RUT981 Firmware Downloads

Wiki mirrorView source
This page contains firmware files for RUT981 devices. Look to the table below or the changelog to find download links.
Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in RUT981 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.
Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

FW checksums

Checksums for firmware files can be found here.

Changelog

RUTE_R_00.07.22.1 | 2026.04.13

  • Improvements
    • System
      • ustream-ssl: updated version to 2026-03-01
  • Fix
    • Services
      • IEC 60870-5 Client: fixed missing serial support validation checks
      • IEC 60870-5 Server: fixed package dependency issues and missing serial support validation checks
      • Modbus Client: fixed test requests due to missing broadcast option
      • RMS: fixed configuration permission issues that caused connection problems
    • System
      • Backup: fixed custom uci-default script execution
      • Backup: fixed ability to reset user password to device default password

RUTE_R_00.07.22 | 2026.03.25

  • New
    • Network
      • SMCroute: added support
    • Services
      • Data to Server: added webui option to toggle server certificate verification
      • DMVPN: added support for DMVPN configuration on GRE tunnels with IPv6 addressing
      • Events reporting: removed web user interface support
      • I/O Juggler: removed web user interface support
      • SNMP: added SNMP V3 users additional authentication types
    • System
      • Integrity: added functionality to verify file system integrity
      • WebUI: added Polish language support
  • Improvements
    • Network
      • DHCP server: added support for configuring multiple DHCP relay instances
      • DHCP server: added new DHCPv4 error status when parent interface has no IPv4 address
      • Dynamic routes: added mutual redirects between route status and dynamic route pages
      • Dynamic routes: improved display of OSPF routes
      • Dynamic routes: moved instance naming into edit modals for RIP
      • Firewall: improved performance across all firewall pages
      • Mobile: added a general signal quality metric, calculated from a combination of various mobile signal metrics
      • Network usage: added mutual redirects between "Connections" and "Network Usage" pages
      • Port Mirroring: added support for multiple mirror source ports
      • Ports Settings: added warning of enabled 802.1X ports
      • Starlink: added retrieval of location information
      • Wireless: enabled "Forward mesh peer traffic" by default on new mesh network
      • wireless-regdb: updated version to 2026.02.04
    • Services
      • Auto Reply: added "Signal quality" parameter support
      • AWS IoT Core: added TPM support
      • Azure IoT Hub: added TPM support
      • BGP: added IPv6 support
      • BGP: moved instance naming into edit modals
      • Data to Server: added data compression
      • Data to Server: added TPM support
      • EoIP: added 'MTU' option
      • Event juggler: added HTTP URL scheme appendage if it is not defined in HTTP action
      • Event juggler: added TPM support
      • Event juggler: added "Signal quality" parameter support in output actions
      • Hotspot: reworked hotspot service
      • I/O Scheduler: removed ordinal suffixes from "From" and "To" table columns to improve localization
      • IEC 60870-5 Client: improved Information Objects tab usability and editing
      • IEC 60870-5 Client: added universal gateway support
      • IEC 60870-5 Server: added universal gateway support
      • IPsec: added additional proposal options
      • IPsec: removed duplicate proposals
      • IPsec: added automatic default route handling for route based IPsec
      • L2TPv3: improved "Cookie" and "Peer cookie" validation
      • Ledman: updated signal strength LED algorithm to use new value
      • Mobile Utilities: added "Signal quality" parameter support in status message
      • Modbus Client: added "Signal quality" parameter support in MQTT and Email actions
      • MQTT Broker: added certificate key length validation
      • MQTT Broker: added TPM support
      • MQTT Broker Bridge: added TPM support
      • MQTT Publisher: added TPM support
      • OpenVPN: improved server configuration when using a TAP device
      • OpenVPN: added 'Gateway IP address' option for bridged devices
      • PPTP: added client/server status information
      • RMS: updated the Connection Type field hint to reflect the current device connection frequency
      • SMPP: added TPM support
      • SNMP: added an option that makes ifIndex values persistent
      • Tailscale: added memory usage limitation option
      • TR-069: added input validations in set methods for nodes with read-write permissions
      • TR-069: added TR-143 based on "Issue 1 Amendment 1", with implementation-specific deviations
      • TR-069: improved Device.DHCPv4 object based on "TR-181 Issue 2 Amendment 20", with implementation-specific deviations
      • TR-069: added Device.Cellular object based on "TR-181 Issue 2 Amendment 20", with implementation-specific deviations
      • TR-069: added TPM support
      • Traffic Logging: added SFTP support for log uploading (with key support)
      • Traffic Logging: added FTPS support for log uploading
      • cURL: updated version to 8.18.0
      • EmailRelay: updated version to 2.5.2
      • FRR: updated version to 10.2.1
      • OpenVPN: updated version to 2.6.17
      • ovpn-dco: updated version to 0.2.20251017
      • Tailscale: updated version to 1.92.3
    • System
      • Access Control: added SSH, telnet and WebUI session termination support
      • Backup: improved backup to use API endpoints
      • Speed Test: implemented filters and sorting for the servers table
      • glib2: updated version to 2.87.1
      • libmodbus: updated version to v3.1.11
      • openssl: updated version to 3.0.19
  • Fix
    • Network
      • DHCP server: fixed DHCPv4 configuration page bug when parent interface has no IPv4 address
      • Topology: fixed lock functionality on touchscreen devices
      • Wireless: added an API error when multiple scans are performed at the same time
    • Services
      • BGP: fixed how neighborship is displayed for BGP when VRF is used
      • Call Utilities: fixed "Switch WiFi on/off" action execution
      • DLNA: fixed interface selection not showing WLAN interfaces that are not in any bridge
      • Email to SMS: fixed email deletion in some rare cases
      • EoIP: fixed issues with EoIP over L2TP configuration
      • Hotspot: fixed inconsistent session logout after disconnecting from wireless
      • IEC 60870-5 Client: fixed an issue where negative ASDU response results in a timeout
      • IEC 60870-5 Server: fixed server network not restarting after disabling “Allow remote access” when “Cyclic transmissions” are enabled
      • IEC 60870-5 Server: fixed flow control component placement to follow dependency order
      • IPsec: fixed IKEv1 allowing unsupported proposals
      • IPsec: fixed incorrectly applied offloading bypass rules
      • IPsec: fixed display of "Enable XAUTH" switch
      • Mobile Utilities: fixed SMS Utilities user defaults restoration rule
      • Modbus Client: fixed service being launched without any requests to send
      • OpenVPN: fixed learn-address routing to handle IPv4/IPv6
      • OSPF: fixed firewall rule creation
      • SMS Utilities: fixed "Switch WiFi on/off" action execution
      • SNMP: fixed Event type Topology change Trap
      • SNMP: fixed port-based VLAN VID display
      • SNMP: fixed setting incorrect firewall rule family option
    • System
      • NTP: fixed the NTP server due to invalid packet headers
      • Package Manager: fixed IPTables NAT Extras package not migrating when updating from RutOS 7.12
      • PAM: fixed TACACS+ WebUI remote host parameter
      • Troubleshoot: fixed duplicate devices listed in the TCP dump configuration
  • CVE Patches
    • CVE-2025-11961 - 1.9 (LOW)
    • CVE-2025-13836 - 9.1 (CRITICAL)

RUTE_R_00.07.21.3 | 2026.03.24

  • Fix
    • System
      • Backup: fixed eSIM interface generation after uploading a backup
      • Reset Settings: fixed reset not responding

RUTE_R_00.07.21.2 | 2026.03.06

  • New
    • Network
      • Mobile: added eSIM activation through proxy server
  • Improvements
    • System
      • Site manager: added configurable DHCP option for client discovery
      • Site manager: added access control loss warning
  • Fix
    • Network
      • Network: fixed an edge-case network hang after device reboot
    • Services
      • Data to Server: fixed memory leak when using IEC 60870 5 as input and using output with custom format

RUTE_R_00.07.21.1 | 2026.02.26

  • Fix
    • System
      • Kernel: fixed certain devices failing to boot
      • Site manager: fixed missing config files in SDK

RUTE_R_00.07.20.3 | 2026.01.23

  • Fix
    • Services
      • Data to Server: fixed IEC 60870 data sender plugin failing to load

RUTE_R_00.07.20.1 | 2026.01.05

  • Initial firmware release