MikroTik RouterOS ARM Firmware 6.43 RC 21 Download

Posted at December 22, 2024 by PCI-DB Team

MikroTik RouterOS ARM Firmware 6.43 RC 21 Description

MAJOR CHANGES IN v6.43:

- api - changed authentication process;
- backup - do not encrypt backup file unless password is provided;
- btest - requires at least v6.43 Bandwidth Test client when connecting to v6.43 or later version server except when authentication is not required;
- cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after installation process);
- mac-telnet - require at least v6.43 MAC Telnet client when connecting to v6.43 or later version server;
- radius - use MS-CHAPv2 for "login" service authentication;
- romon - require at least v6.43 RoMON agent when connecting to v6.43 or later RoMON client device;
- webfig - improved authentication process;
- winbox - improved authentication process excluding man-in-the-middle possibility (Winbox v3.14 required);

Changes in this release:

- dhcp - added dynamic IPv4/IPv6 "dual-stack" simple queue support, based on client's MAC address;
- dhcp - fixed DHCP server stuck in invalid state;
- dhcpv4-server - added "allow-dual-stack-queue" implementation (CLI only);
- dhcpv6-server - added "allow-dual-stack-queue" implementation (CLI only);
- kidcontrol - added dynamic accept firewall rules in order to allow limit bandwidth when FastTrack is enabled;
- lte - do not allow to remove default APN profile;
- snmp - added "rssi" and "tx-sector-info" value support for w60g type interfaces;
- vrrp - improved reliability on VRRP interface configured as a bridge port when "use-ip-firewall" is enabled;
- w60g - added distance measurement (CLI only);
- winbox - by default specify keepalive timeout value for tunnel type interfaces;
- winbox - show "System/Health" only on boards that have health monitoring;
- wireless - added option for RADIUS "called-station-id" format selection;
- wireless - updated "germany 5.8 ap" and "germany 5.8 fixed p-p" regulatory domain information;

Other changes since v6.42.3:

- bridge - add dynamic CAP interface to tagged ports if "vlan-mode=use-tag" is enabled;
- bridge - added ingress filtering options to bridge interface (CLI only);
- bridge - added initial Q-in-Q support (CLI only);
- bridge - allow to make changes for bridge port when it is interface list;
- bridge - fixed bridge hw-offloading on MMIPS devices (introduced in v6.43rc10);
- bridge - fixed dynamic VLAN table entries when using ingress filtering;
- bridge - fixed FastPath for bridge master interfaces (introduced in v6.42);
- capsman - allow to change "radio-name" (CLI only);
- certificate - add "expires-after" parameter (CLI only);
- chr - added checksum offload support for Hyper-V installations;
- chr - added large send offload support for Hyper-V installations;
- chr - added multiqueue support on Xen installations;
- chr - added support for multiqueue feature on "virtio-net";
- chr - added virtual Receive Side Scaling support for Hyper-V installations;
- chr - do not show IRQ entries from removed devices;
- chr - fixed adding MSTI entries;
- chr - fixed NIC hotplug for "virtio-net";
- chr - improved boot time for Hyper-V installations;
- crs3xx - added initial Q-in-Q hardware offloading support (CLI only);
- crs3xx - fixed ACL rate rules (introduced in v6.41rc27);
- crs3xx - fixed packet forwarding on SFP+ interfaces (introduced in v6.43rc11);
- crs3xx - fixed VLAN filtering when there is no tagged interface specified;
- defconf - fixed missing bridge ports after configuration reset;
- dhcpv4-server - do not allow override lease "always-broadcast" value based on offer type;
- dhcpv4-server - fixed DHCP server functionality (introduced in v6.43rc);
- dhcpv4-server - improved performance when "rate-limit" and/or "address-list" setting is present;
- dhcpv6-client - added missing "Server identifier" parameter in release message;
- dhcpv6-server - added initial dynamic simple queue support;
- filesystem - improved software crash handling on devices with FLASH type memory;
- interface - improved reliability on dynamic interface handling;
- ipsec - added "responder" parameter for "mode-config" to allow multiple initiator configurations (CLI only);
- ipsec - added "src-address-list" parameter for "mode-config" that generates dynamic "src-nat" rule (CLI only);
- ipsec - added warning messages for incorrect peer configuration;
- ipsec - do not allow removal of "proposal" and "mode-config" entries that are in use;
- ipsec - improved reliability on generated policy addition when IKEv1 or IKEv2 used;
- ipsec - install all DNS server addresses provided by "mode-config" server;
- ipsec - separate phase1 proposal configuration from peer menu (CLI only);
- kidcontrol - allow to edit discovered devices;
- kidcontrol - fixed dynamically created firewall rules order;
- led - fixed CCR1016-12S-1S+ LED behaviour after Netinstall (introduced in v6.41rc58);
- led - improved w60g alignment trigger;
- log - show interface name on OSPF "different MTU" info log messages;
- lte - added extended LTE signal info for SIM7600 modules;
- lte - added extended signal information for Quectel LTE EC25 and EP06 modem;
- lte - added ICCID reading for info command R11e-LTE and R11e-LTE-US (CLI only);
- lte - added roaming status reading for info command (CLI only);
- lte - added support for Novatel USB730LN modem with new ID;
- lte - allow to execute concurrent internal AT commands;
- lte - allow to use multiple PLS modems at the same time;
- lte - do not allow to send "at-chat" commands for configless modems;
- lte - expose GPS channel for PLS modems;
- lte - fixed SIM7600 registration info;
- lte - improved r11e-LTE and r11e-LTE-US dialling process;
- lte - improved r11e-LTE configuration exchange process;
- lte - improved reading of SMS message after entering running state;
- lte - renamed LTE scan tool field "scan-code" to "mcc-mnc" (CLI only);
- lte - use "/32" address for the Passthrough feature when R11e-LTE module is used;
- lte - use alphanumeric operator format in info command;
- routerboard - allow to fill up to half of the RAM memory with files on devices with FLASH storage;
- routerboard - fixed "protected-routerboot" feature (introduced in v6.42);
- smb - fixed valid request handling when additional options are used;
- ssh - disconnect all active connections when router gets rebooted or turned off;
- switch - added support for port isolation by switch chip (CLI only);
- tr069-client - fixed setting of "DeviceInfo.ProvisioningCode" parameter;
- user - all passwords are now hashed and encrypted, plaintext passwords are kept for downgrade (will be removed in later upgrades);
- w60g - added 4th 802.11ad channel (CLI only);
- w60g - general stability and performance improvements;
- w60g - improved maximal achievable distance;
- w60g - removed distance lock for wAP 60G devices;
- winbox - added bridge Fast Forward statistics counters;
- winbox - fixed bridge port MAC learning parameter values;
- winbox - show "Switch" menu on hAP ac^2 devices;
- winbox - show HT MCS tab when "5ghz-n/ac" band is used;
- wireless - do not disconnect clients when WDS master connects with MAC address "00:00:00:00:00:00";
- wireless - fixed wireless interface lockup after period of inactivity;
- wireless - improved Nv2 stability for 802.11n interfaces on RB953, hAP ac and wAP ac devices;

About Switch Firmware:

Given the large variety of models and different methods for upgrading the switch, if you wish to apply this package, we recommend that you read and understand the installation steps before you install a new firmware, even if you are a power user.

Usually the update procedure isn't much of a hassle as manufacturers try to make it as simple as possible; however, there are cases that are exceptions to this rule. First off, go to the system information page of the switch to check that the currently installed version isn't either newer or matching this release.

Applying a new firmware can decrease the security vulnerabilities, enhance overall performance and compatibility, improve various power management functions, resolve different errors, and add support for newly developed technologies and protocols.

It is recommended that you perform this step in a steady power environment such as the one ensured by a UPS unit, and that you don't interrupt the upgrade in any way, because this might cause the switch to malfunction.

That being said, click the download button, get and apply the new version, and check back with our website constantly to stay up to speed with the latest releases.

  It is highly recommended to always use the most recent driver version available.

Try to set a system restore point before installing a device driver. This will help if you installed an incorrect or mismatched driver. Problems can arise when your hardware device is too old or not supported any longer.

Related RouterTech Drivers