KeeneticOS 3.7
KeeneticOS 3.7.4
29/03/2022
Improved
Updated to the latest OpenSSL library version 1.1.1n, which fixes the CVE-2022-0778 vulnerability. [SYS-523]
Fixed
Fixed multiple remote peer support for OpenVPN connections. [NDM-2115]
Fixed the display of the Ports and VLANs settings on mobile devices. [NWI-924]
KeeneticOS 3.7.3
18/02/2022
Improved
Enhanced detection of 4G/3G USB modems by Huawei producing the following System log message
usbfs: process 203 (ndm) did not claim interface 1 before use
. [NDM-2063]We plan to add a user-defined setting for Wi‑Fi System Extenders to stop broadcasting Wi‑Fi networks if the backhaul connection to the Wi‑Fi System Controller is lost. Meanwhile, the new behaviour introduced in KeeneticOS 3.7 Beta 1 is temporarily disabled to prevent issues with specific Wi-Fi System configurations in the field. [NDM-2068]
Fixed
The Band Steering algorithm has improved signal level measuring to prevent early swapping of wireless clients between 2.4 and 5 GHz bands. [SYS-379]
Support for the sparse files functionality of the NTFS file system has been disabled to prevent system instability under heavy loads. [NDM-2076]
The KeeneticOS now operates correctly with a
startup-config
file size of more than 64 Kbytes. [NDM-2090]Fixed spontaneous shutdown of the SMB file and printer sharing component under heavy use of system
IPC$
andspoolss
resources. [SYS-487]Fixed LED indication of packet transmission over the 5 GHz radio interface while the 2.4 GHz Wi‑Fi network is disabled. [SYS-475]
The Wireless ISP connection can now link correctly to a third-party Wi-Fi network with an active
backhaul
support bit. [SYS-479]The Wireless ISP tile for 5 GHz connection on the Dashboard menu now links to the proper path, Wireless ISP > WISP 5GHz. [NWI-872]
KeeneticOS 3.7.2
20/01/2022
New
A new configuration option for improved compatibility with legacy Wi-Fi clients: Control the TKIP countermeasures
hold-down
timer. If the Wi‑Fi Access Point with WPA-PSK + WPA2-PSK protection mode detects twoMIC errors in RX
failures within 60 seconds, it blocks all the wireless TKIP clients on that interface for the hold-down timer. Use this command to disable or tune this behaviour. [SYS-434]interface {name} encryption tkip hold-down {hold-down}
— set thehold-down
timer in seconds (from 0 to 60). The default value is 60 sec.
The 4G LTE Cat4 Huawei E5377Ts-32 USB mobile router is now supported. [NDM-2027]
Improved
There are no changes for Keenetic Extra (KN-1713).
Fixed
Fixed a sporadically occurring situation when data transmitted from the wireless interface of Mesh Wi‑Fi System Controller to an Extender, for instance, DCHP protocol, is blocked after reconfiguring the network segment. [SYS-436]
The 5 GHz Wireless ISP (WISP) connection now operates correctly with the ZTE ZXHN F680 GPON-terminal. [SYS-424]
Fixed an error in accessing the device's Web Interface after a few days of operation, causing the following messages in the System log. [NDM-2046]
ndm: Http::Nginx: there are errors in config, reconfigure.
ndm: Http::Manager: unable to update configuration, retry.
The IPv6 section of the System dashboard menu now displays only the default IPv6 gateway for the corresponding interface. [NWI-823]
Fixed the Fast Transition (802.11r) roaming selector behaviour in the Roaming for wireless devices section. [NWI-816]
Fixed the APN settings display for the serial type (
UsbModem[N]
) modem interfaces in the Web Interface. [NWI-817]
KeeneticOS 3.7.1
10/12/2021
Improved
Enhanced Wi‑Fi Network protection: WPA2 Enterprise exchange with a RADIUS server now has Network name (SSID) in the
Called-Station-Id
message —'50-FF-20-AA-BB-CC:Keenetic-5555'
. [SYS-9]
Fixed
Repaired Layer2 connectivity: The proxy ARP technique now operates correctly for devices behind a backhaul link of the Wi‑Fi system. [SYS-426]
Corrected seamless Wi-Fi roaming operation: The forwarding of the LLC frames of the Inter-Access Point Protocol daemon now operates accurately via a backhaul link of the Wi-Fi system. [SYS-427]
KeeneticOS 3.7.0
28/11/2021
New
Improved
There are no changes for Keenetic Extra (KN-1713).
Fixed
Fixed the inability to set up a static DNS server address with the custom port setting in the Web Interface, for example —
1.1.1.1:5353
. [NWI-766]Fixed the forced disconnect of live Wi‑Fi clients when removing them from the Whitelist of the Wireless ACL. [SYS-400]
Fixed the false advertisement of 802.11k capabilities in Wi‑Fi network beacons. [SYS-414]
The Device list no longer shows phantom devices when an ISP network shares the same VLAN IDs with network segments configured in the Keenetic device. [SYS-422]
KeeneticOS 3.7 Beta 8
21/11/2021
Improved
There are no changes for Keenetic Extra (KN-1713).
Fixed
Wi‑Fi system dynamic Fast Transition (802.11r) key exchange now operates appropriately when an Extender has the IP address changed over time via DHCP. [SYS-354]
KeeneticOS 3.7 Beta 7
17/11/2021
New
Added support for the following modems:
4G LTE Cat4 DS Telecom DSA901 modem; [NDM-1904]
4G LTE Cat4 Megafon MM200-1 modem; [NDM-1891]
4G LTE Cat4 HP LT4120 modem module. [SYS-381]
Improved
Removed an error message that occurred if an IP address was configured instead of a URL (Uniform Resource Locator) for a DoH (DNS over HTTP) server:
Resolver prefix doesn't appear to contain a hostname
. [NDM-1938]Access to WebDAV server resources from the local network is now allowed for the
security-level private
mode. [NDM-1890]Enabled centralized Wi‑Fi
country code
configuration from Wi‑Fi system Controller, and blocked this setting on Extenders. [NDM-1921, NWI-733]Corrected the calculation Distance to the cell tower for QMI modems on LTE TDD (Time-Division Duplex) cells. [NDM-1916]
Receiving of SMS (Short Message Service) in the Turkish language now operates correctly for 4G/3G QMI modems. [NDM-1919]
Closing of Traffic monitor additional tabs is now allowed in mobile browsers. [NWI-666]
Added tab sorting algorithm to the 4G/3G modem menu, providing easy access to the active/connected modem when there are several tabs with modem profiles. [NWI-680]
Added links to the Internet connections settings from the dashboard Internet tile, providing a fast way to edit connection(s). [NWI-682]
The PSK (PreShared Key) length is extended to 96 characters for IPsec and L2TP/IPSec VPN servers. [NDM-1780]
Added the ability to use multiple partitions with the same volume labels. Restored operation with user volumes labeled
/storage
and/flash
. [NDM-1805]Implemented brute-force protection for remote access to the device via the KeenDNS domain name in the Cloud access mode. [NDM-1804]
The KeeneticOS update process is optimized to run in the background to minimize system downtime. Keenetic has dual flash memory with active and backup KeeneticOS images to ensure fail-free automatic upgrades. When a new version of the operating system is released, the device will download, store and check the integrity of the software image in the backup partition first, without interrupting the main operation. Then the Keenetic device reboots, running the updated KeeneticOS version. Internet access will be briefly interrupted only during the device reboot. [NDM-1861]
The hostname value is added to the Syslog message's payload when sending records to a server to simplify log analysis from multiple Keenetic devices. [NDM-1872]
Fixed
When a VoIP (Voice over Internet Protocol) service profile is selected, all obligatory fields are highlighted and visible. [NWI-729]
Fixed the occasional false "4 GBytes" bursts of apparent traffic in the Traffic monitor. [SYS-396]
The Static IP address assigned to a registered device now works more reliably. [NDM-1893]
Disabled validation of the DoT (DNS over TLS) / DoH (DNS over HTTPS) certificates until the system time of the KeeneticOS is synchronized. [NDM-1910]
Fixed the incorrect connection type in the More information section for Registered devices currently offline. [NDW-664]
The operation of the Wireguard VPN causes
no buffer space available
error message in the System log. [NDM-1913]
Restored the operation of simultaneous Wi‑Fi roaming zone and Wi‑Fi band restrictions applied to the device. The settings now propagate correctly to newly acquired Mesh Wi‑Fi System extenders as well. [NDM-1869, NDM-1875]
Fixed Network Time Protocol (NTP) server response validation under certain conditions. [NDM-1880]
Increased the server address length to 256 characters for PPTP and L2TP connections. [NDM-1907]
The Traffic monitor statistics now display correct information after changing settings on the WAN interface. [SYS-389]
KeeneticOS 3.7 Beta 3
30/09/2021
New
Added a user-defined caption to the Web Interface header and a browser tab providing improved navigation between multiple Keenetic devices. [NDM-1764, NWI-424, NWI-428, NWI-429, NWI-555, NWI-556, NWI-558]
Added support for 4G LTE Cat4 SimCOM A7600E-H modem module. [NDM-1794]
Improved
Improved security: After changing user credentials, KeeneticOS cleans up active management sessions via the Web Interface and the Keenetic mobile application. [NDM-1860]
Fixed
Disabled requests from the Extenders to the Mesh Wi‑Fi Controller DNS proxy in additional segments. The Extenders now use Home segment only for system DNS requests. [NDM-976]
The availability checking for the SkyDNS® service now operates correctly when no additional DNS servers are configured. [NDM-1761]
The IKEv2 VPN tunnel now operates properly as a primary Internet connection along with the logic of automatic IKEv2 tunnel source selection. [NDM-1855]
Allocating a large file to the NTFS partition of the USB attached drive no longer causes the system to freeze or reboot. [SYS-110]
Free disk space now displays correctly in the Download station system component when the download folder and
settings.json
file places in different USB drive partitions. [NDM-656]
KeeneticOS 3.7 Beta 2
This is the initial shipping release for Keenetic Extra (KN-1713).