Access Point Firmware Release Notes

Follow

Firmware 6.4

Latest Development Release

6.4.13 (September 4, 2018)

New:

  • NEW: ntp.cloudtrax.com time server added
  • NEW: Updated CloudTrax HTTPS certificates

Fixed:

  • FIXED: DNS server may crash during reconfiguration.
  • FIXED: Radio may not honor Netherlands radio power limits.
  • FIXED: Firmware may not use fallback server, when checking in fails due to certificate expiration.

Known Issues:

  • KNOWN ISSUE: Hostname reported via syslog might report as "lede", instead of actual hostname.
  • KNOWN ISSUE: CloudTrax may incorrectly report some clients as having a 169.x.x.x IP address.
  • KNOWN ISSUE: The A42 802.3af port now uses the MAC address shown on the underside sticker, instead of the sticker MAC address +1. This results in a different MAC address being used for DHCP requests compared to 6.4.2/6.4.1. 
6.4.11 (July 16, 2018)

New:

  • NEW: Firmware will now track Snapchat traffic.
  • NEW: Thermal monitoring to allow A42/A62 to throttle under rare cases where it could overheat

Fixed:

  • FIXED: AP may reboot due to erroneous healthcare checks or missing interfaces.
  • FIXED: Reduced memory usage on A42/A62.
  • FIXED: APs in some countries could not change channel settings.
  • FIXED: Disabling 5GHz in some countries would fail to work.
  • FIXED: Firmware upgrades could hang and not complete.
  • FIXED: MR1750 radio would fail to work when set to "outdoor" mode.
  • FIXED: Auto Channel Optimization may fail due to invalid scan results.
  • FIXED: Wireless repeaters were rebooting unnecessarily when losing mesh connectivity.
  • FIXED: Band Steering daemon remained running when not needed.
  • FIXED: 40MHz channel width could not be used on mesh interface.
  • FIXED: Roaming VLANs re-enabled after reboot, even when disabled.
  • FIXED: Improved A62 client transmit rate reporting.

Known Issues:

  • KNOWN ISSUE: Hostname reported via syslog might report as "lede", instead of actual hostname.
  • KNOWN ISSUE: CloudTrax may incorrectly report some clients as having a 169.x.x.x IP address.
  • KNOWN ISSUE: The A42 802.3af port now uses the MAC address shown on the underside sticker, instead of the sticker MAC address +1. This results in a different MAC address being used for DHCP requests compared to 6.4.2/6.4.1.

6.4.8 (May 10, 2018)

New:

  • NEW: All clients are reported when Application Reporting is enabled, even those with 0 bytes of transfer.

Fixed:

  • FIXED: 5GHz Meshing always uses 80MHz channel width, regardless of CloudTrax channel width settings.
  • FIXED: Unblocked clients that were previously blocked via Manage -> Clients may remain blocked until reboot.
  • FIXED: WPA password may not work on SSIDs set to 2.4GHz or 5GHz only.
  • FIXED: Using Alternate DNS with external splash page may cause "Too many redirects" error.

Known Issues:

  • KNOWN ISSUE: Hostname reported via syslog might report as "lede", instead of actual hostname.
  • KNOWN ISSUE: CloudTrax may incorrectly report some clients as having a 169.x.x.x IP address.
  • KNOWN ISSUE: Roaming VLANs may become re-enabled after reboot, even when they are turned off in CloudTrax.
  • KNOWN ISSUE: Firmware upgrades are intermittently slow or sometimes fail
  • KNOWN ISSUE: The A42 802.3af port now uses the MAC address shown on the underside sticker, instead of the sticker MAC address +1. This results in a different MAC address being used for DHCP requests compared to 6.4.2/6.4.1.

 

6.4.7 (April 11, 2018)
 
New:
  • NEW: Allow external splash page pre-authentication to be turned off. GUI coming soon.

Fixes:

  • FIXED: Enabling Band Steering may result in high processor load and/or client connection issues.

Known Issues:

  • KNOWN ISSUE: On the A62, the AP might not bring up the DNS server on boot, preventing it from serving clients or upgrading firmware.
  • KNOWN ISSUE: CloudTrax may incorrectly report some clients as having a 169.x.x.x IP address.
  • KNOWN ISSUE: WPA password may not work on SSIDs set to 2.4GHz or 5GHz only.
  • KNOWN ISSUE: Unblocked clients that were previously blocked via Manage -> Clients may remain blocked until reboot.
  • KNOWN ISSUE: 5Ghz Meshing always uses 80Mhz channel width, regardless of CloudTrax channel settings.
  • KNOWN ISSUE: Hostname reported via syslog might report as "lede", instead of actual hostname.
  • KNOWN ISSUE: Roaming VLANs may become re-enabled after reboot, even when they are turned off in CloudTrax.
  • KNOWN ISSUE: The A42 802.3af port now uses the MAC address shown on the underside sticker, instead of the sticker MAC address +1. This results in a different MAC address being used for DHCP requests compared to 6.4.2/6.4.1.

6.4.6 (Mar 12, 2018)

New:

  • NEW: Remote syslog server support.
  • NEW: Removed outdated crypto algorithms from SSH implementation.

Fixes:

  • FIXED: Some clients may report being connected to the wrong band(e.g. 2.4Ghz instead of 5Ghz).
  • FIXED: "2.4Ghz only" and "5Ghz only" band setting may not be honored if another SSID is set to use the "Both - Combined SSID". The AP may continue to broadcast both bands.
  • FIXED: Disabling Application Reporting breaks throttling on non-bridged SSIDs.
  • FIXED: Some wireless repeaters may report 0 hops on large mesh networks.
  • FIXED: Some APs may stop reporting client traffic.
  • FIXED: Throttling does not work on non-bridged SSIDs with Application Reporting disabled.
  • FIXED: Captive portal may prevent client connections on busy networks due to not clearing its clients list when Application Reporting is disabled.
  • FIXED: Setting throttle to 100mbit/sec resulted in 10mbit/sec throttle.
  • FIXED: Auto channel mode may fail due to incorrect channel values reported by AP.

Known Issues:

  • KNOWN ISSUE: CloudTrax may incorrectly report some clients as having a 169.x.x.x IP address.
  • KNOWN ISSUE: Enabling Band Steering may result in high processor load and/or client connection issues.
  • KNOWN ISSUE: Unblocked clients that were previously blocked via Manage -> Clients may remain blocked until reboot.
  • KNOWN ISSUE: Hostname reported via syslog might report as "lede", instead of actual hostname.
  • KNOWN ISSUE: The IP address of wired clients is not reported when Application Reporting is turned off.
  • KNOWN ISSUE: 5Ghz Meshing always uses 80Mhz channel width, regardless of CloudTrax channel settings.
  • KNOWN ISSUE: Roaming VLANs may become re-enabled after reboot, even when they are turned off in CloudTrax.
  • KNOWN ISSUE: The A42 802.3af port now uses the MAC address shown on the underside sticker, instead of the sticker MAC address +1. This results in a different MAC address being used for DHCP requests compared to 6.4.2/6.4.1.

Previous Development Releases

 6.4.5 (Jan 8, 2018)

Fixes:

  • FIXED: Using the SSID Band setting "Both - Unique SSIDs", results in the first character of each SSID name being truncated.
  • FIXED: AP may report N/A N/A for channels, despite broadcasting correctly.

Known Issues:

  • KNOWN ISSUE: Some clients may report being connected to the wrong band(e.g. 2.4Ghz instead of 5Ghz).
  • KNOWN ISSUE: Disabling Application Reporting breaks throttling on non-bridged SSIDs.
  • KNOWN ISSUE: "2.4Ghz only" and "5Ghz only" band setting may not be honored if another SSID is set to use the "Both - Combined SSID". The AP may continue to broadcast both bands.
  • KNOWN ISSUE: Some wireless repeaters may report 0 hops on large mesh networks.
  • KNOWN ISSUE: Some APs may stop reporting client traffic.
  • KNOWN ISSUE: Setting throttle to 100mbit/sec results in 10mbit/sec throttle.
  • KNOWN ISSUE: Auto channel mode may fail due to incorrect channel values reported by AP.
  • KNOWN ISSUE: The IP address of wired clients is not reported when Application Reporting is turned off.
  • KNOWN ISSUE: The A42 802.3af port now uses the MAC address shown on the underside sticker, instead of the sticker MAC address +1. This results in a different MAC address being used for DHCP requests compared to 6.4.2/6.4.1.

 6.4.4 (Dec 27, 2017)

New Features:

  • NEW: Unused splash page images are now deleted automatically from the access point when SSID settings are saved.
  • NEW: Bridge Loop Avoidance is now more aggressive to avoid looping scenarios on complex networks.
  • New: If AP Mesh is disabled, access point will reconfigure channel changes immediately.

Fixes:

  • FIXED: Facebook WiFi would not pop-up automatically or would be displayed incorrectly on iOS and macOS devices.
  • FIXED: Clients w/ hostnames may cause malformed JSON, resulting in striped pattern on the outage graph due to check-in failure.
  • FIXED: External splash pages that worked in 6.3 firmware fail to work on 6.4 firmware due to internal CONN_ERR.
  • FIXED: SSIDs may fail to broadcast with WiFi Scheduling enabled.
  • FIXED: Disabled LED lights may turn back on after firmware upgrade.

Known Issues:

  • KNOWN ISSUE: "2.4Ghz only" and "5Ghz only" band setting may not be honored if another SSID is set to use "Both - Combined SSID". The AP may continue to broadcast both bands.
  • KNOWN ISSUE: Using the SSID Band setting "Both - Unique SSIDs", results in the first character of each SSID name being truncated.
  • KNOWN ISSUE: Traffic for wired clients not reported when Application Reporting is turned off.
  • KNOWN ISSUE: IP address for wired clients not reported.
  • KNOWN ISSUE: AP may report N/A N/A for channels, despite broadcasting correctly.
  • KNOWN ISSUE: The A42 802.3af port now uses the MAC address shown on the underside sticker, instead of the sticker MAC address +1. This results in a different MAC address being used for DHCP requests compared to 6.4.2/6.4.1.

6.4.3 (Dec 4, 2017)

New Features:

  • NEW: Client IP addresses reported to CloudTrax.
  • NEW: Prefer 5Ghz 802.11ac meshing, if available.
  • NEW: Firmware upgrade delay reduced and firmware can upgrade when in orphan mode, allowing for faster firmware updates.
  • NEW: BATMAN Mesh Protocol reverted to BATMAN IV, due to instability seen with BATMAN V.
  • NEW: Bridge multiple SSIDs to LAN. (GUI Coming Soon...)

Fixes:

  • FIX: Bandwidth throttling was not always being applied to some clients, when the SSID was bridged to a VLAN or after a WiFi Scheduling event.
  • FIX: Upload/Download usage reporting could get reversed.
  • FIX: Mesh interface could get set to managed mode, leaving repeaters orphaned.
  • FIX: When Status LEDs were turned off, the LEDs would remain off even during reconfiguration or an error events.
  • FIX: LED may get stuck showing white color.
  • FIX: Channel scan could send incorrect channel values causing Auto channel mode to fail.

Known Issues: 

  • KNOWN ISSUE: "2.4Ghz only" and "5Ghz only" band setting may not be honored if another SSID is set to use "Both - Combined SSID". The AP may continue to broadcast both bands.
  • KNOWN ISSUE: Disabled LEDs could turn themselves back on after upgrade.
  • KNOWN ISSUE: Traffic for wired clients not reported when Application Reporting is turned off.
  • KNOWN ISSUE: IP address for wired clients not reported.
  • KNOWN ISSUE: The A42 802.3af port now uses the MAC address shown on the underside sticker, instead of the sticker MAC address +1. This results in a different MAC address being used for DHCP requests compared to 6.4.2/6.4.1.
  • KNOWN ISSUE: AP may report N/A N/A for channels, despite broadcasting correctly.
  • KNOWN ISSUE: Clients w/ hostnames may cause malformed JSON, resulting in striped pattern on the outage graph due to check-in failure.
  • KNOWN ISSUE: External splash pages that worked in 6.3 firmware fail to work on 6.4 firmware due to internal CONN_ERR.

6.4.2 (Oct 20, 2017)

Fixes:

  • FIX: WPA2 "Key Reinstallation Attack (KRACK)" exploit (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13084, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) 
  • FIX: Dnsmasq remote code execution vulnerability identified by Google (CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496, CVE-2017-13704, CVE-2017-14491)
  • FIX: When using RADIUS for external splash page, you'll no longer see an "[acct_unique] WARNING: Attribute User-Name was not found in request, unique ID MAY be inconsistent" error in your server logs
  • FIX: APs will no longer show “striping” due to an issue causing missed check-ins

Known Issues: 
  • KNOWN ISSUE: "2.4Ghz only" and "5Ghz only" band setting may not be honored if another SSID is set to use "Both - Combined SSID". The AP may continue to broadcast both bands.
  • KNOWN ISSUE: Repeaters will take longer than normal to finish upgrading
.
  • KNOWN ISSUE: Disabled LEDs could turn themselves back on after upgrade.
  • KNOWN ISSUE: AP Mesh on 802.11ac devices is currently limited to 5GHz only.
  • KNOWN ISSUE: Traffic for wired clients not reported when Application Reporting is turned off.
  • KNOWN ISSUE: Layer 7 upload/download traffic could be reversed.
  • KNOWN ISSUE: Bandwidth throttling might not always work.
  • KNOWN ISSUE: Upload throttling won't work if SSID is bridged to VLAN.
  • KNOWN ISSUE: A-series LED could be stuck at "white" even after configuration.
  • KNOWN ISSUE: External splash pages that worked in 6.3 firmware fail to work on 6.4 firmware due to internal CONN_ERR.

Note: Once your network has upgraded to 6.4.2, if you intend to add any additional repeaters with 6.3 or earlier installed, they'll need to be hard-wired first (to get the update) as they can't mesh with an AP on 6.4

6.4.1 (Oct 12, 2017)

New Features:
  • NEW: AP Mesh over 5GHz now supported on 802.11ac devices (A-series, MR1750, OM5P-AC)

  • NEW: Airtime Fairness on 2.4GHz, to improve download throughput and provide equal access to clients

  • NEW: Throughput-based Mesh routing provided by B.A.T.M.A.N version 5

  • NEW: Linux OS change from OpenWrt to LEDE Project (lede-project.org), containing many performance and security improvements


Fixes:

  • FIX: Neighbor RSSI now properly shows within CloudTrax

  • FIX: Increased upgrade partition size to accommodate later 6.4 firmware releases.

Known Issues:

  • KNOWN ISSUE: "2.4Ghz only" and "5Ghz only" band setting may not be honored if another SSID is set to use "Both - Combined SSID". The AP may continue to broadcast both bands.
  • KNOWN ISSUE: External splash pages that worked in 6.3 firmware fail to work on 6.4 firmware due to internal CONN_ERR.

Firmware 6.3

Latest Stable Release

6.3.16 (October 17, 2017)

  • FIX: WPA2 "Key Reinstallation Attack (KRACK)" exploit (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13084, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088) 
  • FIX: Dnsmasq remote code execution vulnerability identified by Google (CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496, CVE-2017-13704, CVE-2017-14491)

Known issues:

  • The Neighbor list might not always be populated, we're aware and working on a fix.
  • Known issue: Upload not throttled when SSID bridged to VLAN.

NOTE: Due to higher memory requirements, this version does not support OM1P, MR500 and OM2Pv1 devices. The OM1P/MR500 are legacy devices and limited to 481 firmware on "legacy" networks only, the OM2P is supported only to 6.1.2, and the OM2P (32 MB) is supported only up to 590 firmware. 

More info about supported devices is found here: https://help.cloudtrax.com/hc/en-us/articles/115000589630-Open-Mesh-End-of-Life-Policy-and-Product-Matrix

Previous 6.3 Releases

6.3.15 (Sept 25, 2017)

Changes below since 6.2.12:

  • NEW: IGMP Proxy support (see Configure -> Advanced)
  • NEW: Configuration changes to one SSID won't disrupt other SSIDs
  • NEW: External splash page now sends CIP parameter (for client IP) in addition to client_mac
  • NEW: Client sessions are now reported back to CloudTrax in the event an AP's local session cache is purged for any reason; this will ensure that the built-in splash-page won't unexpectedly appear prior to the client force timeout or session timeout being reached.
  • FIX: Band Steering no longer consumes high amount of CPU preventing clients from joining SSID
  • FIX: Bridged clients won't get non-bridged DHCP on initial AP boot
  • FIX: Uploaded images to splash page can now support 250 character filenames
  • FIX: Improves reliability of automatic self-heal mode changes from Gateway -> Repeater
  • FIX: Resolves a situation where disabling DNS Intercept could prevent DNS from working
  • FIX: Internet Check better handles when wired clients are connected
  • FIX: Certain model POE switches no longer experience gateways switching to repeater
  • FIX: Performance of an encrypted SSID would degrade if 802.11r was enabled
  • FIX: Redirection from a URL with “res” parameter (to external splash page) no longer causes loop
  • FIX: Addresses an edge-case where clients could potentially bypass a splash page (including blocked clients)
  • FIX: Logout of a voucher (which isn’t supported) no longer redirects you to www.open-mesh.com
  • FIX: Resolves SSH segmentation fault with Dropbear
  • FIX: Significant improvements to the configuration/reconfiguration of bridged SSIDs (including VLANs) 
  • FIX: WMM Power Save now works for 802.11n devices in addition to 802.11ac (which was already supported)
  • FIX: Change to radio channel is now logged on the AP; log buffer size increased to 128KB
  • FIX: Out-of-box 2.4GHz channel, prior to configuration, is now CloudTrax default of 6 instead of 5
  • Known issue: The Neighbor list might not always be populated, we're aware and working on a fix.
  • Known issue: Upload not throttled when SSID bridged to VLAN.
  • Known issue: Download may not get throttled after WiFi Scheduling re-enables SSID.

6.3.14 (July 11, 2017)

  • FIX: Images for built-in splash pages are now displaying properly
  • FIX: When Internet Check is disabled and AP loses internet (but not DHCP) the SSIDs stay up
  • FIX: VLAN changes to an SSID now save without need for reboot
  • FIX: Repeaters with bridged SSIDs and no splash page now get LAN IPs as expected
  • FIX: Various additional improvements and enhancements
  • Known issue: Upload not throttled when SSID bridged to VLAN.
  • Known issue: Download may not get throttled after WiFi Scheduling re-enables SSID.

6.3.13 (June 29, 2017)

  • NEW: IGMP Proxy support (see Configure -> Advanced)
  • FIX: WiFi scheduling works again
  • FIX: Client isolation wasn’t always isolating
  • FIX: Bandwidth throttling in many cases wasn’t working
  • FIX: Improved stability for SSIDs using Band Steering
  • FIX: Certain model POE switches no longer experience gateways switching to repeater
  • FIX: SSIDs configured for 2.4/5GHz-only broadcast correctly utilize Roaming VLANs
  • FIX: 5GHz radio no longer fails to broadcast if using channel 165 prior to next upgrade
  • FIX: Performance of an encrypted SSID would degrade if 802.11r was enabled
  • FIX: Redirection from a URL with “res” parameter (to external splash page) no longer causes loop
  • FIX: Addresses an edge-case where clients could potentially bypass a splash page (including blocked clients)
  • FIX: Logout of a voucher (which isn’t supported) no longer redirects you to www.open-mesh.com
  • FIX: Resolves SSH segmentation fault with Dropbear
  • Known issues: Upload not throttled when SSID bridged to VLAN.
  • Known issue: Download may not be throttled after WiFi Scheduling re-enables SSID.

6.3.12 (May 1, 2017)

  • NEW: Client sessions are now reported back to CloudTrax in the event an AP's local session cache is purged for any reason; this will ensure that the built-in splash-page won't unexpectedly appear prior to the client force timeout or session timeout being reached.
  • Known issue: Upload not throttled when SSID bridged to VLAN.
  • Known issue: Download may not be throttled after WiFi Scheduling re-enables SSID.

6.3.11 (April 20, 2017)

  • FIX: Significant improvements to the configuration/reconfiguration of bridged SSIDs (including VLANs) 
  • FIX: Bridged SSIDs no longer reverse their reported upload/download traffic in CloudTrax
  • FIX: Prevent SSIDs from accidentally being bridged to the LAN when in NAT mode
  • FIX: Repeaters with bridged SSIDs could prevent DHCP assignment to clients
  • FIX: Addresses a rare condition where repeaters could go offline or into lonely/orphan mode unnecessarily
  • FIX: WMM Power Save now works for 802.11n devices in addition to 802.11ac (which was already supported)
  • FIX: Change to radio channel is now logged on the AP; log buffer size increased to 128KB
  • FIX: “Use AP Name” being turned on now correctly changes the 2.4GHz SSID name without a reboot
  • FIX: Bandwidth throttling on bridged SSIDs works if you have Application DPI disabled
  • FIX: Client blocking now properly behaves on networks without a splash page enabled
  • Known issue: Upload not throttled when SSID bridged to VLAN.
  • Known issue: Download may not be throttled after WiFi Scheduling re-enables SSID.

6.3.10 (March 8, 2017)

  • NEW: Support for new HW (OM2Pv4, OM2P-HSv4, A-series)
  • NEW: Configuration changes to one SSID won't disrupt other SSIDs
  • NEW: External splash page now sends CIP parameter (for client IP) in addition to client_mac
  • FIX: Out-of-box 2.4GHz channel, prior to configuration, is now CloudTrax default of 6 instead of 5
  • FIX: Security updates for CVE-2013-4421, CVE-2013-4434, CVE-2016-3116, CVE-2016-7406, CVE-2016-7408, CVE-2016-7409, CVE-2016-7407
  • Includes all other changes included in 6.2.10 and earlier
  • Known issue: Upload not throttled when SSID bridged to VLAN.
  • Known issue: Download may not be throttled after WiFi Scheduling re-enables SSID.

For older releases, please see Legacy Firmware Release Notes.

Have more questions? Submit a request!