KeeneticOS updates — Preview Channel

The new MAP-T option is available for tunnelling IPv4 protocol packets over an ISP's internal IPv6-only network according to the RFC7599. Please check whether your ISP supports this feature. [NDM-1824, NWI-906]

The new Conditional Wi-Fi broadcast option is available for the Mesh Wi-Fi System. When enabled, Wi-Fi System Extenders stop wireless network broadcasting when the Wi-Fi System Controller is inaccessible. [NWI-895]

The Internet connection policy now has the Adaptive Outbound Speed Limit option, currently available through the CLI only, as follows: [NDM-2109]

Added per-host sessions counters on the Management > Diagnostics > Active connections screen. [NWI-844]

The new Session expiry timeout parameter is available in the Captive portal settings. The session terminates when the Captive portal client does not renew the DHCP lease for a specified period. The maximum lease time is 72 hours (4320 minutes). [NWI-867]

Extended flexibility with a secure DNS setup: Resolve specified domain names via a preset secure DNS server with the following CLI commands for DoT (DNS over TLS) and DoH (DNS over HTTPS) options. [NDM-2040]

Added DDNS update status on the Domain name > DDNS configuration page. [NWI-818]

New content filtering option: NextDNS service is available now as the KeeneticOS system component. Install the NextDNS component and register an account with the service before use. [NDM-1870]

The following CLI commands are available to configure the NextDNS component:

New configuration option for Traffic classification engine: Use the no ntce memory-watcher CLI command to disable the memory "pressure watcher" mechanism enabled by default. [NDM-1995]

More content filtering and ad blocking choices with outstanding flexibility: AdGuard DNS, CleanBrowsing, Cloudflare DNS, Neustar UltraDNS Public, OpenDNS, Quad9, Yandex.DNS are now available at once with the redesigned Public DNS resolvers & custom DNS profiles option. Mix and match content filtering services with registered devices for complete control. Install the all-new Cloud-based Content Filtering and Ad Blocking system component of KeenetiсOS and give it a try. [NDM-1820, SYS-361, NWI-784]

New control option for Mesh Wi‑Fi system: Reboot Wi-Fi system extenders from the controller using the new CLI command mws member {member} reboot. [NDM-1946]

Added MTU control to IKEv2 VPN client configuration in the advanced settings section, providing better interoperability with certain VPN providers, for example, Surfshark VPN. [NWI-974]

Added a warning message while setting up a Port forwarding rule for the HTTPS or 443/TCP protocol. [NWI-977]

Increased the maximum PSK key size up to 196 characters for IPsec VPN and IPsec/L2TP connections, providing proper connection to corporate networks with firm security policies. [NDM-2128]

Added the display of the regional code next to the Model name field on the About the system tile. [NWI-1027]

Improved IPv4 availability criteria for MAP-T-enabled connections for the proper display on the Dashboard page. [NWI-1025]

Added links to the NextDNS account configurations on the Internet safety page, providing easy access to the NextDNS management portal. [NWI-1020]

Added support for two-factor authentication (2FA) for the NextDNS service on the Internet safety page. [NWI-1021]

The Mesh Wi-Fi System controller now configures multiple extenders simultaneously. This improvement dramatically reduces start-up times for the systems with many extenders. [NDM-2003]

The Captive portal option is now available for multiple network segments simultaneously. [NWI-916]

The Application traffic analyser now identifies different types of traffic within one application, for example, Video/Voice call or File transfer within the WhatsApp application. Based on this data, IntelliQoS can further enhance traffic priority. [NWI-951]

Added MAP-T connection information to the System dashboard. [NWI-960]

The user properties menu is now directly accessible from the Applications settings with user credentials. [NWI-893]

Updated the metadata file of the Web Interface to comply with the Progressive Web App (PWA) specification. [NWI-904]

Improved traffic classification through additional attribute parsing. [NDM-2021]

Changed the RTP (Real-time Transport Protocol) classification category to Voice over IP for the Cloud-based content filtering and ad blocking system component. [NDM-2110]

Enabled offloading of the Top — Traffic priority via the hardware PPE (Packet Processing Engine). [SYS-506]

We replaced Service Class with a Traffic Priority setting for registered devices and IntelliQoS. [NWI-939]

New configuration option for devices in the Extender mode: a network Segment can have No IP address. [NWI-847]

Added a cautionary note for the Negotiation mode selector in IKEv1 IPsec connection setup. [NWI-877]

Added an option to save KeeneticOS and configuration files before a manual system update. [NWI-871]

The controls of the User-defined routes section are moved to the top, providing easy management, with a long list of the routes. [NWI-862]

Improved Network ports tile of the System dashboard now links to System settings > Network ports for all operating modes of the Keenetic. [NWI-822]

System dashboard improvement: Use the Change link to modify the schedule of Wi‑Fi network availability when Wi-Fi is disabled. [NWI-840]

Wi-Fi radio turned off by the Wi-Fi button now keeps this state after a system reboot or power-off event. [SYS-78]

UPnP port forwarding now works accurately with multiple Internet connections policies in place. [NDM-1382]

Fixed the WireGuard® outgoing packet loop when the underlying WAN link goes down. [NDM-852]

Moving registered devices between Internet Connection policies profiles won't break their work schedule(s) anymore. [NDM-1716]

DNS servers configured for WireGuard® connections now work accurately. [NDM-2122]

Fixed the configuration logic of the automatic default route for MAP-T. [NDM-2125]

Internet connection via IPv6 MAP-T now supports the 1:1 IPv4 sharing ratio option. [NDM-2127]

Fixed the selection of an optimal backhaul connection to the Mesh Wi-Fi System node based on Wi‑Fi RSSI and STP distance metrics. [SYS-486]

Fixed the invalid domain name error messages for the DHCP server with an enabled update-dns option upon receiving DHCP requests with special symbols in the hostname field. [NDM-2085]

Fixed invalid remote RADIUS server requests with WPA2 Enterprise network protection. [NDM-2081]

The menu list of the Web Interface now displays with full height on the mobile Safari® browser. [NWI-914]

The Port Forwarding page now displays correctly on mobile screens. [NWI-883]

The sorting of the User-defined routes table now functions appropriately. [NWI-873]

The Wi-Fi beacon frames broadcasted during the auto-channel selection (ACS) routine had invalid channel numbers. [SYS-473]

Keenetic RMM service polls no longer produce ndm: Hotspot::Account: data is absent for host "aa:bb:cc:dd:ee:ff" error messages for devices that have been offline since system restart. [NDM-2057]

The CLI command for disabling ARP discovery ip hotspot auto-scan no interface Home now operates correctly when the corresponding Segment uses a wide IP subnet mask 255.255.240.0. [NDM-1940]

Fixed ntce: unknown protocol. error message in the System log of the Traffic classification engine component triggered by IPv6/Teredo packets. [NDM-2044]

Fixed an Invalid username or password error displaying on the Web Interface Login page under certain conditions. [NWI-805]

Fixed hint layout and uptime label on dashboard tiles for mobile screens. [NWI-832]

Corrected Network access naming for VPN server settings. [NWI-838]

The inbound and outbound Speed limits of the custom Internet connection policy now operate accurately. [NDM-1889]

Fixed concurrent operation of the Speed limit for a Registered device and a custom Internet connection policy with speed limits. [NDM-1751]