Download:
Pre-Requisites for VMWare:
Tip 1: To use this virtual machine (VM), first unzip the file and then import the OMA Template for the VM into the virtualization software. For VMware Virtual Machine
Tip 2: In order to address the MAC Address problem, it is recommended to change the MAC Address by setting the MAC Address to the Generate button .
Tip 3: If after running the VM, you are asked if you copied or copied the machine, in which case the answer is Copy-Copy.
Introduction to Mikrotik:
MikroTik is a Latvian company that manufactures computer network equipment and wireless communications equipment. The most important product of the company is the microprocessor operating system. The microprocessor is a routing that is made using the Linux kernel. The micro-system operating system, in addition to the ability to install on home computers, is also provided as a hardware-software package. Micro-system operating system was founded in 1995 by two American University Students by writing a Linux operating system. With the formation of 802.11 standards and the development of the hardware, the operating system also added wireless functionality.
This device is one of the strongest routers in the industry and is unique in terms of its unique capabilities.
Microprocessor features include:
Routing
Firewall
Wireless to
Host Host Configuration Protocol (Dhcp server)
Returns the network address and representative host (in nat and proxy server)
Support for IPv6 support (IPv6 support)
User management (user managment)
Load balancing (load balancing)
The circuitry of microprocessor routers is generally divided into routers and wireless routers, but wireless devices also have the ability to roaming, but their main use is in the wireless industry.
RouterOS:
The main product of the micro-based Linux operating system is known as MikroTik RouterOS. By installing on the dedicated hardware of the same company (RouterBOARD) or on the standard x86-based computers, it turns the hardware into a network router and runs many additional features such as the firewall, the service provider, and the network client Virtual private, shaping and promoting the quality of broadband services. It also features access point features and other features in wireless networks. In order to improve the performance level of this operating system, you must obtain the license (license) of each attribute. The company's application for the Microsoft Windows operating system is named Winbox, which provides a graphical user interface to configure the router and monitor its function. At the same time, RouterOS provides access through FTP, Telnet, and SSH.
RouterOS features
RouterOS supports many applications used by Internet Service Providers. For example, OSPF and multi-threaded label switching (VPLS / MPLS). Micro-product support is provided through the community and the wiki. Here are examples of professional and general settings. RouterOS from IPv4 and | Internet Protocol_Security_4 (IPv4) as well as Internet Protocol_Security_6 (from IPv6).
Support for network interfaces in this software almost includes all network interface (NIC) supported by the Linux kernel, except for the wireless interface, with the exception of the Atheros and PRISM interfaces.
Micro-system operating system
The micro-system operating system is actually the same core of microprocessor and similar to the operating system on Cisco routers. Currently, the latest operating system provided by Microcomputer is the same version available on the site, which is the stable and reliable version of the operating system, but its trial version is also available on its site for microsoft.
Use license
Microcycles have used various licenses to reduce costs to reduce costs. What's available today is the Level 3, 4, 5, and 6 licenses. Whenever you buy a microprocessor, you have permission to use one, three, four, five, or six levels on that device. Each license allows you to manage more users on the network. The highest level of license level six will allow you to manage all the features and unlimited users.
What's new in 6.40.5 (2017-Oct-31 13:05):
*) certificate - fixed import of certificates with empty SKID;
*) crs3xx - fixed 100% CPU usage after interface related changes;
*) firewall - do not NAT address to 0.0.0.0 after reboot if to-address is used but not specified;
*) ike1 - fixed crash after downgrade if DH groups 19,20,21 were used for phase1;
*) ike1 - fixed RSA authentication for Windows clients behind NAT;
*) ipsec - fixed lost value for remote-certificate parameter after disable / enable;
*) ipv6 - fixed IPv6 addresses constructed from prefix and static address entry;
*) log - properly recognize MikroTik specific RADIUS attributes;
*) lte - do not reset the modem when it is not possible to access SMS storage;
*) lte - fixed modem initialization after reboot;
*) lte - fixed PIN option after setting up the band;
*) sms - include time stamps in SMS delivery reports;
*) sms - properly initialize SMS storage;
*) snmp - fixed "/ system license" parameters for CHR;
*) winbox - allow shorten bytes to k, M, G in the hotspot user limits;
*) wireless - fixed rate selection process when "rate-set = configured" and NV2 protocol is used;
What's new in 6.40.4 (2017-Oct-02 08:38):
*) address - show warning on IPv6 address when acquired from pool has failed;
*) arp - properly update dynamic ARP entries after interface related changes;
*) crs1xx / 2xx - fixed 1 Gbps forced mode for several SFP modules;
*) crs317 - added L2MTU support;
*) crs3xx - improved packet processing in slowpath;
*) defconf - fixed RouterOS default configuration (introduced in v6.40.3);
*) dhcp - fixed downgrade from RouterOS v6.41 or higher;
*) dhcpv6 client - added IAID check in reply;
*) dhcpv6-client - fixed IA check is solicit when "rapid-commit" is enabled;
*) dhcpv6-client - ignore unknown IA;
*) dhcpv6-client - requires a pool name to be unique;
*) e-mail - auto complete file name is "file" parameter (introduced in v6.40);
*) export - fixed wireless "ssid" and "supplicant-identity" compact export;
*) hotspot - fixed missing "/ ip hotspot server profile" if invalid "dns-name" was specified;
*) hotspot - improved user statistics collection process;
*) ike1 - remove PH1 and PH2 when "mode-config" exchange file;
*) ipsec - kill PH1 is "mode-config" address failure;
*) ipv6 - fixed IPv6 address request from pool;
*) lte - fixed modem initialization after reboot;
*) ntp-client - the correct start of the NTP client after the reboot if the manual server IP is not configured;
*) rb931-2nd - fixed startup problems (requires additional reboot after upgrade);
*) routerboard - fixed "/ system routerboard upgrade" for CRS212-8G-4S;
*) sfp - fixed OPTON module DDM information readings;
*) sfp - fixed temperature readings for various SFP modules;
*) snmp - fixed / caps-man registration-table uptime values;
*) snmp - fixed "/ system license" parameters for CHR;
*) tile - improved reliability is MPLS package processing;
*) userman - fixed unresponsive RADIUS server (introduced in v6.40.3);
*) vlan - do not allow VLAN MTU to be higher than L2MTU;
*) webfig - improved reliability of login process;
*) wireless - added "etsi1" regulatory domain information;
*) wireless - improved WPA2 key exchange reliability;
*) wireless - updated "norway" regulatory domain information;
What's new in 6.40.3 (2017-Sep-01 07:40):
*) dhcpv6-server - do not release address of static binding from pool after server removal;
*) export - fixed / / system routerboard export (introduced in 6.40.1);
*) export - fixed export for PoE-OUT related settings;
*) ike1 - fixed initiator ID comparison to NAT-OA;
*) led - fixed "on" and "off" triggers when multiple LEDs are selected;
*) led - fixed RB711UA ether1 LED (introduced in v6.38rc16);
*) lte - do not show the USB LTE modem under the "/ port" menu;
*) lte - fixed ethernet flap when LTE establishes connection;
*) lte - fixed SXT LTE graphs in QuickSet;
*) lte - improved reliability of USB LTE modem;
*) shop-out - fixed router reboot after "store-out-status" changes;
*) rb1100ahx4 - fixed HW acceleration fragment packet decryption when fragment is smaller than 64 bytes;
*) rb750gr3 - show warning and do not allow the use of "protected-bootloader" feature if "factory-firmware" older than 3.34.4 version;
*) routerboard - added "mode-button" support for RB750Gr3 (CLI only);
*) ssh - do not execute command if it starts with "-" symbol;
*) traffic-flow - fixed reboots when IPv6 address has been set as target address without active IPv6 package;
*) userman - fixed "limitation" and "profile-limitation" update;
*) userman - fixed CoA packet processing after changes in "/ tool user-manager router" configuration;
*) webfig - let's open the table entry even if the table is not sorted by # (introduced in v6.40);
*) webfig - allow you to unset the "rate-limit" for DHCP leases;
*) winbox - added the opportunity to define "comment" for "/ routing bgp network" entries;
*) winbox - do not show FAN related information under "/ system health" for devices that does not have it;
*) winbox - do not show the LCD menu for devices that does not have it;
*) winbox - fixed ARP table update after entry changes state to incomplete;
*) wireless - added "russia3" country settings;
*) wireless - added New Zealand regulatory information for P2P links;
*) wireless - updated China and New Zealand regulatory domain information;
*) www - fixed unresponsive Web services (introduced in v6.40);
What's new in 6.40.2 (2017-Aug-08 13:13):
*) dhcpv6-client - fixed IA evaluation order;
*) led - fixed modem-signal LEDs (introduced in 6.40);
*) pppoe-client - fixed MRU detection over VLAN interfaces;
*) rb2011 - fixed possible LCD blinking along with ethernet LED (introduced in 6.40);
*) sfp - fixed invalid readings when ambient temperature is below 0 ° C;
*) winbox - added certificate settings;
*) winbox - added support for the certificate CRL list;
*) winbox - do not show the LCD menu for devices that does not have it;
*) winbox - hide "level" and "tunnel" parameters for IPSec policy templates;
*) winbox - hide the FAN speed if it is 0RPM;
What's new in 6.40.1 (2017-Aug-03 12:37):
*) bonding – improved reliability on bonding interface removal;
*) chr – fixed false warnings on upgrade reboots;
*) dhcpv6-client – do not run DHCPv6 client when IPv6 package is disabled;
*) export – fixed export for different parameters where numerical range or constant string is expected;
*) firewall – properly remove “address-list” entry after timeout ends;
*) interface – improved interface state change handling when multiple interfaces are affected at the same time;
*) lte – fixed LTE not passing any traffic while in running state;
*) ovpn-client – fixed incorrect netmask usage for pushed routes (introduced in 6.40);
*) pppoe-client – fixed incorrectly formed PADT packet;
*) rb2011 - fixed possible LCD blinking along with ethernet LED (introduced in 6.40);
*) rb922 - restored missing wireless interface on some boards;
*) torch - fixed Torch in PPP tunnels (introduced in 6.40);
*) trafficgen - fixed "lost-ratio" showing incorrect statistics after multiple sequences;
*) winbox - added "none-dynamic" and "none-static" options for "address-list-timeout" parameter under NAT, Mangle and RAW rules;
What's new in v6.40 (2017-Jul-08 08:45):
!) lte - added initial fastpath support (except for SXT LTE and Sierra modems);
!) lte - added the initial support for the passthrough mode for lte modems that supports fastpath;
!) wireless - added Nv2 AP synchronization feature "nv2-modes" and "nv2-sync-secret" option;
*) bonding - fixed 802.3ad mode is RB1100AHx4;
*) btest - fixed crash when packet size has been changed during test;
*) capsman - added "current-registered-clients" and "current-authorized-clients" count for CAP interfaces;
*) capsman - fixed EAP identity reporting in "registration-table";
*) capsman - set minimal "caps-man-names" and "caps-man-certificate-common-names" length to 1 char;
*) certificate - added "crl-use" setting to disable CRL use (CLI only);
*) certificate - update and reload the old certificate with a new one if SKID matches;
*) chr - fixed MAC address assignment when hot plugging NIC on XenServer;
*) chr - maximum system disk size now limited to 16GB;
*) conntrack - fixed IPv6 connection tracking enable / disable;
*) console - fixed different command auto complete on;
*) crs212 - fixed Optech sfp-10G-tx module compatibility with SFP ports;
*) defconf - added IPv6 default firewall configuration (IPv6 package must be enabled for reset);
*) defconf - improved IPv4 default firewall configuration;
*) defconf - renamed 192.168.88.1 address static DNS entry from "router" to "router.lan";
*) dhcp - added "debug" window is MAC address change;
*) dhcpv4-client - added "gateway-address" script parameter;
*) dhcpv4-server - fixed lease renewal for DHCP clients that sends renewal with "ciaddr = 0.0.0.0";
*) dhcpv4-server - fixed server state on interface change in Winbox and Webfig;
*) discovery - fixed timeouts for LLDP neighbors;
*) dns - remove all dynamic cache of RRs of the same type when adding static entry;
*) dude - fixed server crash;
*) email - added support for multiple attachments;
*) ethernet - fixed occasional broken interface order after reset / first boot;
*) ethernet - fixed a rare linking problem with forced 10Mbps full-duplex mode;
*) export - added "terse" option;
*) export - added default "init-delay" setting for "/ routerboard settings" menu;
*) export - add router model and serial number to configuration export;
*) export - fixed "/ interface list" verbose export;
*) export - fixed "/ ipv6 route" compact export;
*) export - fixed MPLS "dynamic-label-range" export;
*) export - fixed SNMP "src-address" for compact export;
*) fastpath - improved performance when packets for slowpath are received;
*) fastpath - improved process of removing dynamic interfaces;
*) fasttrack - fixed fasttrack over interfaces with dynamic MAC address;
*) fetch - added "src-address" parameter for HTTP and HTTPS;
*) filesystem - improved error correction process on the tin and RB1100AHx4 storage;
*) firewall - added "none-dynamic" and "none-static" options for "address-list-timeout" parameter;
*) firewall - fixed bridge "action = log" rules;
*) firewall - fixed cosmetic "inactive" flag when item was disabled;
*) firewall - fixed crash on fasttrack dummy rule manual change attempt;
*) firewall - removed unique address list name limit;
*) hAP ac lite - removed nonexistent "wlan-led";
*) hotspot - added "address-list" support in "walled-garden" IP section;
*) hotspot - require "dns-name" to contain "." symbol under Hotspot Server Profile configuration;
*) ike1 - added log error message if the netmask was not provided by the "mode-config" server;
*) ike1 - added support for "framed-pool" RADIUS attribute;
*) ike1 - create tunnel policy when no split net provided;
*) ike1 - fixed minor memory leak is peer configuration change;
*) ike1 - kill phase1 instead of rekey if "mode-config" is used;
*) ike1 - removed SAs is DPD;
*) ike1 - send phase1 delete;
*) ike1 - wait for cfg set reply before ph2 creation with xAuth;
*) ike2 - added RADIUS attributes "Framed-Pool", "Framed-Ip-Address", "Framed-Ip-Netmask";
*) ike2 - added pfkey kernel return checks;
*) ike2 - added support for "Mikrotik_Address_List" RADIUS attribute;
*) ike2 - added support for "mode-config" static address;
*) ike2 - by default use "/ 24" netmask for peer IP address in split net;
*) ike2 - fixed duplicate policy checking with "0.0.0.0/0" policies;
*) ike2 - prefer traffic selector with "mode-config" address;
*) ipsec - added "firewall = add-notrack" peer option (CLI only);
*) ipsec - added information in console XML for "mode-config" menu;
*) ipsec - added support for "key-id" peer identification type;
*) ipsec - let's specify the chain in "firewall" peer option;
*) ipsec - do not deduct "dst-address" from "sa-dst-address" for "/ 0" policies;
*) ipsec - enabled modp2048 DH group by default;
*) ipsec - fixed connections cleanup on policy or proposal modification;
*) ipsec - optimized logging under IPSec topic;
*) ipsec - removed policy priority;
*) l2tp - fixed handling of pre-authenticated L2TP sessions with CHAP authentication;
*) l2tp-server - added "one-session-per-host" option;
*) log - added "store-out" topic;
*) log - improved "l2tp" window;
*) log - optimized "wireless, info" topic logs;
*) log - work is false CPU / RAM overclocked alarms;
*) lte - added "accounting" log for LTE connections;
*) lte - added additional driver support for DWR-910;
*) lte - added info command support for the Jaton LTE modem;
*) lte - added initial support for the NTT DoCoMo modem;
*) lte - added support for Huawei E3531-6;
*) lte - added support for ZTE TE W120;
*) lte - fixed info command when it is executed at the same time as modem restarts / disconnects;
*) lte - improved SMS delivery report;
*) lte - improved reliability is SXT LTE;
*) metarouter - fixed display of false error message on startup;
*) mmips - added support for NVME disk;
*) ovpn - added support for "push-continuation";
*) ovpn - added support for topology subnet for IP mode;
*) ovpn - fixed duplicate default gateway presence when receiving extra routes;
*) ovpn - improved performance when receiving too many options;
*) packages - increased automatic download retry interval to 5 minutes if there is no free disk space;
*) ping - fixed ping getting stuck (after several thousand of ping attempts);
*) ppp - added initial support for ZTE K4203-Z and ME3630-E;
*) ppp - added output values for "info" command for finding the GSM base station's location ("LAC" and "IMSI");
*) ppp - fixed "user-command" output;
*) ppp - fixed non-standard PAP or CHAP packet handling;
*) ppp - improved MLPPP packet forwarding performance;
*) ppp - use the interface name instead of IP as the default gateway;
*) proxy - fixed potential crash;
*) proxy - fixed rare program crash after closing client connection;
*) quickset - added "Band" setting to "CPE" and "PTP CPE" modes;
*) quickset - added special firewall exception rules for IPSec;
*) quickset - fixed incorrect VPN address value on arm and tile;
*) quickset - simplified LTE status monitoring;
*) quickset - use active user name and permissions when applying changes;
*) rb1100ahx4 - fixed startup problems (requires additional reboot after upgrade);
*) rb3011 - fixed packet passthrough on switch2 while booting;
*) rb750gr3 - fixed USB power;
*) routerboard - added "caps-mode" option for "reset-configuration";
*) routerboard - added "caps-mode-script" for default-configuration print;
*) routing - allow to disable "all" interface entry in BFD;
*) safe-mode - fixed session handling when Safe Mode is used in multiple sessions at the same time;
*) sfp - fixed invalid temperature reporting when ambient temperature is less than 0;
*) sms - decode reports in readable format;
*) sniffer - do not skip L2 packets when the "all" interface mode was used;
*) snmp - added "ifindex" on the interface traps;
*) snmp - added CAPsMAN interface statistics;
*) snmp - added ability to set "src-address";
*) snmp - fixed "/ system resource cpu print oid" menu;
*) snmp - fixed crash on interface table get;
*) snmp - fixed wireless interface walk table id ordering;
*) socks - fixed crash while processing many simultaneous sessions;
*) ssl - added wildcard support for the "left-most" DNS label (will allow the use of the signed wildcard certificate on VPN servers);
*) supout - fixed IPv6 firewall section;
*) switch - fixed "loop-protect" on CRS SFP / SFP + port;
*) switch - fixed multicast forwarding is CRS326;
*) tile - fixed copying a large amount of text over serial console;
*) tr069-client - fixed lost HTTP header is authorization;
*) trafficgen - added "lost-ratio" to statistics;
*) ups - show the correct "line-voltage" value for usbhid UPS devices;
*) userman - added "/ tool user-manager user clear-profiles" command;
*) userman - do not send disconnect request for user when "simultaneous session limit reached";
*) userman - lookup language files also in the "/ flash" directory;
*) vlan - do not delete the existing VLAN interface for "failure: already have such vlan";
*) webfig - fixed wireless "scan-list" parameter not being saved after applying changes;
*) winbox - added "eap-identity" to CAPsMAN registration table;
*) winbox - added "no-dad" setting to IPv6 addresses;
*) winbox - added "reselect-channel" to CAPsMAN interfaces;
*) winbox - added "session-uptime" to their LTE interface;
*) winbox - added TR069 support;
*) winbox - do not autoscale graphs outside known maximums;
*) winbox - fixed wireless interface "amsdu-threshold" max limit;
*) winbox - the hide LCD menu is CRS112-8G-4S;
*) winbox - make IPSec policies table an order list;
*) winbox - moved LTE info fields to status tab;
*) winbox - show "/ interface wireless cap print" warnings;
*) winbox - show "/ system health" only on boards that have health monitoring;
*) winbox - show "D" flag under "/ interface mesh port" menu;
*) wireless - NAK any methods other than MS-CHAPv2 as the internal method in PEAP;
*) wireless - added option to change "nv2-downlink-ratio" for nv2 protocol;
*) wireless - added option to set "fixed-downlink" mode for nv2 protocol;
*) wireless - allow VirutalAP to Level 0 (24h demo) license;
*) wireless - always use "multicast helper" when DHCP is being used;
*) wireless - do not skip> 2462 channels if interface is WDS slave;
*) wireless - fixed 802.11u wireless request processing;
*) wireless - fixed EAP PEAP successful processing;
*) wireless - fixed compatibility with "AR5212" wireless chips;
*) wireless - fixed rare crash on cap disable;
*) wireless - fixed registration table "signal-strength" reporting for chains when using nv2;
Download:
