KeeneticOS updates — Dev Channel

Enhanced Wi‑Fi Network protection: WPA2 Enterprise exchange with a RADIUS server now has Network name (SSID) in the Called-Station-Id message — '50-FF-20-AA-BB-CC:Keenetic-5555'. [SYS-9]

Repaired Layer2 connectivity: The proxy ARP technique now operates correctly for devices behind a backhaul link of the Wi‑Fi system. [SYS-426]

Corrected seamless Wi-Fi roaming operation: The forwarding of the LLC frames of the Inter-Access Point Protocol daemon now operates accurately via a backhaul link of the Wi-Fi system. [SYS-427]

There are no changes for Keenetic Air(KN-1613).

There are no changes for Keenetic Air(KN-1613).

Fixed the inability to set up a static DNS server address with the custom port setting in the Web Interface, for example — 1.1.1.1:5353. [NWI-766]

Fixed the forced disconnect of live Wi‑Fi clients when removing them from the Whitelist of the Wireless ACL. [SYS-400]

Fixed the false advertisement of 802.11k capabilities in Wi‑Fi network beacons. [SYS-414]

The Device list no longer shows phantom devices when an ISP network shares the same VLAN IDs with network segments configured in the Keenetic device. [SYS-422]

There are no changes for Keenetic Air(KN-1613).

Wi‑Fi system dynamic Fast Transition (802.11r) key exchange now operates appropriately when an Extender has the IP address changed over time via DHCP. [SYS-354] [Reported by MDP]

Fixed Wi‑Fi roaming zone configuration error: unable to set global STA mask in non-MWS mode. [NDM-1942]

Removed an error message that occurred if an IP address was configured instead of a URL (Uniform Resource Locator) for a DoH (DNS over HTTP) server: Resolver prefix doesn't appear to contain a hostname. [NDM-1938]

Enabled centralized Wi‑Fi country code configuration from Wi‑Fi system Controller, and blocked this setting on Extenders. [NDM-1921, NWI-733]

Closing of Traffic monitor additional tabs is now allowed in mobile browsers. [NWI-666] [Reported by enterfaza]

Added links to the Internet connections settings from the dashboard Internet tile, providing a fast way to edit connection(s). [NWI-682]

Fixed the mobile application request handler that caused the error message: unable to find (empty) as "Network::Interface::Base". [NDM-1927] [Reported by MDP]

There are no changes for Keenetic Air(KN-1613).

The PSK (PreShared Key) length is extended to 96 characters for IPsec and L2TP/IPSec VPN servers. [NDM-1780]

Fixed the occasional false "4 GBytes" bursts of apparent traffic in the Traffic monitor. [SYS-396]

The Static IP address assigned to a registered device now works more reliably. [NDM-1893]

Disabled validation of the DoT (DNS over TLS) / DoH (DNS over HTTPS) certificates until the system time of the KeeneticOS is synchronized. [NDM-1910] [Reported by Alex M]

The pop-up window closing icon is restored. [NWI-684] [Reported by AndreBA]

Fixed the incorrect connection type in the More information section for Registered devices currently offline. [NDW-664] [Reported by PriSonerS61]

The operation of the Wireguard VPN causes no buffer space available error message in the System log. [NDM-1913]

There are no changes for Keenetic Air(KN-1613).

Implemented brute-force protection for remote access to the device via the KeenDNS domain name in the Cloud access mode. [NDM-1804]

The KeeneticOS update process is optimized to run in the background to minimize system downtime. Keenetic has dual flash memory with active and backup KeeneticOS images to ensure fail-free automatic upgrades. When a new version of the operating system is released, the device will download, store and check the integrity of the software image in the backup partition first, without interrupting the main operation. Then the Keenetic device reboots, running the updated KeeneticOS version. Internet access will be briefly interrupted only during the device reboot. [NDM-1861]

The hostname value is added to the Syslog message's payload when sending records to a server to simplify log analysis from multiple Keenetic devices. [NDM-1872]

Restored the operation of simultaneous Wi‑Fi roaming zone and Wi‑Fi band restrictions applied to the device. The settings now propagate correctly to newly acquired Mesh Wi‑Fi System extenders as well. [NDM-1869, NDM-1875]

Fixed Network Time Protocol (NTP) server response validation under certain conditions. [NDM-1880]

Increased the server address length to 256 characters for PPTP and L2TP connections. [NDM-1907]

The Traffic monitor statistics now display correct information after changing settings on the WAN interface. [SYS-389]

Added a user-defined caption to the Web Interface header and a browser tab providing improved navigation between multiple Keenetic devices. [NDM-1764, NWI-424, NWI-428, NWI-429, NWI-555, NWI-556, NWI-558]

Improved security: After changing user credentials, KeeneticOS cleans up active management sessions via the Web Interface and the Keenetic mobile application. [NDM-1860]

Disabled requests from the Extenders to the Mesh Wi‑Fi Controller DNS proxy in additional segments. The Extenders now use Home segment only for system DNS requests. [NDM-976]

The availability checking for the SkyDNS® service now operates correctly when no additional DNS servers are configured. [NDM-1761]

The IKEv2 VPN tunnel now operates properly as a primary Internet connection along with the logic of automatic IKEv2 tunnel source selection. [NDM-1855]