MikroTik RouterOS x86 Firmware 6.41 RC 20 Download

Posted at December 22, 2024 by PCI-DB Team

MikroTik RouterOS x86 Firmware 6.41 RC 20 Description

Important note!!! Backup before upgrade!

- RouterOS (v6.40rc36-rc40 and) v6.41rc1+ contains new bridge implementation that supports hardware offloading (hw-offload).
- This update will convert all interface "master-port" configuration into new bridge configuration, and eliminate "master-port" option as such.
- Bridge will handle all Layer2 forwarding and the use of switch-chip (hw-offload) will be automatically turned on based on appropriate conditions.
- The rest of RouterOS Switch specific configuration remains untouched in usual menus for now.
- Please, note that downgrading to previous RouterOS versions will not restore "master-port" configuration, so use backups to restore configuration on downgrade.

What's new in 6.41rc20:

- bridge - implemented software based vlan-aware bridges;
- switch - "master-port" conversion into a bridge with hardware offload "hw" option;
- bridge - general development of hw-offload bridge implementation (introduced in v6.40rc36);
- bridge - added initial support for hardware "igmp-snooping" on CRS1xx/2xx;
- bridge - fixed "fast-forward" counters;
- bridge - implemented software based "igmp-snooping";
- bridge - implemented software based MSTP;
- bridge - removed "master-port" parameter;
- dhcpv6 client - added IAID check in reply;
- dhcpv6-client - fixed IA check on solicit when "raoud-commit" is enabled;
- dhcpv6-server - do not release address of static binding from pool after server removal;
- export - fixed export for PoE-OUT related settings;
- ipsec - kill PH1 on "mode-config" address failure;
- led - fixed RB711UA ether1 LED (introduced in v6.38rc16);
- lte - added Passthrough support (CLI only);
- lte - integrated IP address acquisition without DHCP client for wAP LTE kit-US;
- userman - fixed "limitation" and "profile-limitation" update;
- userman - fixed CoA packet processing after changes in "/tool user-manager router" configuration;

Other changes since 6.40.2:

- arp - fixed invalid static ARP entries after reboot on interfaces without IP address;
- bridge - automatically turn off "fast-forward" feature if both bridge ports have "H" flag;
- bridge - changed "Host" and "MDB" table column order;
- bridge - fixed "R" state for bridge interfaces on x86 and CHR installations (introduced in v6.41rc12);
- bridge - fixed ARP setting (introduced in v6.40rc36);
- bridge - fixed multicast forwarding (introduced in v6.40rc36);
- bridge - implemented dynamic entries for active MST port overrides;
- bridge - removed "frame-types" and "ingress-filtering" for bridge interfaces (introduced in v6.40rc36);
- bridge - show "admin-mac" only if "auto-mac=no";
- btest - improved reliability on Bandwidth Test when device`s RAM is almost full;
- capsman - added "vlan-mode=no-tag" option;
- capsman - return complete CA chain when issuing new certificate;
- certificate - fixed import of certificates with empty SKID;
- certificate - fixed SCEP "get" request URL encoding;
- certificate - show "Expired" flag when initial CRL fetch fails;
- CRS3xx - switch VLAN configuration integrated within bridge VLAN configuration with hw-offload;
- dhcp - require DHCP option name to be unique;
- dhcpv6-client - ignore unknown IA;
- e-mail - do not show errors when sending e-mail from script;
- export - fixed "/system routerboard" export (introduced in 6.40.1);
- export - fixed interface list export;
- hotspot - fixed missing "/ip hotspost server profile" if invalid "dns-name" was specified;
- hotspot - improved user statistics collection process;
- ike1 - fixed initiator ID comparison to NAT-OA;
- ike1 - release mismatched PH2 peer IDs;
- ike2 - check identities on "initial-contact";
- ike2 - use peer configuration address when available on empty TSi;
- interface - added option to join and exclude "/interface list" from one and another;
- interface - fixed corrupted "/interface list" configuration after upgrade;
- ippool6 - try to assign desired prefix for client if prefix is not being already used;
- ipsec - added DH groups 19, 20 and 21 support for phase1 and phase2 (CLI only);
- ipsec - allow to specify "remote-peer" address as DNS name;
- ipsec - renamed "firewall" argument to "notrack-chain" in peer configuration;
- ipv6 - add dynamic "/ip dns" server address from RA when RA is permitted by configuration;
- ipv6 - fixed IPv6 address request from pool (introduced in 6.41rc1);
- l2tp-server - fixed PPP services becoming unresponsive after changes on L2TP server with IPSec configuration;
- lcd - fixed unresponsive LCD (introduced in v6.41rc15);
- led - fixed "on" and "off" triggers when multiple LEDs are selected;
- log - optimized "poe-out" logging topic logs;
- lte - do not show USB LTE modem under "/port" menu (introduced in 6.41rc);
- lte - improved reliability of USB LTE modems;
- lte - properly recognize USB devices under "/system resource usb" (introduced in 6.41rc12);
- modem - added initial support for Alcatel IK40 and Olicard 500;
- ospf - fixed OSPF v2 and v3 neighbor election;
- poe-out - fixed router reboot after "poe-out-status" changes;
- ppp - added support for Sierra MC7750, Verizon USB730L;
- pppoe - fixed invalid PPPoE server or client after reboot or "interface" edit (introduced in v6.41rc9);
- pppoe-server - fixed situation when PPPoE servers become invalid on reboot;
- rb1100ahx4 - fixed HW acceleration fragmented packet decryption when fragment is smaller than 64 bytes;
- rb750gr3 - show warning and do not allow to use "protected-bootloader" feature if "factory-firmware" older than 3.34.4 version;
- routerboard - added "mode-button" support for RB750Gr3 (CLI only);
- sfp - fixed SFP interface power monitor when bad SFP DDMI information is received;
- sftp - added functionality which imports ".auto.rsc" file or reboots router on ".auto.npk" upload;
- snmp - fixed bridge host requests on devices with multiple bridge interfaces;
- ssh - do not execute command if it starts with "-" symbol;
- traffic-flow - fixed reboots when IPv6 address has been set as target address without active IPv6 package;
- ups - fixed duplicate "failed" UPS logs;
- webfig - allow to open table entry even if table is not sorted by # (introduced in v6.40);
- webfig - allow to unset "rate-limit" for DHCP leases;
- winbox - added "notrack-chain" setting to IPSec peers;
- winbox - added possibility to define "comment" for "/routing bgp network" entries;
- winbox - do not show duplicate "Template" parameters for filter in IPSec policy list;
- winbox - do not show duplicate filter parameters "Published" in ARP list;
- winbox - do not show FAN related information under "/system health" menu for devices which does not have it;
- winbox - do not show LCD menu for devices which does not have it;
- winbox - fixed ARP table update after entry changes state to incomplete;
- winbox - fixed bridge port sorting order by interface name;
- winbox - show warnings under "/system routerboard settings" menu;
- wireless - added "russia3" country settings;
- wireless - added New Zealand regulatory domain information for P2P links;
- wireless - updated China and New Zealand regulatory domain information;
- www - fixed unresponsive Web services (introduced in v6.40);

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.

Related MikroTik Drivers