Administrator: /* General */

2015-12-14T15:21:47Z

General

← Older revision		Revision as of 15:21, 14 December 2015
Line 15:		Line 15:
	* Slave flag shows up for interfaces that are in bridge,bonding or switch group;		* Slave flag shows up for interfaces that are in bridge,bonding or switch group;
	* SSH client has new property <var>output-to-file</var>, useful for scripting.		* SSH client has new property <var>output-to-file</var>, useful for scripting.
	* Support for [[M:API \| API]] over TLS (SSL)		* Support for [[Manual:API \| API]] over TLS (SSL)
	* [[Manual:API \| API]] is now enabled by default		* [[Manual:API \| API]] is now enabled by default
	* DNS retry queries with tcp if truncated results received		* DNS retry queries with tcp if truncated results received

Administrator: /* General */

2015-12-14T15:21:37Z

General

← Older revision		Revision as of 15:21, 14 December 2015
Line 16:		Line 16:
	* SSH client has new property <var>output-to-file</var>, useful for scripting.		* SSH client has new property <var>output-to-file</var>, useful for scripting.
	* Support for [[M:API \| API]] over TLS (SSL)		* Support for [[M:API \| API]] over TLS (SSL)
	* [[M:API \| API]] is now enabled by default		* [[Manual:API \| API]] is now enabled by default
	* DNS retry queries with tcp if truncated results received		* DNS retry queries with tcp if truncated results received
	* DNS rotates servers only on failure		* DNS rotates servers only on failure
	* DNS cache logs requests to topics "dns" and "packet";		* DNS cache logs requests to topics "dns" and "packet";
	* [[M:Webfig \| WebFig]] now supports RADIUS authentication (via MS-CHAPv2)		* [[Manual:Webfig \| WebFig]] now supports RADIUS authentication (via MS-CHAPv2)
	* New Web Proxy parameter <var>max-cache-object-size</var>		* New Web Proxy parameter <var>max-cache-object-size</var>
	* Increased Max client/server connection count for Web Proxy		* Increased Max client/server connection count for Web Proxy
	* If NTP client is enabled, logs show correct time and date when router was rebooted.		* If NTP client is enabled, logs show correct time and date when router was rebooted.
	* [[Manual:Switch_Chip_Features#Example_-_802.1Q_Trunking_with_Atheros_switch_chip_in_RadioOS_v6 \| 802.1Q Trunking]] with Atheros switch chip		* [[Manual:Switch_Chip_Features#Example_-_802.1Q_Trunking_with_Atheros_switch_chip_in_RadioOS_v6 \| 802.1Q Trunking]] with Atheros switch chip

	== PPP ==		== PPP ==

Administrator: Created page with "TOC ==General== * Updated drivers and Kernel (to linux-3.3.5) * Initial OpenFlow support * New LCD Touch screen featur..."

2015-12-14T15:02:03Z

Created page with "__TOC__ ==General== * Updated drivers and Kernel (to linux-3.3.5) * Initial OpenFlow support * New LCD Touch screen featur..."

New page

__TOC__

==General==

* Updated drivers and Kernel (to linux-3.3.5)
* Initial [[Manual:OpenFlow | OpenFlow]] support
* New [[Manual:LCD_TouchScreen | LCD Touch screen]] features
* Hotspot [[Manual:Hotspot_Introduction#MAC_Cookie|mac-cookie login method]] (mostly used for smartphones)
* Configurable Kernel options in '''/ip settings''' and '''/ipv6 settings''' menu (ip forward, rp filters etc)
* ARP timeout can be changed in '''/ip settings'''
* Neighbor discovery can be disabled by default on dynamic interfaces in '''/ip neighbor discovery settings''' menu
* To enable/disable discovery on interface you now must use command: "'''/ip neighbor discovery set (interface number/name) discover=yes/no'''".
* Show <var>last-logged-in</var> in users list
* GRE supports all protocol encapsulation, not just ip and ipv6;
* Slave flag shows up for interfaces that are in bridge,bonding or switch group;
* SSH client has new property <var>output-to-file</var>, useful for scripting.
* Support for [[M:API | API]] over TLS (SSL)
* [[M:API | API]] is now enabled by default
* DNS retry queries with tcp if truncated results received
* DNS rotates servers only on failure
* DNS cache logs requests to topics "dns" and "packet";
* [[M:Webfig | WebFig]] now supports RADIUS authentication (via MS-CHAPv2)
* New Web Proxy parameter <var>max-cache-object-size</var>
* Increased Max client/server connection count for Web Proxy
* If NTP client is enabled, logs show correct time and date when router was rebooted.
* [[Manual:Switch_Chip_Features#Example_-_802.1Q_Trunking_with_Atheros_switch_chip_in_RadioOS_v6 | 802.1Q Trunking]] with Atheros switch chip
== PPP ==

* SSTP can now force AES encryption instead of default RC4
* PPP profile now has <var>bridge-path-cost</var> amd <var>bridge-port-priority</var> parameters
* Secrets shows <var>last-logged-out</var> date and time
* Hotspot and PPP now support multiple address-lists
* Only 2 change mss mangle rules are created for all ppp interfaces;

== Firewall ==

* New all-ether,all-wireless,all-vlan,all-ppp interface matchers
* Priority matcher
* New <var>change-dscp</var> options '''from-priority''' and '''from-priority-to-high-3-bits'''
* New Mangle Actions '''snif-tzsp,snif-pc'''

== Wireless ==

* Wireless [[Manual:Wireless Advanced Channels|Channels options]] - creating custom channel lists

==DHCP==

* DHCP client now support custom options
* DHCP v4 client now have '''special-classless''' option for <var>add-default-route</var> parameter
* Possibility to add [[Manual:IP/DHCP_Relay | DHCP]] relay agent information option (Option 82)
* DHCPv6 DNS option support
* DHCPv6 Relay support
* DHCP server RADIUS framed route support
* DHCP option configuration per lease

==IpSec==

Significantly improved Road Warrior setup usage with Mode Configuration support.

Detailed configuration example can be found in the [[Manual:IP/IPsec#Road_Warrior_setup_with_Mode_Conf | manual]].

Full list of new features:
* Mode Conf support (unity split include, address pools, DNS)
* Ipsec peer can be set as passive - will not start ISAKMP SA negotiation
* Xauth support ( xauth PSK and Hybrid RSA)
* Policy templates - allow to generate policy only if src/dst address, protocol and proposal matches the template
* Peer groups
* Multiple peers with the same IP can be used.
* For peers with full IP address specified system will auto-start ISAKMP SA negotiation.
* generate-policy now can have <var>port-strict</var> value which will use port from peer's proposal
* Source address of phase1 is now configurable

==Certificates==

* CA keys are no more cached, every CA operations now requires a valid CA passphrase. Use <var>set-ca-passphrase</var> for scep server to cache CA key in encrypted form;
* For certificates marked as trusted=yes, CRL will be automatically updated once in an hour from http sources;
* Ipsec and SSTP respects CRLs
* SCEP server/client support
* Certificate manager now can issue self signed certificates.

== Routing ==

* New OSPF parameter <var>use-dn</var>. Forces to ignore DN bit in LSAs.
* Changed BGP MED propagation logic, now discarded when sending route with non-empty AS_PATH to an external peer
* Connected routes become inactive when Interface goes down. It also means that dynamic routing protocols will stop distributing connected routes without Active flag.

==Queues==

* improved overall router performance when simple queues are used
* improved queue management (/queue simple and /queue tree) - easily handles tens of thousands of queues;
* /queue tree entries with parent=global are performed separately from /queue simple and before /queue simple;
* new default queue types: <var>pcq-download-default</var> and <var>pcq-upload-default</var>;
* simple queues have separate priority setting for download/upload/total;
* <var>global-in</var>, <var>global-out</var>, <var>global-total</var> parent in /queue tree is replaced with <var>global</var> that is equivalent to global-total in v5;
* simple queues happen in different place - at the very end of postrouting and local-in chains;
* simple queues <var>target-addresses</var> and interface parameters are joined into one target parameter, now supports multiple interfaces match for one queue;
* simple queues <var>dst-address</var> parameter is changed to dst and now supports destination interface matching;

== Compact configuration export ==

Now by default configuration is exported in compact mode.

To make full config export <var>verbose</var> parameter should be used:
<pre>
/export verbose file=myConfig
</pre>

==Tools==

* [[Manual:Fast_Path | FastPath]] support
* Renamed e-mail <var>tls</var> to <var>start-tls</var> and added it as a configurable parameter
* [[Manual:Tools/Fetch | Fetch tool]] now has HTTPS support
* Added ipv6 header support for traffic generator
* Playback pcap files into network using new trafficgen <var>inject-pcap</var> command
* NAND Flash can be [[Manual:Partitions|Partitioned]] on CableFree devices and separate RadioOS versions can be installed on each of the partitions

{{cont}}

[[Category:Manual| ]]

Manual:What's New In v6 - Revision history

Administrator: /* General */

Administrator: /* General */

Administrator: Created page with "__TOC__ ==General== * Updated drivers and Kernel (to linux-3.3.5) * Initial OpenFlow support * New LCD Touch screen featur..."

Administrator: Created page with "TOC ==General== * Updated drivers and Kernel (to linux-3.3.5) * Initial OpenFlow support * New LCD Touch screen featur..."