KeeneticOS 4.2

KeeneticOS release notes for Keenetic 4G (KN-1210) in the Development Channel

KeeneticOS releases in this channel show what we're working on right now. We update roughly weekly. N.B.: While releases in this channel do undergo testing, they are still sometimes bugs present, as we want you, our community, to share in what's new as soon as possible. Your input is really valued.

Keenetic 4G (KN-1210) is currently in the Limited Updates support period and only receives security updates to address critical issues. Yet, to support our community, we will keep the latest Development channel updates available for Keenetic 4G (KN-1210) for as long as we can.

KeeneticOS 4.2 Alpha 2

30/03/2024

New

A new CLI grep extension is now available to filter the output of the show command. [NDM-3075]
- grep [-A <n>] [-B <n>] [-C <n>] regex — trim the show command output using the regex regular expression.
  -A — number of XML nodes to show after match.
  -B — number of XML nodes to show before match.
  -C — displayed XML cluster depth.
For example:
```
(config)> show interface | grep address

Interface, name = "Home"
          address: 192.168.2.1
             ipv6:

Interface, name = "Guest"
          address: 10.1.30.1
             ipv6:

(config)> show system | grep cpuload

          cpuload: 5
```

Improved

A new read/send timeout option allows the session lifetime for Web applications of the KeenDNS proxy service to be set via the command line interface (CLI). [NDM-3157]
- ip http proxy {name} timeout {timeout} — set {timeout} for KeenDNS {name} proxy.
The WireGuard advanced security configuration (ASC) parameters are now available in the command line interface (CLI). [NDM-3202]
- interface {name} wireguard asc {jc} {jmin} {jmax} {s1} {s2} {h1} {h2} {h3} {h4} — set additional ASC parameters for WireGuard {name} tunnel.

Fixed

KeeneticOS 4.2 Alpha 1

22/03/2024

New

A new segment default policy for hosts has been implemented and is now enabled by default. Registered devices with this connection policy assigned will follow the default connection policy of the network segment they are connecting to. [NDM-2237]
- ip hotspot host {MAC} conform — set host with specified {MAC} to follow the current segment's connection policy.
The new application filtering option is now available in the Application traffic analyser service via command line interface (CLI). This option allows to create a filtering profile, add required applications, assign a host or segment to the filtering profile and enable the operation schedule. [NDM-3069]
- ntce filter profile {name} application {application} — add an application to the profile.
- ntce filter profile {name} group {group} — add an application group to the profile.
- ntce filter profile {name} type {type} — set the profile type, which can be permit or deny.
- ntce filter profile {name} description {description} — set the profile description.
- ntce filter profile {name} schedule {schedule} — set the profile schedule.
- ntce filter assign host {host} {profile} — assign a profile to a registered host (MAC address).
- ntce filter assign interface {interface} {profile} — assign a profile to an interface.
The new option to automatically register hosts in the Home segment is now available (enabled by default). You can disable this behaviour using the command line interface (CLI). [NDM-3101]
- ip hotspot auto-register disable — disable automatic host registration for the Home segment.
The new OpenConnect VPN server system component is now available, providing a remote SSL VPN connection to your Keenetic. [NDM-3141]
- oc-server interface {interface} — bind OpenConnect server to an interface.
- oc-server pool-range {begin} {size} — set OpenConnect address pool.
- oc-server static-ip {name} {address} — set static IP address for a user.
- oc-server mtu {mtu} — set OpenConnect server MTU.
- oc-server multi-login — enable multiple connections with the same user account.
- ip nat oc — enable NAT for OpenConnect clients.
- service oc-server — enable OpenConnect service.

Improved

Disabling Port Forwarding (ip static) rules now forces matching active sessions to be dropped. [NDM-3067]
Implemented new options to preserve Referer and Origin headers for Web applications of the KeenDNS proxy service in the command line interface (CLI). [NDM-3089] [Forum topic]
- ip http proxy {name} preserve-referer — preserve Referer header for {name} of the web proxy rule.
- ip http proxy {name} preserve-origin — preserve Origin header for {name} of the web proxy rule.
A NetFlow monitor system component can now collect IPv6 traffic information and monitor network flows. [NDM-3109]
The MOBIKE extension (RFC 4555) has been enabled for both the IKEv2/IPsec VPN Server and the IKEv2 client. [NDM-3164]

Fixed

In this section:

KeeneticOS updates — Dev Channel

KeeneticOS 4.2

KeeneticOS release notes for Keenetic 4G (KN-1210) in the Development Channel

KeeneticOS 4.2 Alpha 2

New

Improved

Fixed

KeeneticOS 4.2 Alpha 1

New

Improved

Fixed

Search results