Skip to main content

KeeneticOS updates — Main Channel

KeeneticOS 4.1

KeeneticOS release notes for Keenetic Carrier (KN-1711) in the Main Channel

KeeneticOS releases in this channel have passed our full rigorous testing and are recommended to all users, to avoid issues and maximize capabilities. This channel is updated roughly every two-three weeks with minor releases, and every two months with major releases.

Keenetic Carrier (KN-1711) is currently in the Limited Updates support period and only receives security updates to address critical issues. Yet, to support our community, we will keep the latest Development channel updates available for Keenetic Carrier (KN-1711) for as long as we can.

What’s new?

Welcome to the release of KeeneticOS version 4.1! Our main focus for this update is to further improve support for the IPv6 protocol in various KeeneticOS services.

  • Among the most significant IPv6 updates are the introduction of local prefixes of the ULA fc00::/7 address space for local segments, IPv6 interface identifier configuration via the CLI, blocking of IPv6 DNS traffic in transit with Internet filters, and support for the ping6 command.

  • The maximum number of independent wireless networks (SSIDs) is increased to 7 per band, enabling network administrators to meet the demands of modern connectivity environments.

  • A new option to force disconnection of Wi-Fi clients with weak signal levels is available via the CLI command to help network administrators optimise network performance, improve user experience and promote efficient spectrum utilisation.

  • The new ZeroTier client is available for CLI setup and supports secure connectivity to your private networks and devices anywhere online.

  • Improved SNMP implementation allows configuration of multiple community setups and profiles with restricted access to OID branches via the CLI.

  • The maximum number of IP alias entries has been increased to 250, providing greater flexibility when setting up Internet connections with multiple external IP addresses and multi-NAT rules.

  • It is now possible to specify the underlying connection for peers in WireGuard VPN, enabling precise tunnel traffic management.

  • The XFRM interface implementation allows IPsec VPN site-to-site traffic to follow firewall rules and routing tables, for example, for use as an Internet connection.

KeeneticOS 4.1.7



KeeneticOS 4.1.6





KeeneticOS 4.1.3





KeeneticOS 4.1.2