Release Notes for Cradlepoint Rev Firmware Products supported/tested:

Transcription

1 Release Ntes fr Cradlepint Rev Firmware Prducts supprted/tested: AER3100/AER3150 AER2200/AER2200-FIPS AER2100 AER1600/AER1650 AP22 CBA850 CR4250 IBR1700/IBR1700-FIPS IBR1100/IBR1150 IBR900/IBR950/IBR900-FIPS IBR600B/IBR650B IBR650C IBR350 IBR200 New features added in this release (Nt all features are in all prducts see their respective Data Sheets): RADIUS CA/Dynamic VLAN supprt fr WiFi This allws the custmer t present ne SSID, and based n the RADIUS respnse, will place the custmer int the current SSID/VLAN the client is n r mve the client t the specified SSID/VLAN that Radius returns. Fr details n cnfiguratin here is the link t the Knwledge Base article. knwledgebase.cradlepint.cm/articles/supprt/ncos-wireless-lan- Dynamic-VLAN-Assignment Additinal UI/Usability changes: N new UI changes in this release

2 Defects fixed: Fixed lg entry fr uncategrized sites when using CP Secure Web Filter Fixed a prblem where the Zscaler tunnel was being taken dwn and brught back up when any WAN went dwn. This nw nly happens when the primary WAN ges dwn. Fixed a prblem where the Signal Strength LEDs might nt blink when the SIM dr was pen. If GPS has mre than ne lcked GPS device, the GPS service will nw use the GPS lck frm the device that has the mst satellites. This applies t all prducts except fr the IBR1700. The IBR1700's behavir is unchanged, and will nly ever use the internal GPS, regardless f ther devices that might have a lck. (IBR6x0c) Fixed the Ignitin Sense GPIO t turn ff pwer t the ruter when the timer expires. Fixed mpdn carrier mismatch n PDN2 when SIM was nt fully detected n all mdem mdels Fixed an issue when WiFi as WAN was cnnected that wireless clients were listed under the wired clients list Fixed nt being able t Enable/Disable Ethernet Interfaces n CBA850 Imprve scan cnnected behavir n IBR1100 Fixed an issue where the NAS-ID field was incrrect n AER1600 Fixed an issue where the NAS-Identifier was nt being included in the ACCES-ACCEPT RADIUS message Security issues: Nte: All custmers are reminded that changing the default Administratin (lgin) and WiFi passwrds are necessary fr ruter and netwrk security. The default passwrds are unique, but are nt as safe as a strng passwrd that nly yu knw. The security f the Internet depends n yur cperatin. N security issues Knwn issues: 1. Feature: Multiple Lcal Netwrks per VLAN Scenari:

3 Cnfiguratin change fr a VRRP-enabled lcal netwrk that is sharing a VLAN interface t using a dedicated VLAN interface. Ptential prblem: This cnfiguratin change may result in lss f cnnectivity t that netwrk. Custmer Impact: If that netwrk is used fr admin access, that access may nt be available any mre. Traffic carried thrugh that netwrk is disrupted. Wrkarund: When making the abve mentined cnfiguratin change in 'Scenari': a. Disable VRRP n the affected netwrks. b. Make the desired cnfiguratin change. c. Once the netwrks are up using their dedicated VLAN interface reenable VRRP. Recvery frm the prblem state: 2. Feature: NHRP and IPSec Scenari: Admin Access is still available frm anther netwrk Trigger a re-cnfiguratin f the lcal netwrks by making a nnfeature affecting change t any f the netwrks. Fr example: change the name f a netwrk and then restre it back. create a temprary lcal netwrk and then delete it. Admin access is nt available frm any ther netwrk Rebt the ruter After upgrading frm t , NHRP tunnels may fail t recnnect with this errr lg: 'Errr creating ViciHandler' Ptential Prblem:

4 After a firmware upgrade NHRP culd require a full re-registratin with the NHRP headend. If the cnnectin fails, there's a chance this errr culd ccur and nt be immediately recverable. Custmer Impact: Any cnfiguratin utilizing the "VPN" field in the NHRP cnfiguratin page Wrkarund: Remving the "VPN" cnfiguratin and changing the IPSec tunnel cnfiguratin t "Initiatr Mde": "On Demand" will allw the tunnels t still cme up but avid the errr. Recvery frm the prblem state: 3. Feature: SNMP Alerts Prblem: A subsequent rebt clears the issue Attempt t change alert page settings results in an 'invalid path' errr. Custmer Impact: Only affects CR4250 custmers wishing t enable r change SNMP ruter alerts Wrkarund Cnfigure SNMP alerts prir t upgrading t

5 Mdems tested: (new mdems / mdem platfrms are in blue text) Cradlepint Cellular Devices (Embedded & USB Mdems) Cradlepint AER16x0LPE-AT / AT&T (USA) Cradlepint AER16x0LPE-GN / T-Mbile, US Cellular (USA); Generic (Nrth America) Cradlepint AER16x0LPE-SP / Sprint (USA) Cradlepint AER16x0LPE-VZ / Verizn (USA) Cradlepint AER16x0LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint AER22x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint AER M / AT&T (USA) Cradlepint IBR2x0-10M-VZ / Verizn (USA) Cradlepint IBR2x0-10M-B-AT / AT&T (USA) Cradlepint IBR2x0-10M-C / Sprint (USA) Cradlepint IBR350L / Verizn (USA) Cradlepint IBR350LPE-AT / AT&T (USA) Cradlepint IBR350LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR350LPE-SP/ Sprint (USA) Cradlepint IBR350LPE-VZ / Verizn (USA) Cradlepint IBR350P2 / AT&T (USA); Generic GSM-cmpatible lcatins (Wrld) Cradlepint IBR6x0B-LP4 / AT&T, T-Mbile, Verizn (USA)

6 Cradlepint IBR6x0C-LPE-AT / AT&T (USA) Cradlepint IBR6x0C-LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR6x0C-LPE-SP/ Sprint (USA) Cradlepint IBR6x0C-LPE-VZ / Verizn (USA) Cradlepint IBR6x0C-150M-B-EU / Generic peratrs (Eurpe) Cradlepint IBR6x0C-150M-C-AU / Generic peratrs (Australia) Cradlepint IBR900LPE-VZ / Verizn (USA); als certified n AT&T (USA), Sprint (USA), and Generic (Nrth America) Cradlepint IBR9x0LP5 / Generic (APAC) Cradlepint IBR9x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR9x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR9x0-1200M / AT&T (USA) Cradlepint IBR11x0LPE-AT / AT&T (USA) Cradlepint IBR11x0LPE-GN / C-Spire, T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR11x0LPE-SP / Sprint (USA) Cradlepint IBR11x0LPE-VZ / Verizn (USA Cradlepint IBR11x0LP3-EU / Generic (Eurpe), Telstra (Australia) Cradlepint IBR11x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR M / AT&T (USA) Cradlepint MC400L2 / Public Safety Band 14 nly (USA) Cradlepint MC400LPE-AT / AT&T (USA) Cradlepint MC400LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint MC400LPE-SP / Sprint (USA)

7 Cradlepint MC400LPE-VZ / Verizn (USA) Cradlepint MC400LP3-EU / Generic (Eurpe) Cradlepint MC400LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint MC400LP5 / Generic (APAC) Cradlepint MC400LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Vdafne (Wrldwide), Generic (Nrth America, Eurpe) Cradlepint MC M-C / AT&T, FirstNet (USA) Cradlepint MC M / AT&T (USA) 3 rd Party USB Cellular Mdems Franklin U770 ( Sprint Plug-In-Cnnect Tri-Mde USB Mdem ) / Sprint (USA) Franklin U772 ( Franklin U772 USB Mdem ) / Sprint (USA) Huawei E3276 / Telus (Canada) Huawei E368 ( AT&T USBCnnect Frce 4G ) / AT&T (USA) Netgear AC340U ( AT&T Beam ) / AT&T (USA) Netgear AC341U ( NETGEAR 341U USB Mdem ) / Sprint (USA) *supprts Netgear firmware and MR2 firmware Nvatel 551L LTE ( Verizn USB551L ) / Verizn (USA) Nvatel U620L ( Verizn MiFi 4G LTE Glbal USB Mdem U620L ) / Verizn (USA) Nvatel U679 ( 4G LTE Nvatel Wireless U679 Turb Stick ) / Bell Mbility (Canada) Nvatel USB730L ( Verizn Glbal Mdem USB730L ) / Verizn (USA) Pantech UML295VW ( Verizn 4G LTE USB Mdem UML2954G LTE ) / Verizn (USA) *requires Pantech firmware versin L0295VWD821F.B4 r later Sierra Wireless 308 USB ( AT&T USBCnnect Shckwave ) / AT&T (USA) Sierra Wireless 313U ( AT&T USBCnnect Mmentum 4G ) / AT&T (USA) Sierra Wireless 320U ( Telstra USB 4G (Sierra AirCard 320U) ) / Telstra (Australia) Sierra Wireless 330U ( 4G LTE Sierra Wireless U330 - Turb Stick ) / Bell Mbility (Canada)

8 Sierra Wireless 330U ( LTE Rcket Stick Sierra Wireless AirCard 330U ) / Rgers (Canada) ZTE MF683 ( T-Mbile Rcket 3.0 4G Laptp Stick ) / T-Mbile (USA)

9 Release Ntes fr Cradlepint Rev Firmware Prducts supprted/tested: AER3100/AER3150 AER2200/AER2200-FIPS AER2100 AER1600/AER1650 AP22 CBA850 CR4250 IBR1700/IBR1700-FIPS IBR1100/IBR1150 IBR900/IBR950/IBR900-FIPS IBR600B/IBR650B IBR650C IBR350 IBR200 New features added in this release (Nt all features are in all prducts see their respective Data Sheets): N new features, defect fixes and UI changes nly Additinal UI/Usability changes: Remve NCOS One-Buttn Upgrade functinality. System > System Cntrl > NetClud OS > NCOS Upgrade. The autmatic check fr NCOS firmware upgrades has been remved. Please use NCM t upgrade NCOS firmware fr yur ruter. The manual NCOS Uplad has been retained in case f a rare need t upgrade at the ruter UI. Defects fixed: IBR9x0 OBD-II prt nw defaults t the crrect value

10 In sme cases, GPS Send-t-Server, GPS Send-t-Client, and GPS Send-t-Serial wuld stp sending GPS data even thugh the ruter had a GPS lck. When this happened, user interventin was required t either rebt the ruter, r make a change t the cnfiguratin in GPS. The issue was initially seen n the IBR m, but affects the IBR11x0, IBR9x0, and IBR1700. This issue has been fixed in If a USB-t-Serial FTDI adapter fr GPS's Send-t-Serial is unplugged while in use, a rebt is required befre GPS Send-t-Serial will cntinue t send GPS data. This has been fixed in , and GPS data will cntinue when the adapter is plugged back in. Nte that GPS data will nt be stred while the USB-t-Serial Adapter is unplugged. Addressed an issue with FW where a SDK app will nt install if a custmer has FW n a net new device r a custmer perfrm a factry reset with FW r a custmer un-registers then re-registers a device with this FW. Fixed a deadlck which was causing lg files t stp generating. Fixed an issue where devices culd get int a state where WiFi prducts culd get int a scan lp that wuld never get results and wuld bring dwn the WiFi service Fixed an issue where changing webfilter settings n primary LAN caused new WiFi users nt t be able t cnnect Fixed an issue where changing radi settings needed a rebt fr WiFi as WAN/Wireless Client t recnnect Fixed an issue with IBR600C-EU/IBR600C-AP WiFi wuld nt start after lading FW Fixed an issue where nt having an active SSID n a radi that is cnnected WiFi as WAN wuld fail LP4. Imprved handling f lw signal strength cnditins Anchred mdem carrier switching t SIM ICCID Fixed a race cnditin in Webfilter when switching frm n t ff Fixed a prblem in the CP Secure Webfilter UI that allwed empty netwrk names Security issues: Nte: All custmers are reminded that changing the default Administratin (lgin) and WiFi passwrds are necessary fr ruter and netwrk security. The default passwrds are unique, but are nt as safe as a strng passwrd that nly yu knw. The security f the Internet depends n yur cperatin. N security issues

11 Knwn issues: 4. Feature: Multiple Lcal Netwrks per VLAN Scenari: Cnfiguratin change fr a VRRP-enabled lcal netwrk that is sharing a VLAN interface t using a dedicated VLAN interface. Ptential prblem: This cnfiguratin change may result in lss f cnnectivity t that netwrk. Custmer Impact: If that netwrk is used fr admin access, that access may nt be available any mre. Traffic carried thrugh that netwrk is disrupted. Wrkarund: When making the abve mentined cnfiguratin change in 'Scenari': a. Disable VRRP n the affected netwrks. b. Make the desired cnfiguratin change. c. Once the netwrks are up using their dedicated VLAN interface reenable VRRP. Recvery frm the prblem state: Admin Access is still available frm anther netwrk Trigger a re-cnfiguratin f the lcal netwrks by making a nnfeature affecting change t any f the netwrks. Fr example: change the name f a netwrk and then restre it back. create a temprary lcal netwrk and then delete it. Admin access is nt available frm any ther netwrk Rebt the ruter 5. Feature: Client Lists with WiFi-As-WAN Scenari:

12 This is a knwn prblem, affecting IBR600C, IBR900, IBR1700 and AER2200 ruters. FIPS versins f these prducts are als affected. Enable the "WiFi-As-WAN" (WWAN) feature n any radi n an affected prduct. Cnnect a client device (e.g. a cell phne) t the WWAN-enabled radi. View the "Status / Client List" page n the ruter's GUI. Ptential Prblem: The client device will appear in the ruter's "Wired Clients" table instead f its "WiFi Clients" table. Custmer Impact: The mis-identificatin is cnfusing. There is n impact t cnnectivity between the ruter and the client device. There is n impact t ruter r client functinality. Wrkarund: Nne Recvery frm the prblem state: Nne 6. Feature: NHRP and IPSec Scenari: This bug will be fixed in the release. After upgrading frm t , NHRP tunnels may fail t recnnect with this errr lg: 'Errr creating ViciHandler' Ptential Prblem: After a firmware upgrade NHRP culd require a full re-registratin with the NHRP headend. If the cnnectin fails, there's a chance this errr culd ccur and nt be immediately recverable. Custmer Impact: Any cnfiguratin utilizing the "VPN" field in the NHRP cnfiguratin page Wrkarund:

13 Remving the "VPN" cnfiguratin and changing the IPSec tunnel cnfiguratin t "Initiatr Mde": "On Demand" will allw the tunnels t still cme up but avid the errr. Recvery frm the prblem state: A subsequent rebt clears the issue Mdems tested: (new mdems / mdem platfrms are in blue text) Cradlepint Cellular Devices (Embedded & USB Mdems) Cradlepint AER16x0LPE-AT / AT&T (USA) Cradlepint AER16x0LPE-GN / T-Mbile, US Cellular (USA); Generic (Nrth America) Cradlepint AER16x0LPE-SP / Sprint (USA) Cradlepint AER16x0LPE-VZ / Verizn (USA) Cradlepint AER16x0LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint AER22x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint AER M / AT&T (USA) Cradlepint IBR2x0-10M-VZ / Verizn (USA) Cradlepint IBR2x0-10M-B-AT / AT&T (USA) Cradlepint IBR2x0-10M-C / Sprint (USA) Cradlepint IBR350L / Verizn (USA) Cradlepint IBR350LPE-AT / AT&T (USA) Cradlepint IBR350LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR350LPE-SP/ Sprint (USA) Cradlepint IBR350LPE-VZ / Verizn (USA) Cradlepint IBR350P2 / AT&T (USA); Generic GSM-cmpatible lcatins (Wrld)

14 Cradlepint IBR6x0B-LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint IBR6x0C-LPE-AT / AT&T (USA) Cradlepint IBR6x0C-LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR6x0C-LPE-SP/ Sprint (USA) Cradlepint IBR6x0C-LPE-VZ / Verizn (USA) Cradlepint IBR6x0C-150M-B-EU / Generic peratrs (Eurpe) Cradlepint IBR6x0C-150M-C-AU / Generic peratrs (Australia) Cradlepint IBR900LPE-VZ / Verizn (USA); als certified n AT&T (USA), Sprint (USA), and Generic (Nrth America) Cradlepint IBR9x0LP5 / Generic (APAC) Cradlepint IBR9x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR9x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR9x0-1200M / AT&T (USA) Cradlepint IBR11x0LPE-AT / AT&T (USA) Cradlepint IBR11x0LPE-GN / C-Spire, T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR11x0LPE-SP / Sprint (USA) Cradlepint IBR11x0LPE-VZ / Verizn (USA Cradlepint IBR11x0LP3-EU / Generic (Eurpe), Telstra (Australia) Cradlepint IBR11x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR M / AT&T (USA) Cradlepint MC400L2 / Public Safety Band 14 nly (USA) Cradlepint MC400LPE-AT / AT&T (USA) Cradlepint MC400LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America)

15 Cradlepint MC400LPE-SP / Sprint (USA) Cradlepint MC400LPE-VZ / Verizn (USA) Cradlepint MC400LP3-EU / Generic (Eurpe) Cradlepint MC400LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint MC400LP5 / Generic (APAC) Cradlepint MC400LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Vdafne (Wrldwide), Generic (Nrth America, Eurpe) Cradlepint MC M-C / AT&T, FirstNet (USA) Cradlepint MC M / AT&T (USA) 3 rd Party USB Cellular Mdems Franklin U770 ( Sprint Plug-In-Cnnect Tri-Mde USB Mdem ) / Sprint (USA) Franklin U772 ( Franklin U772 USB Mdem ) / Sprint (USA) Huawei E3276 / Telus (Canada) Huawei E368 ( AT&T USBCnnect Frce 4G ) / AT&T (USA) Netgear AC340U ( AT&T Beam ) / AT&T (USA) Netgear AC341U ( NETGEAR 341U USB Mdem ) / Sprint (USA) *supprts Netgear firmware and MR2 firmware Nvatel 551L LTE ( Verizn USB551L ) / Verizn (USA) Nvatel U620L ( Verizn MiFi 4G LTE Glbal USB Mdem U620L ) / Verizn (USA) Nvatel U679 ( 4G LTE Nvatel Wireless U679 Turb Stick ) / Bell Mbility (Canada) Nvatel USB730L ( Verizn Glbal Mdem USB730L ) / Verizn (USA) Pantech UML295VW ( Verizn 4G LTE USB Mdem UML2954G LTE ) / Verizn (USA) *requires Pantech firmware versin L0295VWD821F.B4 r later Sierra Wireless 308 USB ( AT&T USBCnnect Shckwave ) / AT&T (USA) Sierra Wireless 313U ( AT&T USBCnnect Mmentum 4G ) / AT&T (USA) Sierra Wireless 320U ( Telstra USB 4G (Sierra AirCard 320U) ) / Telstra (Australia)

16 Sierra Wireless 330U ( 4G LTE Sierra Wireless U330 - Turb Stick ) / Bell Mbility (Canada) Sierra Wireless 330U ( LTE Rcket Stick Sierra Wireless AirCard 330U ) / Rgers (Canada) ZTE MF683 ( T-Mbile Rcket 3.0 4G Laptp Stick ) / T-Mbile (USA)

17 Release Ntes fr Cradlepint Rev Firmware Prducts supprted/tested: AER3100/AER3150 AER2200/AER2200-FIPS AER2100 AER1600/AER1650 AP22 CBA850 CR4250 IBR1700/IBR1700-FIPS IBR1100/IBR1150 IBR900/IBR950/IBR900-FIPS IBR600B/IBR650B IBR650C IBR350 IBR200 New features added in this release (Nt all features are in all prducts see their respective Data Sheets): Imprved the "Distance Interval" field t be independent f the "Statinary Event Threshld (secnds)" field in GPS's Send-t-Server, Send-t-Client, and Send-t-Serial cnfiguratin. Prir t , "Distance Interval" wuld nly reprt as cnfigured if the "Statinary Event Threshld (secnds)" and "Statinary Distance Threshld (meters)" were bth nn-zer. The actual value f the "Statinary Event Threshld (secnds)" didn't have any effect n the Distance Interval reprting, ther than it needed t be nn-zer. This has been imprved in , and the "Distance Interval" field will nw reprt as cnfigured. Nte that if there is a current cnfiguratin that has the "Distance Interval" field cnfigured t a nn-zer value, and "Statinary Event Threshld (secnds)" and "Statinary Distance Threshld (meters)" are als bth nn-zer, then GPS will reprt mre ften than it did in In n case will GPS reprt less ften in than it did in Added additinal status fr WiFi as WAN and Wireless Client cnnectins.

18 CP Secure Web Filter Preview Mde: Plicies can be applied in a "Preview" mde and the lgs reviewed t see what traffic wuld have been blcked r allwed based n that plicy. Multiple Lcal Netwrks per VLAN: Supprted nly n AER2200 platfrm. This feature allws mre than ne lcal netwrk (Lcal IP Netwrk in NCOS GUI) t share the same VLAN interface. Additinal UI/Usability changes: Remved excessive warnings with WiFi client cnnect alerts Changed TX Pwer setting t reflect relative distance at which a particular signal level can be achieved based n the percentage the user prvides. Defects fixed: Fixed an issue where ECM des nt allw setting DFS channels n an AP22 Increase the default prxy timeut t 60 secnds t fix an issue fund when trying t use LgMeIn t remtely manage devices cnnected t a ruter When filling ut frms in the CP Secure Web Filter UI n the ruter, pressing the cancel buttn after editing wuld nt always reset the frm data prperly LP4. Reslved APN restratin under certain carrier reject cnditins when using a Verizn static IP SIM Security issues: Nte: All custmers are reminded that changing the default Administratin (lgin) and WiFi passwrds are necessary fr ruter and netwrk security. The default passwrds are unique, but are nt as safe as a strng passwrd that nly yu knw. The security f the Internet depends n yur cperatin. Prduct Line Test page has had a majrity f the infrmatin available remved. The web page is available n the ruter's Admin LAN and it shwed bth the ruter's Serial Number and MAC address. As these are related t the ruter's default passwrd, they were remved. At the same time, we remved a majrity f the additinal infrmatin frm that page. Additinal infrmatin abut this page is available in the Cradlepint Cnnect prtal n the Prduct Line Test Disclsure page.

19 Knwn issues 1. Feature: IBR600C Internatinal WiFi Supprt Scenari: An IBR600C ruter lcated utside the FCC regulatin dmain (USA/Canada) is upgraded t firmware rev Ptential Prblem: WiFi cnnectivity t the ruter will be lst when the image bts. Custmer Impact: If the WiFi netwrk n that ruter is used fr admin access, that access will be lst. Traffic carried thrugh that ruter's WiFi netwrk will be disrupted. Wrkarund: There is n knwn wrkarund Recvery frm the prblem state: Update NCOS firmware n the ruter t either rev r (when available), rev Feature: Multiple Lcal Netwrks per VLAN Scenari: Cnfiguratin change fr a VRRP-enabled lcal netwrk that is sharing a VLAN interface t using a dedicated VLAN interface. Ptential prblem: This cnfiguratin change may result in lss f cnnectivity t that netwrk. Custmer Impact: If that netwrk is used fr admin access, that access may nt be available any mre. Traffic carried thrugh that netwrk is disrupted. Wrkarund: When making the abve-mentined cnfiguratin change in 'Scenari': a. Disable VRRP n the affected netwrks.

20 b. Make the desired cnfiguratin change. c. Once the netwrks are up using their dedicated VLAN interface re-enable VRRP. Recvery frm the prblem state: Admin Access is still available frm anther netwrk Trigger a re-cnfiguratin f the lcal netwrks by making a nnfeature affecting change t any f the netwrks. Fr example: change the name f a netwrk and then restre it back. create a temprary lcal netwrk and then delete it. Admin access is nt available frm any ther netwrk Rebt the ruter 3. Feature: IBR9x0 OBD-II Supprt Scenari: OBD-II n the IBR9x0 at factry defaults, using either the COR Extensibility Prt t Serial Cable r an FTDI-based USB t Serial cnverter Ptential Prblem: Since 6.6.4, the default value fr the OBD-II prt (at cnfig/bd/prt) incrrectly defaults t "/dev/ttys1" and results in the lg message: Failed t pen serial prt at /dev/ttys1 Custmer Impact: OBD-II wn't wrk "ut f the bx" n the IBR9x0 with the COR Extensibility Prt t Serial Cable in 6.6.4, 7.0.0, and Wrkarund: On the ruter's CLI, run: put cnfig/bd/prt "/dev/ttyusb0" Upgrade t when available

21 Mdems tested: (new mdems / mdem platfrms are in blue text) Cradlepint Cellular Devices (Embedded & USB Mdems) Cradlepint AER16x0LPE-AT / AT&T (USA) Cradlepint AER16x0LPE-GN / T-Mbile, US Cellular (USA); Generic (Nrth America) Cradlepint AER16x0LPE-SP / Sprint (USA) Cradlepint AER16x0LPE-VZ / Verizn (USA) Cradlepint AER16x0LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint AER22x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint AER M / AT&T (USA) Cradlepint IBR2x0-10M-VZ / Verizn (USA) Cradlepint IBR2x0-10M-B-AT / AT&T (USA) Cradlepint IBR2x0-10M-C / Sprint (USA) Cradlepint IBR350L / Verizn (USA) Cradlepint IBR350LPE-AT / AT&T (USA) Cradlepint IBR350LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR350LPE-SP/ Sprint (USA) Cradlepint IBR350LPE-VZ / Verizn (USA) Cradlepint IBR350P2 / AT&T (USA); Generic GSM-cmpatible lcatins (Wrld) Cradlepint IBR6x0B-LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint IBR6x0C-LPE-AT / AT&T (USA) Cradlepint IBR6x0C-LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR6x0C-LPE-SP/ Sprint (USA) Cradlepint IBR6x0C-LPE-VZ / Verizn (USA)

22 Cradlepint IBR6x0C-150M-B-EU / Generic peratrs (Eurpe) Cradlepint IBR6x0C-150M-C-AU / Generic peratrs (Australia) Cradlepint IBR900LPE-VZ / Verizn (USA); als certified n AT&T (USA), Sprint (USA), and Generic (Nrth America) Cradlepint IBR9x0LP5 / Generic (APAC) Cradlepint IBR9x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR9x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR9x0-1200M / AT&T (USA) Cradlepint IBR11x0LPE-AT / AT&T (USA) Cradlepint IBR11x0LPE-GN / C-Spire, T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR11x0LPE-SP / Sprint (USA) Cradlepint IBR11x0LPE-VZ / Verizn (USA Cradlepint IBR11x0LP3-EU / Generic (Eurpe), Telstra (Australia) Cradlepint IBR11x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR M / AT&T (USA) Cradlepint MC400L2 / Public Safety Band 14 nly (USA) Cradlepint MC400LPE-AT / AT&T (USA) Cradlepint MC400LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint MC400LPE-SP / Sprint (USA) Cradlepint MC400LPE-VZ / Verizn (USA) Cradlepint MC400LP3-EU / Generic (Eurpe) Cradlepint MC400LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint MC400LP5 / Generic (APAC)

23 Cradlepint MC400LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Vdafne (Wrldwide), Generic (Nrth America, Eurpe) Cradlepint MC M-C / AT&T, FirstNet (USA) Cradlepint MC M / AT&T (USA) 3 rd Party USB Cellular Mdems Franklin U770 ( Sprint Plug-In-Cnnect Tri-Mde USB Mdem ) / Sprint (USA) Franklin U772 ( Franklin U772 USB Mdem ) / Sprint (USA) Huawei E3276 / Telus (Canada) Huawei E368 ( AT&T USBCnnect Frce 4G ) / AT&T (USA) Netgear AC340U ( AT&T Beam ) / AT&T (USA) Netgear AC341U ( NETGEAR 341U USB Mdem ) / Sprint (USA) *supprts Netgear firmware and MR2 firmware Nvatel 551L LTE ( Verizn USB551L ) / Verizn (USA) Nvatel U620L ( Verizn MiFi 4G LTE Glbal USB Mdem U620L ) / Verizn (USA) Nvatel U679 ( 4G LTE Nvatel Wireless U679 Turb Stick ) / Bell Mbility (Canada) Nvatel USB730L ( Verizn Glbal Mdem USB730L ) / Verizn (USA) Pantech UML295VW ( Verizn 4G LTE USB Mdem UML2954G LTE ) / Verizn (USA) *requires Pantech firmware versin L0295VWD821F.B4 r later Sierra Wireless 308 USB ( AT&T USBCnnect Shckwave ) / AT&T (USA) Sierra Wireless 313U ( AT&T USBCnnect Mmentum 4G ) / AT&T (USA) Sierra Wireless 320U ( Telstra USB 4G (Sierra AirCard 320U) ) / Telstra (Australia) Sierra Wireless 330U ( 4G LTE Sierra Wireless U330 - Turb Stick ) / Bell Mbility (Canada) Sierra Wireless 330U ( LTE Rcket Stick Sierra Wireless AirCard 330U ) / Rgers (Canada) ZTE MF683 ( T-Mbile Rcket 3.0 4G Laptp Stick ) / T-Mbile (USA)

24 Release Ntes fr Cradlepint Rev Firmware Prducts supprted/tested: AER3100/AER3150 AER2200/AER2200-FIPS AER2100 AER1600/AER1650 AP22 CBA850 CR4250 IBR1700/IBR1700-FIPS IBR1100/IBR1150 IBR900/IBR950/IBR900-FIPS IBR600B/IBR650B IBR600C/IBR650C IBR200 IBR350 New features added in this release (Nt all features are in all prducts see their respective Data Sheets): Many Security changes are in the NCOS release. They are detailed in the Security issues sectin belw. Entitlement/Licensing changes. Ruters and APs will n lnger require a rebt when a new Feature License is dwnladed t the device. AP Discvery added t AER2200-FIPS Wireless packet capture n AP22 Additinal UI/Usability changes: Added T-Mbile static IP APN t autmatic APN table Ability t apply CP Secure Web Filter Plicies t Multiple LANs

25 Crrected a misspelling in the CP Secure Webfilter UI In CP Secure Webfilter UI, red triangles fr 'dirty' cells n NEW plicies didn't accunt fr a srted grid. In the Static Rute Editr, fr clarity the "Allw Netwrk Access" rute ptin was renamed t "Open Firewall fr Netwrk Access" Defects fixed: Signal Strength LEDs may nt shw up after bt n certain prducts QS DSCP tag errr n IBR200 UI. DSCP is nt supprted n the IBR200 and the UI was fixed. USB mass strage device was unmunted after upgrade t Cnfiguratin sync-suspended issue when WPA/WPA2 WiFi passwrd was between characters General GNSS imprvements, such as recvery f GPS data, centralized GNSS data stre, GLONASS satellite cunt, avid fix verrun Fixed First Time Setup wizard text incnsistencies Mdified temperature display t match temperature mitigatin measurement If the WAN isn't up when CP Secure Web Filter tries t send a DNS request, smetimes thse requests get "stuck" and eventually cause the ruter t rebt. Added a timeut fr thse requests. When adding a new custm categry fr CP Secure Web Filter, add it t the categries f each plicy t make sure they will be filtered. Upstream prxy settings in the UI allwed invalid entries Webfilter blcked page wasn't rendering crrectly n iphne and mac devices When setting up Htspt services, the NAS/Gateway bx was being incrrectly cleared when lading a partner prfile CP Secure Web Filter UI did nt prperly handle the case when a netwrk that was part f a plicy was deleted Security issues: Nte: All custmers are reminded that changing the default Administratin (lgin) and WiFi passwrds are necessary fr ruter and netwrk security. The default passwrds are unique, but are

26 nt as safe as a strng passwrd that nly yu knw. The security f the Internet depends n yur cperatin. On a peridic basis we have a third party perfrm a security penetratin test n ur ruters. They made several recmmendatins t imprve the security f the ruter and user interactins. NetClud OS versin will change the default administratin and WiFi passwrds f ruters and APs prduced after December 2018 t be the ruter's Serial Number, nt the MAC address. This is a lnger passwrd and cannt be seen thrugh a WiFi scan r n the LAN cnnectin. The Serial Number can nly be seen thrugh NCM, the ruter's UI Dashbard, r n the prductin sticker n the ruter. The default passwrd will nt change n existing ruters, as the prductin sticker's default passwrd wuld be invalid. Please use NCM r the device's UI t change the default passwrd n the first lgin as prmpted. The default NCOS cnfiguratin wuld allw numerus failed authenticatin attempts withut lcking ut the administratin accunt r banning the IP address f the attacker. The capability t blck this attack has been in NCOS fr many years, but was nt enabled by default. Versin makes this blcking the default. It enabled Advanced Security Mde and Ban IP Address n the System > Administratin > Ruter Security UI page. Devices shared the same SSL/TLS certificates and SSH hst keys. Each prduct type (IBR1100, AER1600, etc) shares the same certificates/keys which can be used fr HTTPS and SSH cmmunicatin with the device (nte that this is different than passwrds). Each device will nw generate a unique SSH server hst key upn initial bt/factry reset. This may cause a warning if yu have used SSH t cnnect t a device previusly and the key has changed. This is expected. Knwn issues Using the Webfilter feature prevents accurate applicatin identificatin resulting in large prtins f traffic being classified as Nt Available. Mdems tested: (new mdems / mdem platfrms are in blue text) Cradlepint Cellular Devices (Embedded & USB Mdems) Cradlepint AER16x0LPE-AT / AT&T (USA) Cradlepint AER16x0LPE-GN / T-Mbile, US Cellular (USA); Generic (Nrth America) Cradlepint AER16x0LPE-SP / Sprint (USA)

27 Cradlepint AER16x0LPE-VZ / Verizn (USA) Cradlepint AER16x0LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint AER22x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR2x0-10M-VZ / Verizn (USA) Cradlepint IBR2x0-10M-B-AT / AT&T (USA) Cradlepint IBR2x0-10M-C / Sprint (USA) Cradlepint IBR350L / Verizn (USA) Cradlepint IBR350LPE-AT / AT&T (USA) Cradlepint IBR350LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR350LPE-SP/ Sprint (USA) Cradlepint IBR350LPE-VZ / Verizn (USA) Cradlepint IBR350P2 / AT&T (USA); Generic GSM-cmpatible lcatins (Wrld) Cradlepint IBR6x0B-LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint IBR6x0C-LPE-AT / AT&T (USA) Cradlepint IBR6x0C-LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR6x0C-LPE-SP/ Sprint (USA) Cradlepint IBR6x0C-LPE-VZ / Verizn (USA) Cradlepint IBR6x0C-150M-B-EU / Generic peratrs (Eurpe) Cradlepint IBR6x0C-150M-C-AU / Generic peratrs (Australia) Cradlepint IBR6x0LPE-AT / AT&T (USA) Cradlepint IBR6x0LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR6x0LPE-SP/ Sprint (USA) Cradlepint IBR6x0LPE-VZ / Verizn (USA) Cradlepint IBR6x0LP3-EU / Generic (Eurpe) Cradlepint IBR900LPE-VZ / Verizn (USA); als certified n AT&T (USA), Sprint (USA), and Generic (Nrth America)

28 Cradlepint IBR9x0LP5 / Generic (APAC) Cradlepint IBR9x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR9x0-600M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR11x0LPE-AT / AT&T (USA) Cradlepint IBR11x0LPE-GN / C-Spire, T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR11x0LPE-SP / Sprint (USA) Cradlepint IBR11x0LPE-VZ / Verizn (USA Cradlepint IBR11x0LP3-EU / Generic (Eurpe), Telstra (Australia) Cradlepint IBR11x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR M / AT&T (USA, Canada); Sprint, T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint MC400L2 / Public Safety Band 14 nly (USA) Cradlepint MC400LPE-AT / AT&T (USA) Cradlepint MC400LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint MC400LPE-SP / Sprint (USA) Cradlepint MC400LPE-VZ / Verizn (USA) Cradlepint MC400LP3-EU / Generic (Eurpe) Cradlepint MC400LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint MC400LP5 / Generic (APAC) Cradlepint MC400LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Vdafne (Wrldwide), Generic (Nrth America, Eurpe) Cradlepint MC M-C / AT&T, FirstNet (USA) 3 rd Party USB Cellular Mdems Franklin U770 ( Sprint Plug-In-Cnnect Tri-Mde USB Mdem ) / Sprint (USA) Franklin U772 ( Franklin U772 USB Mdem ) / Sprint (USA)

29 Huawei E3276 / Telus (Canada) Huawei E368 ( AT&T USBCnnect Frce 4G ) / AT&T (USA) Netgear AC340U ( AT&T Beam ) / AT&T (USA) Netgear AC341U ( NETGEAR 341U USB Mdem ) / Sprint (USA) *supprts Netgear firmware and MR2 firmware Nvatel 551L LTE ( Verizn USB551L ) / Verizn (USA) Nvatel U620L ( Verizn MiFi 4G LTE Glbal USB Mdem U620L ) / Verizn (USA) Nvatel U679 ( 4G LTE Nvatel Wireless U679 Turb Stick ) / Bell Mbility (Canada) Nvatel USB730L ( Verizn Glbal Mdem USB730L ) / Verizn (USA) Pantech UML295VW ( Verizn 4G LTE USB Mdem UML2954G LTE ) / Verizn (USA) *requires Pantech firmware versin L0295VWD821F.B4 r later Sierra Wireless 308 USB ( AT&T USBCnnect Shckwave ) / AT&T (USA) Sierra Wireless 313U ( AT&T USBCnnect Mmentum 4G ) / AT&T (USA) Sierra Wireless 320U ( Telstra USB 4G (Sierra AirCard 320U) ) / Telstra (Australia) Sierra Wireless 330U ( 4G LTE Sierra Wireless U330 - Turb Stick ) / Bell Mbility (Canada) Sierra Wireless 330U ( LTE Rcket Stick Sierra Wireless AirCard 330U ) / Rgers (Canada) ZTE MF683 ( T-Mbile Rcket 3.0 4G Laptp Stick ) / T-Mbile (USA)