MikroTik Changelogs
← Back to search All components

Component: ipsec

548 changelog entries across 227 version(s)

Releases by channel (stacked)

6.43.4 Stable 2018-Oct-17 (8 years ago)
  • allow multiple peers to the same address with different local-address (introduced in v6.43);
6.44beta14 Testing 2018-Oct-01 (8 years ago)
  • added account log message when user is successfully authenticated;
  • allow multiple peers to the same address with different local-address (introduced in v6.43);
  • fixed stability issues after changing peer configuration (introduced in v6.43);
  • improved invalid policy handling when a valid policy is uninstalled;
6.42.9 Long-term 2018-Sep-27 (8 years ago)
  • improved invalid policy handling when a valid policy is uninstalled;
  • improved stability when using IPsec with disabled route cache;
6.43 Stable 2018-Sep-06 (8 years ago)
  • added "responder" parameter for "mode-config" to allow multiple initiator configurations;
  • added "src-address-list" parameter for "mode-config" that generates dynamic "src-nat" rule;
  • added warning messages for incorrect peer configuration;
  • do not allow removal of "proposal" and "mode-config" entries that are in use;
  • fixed AES-192-CTR fallback to software AEAD on ARM devices with wireless and RB3011UiAS-RM;
  • fixed AES-CTR and AES-GCM key size proposing as initiator;
  • fixed "static-dns" value storing;
  • improved invalid policy handling when a valid policy is uninstalled;
  • improved reliability on generated policy addition when IKEv1 or IKEv2 used;
  • improved stability when using IPsec with disabled route cache;
  • install all DNS server addresses provided by "mode-config" server;
  • separate phase1 proposal configuration from peer menu;
  • use monotonic timer for SA lifetime check;
6.43rc66 Testing 2018-Aug-28 (8 years ago)
  • added "responder" parameter for "mode-config" to allow multiple initiator configurations;
  • fixed AES-192-CTR fallback to software AEAD on ARM devices with wireless and RB3011UiAS-RM;
  • fixed "static-dns" value storing;
  • improved invalid policy handling when a valid policy is uninstalled;
  • separate phase1 proposal configuration from peer menu;
6.43rc64 Testing 2018-Aug-23 (8 years ago)
  • added warning messages for incorrect peer configuration;
  • improved stability when using IPsec with disabled route cache;
6.40.9 Long-term 2018-Aug-20 (8 years ago)
  • fixed policies becoming invalid if added after a disabled policy;
6.42.7 Stable 2018-Aug-17 (8 years ago)
  • fixed "sa-src-address" deduction from "src-address" in tunnel mode;
  • improved invalid policy handling when a valid policy is uninstalled;
6.43rc56 Testing 2018-Aug-13 (8 years ago)
  • added warning messages for incorrect peer configuration;
  • separate phase1 proposal configuration from peer menu;
6.43rc51 Testing 2018-Aug-01 (8 years ago)
  • fixed "sa-src-address" deduction from "src-address" in tunnel mode;
  • fixed "static-dns" value storing (CLI only);
  • fixed AES-CTR and AES-GCM key size proposing as initiator;
6.43rc45 Testing 2018-Jul-17 (8 years ago)
  • improved invalid policy handling when a valid policy is uninstalled;
6.42.4 Stable 2018-Jun-15 (8 years ago)
  • improved reliability on IPsec hardware encryption for RB1100Dx4;
6.43rc29 Testing 2018-Jun-13 (8 years ago)
  • improved reliability on IPsec hardware encryption for RB1100Dx4;
6.43rc27 Testing 2018-Jun-12 (8 years ago)
  • use monotonic timer for SA lifetime check;
6.43rc23 Testing 2018-Jun-05 (8 years ago)
  • added "responder" parameter for "mode-config" to allow multiple initiator configurations;
  • separate phase1 proposal configuration from peer menu;
6.43rc14 Testing 2018-May-18 (8 years ago)
  • improved reliability on generated policy addition when IKEv1 or IKEv2 used;
6.42.2 Stable 2018-May-17 (8 years ago)
  • fixed policies becoming invalid if added after a disabled policy;
  • improved reliability on IPsec hardware encryption for ARM devices except RB1100Dx4;
6.43rc12 Testing 2018-May-11 (8 years ago)
  • improved reliability on IPsec hardware encryption for ARM devices except RB1100Dx4;
6.43rc5 Testing 2018-Apr-25 (8 years ago)
  • fixed policies becoming invalid if added after a disabled policy;
6.43rc4 Testing 2018-Apr-23 (8 years ago)
  • added "responder" parameter for "mode-config" to allow multiple initiator configurations (CLI only);
  • added "src-address-list" parameter for "mode-config" that generates dynamic "src-nat" rule (CLI only);
  • install all DNS server addresses provided by "mode-config" server;
6.43rc3 Testing 2018-Apr-20 (8 years ago)
  • added "responder" parameter for "mode-config" to allow multiple initiator configurations (CLI only);
  • added "src-address-list" parameter for "mode-config" that generates dynamic "src-nat" rule (CLI only);
  • added warning messages for incorrect peer configuration;
  • do not allow removal of "proposal" and "mode-config" entries that are in use;
  • separate phase1 proposal configuration from peer menu (CLI only);
6.42 Stable 2018-Apr-13 (8 years ago)
  • fixed AES-CTR and AES-GCM support on RB1200;
  • improved single tunnel hardware acceleration performance on MMIPS devices;
  • properly detect interface for "mode-config" client IP address assignment;
6.42rc41 Testing 2018-Mar-09 (8 years ago)
  • improved single tunnel hardware acceleration performance on MMIPS platform devices;
6.40.6 Long-term 2018-Feb-20 (8 years ago)
  • fixed incorrect esp proposal key size usage;
  • properly update IPsec secret for IPIP/EoIP/GRE dynamic peer;
6.42rc30 Testing 2018-Feb-20 (8 years ago)
  • properly detect interface for "mode-config" client IP address assignment;