Component: ipsec

7.3beta40 Testing 2022-May-11 (4 years ago)

• fixed printing of active peer statistics;

7.3beta34 Testing 2022-Apr-20 (4 years ago)

• fixed IPsec IRQ initialization on startup on TILE;

7.2 Stable 2022-Mar-31 (4 years ago)

• added hardware acceleration support for CCR2116;
• fixed "identities" menu emptying after RouterOS upgrade/reboot;

7.2rc5 Testing 2022-Mar-23 (4 years ago)

• fixed "identities" menu emptying after RouterOS upgrade/reboot;

7.2rc1 Testing 2021-Dec-17 (4 years ago)

• added hardware acceleration support for CCR2116;

7.1rc7 Development 2021-Nov-25 (4 years ago)

• fixed hardware acceleration support for ARM and ARM64 devices;
• fixed software fallback mode for AES-192 on IPQ4018/IPQ4019;

7.1rc5 Development 2021-Oct-25 (5 years ago)

• enabled hardware acceleration support for ARM and ARM64 devices;
• fixed hardware acceleration support for CHR;

6.49 Stable 2021-Oct-06 (5 years ago)

• fixed memory leak when processing DHCP packets;
• improved SA update by SPI;
• improved system stability on CHR;
• improved system stability on MMIPS devices;

6.48.5 Long-term 2021-Sep-21 (5 years ago)

• improved SA update by SPI;

6.49beta54 Testing 2021-Jul-05 (5 years ago)

• improved SA update by SPI;

6.47.10 Long-term 2021-May-31 (5 years ago)

• fixed SA address parameter exporting;

6.48.3 Stable 2021-May-25 (5 years ago)

• fixed SA address parameter exporting;

6.49beta36 Testing 2021-Apr-23 (5 years ago)

• fixed SA address parameter exporting;
• improved system stability on CHR;
• improved system stability on MMIPS devices;

6.48.1 Stable 2021-Feb-03 (5 years ago)

• improved stability when processing IPv6 packets larger than interface MTU;

6.49beta11 Testing 2021-Feb-01 (5 years ago)

• improved stability when processing IPv6 packets larger than interface MTU;

6.48 Stable 2020-Dec-22 (5 years ago)

• added SHA384 hash algorithm support for phase 1;
• do not kill connection when peer's "name" or "comment" is changed;
• fixed client certificate usage when certificate is renewed with SCEP;
• fixed multiple warning message display for peers;
• inactivate peer's policy on disconnect;
• refresh peer's DNS only when phase 1 is down;

6.48rc1 Testing 2020-Dec-11 (5 years ago)

• added SHA384 hash algorithm support for phase 1;

6.48beta40 Testing 2020-Sep-14 (6 years ago)

• refresh peer's DNS only when phase 1 is down;

6.48beta35 Testing 2020-Sep-02 (6 years ago)

• do not kill connection when peer's "name" or "comment" is changed;
• refresh peer's DNS only when phase 1 is down;

6.48beta27 Testing 2020-Aug-18 (6 years ago)

• fixed client certificate usage when certificate is renewed with SCEP;

6.47.1 Stable 2020-Jul-08 (6 years ago)

• do not update peer endpoints for generated policy entries (introduced in v6.47);

6.48beta12 Testing 2020-Jul-06 (6 years ago)

• added SHA384 hash algorithm support for phase 1 (CLI only);
• do not update peer endpoints for generated policy entries (introduced in v6.47);
• fixed multiple warning message display for peers;
• inactivate peer's policy on disconnect;

6.47 Stable 2020-Jun-02 (6 years ago)

• added "split-dns" parameter support for mode configuration;
• added "use-responder-dns" parameter support;
• allow specifying two peers for a single policy for failover;
• control CRL validation with global "use-crl" setting;
• do full certificate validation for identities with explicit certificate;
• fixed minor spelling mistake in logs;
• improved IPsec service stability when receiving bogus packets;
• place dynamically created IPsec policies by L2TP client at the begining of the table;

6.47rc2 Testing 2020-May-25 (6 years ago)

• added "split-dns" parameter support for mode configuration;
• added "use-responder-dns" parameter support;
• allow specifying two peers for a single policy for failover;
• place dynamically created IPsec policies at the begining of the table;

6.45.9 Long-term 2020-Apr-30 (6 years ago)

• improved system stability when handling fragmented packets;