Download RouterOS 6.41.1

MikroTik has released RouterOS 6.41.1. RouterOS is an operating system that focuses on running router tasksThink of course of course the routing of network traffic, firewall, bandwidth management, controlling wireless access points, hotspot gateway and VPN server. It can be done on the hardware from MikroTik when doing its job on x86 or virtual machines. Before use, a license required, this license is already included with the purchase of MikroTik hardware. For more information, we refer you to this page. The list of changes for this release is as follows:

What’s new in 6.41.1

• bridge
  • fixed “mst override” export;
  • fixed allowed MSTI priority values;
  • fixed ARP option changing on bridge (introduced v6.41);
  • fixed hw-offload disabling for Mediatek and Realtek switches when STP/RSTP configured;
  • fixed hw-offload disabling when adding a port with “horizon” set;
  • fixed IGMP Snooping after disabling/enabling bridge;
  • fixed interface list moving in “/interface bridge port” menu;
  • fixed repetitive port “priority” set;
  • fixed situation when packet could be sent with local MAC as dst-mac;
  • fixed VLAN filtering when “use-ip-firewall” is enabled (introduced in v6.41);
  • properly update “actual-mtu” after MTU value changes (introduced v6.41);
• btest – fixed TCP test accuracy when low TX/RX rates are used;
• certificate
  • do not use utf8 for SCEP challenge password;
  • fixed PKCS#10 version;
• crs317 – improved transmit performance between 10G and 1G ports;
• crs326 – fixed possible packet leaking from CPU to switch ports;
• crs3xx – hide deprecated VLAN related settings in “/interface ethernet switch port” menu;
• detnet – additional work on “detect-internet” implementation;
• dhcpv4 server – fixed framed and classless route received from RADIUS server;
• discovery – fixed discovery related settings conversation during upgrade from pre-v6.41 discovery implementation (introduced v6.41);
• dude – fixed email notifications when default port is not used;
• firewall
  • fixed “tls-host” firewall feature (introduced v6.41);
  • limited maximum “address-list-timeout” value to 35w3d13h13m56s;
• ike1 – fixed “aes-ctr” and “aes-gcm” encryption algorithms (introduced v6.41);
• ike2
  • delay rekeyed peer outbound SA installation;
  • improve half-open connection handling;
• ipsec – properly update IPsec secret for IPIP/EoIP/GRE dynamic peer;
• log – properly report bridge interface MAC address changes;
• netinstall
  • improved LTE package description;
  • properly generate skins folder when branding package is installed;
• ovpn – fixed resource leak on systems with high CPU usage;
• ppp
  • changed default value of “route-distance” to 1;
  • fixed change-mss functionality in some specific traffic (introduced in v6.41);
• radius
  • added warning if PPP authentication over RADIUS is enabled;
  • increase allowed RADIUS server timeout to 60s;
• rb1100ahx4 – fixed reset button responsiveness when regular firmware is used;
• rb433/rb450 – fixed port flapping on bridged Ethernet interfaces if hw-offload is enabled (introduced in v6.41);
• routerboot – fixed missing upgrade firmware for “ar7240” devices;
• sfp – improved SFP module compatibility;
• snmp – allow also IPv6 on default public community;
• tile – fixed USB device speed detection after reboot;
• traffic-flow – do not count single extra packet per each flow;
• webfig
  • added support for proper default policies when adding script or scheduler job;
  • fixed bridge port sorting order by name;
  • fixed MAC address ordering;
  • fixed wireless snooper address, SSID and other column ordering;
• win box
  • added “dhcp-option-set” to DHCP server;
  • allow to specify “to-ports” for “action=masquerade”;
  • do not show “hw” option on non-Ethernet interfaces;
  • do not show VLAN related settings in switch port menu on CRS3xx boards;
• wireless – updated “Czech Republic” country 5.8 GHz frequency range;