KeeneticOS 3.7
Highlights at a glance
Release 3.7 is jam-packed with new features, fixes and improvements. These highlights are only the beginning:
Manage all your networks in one convenient Web Portal. The new Keenetic RMM system (now in beta) is a cloud-based multi-site remote monitoring and management solution purpose-built for Small/Medium-sized businesses to help keep critical networks and infrastructure online 24/7. Visit rmm.keenetic.com to learn more.
Customize the Web interface title and header for ease of navigation between multiple Keenetic devices.
Build a customized KeeneticOS image with your services and scripts using the Keenetic Software Development Kit (SDK) available on GitHub.
Learn more about the latest developments at the new device-tailored multilingual documentation portal.
As always, if you have any feedback (or want to say hi 
), drop us a line in the forum. To learn more about Keenetic, visit the Help Center.
KeeneticOS 3.7.4
31/03/2022
Improved
Updated to the latest OpenSSL library version 1.1.1n, which fixes the CVE-2022-0778 vulnerability. [SYS-523]
KeeneticOS 3.7.3
24/02/2022
Improved
We plan to add a user-defined setting for Wi‑Fi System Extenders to stop broadcasting Wi‑Fi networks if the backhaul connection to the Wi‑Fi System Controller is lost. Meanwhile, the new behaviour introduced in KeeneticOS 3.7 Beta 1 is temporarily disabled to prevent issues with specific Wi-Fi System configurations in the field. [NDM-2068]
Fixed
The Band Steering algorithm has improved signal level measuring to prevent early swapping of wireless clients between 2.4 and 5 GHz bands. [SYS-379]
The KeeneticOS now operates correctly with a
startup-configfile size of more than 64 Kbytes. [NDM-2090]The Wireless ISP tile for 5 GHz connection on the Dashboard menu now links to the proper path, Wireless ISP > WISP 5GHz. [NWI-872]
KeeneticOS 3.7.2
27/01/2022
New
A new configuration option for improved compatibility with legacy Wi-Fi clients: Control the TKIP countermeasures
hold-downtimer. If the Wi‑Fi Access Point with WPA-PSK + WPA2-PSK protection mode detects twoMIC errors in RXfailures within 60 seconds, it blocks all the wireless TKIP clients on that interface for the hold-down timer. Use this command to disable or tune this behaviour. [SYS-434]interface {name} encryption tkip hold-down {hold-down}— set thehold-downtimer in seconds (from 0 to 60). The default value is 60 sec.
Improved
There are no changes for Keenetic Buddy 5 (KN-3310).
Fixed
Fixed a sporadically occurring situation when data transmitted from the wireless interface of Mesh Wi‑Fi System Controller to an Extender, for instance, DCHP protocol, is blocked after reconfiguring the network segment. [SYS-436]
The LED power shutdown control now operates correctly with Keenetic devices having a single-LED indicator. [SYS-422]
Fixed an error in accessing the device's Web Interface after a few days of operation, causing the following messages in the System log. [NDM-2046]
ndm: Http::Nginx: there are errors in config, reconfigure.ndm: Http::Manager: unable to update configuration, retry.
KeeneticOS 3.7.1
14/12/2021
Improved
Enhanced Wi‑Fi Network protection: WPA2 Enterprise exchange with a RADIUS server now has Network name (SSID) in the
Called-Station-Idmessage —'50-FF-20-AA-BB-CC:Keenetic-5555'. [SYS-9]
Enabled centralized Wi‑Fi
country codeconfiguration from Wi‑Fi system Controller, and blocked this setting on Extenders. [NDM-1921, NWI-733]
Implemented brute-force protection for remote access to the device via the KeenDNS domain name in the Cloud access mode. [NDM-1804]
The KeeneticOS update process is optimized to run in the background to minimize system downtime. Keenetic has dual flash memory with active and backup KeeneticOS images to ensure fail-free automatic upgrades. When a new version of the operating system is released, the device will download, store and check the integrity of the software image in the backup partition first, without interrupting the main operation. Then the Keenetic device reboots, running the updated KeeneticOS version. Internet access will be briefly interrupted only during the device reboot. [NDM-1861]
The hostname value is added to the Syslog message's payload when sending records to a server to simplify log analysis from multiple Keenetic devices. [NDM-1872]
Fixed
Repaired Layer2 connectivity: The proxy ARP technique now operates correctly for devices behind a backhaul link of the Wi‑Fi system. [SYS-426]
Corrected seamless Wi-Fi roaming operation: The forwarding of the LLC frames of the Inter-Access Point Protocol daemon now operates accurately via a backhaul link of the Wi-Fi system. [SYS-427]
Fixed the forced disconnect of live Wi‑Fi clients when removing them from the Whitelist of the Wireless ACL. [SYS-400]
Fixed the false advertisement of 802.11k capabilities in Wi‑Fi network beacons. [SYS-414]
Wi‑Fi system dynamic Fast Transition (802.11r) key exchange now operates appropriately when an Extender has the IP address changed over time via DHCP. [SYS-354]
Restored the operation of simultaneous Wi‑Fi roaming zone and Wi‑Fi band restrictions applied to the device. The settings now propagate correctly to newly acquired Mesh Wi‑Fi System extenders as well. [NDM-1869, NDM-1875]
Fixed Network Time Protocol (NTP) server response validation under certain conditions. [NDM-1880]
KeeneticOS 3.7 Beta 3
19/10/2021
New
Added a user-defined caption to the Web Interface header and a browser tab providing improved navigation between multiple Keenetic devices. [NDM-1764, NWI-424, NWI-428, NWI-429, NWI-555, NWI-556, NWI-558]
Improved
Improved security: After changing user credentials, KeeneticOS cleans up active management sessions via the Web Interface and the Keenetic mobile application. [NDM-1860]
When a wired Ethernet backhaul link is used to attach a Wi‑Fi System Extender to a Wi‑Fi System Controller, setting up custom Wi‑Fi channels on the Extender is now possible. Setting non-overlapping Wi‑Fi channels on different Wi‑Fi System nodes will maximize wireless clients' performance. If a wired Ethernet backhaul link disconnects, the Extender will automatically switch to a Mesh wireless backhaul link to resume operation. In this case, depending on the Mesh wireless backhaul interface, the corresponding Wi‑Fi channel on the Extender will follow the backhaul link. Once a wired Ethernet backhaul link is restored, the Extender will automatically use wired backhaul and preset Wi‑Fi channels. [NDM-1801]
The Active connections information sheet moves to a separate tab on the Diagnostics page, providing a list of sessions established via your Keenetic device. [NWI-414]
A Wi‑Fi System Extender will stop broadcasting Wi‑Fi networks if the backhaul connection to the Wi‑Fi System Controller is lost, to help Wi‑Fi clients re-connect to a working Wi‑Fi System node faster. [NDM-1707]
The system Debug control relocates to a dedicated tab in the Diagnostics section. [NWI-401]
Seamless navigation from Wi‑Fi System Controller to Extenders is available now. Click the Extender name on the Mesh Wi‑Fi System page to jump to the Web Interface of the Extender. Each Extender has a unique navigation web address under the
*.keenetic.iodomain. Security tokens and automatically installed Let's Encrypt SSL certificates ensure safe and secure operation. [NDM-1287, NWI-323]
Updated the Web Interface of the KeeneticOS to address the CVE-2021-23017 vulnerability.
Added the Auto option for the KeenDNS operating in IPv4 mode, providing automatic detection of obtained IP address type and flexible operation if this IP changes from time to time or you have a secondary/backup Internet access connection. [NDW-2243]
It is now possible to use
%and^characters in the Username field of a DDNS profile. [NDMS-1255]
Fixed
Enabled WPA Enterprise system component providing authentication wireless clients on a RADIUS server. [NDM-1850]
Disabled requests from the Extenders to the Mesh Wi‑Fi Controller DNS proxy in additional segments. The Extenders now use Home segment only for system DNS requests. [NDM-976]
The Wi‑Fi roaming setting synchronization between the Wi‑Fi System Controller and Extenders now operates properly. [NDM-1668]
Eliminated the root cause for the
unable to reset loop detectorerrors in Extender logs. [NDM-1658]Fixed the reason for the
Rtx::Iapp: unsupported interfaceerrors in Extender logs. [NDM-1753]
Fixed the Wi‑Fi Extender IP address refresh for networks with multiple segments. [NDM-1752]
Fixed system configuration synchronization between the Mesh Wi‑Fi System Controller and Extenders. [NDM-1668]
The system restart in the Extender mode under certain conditions. [NDM-514]
Devices in Extender mode used to crash under certain circumstances. [NDMS-1546]
Improved the RSSI value handler in the Wi‑Fi wireless driver to fix the Band Steering algorithm operation. [NDMS-1477]
KeeneticOS 3.7 RTM 4
This is the initial shipping release for Keenetic Buddy 5 (KN-3310).