一ヶ月ぶりにRouterOSが更新されました。
今回も色々と更新されていますが、主な内容としてはCloud Core Routerでのパフォーマンス向上があると思います。
他にもbridgeインターフェイスにループプロテクションが追加されたり、VPN関連も細かい修正が入っています。
今のところテスト環境に導入した限りでは大きなトラブルは出ていませんが、いつものことなので気になる人は、フォーラムやTwitterなどで現状を確認した上で導入するようにしてください。
What’s new in 6.19 (2014-Aug-26 14:05):
*) wireless – improvements for nv2 and 802.11ac
*) sstp – make sstp work on i386 as well;
*) ippool – improve performance when acquiring address without preference;
*) partitions – copying partitions did not work on some boards;
*) bridge – added “Auto Isolate” stp enhancement (802.1q-2011, 13.25.6)
*) ipsec – when peer config is changed kill only relevant SAs;
*) vpls – do not abort BGP connection when receiving invalid 12 byte
nexthop encoding;
*) dns-update – fix zone update;
*) dhcpv4 server – support multiple radius address lists;
*) console – added unary operator ‘any’ that evaluates to true if argument
is not null or nothing value;
*) CCR – improved performance;
*) firewall – packet defragmenting will only happen with connection tracking enabled;
*) firewall – optimized option matching order with-in a rule;
*) firewall – rules that require CONNTRACK to work will now have Invalid flag
when CONNTRACK is disabled;
*) firewall – rules that require use-ip-firewall to work will now have invalid flag
when use-ip-firewall is disabled;
*) firewall – rules that have interface with “Slave” flag specified as in-/out-interface
will now have Invalid flag;
*) firewall – rules that have interface without “Slave” flag specified as in-/out-bridge-port
will now have Invalid flag;
*) firewall – rules with Invalid flags will now be auto-commented to explain why;
*) l2tp – force l2tp to not use MPPE encryption if IPsec is used;
*) sstp – force sstp to not use MPPE encryption (it already has TLS one);
*) sstp – make it work for x86 systems
*) winbox – added dual PSU stats in health menu
*) ipv6 – Gre6 can now correctly fragment large packets
*) simple queue performance optimisation/improvement for multi-core RouterOS devices (especially CCR)