KeeneticOS 3.6
KeeneticOS 3.6.2
17/03/2021
Fixed
Fixed the management for HTTP-based Huawei and Yota-branded 4G/3G modems. [NDMS-1507, NDMS-1510]
KeeneticOS 3.6.1
10/03/2021
Improved
The number of Wireless ACL rules in the Web Interface is increased from 128 to 222. [NDW-1937]
Fixed
The name conflict producing warning messages of mDNS (Avahi-daemon) in System log is fixed. [NDMS-1478, NDMS-734]
Note
The multicast DNS (mDNS) protocol resolves hostnames to IP addresses within small networks. mDNS helps to detect network services like AFP, CIFS, DLNA, network printers and scanners.
Drag & drop binding of registered devices to the Internet Connection policy in the Connection priorities section is now working correctly. [NDW-1907]
KeeneticOS 3.6.0
03/03/2021
Improved
The
show ip name-server
CLI command now displays the DNS server list from all Internet connections, with corresponding system interface naming. [NDMS-1415]
Fixed
A huge configuration file with a size exceeding 65639 bytes could not correctly download from or upload to the Keenetic device. [NDMS-1455]
KeeneticOS 3.6 Beta 3
16/02/2021
New
There are no changes for Keenetic Ultra (KN-1810).
Improved
Dynamic selection algorithm of the best up-link node for the wireless back-haul connection has been improved. It is now more sensitive to other Mesh Wi‑Fi system's node signal strengths, increasing the bandwidth and stability for wireless interconnections. [NDMS-1411]
Fixed
USB storage formatted with the exFAT file system by the MiniTool Partition Wizard software is now correctly identified when attached to a Keenetic device. [NDMS-1390]
KeeneticOS 3.6 Beta 2
6/02/2021
Fixed
The bug that didn't allow the addition of the Extender device to the Wi‑Fi System is fixed. [Forum topic]
The bug that stopped the sharing of attached USB storage devices and printers, during processing of non-Unicode
TREE_CONNECT_ANDX
requests or renaming files, is fixed. [NDMS-1133]
KeeneticOS 3.6 Beta 1
27/01/2021
Fixed
The processing of concatenated SMS messages on supported QMI-modems is fixed. The resulting message is now displayed correctly in the SMS lists menu of the web interface. [NDMS-1383] [Forum topic]
KeeneticOS 3.6 Beta 0
23/01/2021
New
It is now possible to ignore dynamically acquired parameters of the DNS name servers on IPSec/mobile/OpenVPN interfaces. Refer to the following CLI commands to apply such a setting to the corresponding interface. [NDMS-1355]
interface {name} ipsec no name-servers
interface {name} mobile no name-servers
interface {name} openvpn no name-servers
When local web applications are accessed remotely from the Internet through the KeenDNS service they may need specific fields in the request headers for correct operation. For such cases the support of headers
X-Forwarded-Proto
andX-Forwarded-Port
is implemented. [NDMS-1345] [Forum topic]Improved security: The "strong-aead" (
aes256gcm-prfsha384
) and "strong-aead-pfs" (aes256gcm-prfsha384-ecp384
) modes are added for better compatibility and greater security of IKEv2 connections. [NDMS-1004]Further modem support: The modem DW5821e (T77W968) is now supported. [NDMS-1372]
Tip
To connect an LTE module to your Keenetic device, you can purchase a third-party USB adapter with a SIM card slot for the Mini PCI-E LTE module or M.2 LTE module.
Further modem support: The modem Alcatel L100V, operating in serial mode, is now supported. [NDMS-1371]
Fixed
The processing of the DHCP classless routes option 249 on tunnel interface is fixed. Now the list of the static routes received via this option is applied correctly. [NDMS-1199]
KeeneticOS 3.6 Alpha 16
14/01/2021
New
Improved compatibility and security: The EAP-PEAP authentication is implemented for both server and client components of the IKEv2 VPN, providing extended compatibility and stronger security. [NDMS-1324]
The
aes256-sha256-modp2048
mode for IPsec connection is now enabled for better compatibility with the ProtonVPN service provider. [NDMS-1004] [Forum topic]
Improved
IPv6 address detection for local hosts is improved. The problem of periodic Internet connection loss on registered local devices using IPv6 addressing when the strict No internet access setting is enabled on Connection policy for unregistered devices is now fixed. [NDMS-433] [Forum topic]
Fixed
Incorrect writing of files with a size smaller than 64KB to the attached USB-storage via the WebDAV protocol is now fixed. [NDMS-1316] [Forum topic]
The spontaneous reboots that happened when using Huawei mobile modems operating CDC-NCM protocol are fixed now. USB-modems can be used for primary and backup connection. [NDMS-1191]
Internet connection policy employing the QMI-type modem link works properly now. [NDMS-1203]
KeeneticOS 3.6 Alpha 15
5/01/2021
Fixed
The bug that prevented addition of a new static port forwarding rule in the Web-configurator is fixed. [NDMS-1334] [Forum topic]
KeeneticOS 3.6 Alpha 14
29/12/2020
Fixed
Access to the web interface of the device is now restored. There was a bug in the the UPnP component triggering cyclical forwarding to the Initial Setup Wizard — this is now fixed. [NDMS-1326] [Forum topic]
Display of the missing Acquire/Re-Check button in the Extender lists on the Wi‑Fi system page is now restored. [NDW-1848] [Forum topic]
KeeneticOS 3.6 Alpha 13
26/12/2020
New
The roaming area for wireless clients can now be restricted. By default all wireless clients can roam between all Wi‑Fi system nodes. This may introduce issues with sticky wireless clients in stationary Wi‑Fi-connected appliances like Smart TV. Sticky client remains connected to a distant node when there is better node nearby. This can severely impact the performance of device itself and Wi‑Fi network at whole. To address this issue you can now specify for for particular sticky wireless client the list of Wi‑Fi system nodes it can connect. The setting is available in both CLI and web interface on the Registered devices options page. [NDMS-1311]
mws zone {mac} {cid}
— limits zone for the device with the specific MAC address to the nodes of the Wi‑Fi system with the specific cid in the CLIor choose Wi‑Fi system nodes that will deny connection for a particular device in the web interface
If you don't want the LED indicators of your device to operate all day and night, you can use the new handy LED indicators control feature, available on the General system settings page of the web interface. It allows you to set up separate operating schedules for the LED indicators on your device's front and back. [NDW-1700]
Improved
There are no changes for Keenetic Ultra (KN-1810).
Fixed
The display of the
force-host: not enough arguments
error in the startup configuration is fixed. [NDMS-1259] [Forum topic]Cat 6 and above 4G LTE modems use multiple carriers to send and receive data. Information about multiple carriers reported by the modem is now displayed correctly. You can find it in the mobile connection details on the System dashboard and Mobile broadband connection pages. Or issue
show interface {interface}
command in CLI. [NDMS-1156] [Forum topic]
KeeneticOS 3.6 Alpha 12
20/12/2020
New
The power-down schedule for LED indicators is now inverted. [NDMS-1265]
Do not use the obsolete command
system led shutdown {mode} schedule {schedule}
.Instead, issue these new commands in the CLI to apply the setting:
system led power schedule {schedule}
— apply the LED indicators power-up schedulesystem led power shutdown (front | back | all)
— apply the LED indicators shutdown mode
A new feature for HTTP header enforcement is added. It can be used when you cannot access the web application in your home network remotely. [NDMS-1259]
Issue this command in the CLI to apply the
force-host
header value to the corresponding domainname
ip http proxy {name} force-host {force-host}
Improved
A new pool for improved management of PMK-R1 keys is implemented. This change fixes the unstable connection of some wireless clients using WPA3 security while roaming between the nodes of your Wi‑Fi system. The fast and seamless transition mechanism, improving the usage of applications sensitive to packet delay and drops, is now completely available for WPA3 clients. [NDMS-1236, NDMS-1253, NDSM-1258, NDMS-1272].
KeeneticOS 3.6 Alpha 11
12/12/2020
New
The debugging mode of STP processing is implemented, providing detailed information on Wi‑Fi system operations. It can be requested by the technical support engineer for additional diagnostics. You don't need to enable it for day-to-day operations. [NDMS-1204]
mws log stp {interface}
— enable STP debugging on the bridgeinterface
no mws log stp {interface}
— disable STP debugging on the bridgeinterface
Further DECT handset support: The Gigaset A220H and Gigaset A415H DECT handsets are now supported for VoIP calls via Keenetic Plus DECT phone station, connected to the USB port of your device.
Improved
To give you more granular control of KeeneticOS features, we have separated the Keenetic mobile application and the Cloud based remote control and KeenDNS components. If the mobile application is not used, the corresponding component can now be removed from KeeneticOS completely. [NDMS-1174]
Improved security: The OpenSSL library is updated to version 1.1.1i. It fixes the CVE-2020-1971 vulnerability.
Fixed
A seamless Wi‑Fi roaming improvement is made: The unstable fast transition of wireless clients in Guest segment is fixed. The issue affected all network segments with the
protected
security level setting. [NDMS-1244]STP processing is disabled for OpenVPN and EoIP interfaces included in the Bridge type of interface. This change prevents unstable behavior of the Wi‑Fi system triggering drops of the tunnel connections. [NDMS-986]
A bug in processing SIM card status on the QMI-type modem, leading to possible crashes, is fixed. [NDMS-1285]
KeeneticOS 3.6 Alpha 10
9/12/2020
Fixed
In Mesh Wi‑Fi System setups with multiple network segments, the IP address of the Extender device could potentially be displayed incorrectly in the list on the Wi‑Fi system page. This is fixed now. [NDMS-1263] [Forum topic]
KeeneticOS 3.6 Alpha 8
6/12/2020
Improved
Mesh Wi‑Fi system extenders now have unique local MAC addresses in each network segment. This improves Wi‑Fi system operational stability, especially when connecting extenders via unmanaged Ethernet switches. [NDMS-1083]
Improved timezone setting: Extender devices now automatically apply timezone setting propagated by the Controller device of Wi‑Fi system. You don't need to set the timezone manually per node. [NDMS-1251]
The Host traffic monitor page of the web interface has received minor usability improvements. [NDW-1577]
The first tab shows the Top5 highest consumption devices or types of traffic in different colors. The last item in the list, colored gray, is the sum of the traffic from all Other devices that in total consume less than any one of Top5. The multicast traffic is shown separately from this item only when its amount becomes one of Top5. Otherwise, it is included in Other devices item. You can also add more tabs for particular registered devices of your home network, for detailed monitoring.
Fixed
The bug in domain name processing is fixed. Now clients of your home network can correctly resolve the domain name of the Keenetic device booked with KeenDNS service. [NDMS-1250] [Forum topic]
KeeneticOS 3.6 Alpha 7
28/11/2020
Fixed
The PPPoE protocol now works properly over the VDSL connections. [NDMS-1231] [Forum topic]
Uploading a file with the same name as existing one to the attached USB storage caused appending of data instead of replacing the file. This was fixed. The built-in File browser allows you to manage files on attached USB storage through your device's web interface. [NDMS-1227] [Forum topic]
Improved compatibility: the
invalid transition
error caused by the low power mode on the Sierra Wireless EM7455 modem is fixed. [NDMS-1230]Tip
To connect an LTE module to your Keenetic device, you can purchase a third-party USB adapter with a SIM card slot for the Mini PCI-E LTE module or M.2 LTE module.
KeeneticOS 3.6 Alpha 6
26/11/2020
New
A new PPPoE connection recovery algorithm is implemented. The series of multiple PADO packet timeouts now triggers the link restart action on the WAN Ethernet port of the device, restoring the remote equipment's correct port operation, and speeding up the re-establishment of the PPPoE connection. [NDMS-1179]
A new selector for Speed monitoring is added on the Host traffic monitor page. Use it to observe the speed of Internet connection for your home network clients over specific periods of time. [NDW-1580]
It is possible to set the description of your device's Ethernet ports using the
interface {interface} description {description}
command in the CLI. Now this description is displayed inside the icons of the Network ports section on the web interface's System dashboard page. If the description is longer than four symbols, then only three first of them are displayed inside the icon. To display the whole string, hover the cursor over the port's icon. [NDW-1594]A static IP address can now be assigned to the Extender device in the web interface of the Controller device. [NDW-1520]
Open a particular Extender's node settings in the Members list on the Wi‑Fi system page and apply the desired IP address.
Note
If the static IP address differs from the address currently used, you will need to reconnect or reboot this Extender device for the new setting to be applied.
Further modem support: The Megafon M150-4 modem is now supported. [NDMS-1178]
Fixed
Wireless clients, roaming to the nodes of a Mesh Wi‑Fi system using a fast transition mechanism, could experience connection problems when the GTK (Group Temporal Key) renewal happened. An improvement, applied to the GTK re-keying procedure, resolved the connection stability for such clients, ensuring seamless roaming. [NDMS-1205]
The System dashboard used to display the wrong MAC address for the PPPoE Internet connections with spoofed MAC address. [NDW-1583]
KeeneticOS 3.6 Alpha 5
10/11/2020
Fixed
Incorrect wireless back-haul connection speed and up-link node were displayed in the extender list of the Wi‑Fi system. [NDMS-1154] [Forum topic]
The Andes microcode of the Wi‑Fi chipset is rolled back to version
20190612110649
to prevent fallback to 40 MHz bandwidth for number of wireless clients. This was done in response to a significant number of complaints. [NDMS-1149]
KeeneticOS 3.6 Alpha 4
4/11/2020
New
Advanced Wi‑Fi settings of extender nodes now allow changing Channel width for radio interfaces shared with mesh back-haul connections. [NDW-1495]
The USSD page is added to the web interface. The page is available when supported QMI-type modem is attached to the USB port. Issue USSD codes after mobile connection is established to request specific information or subscribe to mobile operator's services. For instance, you can get account balance information, change the tariff and so on. [NDW-1522]
Notice
USSD codes also known as 'quick codes', unique for each mobile operator. Consult website or helpline of your mobile operator to get the list of available codes.
Improved
The traffic acounting for unregistered hosts is improved. [NDMS-1093] [Forum topic]
Fixed
Automatic WSD discovery of printers and storage devices attached to the Keenetic is now fixed to work continuously. [NDMS-826] [Forum topic]
Sony Playstation®2 can now access storage devices attached to the Keenetic via SMBv1 protocol without an issue. [NDMS-1018]
Minor fixes in the appearance of the web interface's Device lists page. [NDW-1477] [Forum topic]
The arrow sign in the auto-generated descriptions of UPnP forwarding rules is now displayed correctly. [NDW-1501] [Forum topic]
KeeneticOS 3.6 Alpha 3
28/10/2020
New
The new algorithm now automatically switches the Beeline ISP's Internet connection types from L2TP to IPoE.
Improved
The IPsec protocol code was updated to remove obsolete elements, and to optimize the footprint, providing improved tunnel connection security, stability and compatibility. [NDMS-268]
Years ago Reset button was defined to perform two functions: Long pressing for 10 seconds to return device to factory defaults and quick pressing to restart device. This dualism introduced a number of issues to Keenetic customers as they can not visually distinguish between the two cases. From now on Reset button is exclusively for return to factory defaults. [NDMS-1141]
Fixed
The bug causing the
unable to remove : directory not empty
error and preventing deletion of folders on attached USB storage devices, is fixed. [NDMS-1014]Files with
hidden
andsystem
attributes on attached NTFS-formatted USB-disks are properly hidden now. [NDMS-1131]Stable operation of, and remote access to, the management interface of the Download station is now restored. [NDMS-1140] [Forum topic]
KeeneticOS 3.6 Alpha 2
21/10/2020
New
IKEv2 tunnels now feature DHCP Option 249 support. This delivers the static routes setting from the tunnel server-side to the remote clients in
DHCP INFORM
packets for automatic configuration. [NDMS-686]Further modem support: The Huawei E8278s-602 modem is now supported. [NDMS-878]
Improved
The Mesh Wi‑Fi system Extender device's best path selection algorithm for wireless back-haul connection is improved. This change now provides greater stability and performance of the Mesh Wi‑Fi system's nodes interconnections. [NDMS-1120]
Far manager with the netbox plug-in can now be used to access attached USB storage via WebDAV protocol. [NDMS-1110]
Improved compatibility with Alcatel IK40V modem having
01008
firmware version. [NDMS-946]The performance of the Traffic shaper component is improved. [NDMS-1090]
Fixed
The Mesh Wi‑Fi system Controller device now correctly removes the Extender device's default static IP address
192.168.1.3
from the Members list view once the new address is acquired via DHCP. [NDMS-1097]The stable operation of the IPsec VPN component is now restored. [NDMS-1113] [Forum topic]
The port forwarding rule setting in the web interface is restored. The rule for the combination of TCP and UDP protocols can now be properly added on the Port forwarding page in the web interface. [NDW-1436] [Forum topic]
KeeneticOS 3.6 Alpha 1
16/10/2020
New
A new scanning algorithm for the wireless environment is implemented. It starts once a new Extender device is added to the Mesh Wi‑Fi system and lets all nodes determine the proper neighbors for wireless back-haul connection. [NDMS-1087]
If your device has a public IP address, you can access it remotely using a convenient static domain name registered by a DDNS provider. The setting for OpenDNS and DNS-O-Matic DDNS providers is now supported. It is available within the DDNS tab on the web interface's Domain name page. [NDMS-1010]
The traffic Service class can now be applied to a registered device in the web interface. It defines the data processing priority for the particular device. When the ISP connection is reaching its utilization cap, requested bandwidth is allocated first for devices having higher priority. For instance, you can apply a higher priority service class to the host experiencing voice calls delays or online video freezes while another host is downloading files. [NDW-1347]
Note
N.B.: The higher priority setting has a lower number value in the Service class drop-down list.
The Network ports settings list in the web interface is enhanced by additional auto-negotiation options providing improved compatibility. [NDW-1370]
Improved
The Protected Management Frames (PMF) feature is now enabled on wireless back-haul interconnections of the Mesh Wi‑Fi system's nodes, improving network security and protection against disconnection attacks by intruders. [NDMS-951]
Fixed
The proper writing operation is restored for NTFS USB storage with cluster size above 4 KB. [NDMS-1109] [Forum topic]
The slow data writing speed to the attached USB storage formatted with NTFS is fixed now. [NDMS-1107] [Forum topic]