KeeneticOS 3.7

Highlights at a glance

Release 3.7 is jam-packed with new features, fixes and improvements. These highlights are only the beginning:

See which applications run on your network. The new Traffic Classification Engine detects thousands of applications in real-time and displays them for you in the Traffic monitor and Application traffic analyzer.
Manage all your networks in one convenient Web Portal. The new Keenetic RMM system (now in beta) is a cloud-based multi-site remote monitoring and management solution purpose-built for Small/Medium-sized businesses to help keep critical networks and infrastructure online 24/7. Visit rmm.keenetic.com to learn more.
Enjoy multiple KeenDNS improvements, including automatic operating mode selection, the ability to password-protect remote access to the web applications, easy remote access configuration to attached 4G/3G USB modem dongles, and support for IP/FQDN web application targets.
Customize the Web interface title and header for ease of navigation between multiple Keenetic devices.
Set up IP-encapsulated tunnels (IPIP, GRE, EoIP) easily with the new configuration screen.
Tune mobile broadband antenna for the best signal reception with the new 4G/3G signal monitor tool.
Build a customized KeeneticOS image with your services and scripts using the Keenetic Software Development Kit (SDK) available on GitHub.
Learn more about the latest developments at the new device-tailored multilingual documentation portal.

As always, if you have any feedback (or want to say hi ), drop us a line in the forum. To learn more about Keenetic, visit the Help Center.

KeeneticOS 3.7.5

31/10/2022

Improved

Fixed

Fixed the selection of an optimal backhaul connection to the Mesh Wi-Fi System node based on Wi‑Fi RSSI and STP distance metrics. [SYS-486]
Switching wireless networks on/off at the Home segment configuration page of a Keenetic device in Access point/Extender mode no longer leads to loss of device control for a while. [NDM-2178]
The Wi-Fi SMPS (Spatial Multiplexing Power Save) feature now correctly handles requests from Qualcomm 835/845/855 wireless clients providing a dynamic switching MIMO scheme from 2x2 to 1x1 and vice versa. [SYS-560]
Fixed the reason for a sporadic VLAN ID is busy error message on the device in the Extender mode. [NDM-2252]

KeeneticOS 3.7.4

31/03/2022

Improved

Fixed

KeeneticOS 3.7.3

24/02/2022

Improved

Enhanced detection of 4G/3G USB modems by Huawei producing the following System log message usbfs: process 203 (ndm) did not claim interface 1 before use. [NDM-2063]
We plan to add a user-defined setting for Wi‑Fi System Extenders to stop broadcasting Wi‑Fi networks if the backhaul connection to the Wi‑Fi System Controller is lost. Meanwhile, the new behaviour introduced in KeeneticOS 3.7 Beta 1 is temporarily disabled to prevent issues with specific Wi-Fi System configurations in the field. [NDM-2068]

Fixed

KeeneticOS 3.7.2

27/01/2022

New

A new configuration option for improved compatibility with legacy Wi-Fi clients: Control the TKIP countermeasures hold-down timer. If the Wi‑Fi Access Point with WPA-PSK + WPA2-PSK protection mode detects two MIC errors in RX failures within 60 seconds, it blocks all the wireless TKIP clients on that interface for the hold-down timer. Use this command to disable or tune this behaviour. [SYS-434]
- interface {name} encryption tkip hold-down {hold-down} — set the hold-down timer in seconds (from 0 to 60). The default value is 60 sec.
The 4G LTE Cat4 Huawei E5377Ts-32 USB mobile router is now supported. [NDM-2027]

Improved

Fixed

Fixed an error in accessing the device's Web Interface after a few days of operation, causing the following messages in the System log. [NDM-2046]
- ndm: Http::Nginx: there are errors in config, reconfigure.
- ndm: Http::Manager: unable to update configuration, retry.
The IPv6 section of the System dashboard menu now displays only the default IPv6 gateway for the corresponding interface. [NWI-823]
Fixed the Fast Transition (802.11r) roaming selector behaviour in the Roaming for wireless devices section. [NWI-816]
Fixed the APN settings display for the serial type (UsbModem[N]) modem interfaces in the Web Interface. [NWI-817]

KeeneticOS 3.7.1

14/12/2021

New

The Traffic classification engine and IntelliQoS system component is replaced by the Traffic classification engine system component of the KeeneticOS. It implements the detection and classification of applications and protocols.
Categories and Applications diagrams appeared in the Host traffic monitor menu of the Web Interface. Also, a new item, Application Traffic Analyzer, appeared in the Status section. Currently, new sections become visible after the component is installed and the service is enabled via the service ntce CLI command. The component operates autonomously and does not depend on any external services. [NDMS-1476, NDW-2109]

Improved

Removed an error message that occurred if an IP address was configured instead of a URL (Uniform Resource Locator) for a DoH (DNS over HTTP) server: Resolver prefix doesn't appear to contain a hostname. [NDM-1938]
Enabled centralized Wi‑Fi country code configuration from Wi‑Fi system Controller, and blocked this setting on Extenders. [NDM-1921, NWI-733]
Corrected the calculation Distance to the cell tower for QMI modems on LTE TDD (Time-Division Duplex) cells. [NDM-1916]
Receiving of SMS (Short Message Service) in the Turkish language now operates correctly for 4G/3G QMI modems. [NDM-1919]
Closing of Traffic monitor additional tabs is now allowed in mobile browsers. [NWI-666]
Added tab sorting algorithm to the 4G/3G modem menu, providing easy access to the active/connected modem when there are several tabs with modem profiles. [NWI-680]
Added links to the Internet connections settings from the dashboard Internet tile, providing a fast way to edit connection(s). [NWI-682]

Implemented brute-force protection for remote access to the device via the KeenDNS domain name in the Cloud access mode. [NDM-1804]
The KeeneticOS update process is optimized to run in the background to minimize system downtime. Keenetic has dual flash memory with active and backup KeeneticOS images to ensure fail-free automatic upgrades. When a new version of the operating system is released, the device will download, store and check the integrity of the software image in the backup partition first, without interrupting the main operation. Then the Keenetic device reboots, running the updated KeeneticOS version. Internet access will be briefly interrupted only during the device reboot. [NDM-1861]
The hostname value is added to the Syslog message's payload when sending records to a server to simplify log analysis from multiple Keenetic devices. [NDM-1872]

When a wired Ethernet backhaul link is used to attach a Wi‑Fi System Extender to a Wi‑Fi System Controller, setting up custom Wi‑Fi channels on the Extender is now possible. Setting non-overlapping Wi‑Fi channels on different Wi‑Fi System nodes will maximize wireless clients' performance. If a wired Ethernet backhaul link disconnects, the Extender will automatically switch to a Mesh wireless backhaul link to resume operation. In this case, depending on the Mesh wireless backhaul interface, the corresponding Wi‑Fi channel on the Extender will follow the backhaul link. Once a wired Ethernet backhaul link is restored, the Extender will automatically use wired backhaul and preset Wi‑Fi channels. [NDM-1801]
Restored receiving SMS messages for the DW5821e (T77W968) modem module with updated firmware. [NDM-1839]

Implemented support for dialog-type USSD (Unstructured Supplementary Service Data) queries for QMI-type modems. [NDM-1273]
You can now easily configure remote access to the Web Interface of a connected USB modem. When adding a new KeenDNS web application, select your modem from a drop-down list of hosts. [NWI-325]
Seamless navigation from Wi‑Fi System Controller to Extenders is available now. Click the Extender name on the Mesh Wi‑Fi System page to jump to the Web Interface of the Extender. Each Extender has a unique navigation web address under the *.keenetic.io domain. Security tokens and automatically installed Let's Encrypt SSL certificates ensure safe and secure operation. [NDM-1287, NWI-323]
Added the Optimization mode selector to the IPsec VPN server application settings. It changes the set of supported encryption algorithms, as follows. [NDM-1259, NWI-327]
- Default — enables all encryption algorithms except DES and 3DES;
- Legacy — enables both DES and 3DES for compatibility with legacy clients;
- Performance — enables modern encryption algorithm CHACHA20-POLY1305 only, for faster and secure data exchange with supported peers.

Added Password protected access to web applications running on your network via the KeenDNS service. [NDW-2202]
Redesigned the Access to web applications running on your network section of the Domain name > KeenDNS page for better visibility and easy management. [NDW-2203]
Added the Auto option for the KeenDNS operating in IPv4 mode, providing automatic detection of obtained IP address type and flexible operation if this IP changes from time to time or you have a secondary/backup Internet access connection. [NDW-2243]
Added the Disconnect from the network option in the Data usage & limit page for external QMI type 4G/3G modems. It instructs Keenetic to disconnect the 4G/3G modem from the mobile network when the data limit of your mobile plan is exceeded. [NDW-2230]

Implemented a new smart queue management algorithm — NDM Fast Queue (NFQ). NFQ is CAKE-based, and optimized for speeds above 24 Mbit/s. When you limit the Internet connection speed for a host or network segment at a rate above 24 Mbit/s, the NFQ algorithm performs shaping. For rates below 24 Mbit/s, the CAKE algorithm does the job. [NDMS-1247]
DHCP server options 121 and 249 now allow configuration of routes with destination 0.0.0.0/0. [NDMS-1222]
The CLI command for adjusting the TTL value of incoming IP packets has a new syntax: [NDMS-1419]
- interface ip adjust-ttl (set | inc | dec) — old syntax, obsolete now;
- interface ip adjust-ttl recv {recv} — new syntax.

Fixed

Fixed the inability to set up a static DNS server address with the custom port setting in the Web Interface, for example — 1.1.1.1:5353. [NWI-766]
Fixed the forced disconnect of live Wi‑Fi clients when removing them from the Whitelist of the Wireless ACL. [SYS-400]
Fixed the false advertisement of 802.11k capabilities in Wi‑Fi network beacons. [SYS-414]
The Device list no longer shows phantom devices when an ISP network shares the same VLAN IDs with network segments configured in the Keenetic device. [SYS-422]

Fixed the occasional false "4 GBytes" bursts of apparent traffic in the Traffic monitor. [SYS-396]
The Static IP address assigned to a registered device now works more reliably. [NDM-1893]
Disabled validation of the DoT (DNS over TLS) / DoH (DNS over HTTPS) certificates until the system time of the KeeneticOS is synchronized. [NDM-1910]
Fixed the incorrect connection type in the More information section for Registered devices currently offline. [NDW-664]
The operation of the Wireguard VPN causes no buffer space available error message in the System log. [NDM-1913]

Restored the operation of simultaneous Wi‑Fi roaming zone and Wi‑Fi band restrictions applied to the device. The settings now propagate correctly to newly acquired Mesh Wi‑Fi System extenders as well. [NDM-1869, NDM-1875]
Fixed Network Time Protocol (NTP) server response validation under certain conditions. [NDM-1880]
Increased the server address length to 256 characters for PPTP and L2TP connections. [NDM-1907]
The Traffic monitor statistics now display correct information after changing settings on the WAN interface. [SYS-389]

Cleanup of obsolete TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) sessions of the Traffic classification engine system component, which caused excessive memory consumption. [NDMS-1496]
The detection of SIP (Session Initiation Protocol), RTP (Real-time Transport Protocol), and RTCP (RTP Control Protocol) protocols by the Traffic classification engine system component. [NDMS-1576]
Enabled software packet acceleration for USB 4G/3G modems using the cdc_ether driver in KeeneticOS for better performance. [NDMS-1606]
Fixed usage of the POCO M3 smartphone as external LTE (Long-Term Evolution) modem connected to the USB port of the Keenetic device. [NDMS-1640]
The application category classification on the Traffic monitor page of the Web Interface. [NDW-2231]

KeeneticOS 3.7

KeeneticOS release notes for Keenetic 4G (KN-1210) in the Main Channel

Highlights at a glance

KeeneticOS 3.7.5

Improved

Fixed

KeeneticOS 3.7.4

Improved

Fixed

KeeneticOS 3.7.3

Improved

Fixed

KeeneticOS 3.7.2

New

Improved

Fixed

KeeneticOS 3.7.1

New

Improved

Fixed

Search results

KeeneticOS updates — Main Channel

KeeneticOS 3.7

KeeneticOS release notes for Keenetic 4G (KN-1210) in the Main Channel

Highlights at a glance

KeeneticOS 3.7.5

Improved

Fixed

KeeneticOS 3.7.4

Improved

Fixed

KeeneticOS 3.7.3

Improved

Fixed

KeeneticOS 3.7.2

New

Improved

Fixed

KeeneticOS 3.7.1

New

Improved

Fixed

Search results