Release Notes for Cradlepoint Rev Firmware Products supported/tested:

Transcription

1 Release Ntes fr Cradlepint Rev Firmware Prducts supprted/tested: AER3100/AER3150 AER2200/AER2200-FIPS AER2100 AER1600/AER1650 AP22 CBA850 CR4250 IBR1700/IBR1700-FIPS IBR1100/IBR1150 IBR900/IBR950/IBR900-FIPS IBR600B/IBR650B IBR650C IBR350 IBR200 New features added in this release (Nt all features are in all prducts see their respective Data Sheets): Imprved the "Distance Interval" field t be independent f the "Statinary Event Threshld (secnds)" field in GPS's Send-t-Server, Send-t-Client, and Send-t-Serial cnfiguratin. Prir t , "Distance Interval" wuld nly reprt as cnfigured if the "Statinary Event Threshld (secnds)" and "Statinary Distance Threshld (meters)" were bth nn-zer. The actual value f the "Statinary Event Threshld (secnds)" didn't have any effect n the Distance Interval reprting, ther than it needed t be nn-zer. This has been imprved in , and the "Distance Interval" field will nw reprt as cnfigured. Nte that if there is a current cnfiguratin that has the "Distance Interval" field cnfigured t a nn-zer value, and "Statinary Event Threshld (secnds)" and "Statinary Distance Threshld (meters)" are als bth nn-zer, then GPS will reprt mre ften than it did in In n case will GPS reprt less ften in than it did in Added additinal status fr WiFi as WAN and Wireless Client cnnectins.

2 CP Secure Web Filter Preview Mde: Plicies can be applied in a "Preview" mde and the lgs reviewed t see what traffic wuld have been blcked r allwed based n that plicy. Multiple Lcal Netwrks per VLAN: Supprted nly n AER2200 platfrm. This feature allws mre than ne lcal netwrk (Lcal IP Netwrk in NCOS GUI) t share the same VLAN interface. Additinal UI/Usability changes: Remved excessive warnings with WiFi client cnnect alerts Changed TX Pwer setting t reflect relative distance at which a particular signal level can be achieved based n the percentage the user prvides. Defects fixed: Fixed an issue where ECM des nt allw setting DFS channels n an AP22 Increase the default prxy timeut t 60 secnds t fix an issue fund when trying t use LgMeIn t remtely manage devices cnnected t a ruter When filling ut frms in the CP Secure Web Filter UI n the ruter, pressing the cancel buttn after editing wuld nt always reset the frm data prperly LP4. Reslved APN restratin under certain carrier reject cnditins when using a Verizn static IP SIM Security issues: Nte: All custmers are reminded that changing the default Administratin (lgin) and WiFi passwrds are necessary fr ruter and netwrk security. The default passwrds are unique, but are nt as safe as a strng passwrd that nly yu knw. The security f the Internet depends n yur cperatin. Prduct Line Test page has had a majrity f the infrmatin available remved. The web page is available n the ruter's Admin LAN and it shwed bth the ruter's Serial Number and MAC address. As these are related t the ruter's default passwrd, they were remved. At the same time, we remved a majrity f the additinal infrmatin frm that page. Additinal infrmatin abut this page is available in the Cradlepint Cnnect prtal n the Prduct Line Test Disclsure page.

3 Knwn issues 1. Feature: IBR600C Internatinal WiFi Supprt Scenari: An IBR600C ruter lcated utside the FCC regulatin dmain (USA/Canada) is upgraded t firmware rev Ptential Prblem: WiFi cnnectivity t the ruter will be lst when the image bts. Custmer Impact: If the WiFi netwrk n that ruter is used fr admin access, that access will be lst. Traffic carried thrugh that ruter's WiFi netwrk will be disrupted. Wrkarund: There is n knwn wrkarund Recvery frm the prblem state: Update NCOS firmware n the ruter t either rev r (when available), rev Feature: Multiple Lcal Netwrks per VLAN Scenari: Cnfiguratin change fr a VRRP-enabled lcal netwrk that is sharing a VLAN interface t using a dedicated VLAN interface. Ptential prblem: This cnfiguratin change may result in lss f cnnectivity t that netwrk. Custmer Impact: If that netwrk is used fr admin access, that access may nt be available any mre. Traffic carried thrugh that netwrk is disrupted. Wrkarund: When making the abve-mentined cnfiguratin change in 'Scenari': a. Disable VRRP n the affected netwrks.

4 b. Make the desired cnfiguratin change. c. Once the netwrks are up using their dedicated VLAN interface re-enable VRRP. Recvery frm the prblem state: Admin Access is still available frm anther netwrk Trigger a re-cnfiguratin f the lcal netwrks by making a nnfeature affecting change t any f the netwrks. Fr example: change the name f a netwrk and then restre it back. create a temprary lcal netwrk and then delete it. Admin access is nt available frm any ther netwrk Rebt the ruter 3. Feature: IBR9x0 OBD-II Supprt Scenari: OBD-II n the IBR9x0 at factry defaults, using either the COR Extensibility Prt t Serial Cable r an FTDI-based USB t Serial cnverter Ptential Prblem: Since 6.6.4, the default value fr the OBD-II prt (at cnfig/bd/prt) incrrectly defaults t "/dev/ttys1" and results in the lg message: Failed t pen serial prt at /dev/ttys1 Custmer Impact: OBD-II wn't wrk "ut f the bx" n the IBR9x0 with the COR Extensibility Prt t Serial Cable in 6.6.4, 7.0.0, and Wrkarund: On the ruter's CLI, run: put cnfig/bd/prt "/dev/ttyusb0" Upgrade t when available

5 Mdems tested: (new mdems / mdem platfrms are in blue text) Cradlepint Cellular Devices (Embedded & USB Mdems) Cradlepint AER16x0LPE-AT / AT&T (USA) Cradlepint AER16x0LPE-GN / T-Mbile, US Cellular (USA); Generic (Nrth America) Cradlepint AER16x0LPE-SP / Sprint (USA) Cradlepint AER16x0LPE-VZ / Verizn (USA) Cradlepint AER16x0LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint AER22x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint AER M / AT&T (USA) Cradlepint IBR2x0-10M-VZ / Verizn (USA) Cradlepint IBR2x0-10M-B-AT / AT&T (USA) Cradlepint IBR2x0-10M-C / Sprint (USA) Cradlepint IBR350L / Verizn (USA) Cradlepint IBR350LPE-AT / AT&T (USA) Cradlepint IBR350LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR350LPE-SP/ Sprint (USA) Cradlepint IBR350LPE-VZ / Verizn (USA) Cradlepint IBR350P2 / AT&T (USA); Generic GSM-cmpatible lcatins (Wrld) Cradlepint IBR6x0B-LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint IBR6x0C-LPE-AT / AT&T (USA) Cradlepint IBR6x0C-LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR6x0C-LPE-SP/ Sprint (USA) Cradlepint IBR6x0C-LPE-VZ / Verizn (USA)

6 Cradlepint IBR6x0C-150M-B-EU / Generic peratrs (Eurpe) Cradlepint IBR6x0C-150M-C-AU / Generic peratrs (Australia) Cradlepint IBR900LPE-VZ / Verizn (USA); als certified n AT&T (USA), Sprint (USA), and Generic (Nrth America) Cradlepint IBR9x0LP5 / Generic (APAC) Cradlepint IBR9x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR9x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR9x0-1200M / AT&T (USA) Cradlepint IBR11x0LPE-AT / AT&T (USA) Cradlepint IBR11x0LPE-GN / C-Spire, T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR11x0LPE-SP / Sprint (USA) Cradlepint IBR11x0LPE-VZ / Verizn (USA Cradlepint IBR11x0LP3-EU / Generic (Eurpe), Telstra (Australia) Cradlepint IBR11x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR M / AT&T (USA) Cradlepint MC400L2 / Public Safety Band 14 nly (USA) Cradlepint MC400LPE-AT / AT&T (USA) Cradlepint MC400LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint MC400LPE-SP / Sprint (USA) Cradlepint MC400LPE-VZ / Verizn (USA) Cradlepint MC400LP3-EU / Generic (Eurpe) Cradlepint MC400LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint MC400LP5 / Generic (APAC)

7 Cradlepint MC400LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Vdafne (Wrldwide), Generic (Nrth America, Eurpe) Cradlepint MC M-C / AT&T, FirstNet (USA) Cradlepint MC M / AT&T (USA) 3 rd Party USB Cellular Mdems Franklin U770 ( Sprint Plug-In-Cnnect Tri-Mde USB Mdem ) / Sprint (USA) Franklin U772 ( Franklin U772 USB Mdem ) / Sprint (USA) Huawei E3276 / Telus (Canada) Huawei E368 ( AT&T USBCnnect Frce 4G ) / AT&T (USA) Netgear AC340U ( AT&T Beam ) / AT&T (USA) Netgear AC341U ( NETGEAR 341U USB Mdem ) / Sprint (USA) *supprts Netgear firmware and MR2 firmware Nvatel 551L LTE ( Verizn USB551L ) / Verizn (USA) Nvatel U620L ( Verizn MiFi 4G LTE Glbal USB Mdem U620L ) / Verizn (USA) Nvatel U679 ( 4G LTE Nvatel Wireless U679 Turb Stick ) / Bell Mbility (Canada) Nvatel USB730L ( Verizn Glbal Mdem USB730L ) / Verizn (USA) Pantech UML295VW ( Verizn 4G LTE USB Mdem UML2954G LTE ) / Verizn (USA) *requires Pantech firmware versin L0295VWD821F.B4 r later Sierra Wireless 308 USB ( AT&T USBCnnect Shckwave ) / AT&T (USA) Sierra Wireless 313U ( AT&T USBCnnect Mmentum 4G ) / AT&T (USA) Sierra Wireless 320U ( Telstra USB 4G (Sierra AirCard 320U) ) / Telstra (Australia) Sierra Wireless 330U ( 4G LTE Sierra Wireless U330 - Turb Stick ) / Bell Mbility (Canada) Sierra Wireless 330U ( LTE Rcket Stick Sierra Wireless AirCard 330U ) / Rgers (Canada) ZTE MF683 ( T-Mbile Rcket 3.0 4G Laptp Stick ) / T-Mbile (USA)

8 Release Ntes fr Cradlepint Rev Firmware Prducts supprted/tested: AER3100/AER3150 AER2200/AER2200-FIPS AER2100 AER1600/AER1650 AP22 CBA850 CR4250 IBR1700/IBR1700-FIPS IBR1100/IBR1150 IBR900/IBR950/IBR900-FIPS IBR600B/IBR650B IBR600C/IBR650C IBR200 IBR350 New features added in this release (Nt all features are in all prducts see their respective Data Sheets): Many Security changes are in the NCOS release. They are detailed in the Security issues sectin belw. Entitlement/Licensing changes. Ruters and APs will n lnger require a rebt when a new Feature License is dwnladed t the device. AP Discvery added t AER2200-FIPS Wireless packet capture n AP22 Additinal UI/Usability changes: Added T-Mbile static IP APN t autmatic APN table Ability t apply CP Secure Web Filter Plicies t Multiple LANs

9 Crrected a misspelling in the CP Secure Webfilter UI In CP Secure Webfilter UI, red triangles fr 'dirty' cells n NEW plicies didn't accunt fr a srted grid. In the Static Rute Editr, fr clarity the "Allw Netwrk Access" rute ptin was renamed t "Open Firewall fr Netwrk Access" Defects fixed: Signal Strength LEDs may nt shw up after bt n certain prducts QS DSCP tag errr n IBR200 UI. DSCP is nt supprted n the IBR200 and the UI was fixed. USB mass strage device was unmunted after upgrade t Cnfiguratin sync-suspended issue when WPA/WPA2 WiFi passwrd was between characters General GNSS imprvements, such as recvery f GPS data, centralized GNSS data stre, GLONASS satellite cunt, avid fix verrun Fixed First Time Setup wizard text incnsistencies Mdified temperature display t match temperature mitigatin measurement If the WAN isn't up when CP Secure Web Filter tries t send a DNS request, smetimes thse requests get "stuck" and eventually cause the ruter t rebt. Added a timeut fr thse requests. When adding a new custm categry fr CP Secure Web Filter, add it t the categries f each plicy t make sure they will be filtered. Upstream prxy settings in the UI allwed invalid entries Webfilter blcked page wasn't rendering crrectly n iphne and mac devices When setting up Htspt services, the NAS/Gateway bx was being incrrectly cleared when lading a partner prfile CP Secure Web Filter UI did nt prperly handle the case when a netwrk that was part f a plicy was deleted Security issues: Nte: All custmers are reminded that changing the default Administratin (lgin) and WiFi passwrds are necessary fr ruter and netwrk security. The default passwrds are unique, but are

10 nt as safe as a strng passwrd that nly yu knw. The security f the Internet depends n yur cperatin. On a peridic basis we have a third party perfrm a security penetratin test n ur ruters. They made several recmmendatins t imprve the security f the ruter and user interactins. NetClud OS versin will change the default administratin and WiFi passwrds f ruters and APs prduced after December 2018 t be the ruter's Serial Number, nt the MAC address. This is a lnger passwrd and cannt be seen thrugh a WiFi scan r n the LAN cnnectin. The Serial Number can nly be seen thrugh NCM, the ruter's UI Dashbard, r n the prductin sticker n the ruter. The default passwrd will nt change n existing ruters, as the prductin sticker's default passwrd wuld be invalid. Please use NCM r the device's UI t change the default passwrd n the first lgin as prmpted. The default NCOS cnfiguratin wuld allw numerus failed authenticatin attempts withut lcking ut the administratin accunt r banning the IP address f the attacker. The capability t blck this attack has been in NCOS fr many years, but was nt enabled by default. Versin makes this blcking the default. It enabled Advanced Security Mde and Ban IP Address n the System > Administratin > Ruter Security UI page. Devices shared the same SSL/TLS certificates and SSH hst keys. Each prduct type (IBR1100, AER1600, etc) shares the same certificates/keys which can be used fr HTTPS and SSH cmmunicatin with the device (nte that this is different than passwrds). Each device will nw generate a unique SSH server hst key upn initial bt/factry reset. This may cause a warning if yu have used SSH t cnnect t a device previusly and the key has changed. This is expected. Knwn issues Using the Webfilter feature prevents accurate applicatin identificatin resulting in large prtins f traffic being classified as Nt Available. Mdems tested: (new mdems / mdem platfrms are in blue text) Cradlepint Cellular Devices (Embedded & USB Mdems) Cradlepint AER16x0LPE-AT / AT&T (USA) Cradlepint AER16x0LPE-GN / T-Mbile, US Cellular (USA); Generic (Nrth America) Cradlepint AER16x0LPE-SP / Sprint (USA)

11 Cradlepint AER16x0LPE-VZ / Verizn (USA) Cradlepint AER16x0LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint AER22x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR2x0-10M-VZ / Verizn (USA) Cradlepint IBR2x0-10M-B-AT / AT&T (USA) Cradlepint IBR2x0-10M-C / Sprint (USA) Cradlepint IBR350L / Verizn (USA) Cradlepint IBR350LPE-AT / AT&T (USA) Cradlepint IBR350LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR350LPE-SP/ Sprint (USA) Cradlepint IBR350LPE-VZ / Verizn (USA) Cradlepint IBR350P2 / AT&T (USA); Generic GSM-cmpatible lcatins (Wrld) Cradlepint IBR6x0B-LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint IBR6x0C-LPE-AT / AT&T (USA) Cradlepint IBR6x0C-LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR6x0C-LPE-SP/ Sprint (USA) Cradlepint IBR6x0C-LPE-VZ / Verizn (USA) Cradlepint IBR6x0C-150M-B-EU / Generic peratrs (Eurpe) Cradlepint IBR6x0C-150M-C-AU / Generic peratrs (Australia) Cradlepint IBR6x0LPE-AT / AT&T (USA) Cradlepint IBR6x0LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR6x0LPE-SP/ Sprint (USA) Cradlepint IBR6x0LPE-VZ / Verizn (USA) Cradlepint IBR6x0LP3-EU / Generic (Eurpe) Cradlepint IBR900LPE-VZ / Verizn (USA); als certified n AT&T (USA), Sprint (USA), and Generic (Nrth America)

12 Cradlepint IBR9x0LP5 / Generic (APAC) Cradlepint IBR9x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR9x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR11x0LPE-AT / AT&T (USA) Cradlepint IBR11x0LPE-GN / C-Spire, T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR11x0LPE-SP / Sprint (USA) Cradlepint IBR11x0LPE-VZ / Verizn (USA Cradlepint IBR11x0LP3-EU / Generic (Eurpe), Telstra (Australia) Cradlepint IBR11x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint MC400L2 / Public Safety Band 14 nly (USA) Cradlepint MC400LPE-AT / AT&T (USA) Cradlepint MC400LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint MC400LPE-SP / Sprint (USA) Cradlepint MC400LPE-VZ / Verizn (USA) Cradlepint MC400LP3-EU / Generic (Eurpe) Cradlepint MC400LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint MC400LP5 / Generic (APAC) Cradlepint MC400LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Vdafne (Wrldwide), Generic (Nrth America, Eurpe) Cradlepint MC M-C / AT&T, FirstNet (USA) 3 rd Party USB Cellular Mdems Franklin U770 ( Sprint Plug-In-Cnnect Tri-Mde USB Mdem ) / Sprint (USA) Franklin U772 ( Franklin U772 USB Mdem ) / Sprint (USA)

13 Huawei E3276 / Telus (Canada) Huawei E368 ( AT&T USBCnnect Frce 4G ) / AT&T (USA) Netgear AC340U ( AT&T Beam ) / AT&T (USA) Netgear AC341U ( NETGEAR 341U USB Mdem ) / Sprint (USA) *supprts Netgear firmware and MR2 firmware Nvatel 551L LTE ( Verizn USB551L ) / Verizn (USA) Nvatel U620L ( Verizn MiFi 4G LTE Glbal USB Mdem U620L ) / Verizn (USA) Nvatel U679 ( 4G LTE Nvatel Wireless U679 Turb Stick ) / Bell Mbility (Canada) Nvatel USB730L ( Verizn Glbal Mdem USB730L ) / Verizn (USA) Pantech UML295VW ( Verizn 4G LTE USB Mdem UML2954G LTE ) / Verizn (USA) *requires Pantech firmware versin L0295VWD821F.B4 r later Sierra Wireless 308 USB ( AT&T USBCnnect Shckwave ) / AT&T (USA) Sierra Wireless 313U ( AT&T USBCnnect Mmentum 4G ) / AT&T (USA) Sierra Wireless 320U ( Telstra USB 4G (Sierra AirCard 320U) ) / Telstra (Australia) Sierra Wireless 330U ( 4G LTE Sierra Wireless U330 - Turb Stick ) / Bell Mbility (Canada) Sierra Wireless 330U ( LTE Rcket Stick Sierra Wireless AirCard 330U ) / Rgers (Canada) ZTE MF683 ( T-Mbile Rcket 3.0 4G Laptp Stick ) / T-Mbile (USA)