KeeneticOS updates — Dev Channel

Enhanced Wi‑Fi Network protection: WPA2 Enterprise exchange with a RADIUS server now has Network name (SSID) in the Called-Station-Id message — '50-FF-20-AA-BB-CC:Keenetic-5555'. [SYS-9]

Repaired Layer2 connectivity: The proxy ARP technique now operates correctly for devices behind a backhaul link of the Wi‑Fi system. [SYS-426]

Corrected seamless Wi-Fi roaming operation: The forwarding of the LLC frames of the Inter-Access Point Protocol daemon now operates accurately via a backhaul link of the Wi-Fi system. [SYS-427]

There are no changes for Keenetic Buddy 5 (KN-3310).

There are no changes for Keenetic Buddy 5 (KN-3310).

Fixed the forced disconnect of live Wi‑Fi clients when removing them from the Whitelist of the Wireless ACL. [SYS-400]

Fixed the false advertisement of 802.11k capabilities in Wi‑Fi network beacons. [SYS-414]

There are no changes for Keenetic Buddy 5 (KN-3310).

Wi‑Fi system dynamic Fast Transition (802.11r) key exchange now operates appropriately when an Extender has the IP address changed over time via DHCP. [SYS-354] [Forum topic]

Enabled centralized Wi‑Fi country code configuration from Wi‑Fi system Controller, and blocked this setting on Extenders. [NDM-1921, NWI-733]

Fixed the mobile application request handler that caused the error message: unable to find (empty) as "Network::Interface::Base". [NDM-1927] [Forum topic]

There are no changes for Keenetic Buddy 5 (KN-3310).

There are no changes for Keenetic Buddy 5 (KN-3310).

The pop-up window closing icon is restored. [NWI-684] [Forum topic]

There are no changes for Keenetic Buddy 5 (KN-3310).

Implemented brute-force protection for remote access to the device via the KeenDNS domain name in the Cloud access mode. [NDM-1804]

The KeeneticOS update process is optimized to run in the background to minimize system downtime. Keenetic has dual flash memory with active and backup KeeneticOS images to ensure fail-free automatic upgrades. When a new version of the operating system is released, the device will download, store and check the integrity of the software image in the backup partition first, without interrupting the main operation. Then the Keenetic device reboots, running the updated KeeneticOS version. Internet access will be briefly interrupted only during the device reboot. [NDM-1861]

The hostname value is added to the Syslog message's payload when sending records to a server to simplify log analysis from multiple Keenetic devices. [NDM-1872]

Restored the operation of simultaneous Wi‑Fi roaming zone and Wi‑Fi band restrictions applied to the device. The settings now propagate correctly to newly acquired Mesh Wi‑Fi System extenders as well. [NDM-1869, NDM-1875]

Fixed Network Time Protocol (NTP) server response validation under certain conditions. [NDM-1880]

Added a user-defined caption to the Web Interface header and a browser tab providing improved navigation between multiple Keenetic devices. [NDM-1764, NWI-424, NWI-428, NWI-429, NWI-555, NWI-556, NWI-558]

Improved security: After changing user credentials, KeeneticOS cleans up active management sessions via the Web Interface and the Keenetic mobile application. [NDM-1860]

Enabled WPA Enterprise system component providing authentication wireless clients on a RADIUS server. [NDM-1850]

Disabled requests from the Extenders to the Mesh Wi‑Fi Controller DNS proxy in additional segments. The Extenders now use Home segment only for system DNS requests. [NDM-976]

When a wired Ethernet backhaul link is used to attach a Wi‑Fi System Extender to a Wi‑Fi System Controller, setting up custom Wi‑Fi channels on the Extender is now possible. Setting non-overlapping Wi‑Fi channels on different Wi‑Fi System nodes will maximize wireless clients' performance. If a wired Ethernet backhaul link disconnects, the Extender will automatically switch to a Mesh wireless backhaul link to resume operation. In this case, depending on the Mesh wireless backhaul interface, the corresponding Wi‑Fi channel on the Extender will follow the backhaul link. Once a wired Ethernet backhaul link is restored, the Extender will automatically use wired backhaul and preset Wi‑Fi channels. [NDM-1801]

The Wi‑Fi roaming setting synchronization between the Wi‑Fi System Controller and Extenders now operates properly. [NDM-1668]

Eliminated the root cause for the unable to reset loop detector errors in Extender logs. [NDM-1658]

Fixed the reason for the Rtx::Iapp: unsupported interface errors in Extender logs. [NDM-1753]

The Active connections information sheet moves to a separate tab on the Diagnostics page, providing a list of sessions established via your Keenetic device. [NWI-414]

A Wi‑Fi System Extender will stop broadcasting Wi‑Fi networks if the backhaul connection to the Wi‑Fi System Controller is lost, to help Wi‑Fi clients re-connect to a working Wi‑Fi System node faster. [NDM-1707]

Fixed the procedure for Extender acquisition to the Mesh Wi‑Fi System under certain conditions. [NDM-1775]

The system Debug control relocates to a dedicated tab in the Diagnostics section. [NWI-401]

We deployed a new firmware signing certificate to the cloud infrastructure to strengthen the security of KeeneticOS updates. [SYS-314]

Fixed the Wi‑Fi Extender IP address refresh for networks with multiple segments. [NDM-1752]

Seamless navigation from Wi‑Fi System Controller to Extenders is available now. Click the Extender name on the Mesh Wi‑Fi System page to jump to the Web Interface of the Extender. Each Extender has a unique navigation web address under the *.keenetic.io domain. Security tokens and automatically installed Let's Encrypt SSL certificates ensure safe and secure operation. [NDM-1287, NWI-323]

Fixed system configuration synchronization between the Mesh Wi‑Fi System Controller and Extenders. [NDM-1668]

Updated Curl daemon to 7.77.0 version, which fixes the CVE-2021-22897, CVE-2021-22898, CVE-2021-22901 vulnerabilities.

Updated the Web Interface of the KeeneticOS to address the CVE-2021-23017 vulnerability.

Patched a collection of security vulnerabilities called FragAttacks (Fragmentation and Aggregation Attacks). [SYS-276, SYS-277, SYS-278, SYS-280, SYS-282, SYS-283]

The system restart in the Extender mode under certain conditions. [NDM-514]

Added the Auto option for the KeenDNS operating in IPv4 mode, providing automatic detection of obtained IP address type and flexible operation if this IP changes from time to time or you have a secondary/backup Internet access connection. [NDW-2243]

It is now possible to use % and ^ characters in the Username field of a DDNS profile. [NDMS-1255]

Devices in Extender mode used to crash under certain circumstances. [NDMS-1546] [Forum topic]

Improved the RSSI value handler in the Wi‑Fi wireless driver to fix the Band Steering algorithm operation. [NDMS-1477] [Forum topic]