-counters" command (CLI only);
- interface - added default "/interface list" "dynamic" which contains dynamic interfaces;
- interface - added option to join and exclude "/interface list" from one and another;
- interface - fixed corrupted "/interface list" configuration after upgrade;
- ippool6 - try to assign desired prefix for client if prefix is not being already used;
- ipsec - added DH groups 19, 20 and 21 support for phase1 and phase2;
- ipsec - allow to specify "remote-peer" address as DNS name;
- ipsec - fixed incorrect esp proposal key size usage;
- ipsec - fixed policy enable/disable;
- ipsec - improved reliability on certificate usage;
- ipsec - renamed "firewall" argument to "notrack-chain" in peer configuration;
- ipsec - skip invalid policies for phase2;
- ipv6 - add dynamic "/ip dns" server address from RA when RA is permitted by configuration;
- l2tp - improved reliability on packet processing in FastPath;
- l2tp-server - fixed PPP services becoming unresponsive after changes on L2TP server with IPSec configuration;
- lcd - fixed "flip-screen=yes" state after reboot;
- log - added "bridge" topic;
- log - fixed interface name in log messages;
- log - optimized "poe-out" logging topic logs;
- lte - added "/interface lte apn" menu (Passthrough requires reconfiguration);
- lte - added Passthrough support (CLI only);
- lte - added Passthrough support;
- lte - added support for ZTE ME3630 E1C with additional "/port" for GPS usage;
- lte - added Yota non-configurable modem support;
- lte - automatically add "/ip dhcp-client" configuration on interface;
- lte - changed default values to "add-default-route=yes", "use-peer-dns=yes" and "default-route-distance=2";
- lte - fixed error when trying to add APN profile without name;
- lte - fixed rare crash when initializing LTE modem after reset;
- lte - fixed user authentication for R11e-LTE when new firmware is used;
- lte - integrated IP address acquisition without DHCP client for wAP LTE kit-US;
- lte - limited minimal default route distance to 1;
- m11g - improved ethernet performance on high load;
- mac-server - use "/interface list" instead of interface name under MAC server settings;
- modem - added initial support for Alcatel IK40 and Olicard 500;
- neighbor - show neighbors on actual bridge port instead of bridge itself
- netinstall - fixed missing "/flash/etc" on first bootup;
- netinstall - fixed missing default configuration prompt on first startup after reset/netinstall;
- ospf - fixed OSPF v2 and v3 neighbor election;
- ppp - added support for Sierra MC7750, Verizon USB730L;
- ppp - fixed situation when part of PPP configuration was reset to default values after reboot;
- pppoe-server - fixed situation when PPPoE servers become invalid on reboot;
- quickset - renamed router IP static DNS name to "router.lan";
- radius - limited RADIUS timeout maximum value to 3 seconds;
- sfp - fixed SFP interface power monitor when bad SFP DDMI information is received;
- sftp - added functionality which imports ".auto.rsc" file or reboots router on ".auto.npk" upload;
- sms - fixed minor problem for SMS delivery;
- snmp - fixed "ifHighSpeed" value of VLAN, VRRP and Bonding interfaces;
- snmp - fixed bridge host requests on devices with multiple bridge interfaces;
- snmp - show only available OIDs under "/system health print oid";
- ssh - do not use DH group1 with strong-crypto enabled;
- ssh - enforced 2048bit DH group on tile and x86 architectures;
- tile - improved hardware encryption processes;
- traceroute - improved "/tool traceroute" results processing;
- upnp - add "src-address" parameter on NAT rule if it is specified on UPnP request;
- upnp - deny UPnP request if port is already used by the router;
- ups - fixed duplicate "failed" UPS logs;
- webfig - added favicon file;
- webfig - fixed terminal graphic user interface under Safari browser;
- winbox - added "notrack-chain" setting to IPSec peers;
- winbox - added support for "_" symbol in terminal window;
- winbox - do not show duplicate "Switch" menus for CRS326;
- winbox - do not show duplicate "Template" parameters for filter in IPSec policy list;
- winbox - do not show duplicate filter parameters "Published" in ARP list;
- winbox - do not show unnecessary tabs from "Switch" menu;
- winbox - fixed "/certificate sign" process;
- winbox - fixed bridge port sorting order by interface name;
- winbox - show warnings under "/system routerboard settings" menu;
- wireless - added "allow-signal-out-off-range" option for Access List entries;
- wireless - improved reliability on "rx-rate" selection process;
- wireless - log "signal-strength" when successfully connected to AP;
- wireless - new driver with initial support for 160 and 80+80 MHz channel width;
- wireless - pass interface MAC address in Sniffer TZSP frames;
- wireless - updated "united kingdom" regulatory domain information;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.

Related MikroTik Drivers