Ubiquiti UniFi Firmware Release Notes: 4.0.42.10433-4.0.66.10832

4.0.66.10832

  • USW
    • Added support to configure/show 802.1X idle timeout for MAC-based mode.
    • Adjusted log level for DHCP snooping and to prevent flooding..
    • Fixed port based MAC filter whitelist bug.
  • nanoHD/IW-HD/FlexHD
    • Improved memory usage.
    • Made system optimizations.
    • Fixed available channel list when country code set to Philippines.
    • Fixed DVLAN support when using MacAuth.
    • Fixed minRSSI support.
    • Fixed RADIUS MAC Auth support.
    • Fixed support for High Performance Devices features.
    • Made a fix to prevent PS-POLL storm from the STA connection state out-of-sync issue.
    • Fixed unknown/inconsistent VAP warnings.
    • Fixed User Group support when using multiple SSIDs and/or wireless uplinks.
  • FlexHD
    • Enabled DFS support.
  • UAP
    • Added support for resolving controller for guest portal when FQDN is unavailable on DNS used by guests.
    • Changed EAP auth timing.
    • Dynamically generates guest portal certificates using Apple rules and FIPS-140-2 requirements.
    • Improved DNS latency reporting to mitigate false positives.
    • Moved traffic mark allocation handling from device to controller.
    • Tweaked Wi-Fi Experience scoring.
    • Updated to hostapd 2.8.
    • Fixed 802.11k Neighbor Report request function.
    • Fixed a race condition which may cause DNS failures for Guest Portal.
    • Fixed Fast Roaming support after hostapd 2.8 update.
    • Fixed RADIUS DAS/DAC/CoA support.
    • Fixed several memory leaks.
    • Several fixes and improvements for Fast Roaming support.
  • UAPG2/G3
    • Fixed HT Information IE.
  • USW-Flex
    • Improved power management to allow PD(s) to power up when there is available power.
    • Fixed panic when netconsole encryption enabled.
  • USW
    • Enabled libcurl verbose logging.
  • HW
    • Added encrypted syslog/netconsole support.
    • Added crash and critical event reporting.
    • Enabled LLDP support for all possible devices.
    • Improved inittab process management.
    • Fixed netconsole setup issue when multiple ARP addresses present.
  • AC-M-Pro
    • Fixed flipped port negotiation stats.
  • HD/SHD/XG/BaseStationXG
    • Fixed netconsole encryption support.
    • Made microcode update to resolve a rare memory corruption issues.
  • UAP-XG/BaseStationXG
    • Fixed range of issues with 10Gbps Ethernet PHY.
  • US/US-PoE/L2-PoE/16-XG/XG-6PoE
    • Fixed DHCP leak on isolated ports when DHCP snooping is enabled.
    • Fixed IGMP fast leave provisioning.
  • USW-XG-6POE
    • Fixed flood of DHCP request/reply packets to all VLAN members.
  • UIS
    • Added Port Security feature support.

4.0.54.10625

  • UAPG2/G3
    • Fixed bug causing false dropped packets to be reported on dashboard.
  • UAPG1/G3
    • Fixed reported ethernet negotiation.
  • UAPG2
    • Fixed segfault during wireless adoption.
  • UAPG1
    • Fixed wireless uplink loop issue.
    • Improved client STA connection stability when using wireless uplinks.
  • AC-Pro/EDU/M-Pro/AC-IW/IW-Pro
    • Fixed ethernet PHY behaviour.
    • Fixed reported ethernet negotiation.
  • HD/SHD/XG/BaseStationXG
    • Fixed an issue where wireless uplink may fail to reconnect.
    • Fixed segfault during wireless adoption.
  • UAP-XG/UWB-XG
    • Fixed an issue with the uplink monitor which may have caused it to erroneously take down all SSIDs.
  • UWB-XG
    • Removed bandsteering as it’s unsupported on this device.
  • nanoHD/IW-HD/FlexHD
    • Adjusted block ACK log level to avoid log spam.
    • Changed so downlink AP follows channel width of the uplink AP.
    • Fixed broadcast/multicast tx stuck issue which may cause high memory usage.
    • Fixed inter-DVLAN broadcast and multicast traffic leaking.
    • Fixed issues with RF environment scan.
    • Fixed VHT information element.
    • Fixed Vietnam channel list.
    • Improved device boot time.
    • Made other stability improvements.
  • IW-HD
    • Fixed DVLAN DHCP issue when Port VLAN is enabled.
    • Fixed VLAN behavior on device reboot.
    • Now properly authenticates wired 802.1X clients on reboot/provision.
  • UAP
    • Added DNS latency tracking.
    • Added new event to identify STA disconnects.
    • Added support for Faroe Islands.
    • Now allows 40MHz on 2.4GHz when country code set to Japan.
    • Fixed a bug when SSH key added via config.properties instead of controller UI.
    • Fixed bug which may cause reboot after provision.
    • Fixed Fast Roaming support.
    • Fixed guest portal failing to redirect on untagged subnet when devices has a static IP.
    • Fixed guest portal provisioning and added reporting for configuration issues.
    • Fixed issue with Ring Chime Pro and PS4 when using Auto-Optimize Network or High-Performance Devices.
    • Fixed random error which caused device to crash when running RF Environment scan.
    • Fixed uplink monitor behavior under heavy unicast load.
    • Fixed wireless adoption backwards compatibility.
    • Made general improvements to Auto-Optimize Networks/High-Performance devices.
    • Improved CPU usage.
    • Improved wireless link stability and wireless uplink stat change logic.
    • Increased 5GHz bias for wireless uplink on dual-band models.
  • nanoHD/IW-HD
    • Fixed a bug where device may not reply to probe request frames.
  • US/US-POE/XG/USW-6POE
    • Added live link status update capability.
    • Enabled IPv6 support for management.
  • US-24-250W/500W
    • Fixed erroneous PoE init failure message on fully functional devices.
  • USW
    • Aligned syslogd prefix format with other devices.
    • Made a potential fix for a bug with DHCP snooping which can cause issues with DHCP.
  • US-16-XG
    • Fixed 2.5 Gbps speed report issue.
  • USW-6POE
    • Added 2.5 Gbps speed support for SFP+ ports.
    • Fixed PoE auto-detect behavior of 802.3bt ports.
    • Improved 802.3bt port compatibility with dual-voltage devices.
    • Improved reboot robustness.
    • Improved SFP port autodetect robustness.
  • SEC
    • Security improvements.
  • HW
    • Improved L2 unadopted upgrade robustness.

4.0.42.10433

  • UAPG2/G3
    • Fixed corrupt UBNT IEs.Now handle broadcast DHCP replies properly while using dynamic VLANs.
  • UAPG1/G2
    • System optimizations.
  • UAPG2
    • Fixed 100FDX negotiation issue after wired uplink state change.Fixed downlink AP crash when using a DFS channel for wireless uplink.Fixed wireless uplink priority selection fail.
  • UAPG1
    • Fixed ethernet negotiation.Fixed issue causing no ethernet link when link partner uses manual negotiation.Fixed remaining issues with establishing an ethernet link.
  • AC-Pro/EDU/M-Pro
    • Fixed performance regression in 4.x when uplink is 100Mbps.
  • HD/SHD/XG/BaseStationXG
    • Fixed mDNS leak when Broadcast and Multicast Filter enabled.Fixed reset button behavior.Made stability and compatibility improvements when using ‘Auto-Optimize Network’ or ‘High Performance Devices’.Updated kernel.
  • HD/SHD/XG
    • Fixed bug causing lower than expected MCS and throughput when TX power >=25dBm.
  • BaseStationXG
    • Fixed GPS support.
  • nanoHD/IW-HD/UDM-B
    • Added association tracking support.Added support for ‘High Performance Devices’ (also part of ‘Auto-Optimize Network’).Added support to display which client STAs support Fast Roaming.Enabled client STA keepalive support.Fixed 802.11w (PMF) provisioning.Fixed a crash when running RF Environment scanning.Fixed a null pointer access issue.Fixed AndesSendCmdMsg warnings.Fixed downlink AP TX rate degradation issue.Fixed false anomalies/failures.Fixed some memory leaks.Fixed speed regression caused by unaligned access.Fixed TX retry and drop count.Fixed wireless uplink packet forwarding issue.Improved multi-client performance.Stability improvements.System optimizations.Tweaked WiFi Experience scoring.
  • UDM-B
    • Disable RF Environment scanning as it’s unsupported.
  • UAP-IW
    • Fixed behavior so ports are switched instead of isolated.
    • Fixed link flapping and switch VLAN behavior.
    • Fixed port/management VLAN provisioning.
    • Fixed reported inittab respawn errors.
  • UAP
    • Added DFS backup channel feature.
    • Added initial RFC-5176 support.
    • Added U-NII-2C support for Panama country code.
    • Fixed a bug which caused mcad to be removed unexpectedly after a provision.
    • Fixed a bug with guest portal redirection.
    • Fixed and improved User Groups support.
    • Fixed Apple Watch support when using ‘Auto-Optimize Network’ feature.
    • Fixed connectivity issue for 2.4GHz only devices when using ‘Auto-Optimize Networks’ or ‘High Performance Devices’.
    • Fixed false ‘Blocked by access control’ anomalies.
    • Fixed false DHCP timeout/failure anomalies.
    • Fixed incorrect/lower than expected 2.4GHz TX power limits.
    • Fixed issues when multiple guest networks on an AP.
    • Fixed RADIUS failover behavior.
    • Fixed RF Environment scanning bug which caused APs to require a power cycle after running a scan.
    • Improved client STA compatibility when using ‘High Performance Devices’ (also part of ‘Auto-Optimize Networks’).
    • Regulatory updates for Russia.
  • U-LTE
    • Disabled RF Environment scanning as it’s unsupported.
  • USW
    • Fixed timeout issue when provisioning 200+ VLANs.
  • UIS
    • Improved PD compatibility.
  • USW-Pro/XG-6POE
    • Added initial routing support.
    • Fixed a bug that may cause the in-row SFP port to disable when setting an ethernet port to disabled.
    • Further improved PD autodetection.
    • Improved handling when no uplink detected.
    • Improved PoE reliability.
  • USW-Pro
    • Added LCM brightness/sync support.
    • Changed throughput update interval on LCM to 1 second.
    • Fixed a rare bug in LCM initialization during boot.
    • Improved reliability of LCM sync feature.
    • Tweaked LCM touch event behavior.
  • USW-Flex
    • Fixed a bug which may prevent device from booting.
    • Improved device initialization reliability.
  • US8
    • Disabled IPv6 on VLAN interfaces.
  • USW
    • Added Wired User Experience support.
    • Fixed 10/100Mbps manual negotiation.
    • Fixed false PoE overload events.
    • Fixed SNMPv3 data leaking without auth.
    • Improved Fault Status text when checking PoE info via shell.
  • SEC
    • Fixed CVE-2019-8912.
  • HW
    • Fixed alerts generated when inittab restarts a process.
    • Fixed STUN URL resolution.
    • Fixed support for Custom Upgrades via FTP.
    • Miscellaneous bug fixes and improvements.