KeeneticOS 4.0
KeeneticOS release notes for Keenetic Hero 4G (KN-2310) in the Development Channel
KeeneticOS releases in this channel show what we're working on right now. We update roughly weekly. N.B.: While releases in this channel do undergo testing, they are still sometimes bugs present, as we want you, our community, to share in what's new as soon as possible. Your input is really valued.
Keenetic Hero 4G (KN-2310) is currently in the Standard Updates support period and receives regular software updates, including security enhancements, new features, operating system updates, and bug fixes.
KeeneticOS 4.0 Alpha 4
20/01/2023
Improved
KeeneticOS now allows you to assign
512
hosts with Static IP settings on the Device lists page for registered devices. [NDM-2501]Increased KeenDNS service web application records from
160
to256
. [NDM-2519]For the Fibocom L850-GL/L860-GL modem modules, SMS storage has been moved from the modem's internal memory to the SIM card memory to avoid problems with receiving and reading incoming SMS messages. [SYS-723] [Reported by r13]
Fixed
The
DNS proxy
service now handles TCP chunks correctly, resulting in better service stability. [SYS-726]Fixed
connected
state for interfaces with a statically configured IP address. [NDM-2551]Phase 1 Rekey time is now displayed correctly for site-to-site IPsec VPN connections. [NDM-2554]
Fixed reason for spontaneous disconnection of remote connections to L2TP/IPsec VPN server. [NDM-2555]
The Traffic monitor page now displays the correct average speed for 3 minutes. [NDM-2556]
Corrected the "transmitted bytes" statistic in the host traffic monitor legend. [NDM-2560]
KeeneticOS 4.0 Alpha 3
12/01/2023
New
The new deSEC (desec.io) service is available for the Dynamic DNS (DDNS) client system component. [NDM-2540]
A new CLI command allows the deactivation of an internal
storm-control
feature for a specific interface:interface {name} storm-control disable
— disable storm-control on{name}
interface
Fixed
Ethernet ports are now operating correctly after re-enabling of the previously disabled ports. [NDM-2529] [Reported by T@rkus]
The 4G
NDIS
-type USB modems from Huawei are now correctly configured with the APN setting. [NDM-2524] [Reported by Migel]Connection priority change no longer modifies the interface state. [NDM-2526] [Reported by T@rkus]
The
ip6 prefix auto
setting no longer disappears from the running configuration. [NDM-2528] [Reported by avn]Fixed early expiration of the Days until count resets timer in the Data usage & limit feature for Mobile Broadband connections. [SYS-720]
The
ICMP
andGRE
protocols are now available for the new IPsec traffic selectors with multiple subnets. [NDM-2534] [Reported by gaaronk]The use of WireGuard® tunnels as the default route with the IPv6 protocol is now fixed. [NDM-2535]
Restored the working of IPv6 in IPv4 tunnels after switching to new routing table logic. [NDM-2544] [Reported by stakp]
The
interface ipv6 force-default
CLI command has been brought back into support for backward compatibility. [NDM-2545] [Reported by stakp]
KeeneticOS 4.0 Alpha 2
30/12/2022
Fixed
The Fail-safe configuration mode no longer causes an unnecessary reboot. The timeout is set to three minutes. [NWI-1496]
The Provider name description now displays correctly on the Dashboard and Connection priorities pages. [NWI-1495] [Reported by r777ay]
The cause of the
not found: show/ip6/routes
error messages in the System log was fixed. [NWI-1497] [Reported by fl4co]Restored PPPoE interface management when it changes up or down state. [NDM-2523] [Reported by dimon27254]
The SSTP VPN server now supports legacy
TLSv1/SHA1
algorithms for correct SSTP connection with particular Windows 7 clients. [NDM-2525] [Reported by Winterborn]
KeeneticOS 4.0 Alpha 1
27/12/2022
New
The new IPv6 Prefix Delegation option has been implemented for subnetting. [NDM-1976]
Use the following CLI commands to set:
ipv6 subnet {name} prefix length {length}
— set subnet prefix lengthipv6 subnet {name} prefix delegate {delegate}
— set delegated prefix length (must be shorter than prefix length)
A typical configuration Prefix Delegation for a Home segment looks like follows:
ipv6 subnet Default bind Home mode dhcp prefix length 63 prefix delegate 64 number 0
The new multiple subnets option is available for Site-to-site IPsec VPN connections in Phase 2, providing network connectivity between several subnets over a VPN tunnel. [NDM-313]
Use the following CLI commands to set:
object-group ip {name}
— create a new object groupinclude (ip | tcp | udp | tcpudp | icmp) {address} [{port} [{end-port}]]
exclude (ip | tcp | udp | tcpudp | icmp) {address} [{port} [{end-port}]]
crypto map {name} traffic-selectors {local} {remote}
— assign local/remote object groups as Phase 2 selectors
The new Add local subnet and Add remote subnet options are available for Site-to-site IPsec VPN connections on the Internet > Other connections page.
Implemented frequency band selection option for Huawei modems with
NDIS
-type. [NDM-2151] [Requested by XEGARE]Implemented host traffic accounting for IPv6 protocol, providing correct calculation for the incoming/outgoing data of your home devices. [SYS-648]
The Application traffic analyser now supports traffic classification for the IPv6 protocol. [SYS-652]
The Traffic shaper system component now supports operation with the IPv6 protocol, providing correct traffic limitation for data flows of IPv4/IPv6 together. [SYS-658]
New USB modem modules are now supported, including:
Askey WWHC050 4G QMI-type modem module. [NDM-2434]
Telit LN960 4G Cat 9 QMI-type modem module. [NDM-2502]
Tip
To connect an LTE module to your Keenetic device, you can purchase a third-party USB adapter with a SIM card slot for the Mini PCI-E LTE module or M.2 LTE module.
The Web Interface receives core support for IPv6 connections. [NDM-2448]
The OpenVPN client and server system component now supports the IPv6 protocol for VPN connection. [NDM-2451]
The Wireguard VPN component now internally supports the IPv6 protocol for VPN connection. [NDM-2452]
Implemented support for 802.1Q tagged VLAN traffic over
AccessPoint
andWifiStation
(Wireless ISP) interfaces. [SYS-682]The new HTTP/HTTPS URI mode of the Ping Check allows you to specify the host address to check using a URI (Uniform Resource Identifier). [NDM-2490] [Requested by Oleksii87]
Use the following CLI commands to set:
ping-check profile {name} mode (icmp | connect | tls | uri)
— enable URI checking for Ping Check profile{name}
ping-check profile {name} uri {uri}
— set URI
Connection policy now operates with the IPv6 protocol. [NDM-2515]
Improved
Fixed
DNS IPv6 responses now send from the correct and expected port 53. [NDM-2439]