(https://www.arg-wireless.com.ar/proxy.php?request=http%3A%2F%2Fwww.mkesolutions.net%2Fwp-content%2Fplugins%2Fwp-post-icon%2Fimg%2Fnew_logo.png&hash=281a005a97305def1abfe7dc7bbb1daff0025779)
Se ha publicado la versión v6.7 del RouterOS con diferentes agregados y arreglos en el sistema operativo.
Esta edición tiene un nuevo firmware para los equipos con PoE saliente del RB750UP y OminiTIK UPA.
Nuevos soporte de algoritmos de encriptación IPSec, del tipo aes-gcm, aes-ctr, sha256 y sha512 con lo que les da una nueva capacidad de seguridad en el tráfico.
Al agregado de timeout en los address-list, algo que hemos comentado en una noticia anterior, lo que nos permitirá hacer desaparecer alguna regla de address-list cuando ha pasado cierto tiempo.
El changelog completo es:
What's new in 6.7 (2013-Nov-29 13:37):
*) support Android usb tethering interface;
*) ipsec - added aes-gcm icv16 encryption mode;
*) wireless - improve rate selection for nstreme protocol
*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;
*) ipsec - added aes-ctr encryption mode;
*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;
*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs - could cause port flapping;
*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue.
Note that having other interface queue than only-hardware-queue dramatically reduces performace, so should be avoided if possible;
sep ya queda poco para llegar a la 7.0!