Mikrotik выпустил обновление RouterOS 6.37: единый пакет wireless, прекращение поддержки wireless-cm2 и переработка DFS

Компания Mikrotik официально выпустила обновление RouterOS v.6.37. Настоятельно рекомендуем прочитать список изменений перед обновлением до актуальной версии. Всё дело в том, что компания прекратила поддержку NStreme первого поколения, вместе с этим прекращена поддержка всех предыдущих беспроводных пакетов, а именно wireless-cm2 и wireless-fp.

После завершения тестирования пакета wireless-rep, он был переименован в wireless и используется как пакет по-умолчанию. Если вы используете более старые пакеты, перед обновлением они будут удалены!

Второе замечание касается изменения конфигурации DFS (Dynamic Frequency Selection). С обновлением до 6.37, опция dfs-mode становится недоступной, операционная система будет применять необходимые настройки автоматически для каждого частного диапазона, основываясь на установленном регионе (стране).

Посмотреть настройки для конкретной страны можно при помощи команды

/interface wireless info country-info

После чего введите название страны с маленькой буквы, например

ukraine

2402-2482/b,g,gn20,gn40(20dBm)
2417-2457/g-turbo(20dBm)
5170-5250/a,an20,an40,ac20,ac40,ac80,ac160(20dBm)/passive
5250-5330/a,an20,an40,ac20,ac40,ac80,ac160(20dBm)/passive
5490-5670/a,an20,an40,ac20,ac40,ac80,ac160(20dBm)/passive
5735-5835/a,an20,an40,ac20,ac40,ac80,ac160(20dBm)/passive
5190-5310/a-turbo(20dBm)
5180-5300/a-turbo(20dBm)
5520-5680/a-turbo(27dBm)/passive
5510-5670/a-turbo(27dBm)/passive
902-927/b,g,g-turbo,gn20,gn40(30dBm)

Среди прочих изменений существенная доработка LTE, а также добавление поддержки Loop Protect (Layer 2).

Полный список изменений RouterOS 6.37

• console - dfs-mode setting does not exist any more and all scripts with such setting will not be executed;
• dude
• dude - from now on dude will use winbox port and it will be changed automatically both in client loader and agent configuration;
• ethernet - added new loop-protect feature for ethernet, vlan, eoip, eoipv6 interfaces, http://wiki.mikrotik.com/wiki/Manual:Loop_Protect ;
• wireless - "wireless" package included in bundle "routeros" package;
• wireless - "wireless-cm2" discontinued;
• wireless - "wireless-rep" renamed to "wireless";
• wireless - DFS option is removed, corresponding DFS mode for each frequency range applies automatically;
• capsman - fixed kernel crash on cap while changing client-to-client forwarding;
• capsman - report radio-name in registration table;
• certificate - do not allow to remove certificate template while signing certificate;
• console - hotspot setup show wrong certificate name;
• defconf - fixed default configuration restore if virtual wireless interface were present;
• defconf - fixed default configuration when wireless package is used;
• defconf - using caps button now forces all wireless interfaces in caps mode;
• dhcpv6 - improved interface status tracking;
• dhcpv6 - reworked DHCP-PD server interface and route management;
• dhcpv6 - update DUID when system-id changes (solves problem when cloned VM retains the same DUID);
• dns - fixed crash when using regexp static dns entries;
• ethernet - added support for LAN9514 ethernet dongle;
• ethernet - allow to force mtu value when actual-mtu is already the same;
• ethernet - fixed loop-protect on bridged ports;
• ethernet - fixed never ending loop in CDP packet processing;
• ethernet - fixed rare kernel failure on non-switch ethernet reset;
• ethernet - rb44ge now have disabled-running-check=no by default;
• firewall - added additional matchers for firewall raw rules;
• firewall - fixed time based rules on time/timezone changes (again);
• gps - always check NMEA checksum if available;
• health - do not show psu and fan information for passive cooling devices;
• hotspot - show comments from user menu also in active menu;
• ipsec - fixed crash with enabled fragmentation;
• ipsec - fixed dynamic policy not deleted on disconnect for nat-t peers;
• ipsec - fixed fragmentation use negotiation;
• ipsec - fixed kernel crash when sha512 was used;
• ipv6 - fixed RA and RS processing on new interfaces after many interfaces have lost link during prolonged operation;
• ipv6 - improved system responsiveness when ipv6 routes are frequently modified;
• ipv6 - show multiple neighbors with the same address;
• kvm - fix add/remove of disabled interfaces;
• kvm - fixed guest crashing when using mtu bigger than 1504;
• l2tp - fixed kernel failure when fastpath handles l2tp packets;
• leds - added option to disable all leds on RBcAP2n;
• lte - added ability to send/receive sms using '/tool sms';
• lte - added dlink dwm-157 D, dwm-222 support;
• lte - added huawei me909s variant;
• lte - added initial deregistration only for bandrich modems;
• lte - added logging for usb config switching;
• lte - added Pantech UML295, Vodafone K4201-Z, ZTE MF823/MF831 support;
• lte - added rndis for ZTE MF8xx;
• lte - added support for more dlink dwm-222 configurations;
• lte - added switch for Huawei K5160;
• lte - added zte K5008-Z back;
• lte - adjusted usb config for dlink dwm-157 D;
• lte - fixed at chat condition storage;
• lte - fixed band setting for sxt lte;
• lte - fixed band unsetting;
• lte - fixed default channels for dlink dwm-157;
• lte - fixed ip activation when CREG (circuit switched) state remains in not registered state;
• lte - fixed setting correct lte band for sxt lte;
• lte - process initial state change to deregistred, when lockup occurs;
• lte - reset if sms storage set fails;
• mpls - fixed memory leak;
• mpls - fixed vpls throughput issues caused by out-of-order packets;
• ntp - fixed ntp server when local-clock used (like usb gps module);
• partitions - added ability to add comments;
• ppp - use default-route-distance when adding ipv6 default route;
• ppp,lte - pin is now converted to string argument;
• pppoe - fixed disconnects by idle timeout when fastpath is used;
• quickset - added 2GHz-g/n band support;
• quickset - fixed guest reporting in "home ap dual" mode;
• quickset - fixed wireless frequency fields in "home ap dual" mode;
• rb3011 - fixed rare occasions when router would hang while loading kernel;
• routing - improved kernel performance in setups with large routing tables;
• sfp - enabled eeprom printout in /interface ethernet monitor;
• sfp - fixed initial eeprom reading on CCR1036-8G-2S+ and CCR1072-1G-8S+;
• sfp - removed "sfp-rate-select" as command was not relevant to currently supported hardware;
• sms - moved incorrectly logged message from async to gsm topic;
• sms - report error when unsupported modem is being used;
• snmp - added script table which executes script and returns it's output on get request;
• snmp - require write permitions for script run table access;
• snmp - skip forbidden oids on getnext completion;
• sstp - allow to specify proxy by dns name;
• sstp - now supports TLS_ECDHE algorithms;
• supout - fixed bug that could cause enormous size supout.rif files;
• supout - improved crash report generation for tile architecture;
• switch - added comment field for CRS switch VLANs;
• traffic-flow - allow ipv6 src address to be optional;
• traffic-flow - fixed IPFIX packet timestamp;
• traffic-flow - fixed IPFIX wrong flow sequence;
• trafficgen - add per stream packet count setting;
• trafficgen - show out-of-order packet counters in stats printouts;
• tunnel - fixed communication via tunnel to router itself if fastpath was active;
• tunnel - fixed ipv6 link-local address adding for gre;
• tunnel - increased minimal MRRU to 1500 for PPP interfaces;
• tunnel - ipv6 link-local address is now generated from tunnel local-address;
• usb - added support for SMSC95XX USB Ethernet dongle on mipsbe;
• usermanager - fixed rare crash on paypal payment;
• users - fixed script policy checking against user policies when running scripts;
• webfig - do not crash if radius server does not give out encryption keys;
• webfig - fixed certificate signing;
• winbox - added auto refresh for BFD neighbors;
• winbox - added comment field support for switch vlan menu;
• winbox - added default-authentication parameter for wireless station modes;
• winbox - added src-address field for traffic-flow target;
• winbox - adjust on-event field dynamically depending on window size;
• winbox - adjusted allowed values for http-proxy field;
• winbox - disabled MRRU by default for PPP interfaces;
• winbox - display actual-mtu for tunnels in interfaces window;
• winbox - fixed disconnect when no windows were opened for a while in unsecure mode;
• winbox - fixed multiline read only fields not displaying new line characters;
• winbox - fixed raw firewall showing jump targets from filter chains;
• winbox - hide ethernet flow control settings for interfaces which does not support them;
• winbox - removed health menu from devices that do not support it;
• winbox - removed L2MTU field for PPP interfaces;
• winbox - removed L2MTU field from PPP server binding settings;
• winbox - removed unset button for L2MTU field;
• winbox - show firmware-type in routerboard window;
• wireless - display DFS flag in country info;
• wireless - improved driver support for RB953, hAP ac, wAP ac;
• wireless - send deauth to data frames in scan mode.
• wireless - updated brazil country settings;

При переходе с RouterOS 6.36 до 6.37 учитывайте также промежуточные обновления 6.36.1-6.36.3. В основном это исправление выявленных ошибок и мелкие доработки, например допиливание поддержки DNS-имен в address-list.

Список изменений RouterOS 6.36.3

• arp - fixed crash that caused Ethernet frames to go out via wrong interface;
• fastpath - fixed kernel crash on interface disable/remove;
• fetch - fixed bug with incomplete files in https mode;
• ipsec - don't log authtype mismatch as critical;
• ipsec - fixed xauth parameter printing in terminal;
• pppoe - fixed kernel crash caused by dial-on-demand when used with fastpath;
• pppoe - fixed master interface l2mtu check, could result in assumption that master interface can handle 14 byte bigger packet than it actually can (broken in 6.36);
• simple queues - fixed issue which caused additional/unnecessary CPU load;
• vlan - do not allow to add new vlan interface with mtu higher than l2mtu;
• tile - fixed rare kernel crash when usb device is being attached;

Список изменений RouterOS 6.36.2

• arm - show cpu frequency under resources menu;
• capsman - fixed upgrade policy;
• ccr/crs - fixed SFP+ interface ddmi info reporting function. Info is now refreshed on regular intervals;
• conntrack - fixed ipv6 timeout display;
• conntrack - fixed removing icmpv6 connections;
• dns - avoid unnecessary dynamic server address saving in storage;
• dns - allow to set query-server-timeout and query-total-timeout only greater than 0s;
• dns - fixed lockup when dynamic dns server address 0.0.0.0 was received;
• export - updated default values in /system routerboard settings menu;
• partitions - fixed crash on repartition when there is not enough free space;
• sstp - fixed disconnects on transmit for multicore systems;
• switch - fixed configuration reload on CRS switches;
• winbox - make queue tree default queue type default-small;

Список изменений RouterOS 6.36.1

• address-list - allow DNS names with "_" symbol;
• address-list - check for duplicates when domain name is used in address field;
• bridge - fixed kernel failure when set-priority action was used in bridge firewall;
• dns - avoid unnecessary static entry saving in storage;
• email - increased time which email tool can spend while sending message;
• export - removed unnecessary "log-prefix" on firewall export;
• firewall - fixed time based rules on time/timezone changes;
• log - logs loaded from disk after reboot didn't have correct topics;
• lte - fixed access technology update;
• ovpn - add special exception route for tunnel itself when using add-default-route;
• ping - fixed freezing on "not running" interfaces;
• resource - fixed free-memory reporting after disk eject;
• snmp - fixed packet corruption when multiple trap-targets were used;
• tile - fixed rare kernel crash when fastpath is being active;
• traffic-flow - fixed kernel failure when traffic-flow target uses small mtu;
• upnp - fixed nat rule dst-port by making it visible again;
• upnp - updated to make it work with more UPnP implementations (for example, latest Skype);
• vrrp - fixed transition to backup state when ipv6 mode and equal priorities are used;
• webfig - allowed user password changing (broken in v6.36);
• x86 - fixed crash when igmp-proxy interface becomes "not running" while passing traffic;

Видеокурс «Настройка оборудования MikroTik» (аналог MTCNA)

Учитесь работать с MikroTik? Рекомендую видеокурс «Настройка оборудования MikroTik». В курсе разобраны все темы из официальной учебной программы MTCNA и много дополнительного материала. Курс сочетает теоретическую часть и практику – настройку маршрутизатора по техническому заданию. Консультации по заданиям курса ведет его автор Дмитрий Скоромнов. Подойдет и для первого знакомства с оборудованием MikroTik, и для систематизации знаний опытным специалистам.