Обновление MikroTik RouterOS v6.38.1

Производитель MikroTik обновил операционную систему RouterOS до версии 6.38.1

Прошивку RouterOS версии 6.38.1 можно скачать с сайта http://www.mikrotik.com/download.html

В версии 6.38.1 сделано много улучшений и исправлений (13 января 2017 г.):

• bridge - disallow manual removal of dynamic bridge ports;
• bridge - fixed MAC address learning from switch master-port;
• bridge - fixed access loss to device through bridge if master port had a loop (introduced in v6.38);
• certificate - added year cap (invalid-after date will not exceed year 2039);
• certificate - fixed fail on import from CAPs when both key and name already exist;
• dhcpv6-client - fixed DHCPv6 rebind on startup;
• dhcpv6-server - fixed server removal crash if static binding was present;
• dns - fixed typo in regexp error message;
• dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=21&t=116356);
• fan - improved RPM monitor on CCR1009;
• firewall - nat action "netmap" now requires to-addresses to be specified;
• health - report fan speed for RB800 and RB1100 when 3-pin fan is being used;
• ike1 - fixed ph1 rekey in setups with mode-cfg;
• ike2 - allow empty selectors to reach policy handler;
• ike2 - auto-negotiate split nets;
• ike2 - default to tunnel mode in setups without policy;
• ike2 - fixed error packet from initiator on responder reply;
• ike2 - fixed initiator TS updating;
• ike2 - fixed ph1 initial-contact rare desync;
• ike2 - fixed policy setting for /0 selector with different address families;
• ike2 - fixed split policy active flag;
• ike2 - fixed traffic selector prefix calculation;
• ike2 - fixed xauth add check;
• ike2 - include identity in peer address info;
• ike2 - log empty TS payload;
• ike2 - minor logging update;
• ike2 - show peer identity of connected peers;
• ike2 - traffic selector improvements;
• ike2 - update also local port when peer changes port;
• ike2 - use first split net for empty TS;
• ike2 - use standard retransmission timers for DPD;
• ike2 - xauth like auth method with user support;
• ipsec - added ability to kill particular remote-peer;
• ipsec - fixed flush speed and SAs on startup;
• ipsec - fixed peer port export;
• ipsec - port is used only for initiators;
• ipv6 - added warning about having interface MTU less than minimal IPv6 packet fragment (1280);
• license - fixed demo license expiration after installation on x86;
• log - improved firewall log messages when NAT has changed only connection ports;
• logs - work on false CPU/RAM overclocked alarms;
• mpls - fixed crash on active tunnel loss in MPLS TE setups;
• ovpn - fixed address acquisition when ovpn-in interface becomes slave;
• proxy - fixed "max-cache-object-size" export;
• proxy - speed-up almost empty disk cache clean-up;
• quickset - various small changes;
• rb751u - fixed ethernet LEDs (broken since 6.38rc16);
• ssh - fixed high memory consumption when transferring file over ssh tunnel;
• webfig - show properly large BGP AS numbers;
• winbox - added "make-static" to IPv6 DHCP server bindings;
• winbox - added "prefix-pool" to DHCPv6 server binding;
• winbox - added IPsec to radius services;
• winbox - added upstream flag to IGMP proxy interfaces;
• winbox - allow to specify "connection-bytes" & "connection-rate" for any protocol in “/ip firewall” rules;
• winbox - allow to specify "sip-timeout" under ip firewall service-ports;
• winbox - do not create empty rates.vht-basic/supported-mcs if not specified in CAPsMAN;
• winbox - hide "nat-traversal" setting in IPsec peer if IKEv2 is selected;
• winbox - show dynamic IPv6 pools properly;
• winbox - show errors on IPv6 addresses;
• winbox - specify metric for “/ip dns cache-used” setting;
• wireless - show comment on "security-profile" if it is set.