Оновлення KeeneticOS — Версія в розробці

Немає змін для параметрів продукту Keenetic City (KN-1511).

The number of Wireless ACL rules in the Web Interface is increased from 128 to 222. [NDW-1937]

Drag & drop binding of registered devices to the Internet Connection policy in the Connection priorities section is now working correctly. [NDW-1907]

The show ip name-server CLI command now displays the DNS server list from all Internet connections, with corresponding system interface naming. [NDMS-1415]

A huge configuration file with a size exceeding 65639 bytes could not correctly download from or upload to the Keenetic device. [NDMS-1455]

Немає змін для параметрів продукту Keenetic City (KN-1511).

Dynamic selection algorithm of the best up-link node for the wireless back-haul connection has been improved. It is now more sensitive to other Mesh Wi‑Fi system's node signal strengths, increasing the bandwidth and stability for wireless interconnections. [NDMS-1411]

Немає змін для параметрів продукту Keenetic City (KN-1511).

The bug that didn't allow the addition of the Extender device to the Wi‑Fi System is fixed. [Forum topic]

Немає змін для параметрів продукту Keenetic City (KN-1511).

It is now possible to ignore dynamically acquired parameters of the DNS name servers on IPSec/mobile/OpenVPN interfaces. Refer to the following CLI commands to apply such a setting to the corresponding interface. [NDMS-1355]

When local web applications are accessed remotely from the Internet through the KeenDNS service they may need specific fields in the request headers for correct operation. For such cases the support of headers X-Forwarded-Proto and X-Forwarded-Port is implemented. [NDMS-1345] [Forum topic]

Improved security: The "strong-aead" (aes256gcm-prfsha384) and "strong-aead-pfs" (aes256gcm-prfsha384-ecp384) modes are added for better compatibility and greater security of IKEv2 connections. [NDMS-1004]

The processing of the DHCP classless routes option 249 on tunnel interface is fixed. Now the list of the static routes received via this option is applied correctly. [NDMS-1199]

Improved compatibility and security: The EAP-PEAP authentication is implemented for both server and client components of the IKEv2 VPN, providing extended compatibility and stronger security. [NDMS-1324]

The aes256-sha256-modp2048 mode for IPsec connection is now enabled for better compatibility with the ProtonVPN service provider. [NDMS-1004] [Forum topic]

IPv6 address detection for local hosts is improved. The problem of periodic Internet connection loss on registered local devices using IPv6 addressing when the strict No internet access setting is enabled on Connection policy for unregistered devices is now fixed. [NDMS-433] [Forum topic]

Немає змін для параметрів продукту Keenetic City (KN-1511).

The bug that prevented addition of a new static port forwarding rule in the Web-configurator is fixed. [NDMS-1334] [Forum topic]

Access to the web interface of the device is now restored. There was a bug in the the UPnP component triggering cyclical forwarding to the Initial Setup Wizard — this is now fixed. [NDMS-1326] [Forum topic]

Display of the missing Acquire/Re-Check button in the Extender lists on the Wi‑Fi system page is now restored. [NDW-1848] [Forum topic]

The roaming area for wireless clients can now be restricted. By default all wireless clients can roam between all Wi‑Fi system nodes. This may introduce issues with sticky wireless clients in stationary Wi‑Fi-connected appliances like Smart TV. Sticky client remains connected to a distant node when there is better node nearby. This can severely impact the performance of device itself and Wi‑Fi network at whole. To address this issue you can now specify for for particular sticky wireless client the list of Wi‑Fi system nodes it can connect. The setting is available in both CLI and web interface on the Registered devices options page. [NDMS-1311]

If you don't want the LED indicators of your device to operate all day and night, you can use the new handy LED indicators control feature, available on the General system settings page of the web interface. It allows you to set up separate operating schedules for the LED indicators on your device's front and back. [NDW-1700]

Немає змін для параметрів продукту Keenetic City (KN-1511).

The display of the force-host: not enough arguments error in the startup configuration is fixed. [NDMS-1259] [Forum topic]

The power-down schedule for LED indicators is now inverted. [NDMS-1265]

Do not use the obsolete command system led shutdown {mode} schedule {schedule}.

Instead, issue these new commands in the CLI to apply the setting:

A new feature for HTTP header enforcement is added. It can be used when you cannot access the web application in your home network remotely. [NDMS-1259]

Issue this command in the CLI to apply the force-host header value to the corresponding domain name

A new pool for improved management of PMK-R1 keys is implemented. This change fixes the unstable connection of some wireless clients using WPA3 security while roaming between the nodes of your Wi‑Fi system. The fast and seamless transition mechanism, improving the usage of applications sensitive to packet delay and drops, is now completely available for WPA3 clients. [NDMS-1236, NDMS-1253, NDSM-1258, NDMS-1272].

The debugging mode of STP processing is implemented, providing detailed information on Wi‑Fi system operations. It can be requested by the technical support engineer for additional diagnostics. You don't need to enable it for day-to-day operations. [NDMS-1204]

To give you more granular control of KeeneticOS features, we have separated the Keenetic mobile application and the Cloud based remote control and KeenDNS components. If the mobile application is not used, the corresponding component can now be removed from KeeneticOS completely. [NDMS-1174]

Improved security: The OpenSSL library is updated to version 1.1.1i. It fixes the CVE-2020-1971 vulnerability.

A seamless Wi‑Fi roaming improvement is made: The unstable fast transition of wireless clients in Guest segment is fixed. The issue affected all network segments with the protected security level setting. [NDMS-1244]

STP processing is disabled for OpenVPN and EoIP interfaces included in the Bridge type of interface. This change prevents unstable behavior of the Wi‑Fi system triggering drops of the tunnel connections. [NDMS-986]

In Mesh Wi‑Fi System setups with multiple network segments, the IP address of the Extender device could potentially be displayed incorrectly in the list on the Wi‑Fi system page. This is fixed now. [NDMS-1263] [Forum topic]

Mesh Wi‑Fi system extenders now have unique local MAC addresses in each network segment. This improves Wi‑Fi system operational stability, especially when connecting extenders via unmanaged Ethernet switches. [NDMS-1083]

Improved timezone setting: Extender devices now automatically apply timezone setting propagated by the Controller device of Wi‑Fi system. You don't need to set the timezone manually per node. [NDMS-1251]

The Host traffic monitor page of the web interface has received minor usability improvements. [NDW-1577]

The first tab shows the Top5 highest consumption devices or types of traffic in different colors. The last item in the list, colored gray, is the sum of the traffic from all Other devices that in total consume less than any one of Top5. The multicast traffic is shown separately from this item only when its amount becomes one of Top5. Otherwise, it is included in Other devices item. You can also add more tabs for particular registered devices of your home network, for detailed monitoring.

The bug in domain name processing is fixed. Now clients of your home network can correctly resolve the domain name of the Keenetic device booked with KeenDNS service. [NDMS-1250] [Forum topic]

Немає змін для параметрів продукту Keenetic City (KN-1511).

A new PPPoE connection recovery algorithm is implemented. The series of multiple PADO packet timeouts now triggers the link restart action on the WAN Ethernet port of the device, restoring the remote equipment's correct port operation, and speeding up the re-establishment of the PPPoE connection. [NDMS-1179]

A new selector for Speed monitoring is added on the Host traffic monitor page. Use it to observe the speed of Internet connection for your home network clients over specific periods of time. [NDW-1580]

It is possible to set the description of your device's Ethernet ports using the interface {interface} description {description} command in the CLI. Now this description is displayed inside the icons of the Network ports section on the web interface's System dashboard page. If the description is longer than four symbols, then only three first of them are displayed inside the icon. To display the whole string, hover the cursor over the port's icon. [NDW-1594]

A static IP address can now be assigned to the Extender device in the web interface of the Controller device. [NDW-1520]

Open a particular Extender's node settings in the Members list on the Wi‑Fi system page and apply the desired IP address.

Wireless clients, roaming to the nodes of a Mesh Wi‑Fi system using a fast transition mechanism, could experience connection problems when the GTK (Group Temporal Key) renewal happened. An improvement, applied to the GTK re-keying procedure, resolved the connection stability for such clients, ensuring seamless roaming. [NDMS-1205]

The System dashboard used to display the wrong MAC address for the PPPoE Internet connections with spoofed MAC address. [NDW-1583]

Incorrect wireless back-haul connection speed and up-link node were displayed in the extender list of the Wi‑Fi system. [NDMS-1154] [Forum topic]

Advanced Wi‑Fi settings of extender nodes now allow changing Channel width for radio interfaces shared with mesh back-haul connections. [NDW-1495]

The traffic acounting for unregistered hosts is improved. [NDMS-1093] [Forum topic]

Minor fixes in the appearance of the web interface's Device lists page. [NDW-1477] [Forum topic]

The arrow sign in the auto-generated descriptions of UPnP forwarding rules is now displayed correctly. [NDW-1501] [Forum topic]

Немає змін для параметрів продукту Keenetic City (KN-1511).

The IPsec protocol code was updated to remove obsolete elements, and to optimize the footprint, providing improved tunnel connection security, stability and compatibility. [NDMS-268]

Years ago Reset button was defined to perform two functions: Long pressing for 10 seconds to return device to factory defaults and quick pressing to restart device. This dualism introduced a number of issues to Keenetic customers as they can not visually distinguish between the two cases. From now on Reset button is exclusively for return to factory defaults. [NDMS-1141]

Немає змін для параметрів продукту Keenetic City (KN-1511).

IKEv2 tunnels now feature DHCP Option 249 support. This delivers the static routes setting from the tunnel server-side to the remote clients in DHCP INFORM packets for automatic configuration. [NDMS-686]

The Mesh Wi‑Fi system Extender device's best path selection algorithm for wireless back-haul connection is improved. This change now provides greater stability and performance of the Mesh Wi‑Fi system's nodes interconnections. [NDMS-1120]

The performance of the Traffic shaper component is improved. [NDMS-1090]

The Mesh Wi‑Fi system Controller device now correctly removes the Extender device's default static IP address 192.168.1.3 from the Members list view once the new address is acquired via DHCP. [NDMS-1097]

The stable operation of the IPsec VPN component is now restored. [NDMS-1113] [Forum topic]

The port forwarding rule setting in the web interface is restored. The rule for the combination of TCP and UDP protocols can now be properly added on the Port forwarding page in the web interface. [NDW-1436] [Forum topic]

A new scanning algorithm for the wireless environment is implemented. It starts once a new Extender device is added to the Mesh Wi‑Fi system and lets all nodes determine the proper neighbors for wireless back-haul connection. [NDMS-1087]

If your device has a public IP address, you can access it remotely using a convenient static domain name registered by a DDNS provider. The setting for OpenDNS and DNS-O-Matic DDNS providers is now supported. It is available within the DDNS tab on the web interface's Domain name page. [NDMS-1010]

The traffic Service class can now be applied to a registered device in the web interface. It defines the data processing priority for the particular device. When the ISP connection is reaching its utilization cap, requested bandwidth is allocated first for devices having higher priority. For instance, you can apply a higher priority service class to the host experiencing voice calls delays or online video freezes while another host is downloading files. [NDW-1347]

The Network ports settings list in the web interface is enhanced by additional auto-negotiation options providing improved compatibility. [NDW-1370]

The Protected Management Frames (PMF) feature is now enabled on wireless back-haul interconnections of the Mesh Wi‑Fi system's nodes, improving network security and protection against disconnection attacks by intruders. [NDMS-951]

Немає змін для параметрів продукту Keenetic City (KN-1511).