New features added in this release (Not all features are in all products see their respective Data Sheets):

Transcription

1 Release Ntes fr Cradlepint Rev Firmware Prducts supprted/tested: AER3100/AER3150 AER2200* AER2100 AER1600/AER1650 IBR1700* IBR1100/IBR1150 IBR900/IBR950* IBR600/IBR650 IBR600B/IBR650B* IBR600C/IBR650C* IBR350* IBR200* CBA850 AP22* MBR1200B Nte1: Befre upgrading t new firmware, it is always a gd idea t save the cnfiguratin file frm yur current versin. This firmware versin will remve a cnfiguratin fr versin 3.2 r lwer and will nt try t keep yur settings. Nte2: * Nt all Prducts supprt External USB Mdems: See fr detailed ruter/usb mdem cmpatibility. New features added in this release (Nt all features are in all prducts see their respective Data Sheets): AP22 Cnnectin nte: Install all yur Cradlepint AP22s n the same VLAN. This is the nly supprted installatin fr raming. Cradlepint AP22s discver ne anther using a multicast prtcl. Multicast packets are typically nt bridged acrss VLANs (Cradlepint ruters d nt 1111 W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 1

2 supprt this; custmer switch vendrs may r may nt). Since Cradlepint is nt deplying a cntrller r similar single pint f cnfiguratin fr raming, this discvery prtcl is the nly means t supprt raming between AP22s. Furthermre, if the APs are getting their IP addresses via DHCP frm a ruter, the ruter (r APs) must be cnfigured s that their primary LANs dn t cnflict. Netwrking -> Lcal Netwrks -> AP Discvery. Added AP22 discvery t all AER prducts. If AP discvery is enabled, the AER ruter will be able t discver the AP22 and reprt back t NCM any AP22 that is attached. An AER2200 will als be able t participate in r Fast Raming with the AP22. (IBR1700) System -> Administratin -> OBD. On-Bard Diagnstics supprt. Using an accessry OBD-II cable (LD3IC-S frm B&B Advantec) attached t a serial prt, the ruter can prvide Vehicle Diagnstics. Specific Parameter IDs can be selected and reprted thrugh the UI. (IBR1700) System -> Administratin -> OBD-II. On-Bard Diagnstics supprt. Using an accessry OBD-II cable (LD3IC-S frm B&B Advantec) attached t the serial prt r USB prt (with a supprted FTDI USB t Serial adapter), the ruter can prvide vehicle telemetry. While mst vehicles since 2008 are supprted, nt all parameters are available n all vehicles. Parameters can be enabled and reprted thrugh the UI. Optinally, all enabled and supprted parameters can be reprted in a custm NMEA sentence (PCPTOBD) and sent with ther NMEA sentences t destinatins in GPS's "Send-t-Client" and "Send-T-Server". (IBR1700) GPS with Dead Reckning. With the ptinal OBD-II adapter cnnected and the vehicle speed PID enabled, Autmtive Dead Reckning (ADR) supprt is enabled when GPS signals are unavailable. 600M, 10M, 10-B, 150M-B, 150M-C mdems. Added supprt fr multiple PDNs as supprted by certain carrier peratrs and SIMs. With apprpriately prvisined SIMs, multiple PDNs allw a single mdem t simultaneusly supprt multiple WAN interface/cnnectins (PDNs) each with their wn unique IP address. SIMs f this type are used fr split billing, public/private netwrk traffic, and ther features. Secure Threat Management Upgrade Imprved perfrmance Imprved memry ftprint Bug fixes N need t chse between Fast and Thrugh mdes Added detectin f Anmalies Persistent Lgging. Previusly when the Service Manager wuld crash, lgs wuld be lst. Nw they can be retrieved after the ruter rebts and examined t find the cause f the crash. When Applicatin Analytics is entitled, the user can nw use Applicatin Sets with the Firewall and QS. StrngSwan upgraded t versin W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 2

3 Increased the number f Custm Categries in CP Secure Web Filter t 15 and the number f URLs per categry t 64. Updated the Zscaler certificate. The ld ne expires in May. Remved supprt fr Secure Threat Management frm IBR600C and IBR650C. Added a packet capture feature t aid in trubleshting netwrk prblems System>Diagnstics VTI nw supprts annymus mde allwing simpler Hub/Spke cnfiguratins Added Peer List Name t NHRP interface cnfiguratin pages as well as \IPSec VPN phase 2 cnfiguratin pages. A Peer List Name can be used in BGP neighbr cnfiguratin t dynamically add BGP neighbrs learned frm NHRP r IPSec. MBR1200B. Remved WPS supprt frm all prducts, this was the last remaining prduct with that feature. Basic Authenticatin supprt Take care in parsing the WWW-Authenticate field as there is nw bth mre than ne WWW-Authenticate header field prvided--basic & Digest. WiFi-as-WAN and WiFi Client changes. IBR series: WiFi-as-WAN and WiFi Client reliability and cnnect speed is greatly imprved. The Cradlepint ruter will cnnect t its targeted ruter/ap mre quickly and mre reliably. IBR900. WiFi-as-WAN and WiFi Client raming functinality greatly imprved. The ruter will mve between multiple BSS f same ESS (Extended Service Set) withut discnnecting. (802.11r is nt supprted.) IBR1100. WiFi Client raming functinality greatly imprved. The ruter will mve between BSS f same ESS withut discnnecting. Unfrtunately, WiFias-WAN des nt supprt seamless raming. (802.11r is als nt supprted.) Knwn issues. IBR1100 WiFi-as-WAN des nt detect lss f cnnectivity if the IBR1100's cnnected ruter/ap is lst. The wrkarund is enabling WAN Verify in Cnnectin Manager. Additinal UI/Usability changes: (AER2200, IBR1700, IBR200) Added a visual (LED) alert as well as alerts in the UI and t NCM if the SIM dr is left pen and the mdem is disabled. System -> SNMP Cnfiguratin. The requirement t have bth Get and Set cmmunity strings was remved. Only a Get cmmunity string is mandatry. Netwrking -> Lcal Netwrks -> WiFi Radis. SSID Duplicatin cnvenience feature is available fr SSIDs. Select the SSID that has settings that yu want t duplicate, and then use the Duplicate Settings buttn and select the SSIDs yu want the settings duplicated fr. The dialg will als require yu t set a new passwrd fr the new SSIDs. (IBR Series). Netwrking -> WiFi as WAN, r Client. Fr thse prducts that supprt WiFi Enterprise authenticatin, the setting was remved frm under the Extended Enterprise License. It is n lnger a licensed feature W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 3

4 Accelerated ruter system time establishment. Present a warning ntificatin n ruter platfrms unable t supprt external USB mdems due t insufficient USB prt pwer. AER2200, IBR1700, IBR200. Added SIM dr pen warning message. Prfile criteria filtering ptins nt crrect fr type Ethernet. Embedded Mdems. Extended SMS functinality t manage multiple APNs and PDNs. New tab in the Threat Management->Signature Settings page t cnfigure Anmalies. New buttn in the Status->System Lgs page t retrieve the saved lg file after a crash. AP22. Enabled band steering by default. It can be disabled at the CLI. Packet Capture UI under System>Diagnstics. Defects fixed: IBR900 and AP22: WiFi Transmit pwer settings were nt crrect. Cnnectin Manager>Dual SIM>Prefer Primary SIM n lnger ignres the primary interface when Standby is enabled. Additinally, the Prefer Primary SIM selectin nw remains saved in the GUI. AP22: WAN cnnectin infrmatin was left ff the Dashbard UI page. LP5 Telstra. Restred multiple PDN supprt with Always On feature. 600M. Reslved carrier cnnectin issues when a SIM requires a PIN in a dual SIM platfrm. LP6. Established a GNSS default s t btain well-frmed NMEA utput. 600M. Fully enabled GLONASS NMEA sentences. Embedded Mdems. Extend Cnnect peratin extended fr wider use cases. Fixed an issue where traffic bund fr NetClud was nt ruted crrectly. This wuld cause devices t get stuck in the installing state. Fixed and issue with Webrt that wuld cause the ruter t rebt if it was nt cnfigured n ne f the default LANs. Fixed an issue where remte telnet and http cnnectins wuld be drpped. Fixed an issue affecting MAC Address Web Filter Defaults. Whitelisting shuld nw wrk as expected. Upstream Prxy was failing randmly when trying t lad https pages Tunnel Status shws a tunnel still exists after it is cleared frm the NetClud cnfiguratin. If the RADIUS server IP address is mistakenly set t a black hle rute it wuld cause an exceptin in firmware. When Webrt and Threat Management were enabled, DNS traffic was mistakenly classified as a UDP Prt scan attack. One categry f website was left ut f the CIPA prfile in CP Secure Web Filter Cnfiguratins cntaining NHRP in firmware versins earlier than were nt prperly being migrated. Imprved the accuracy f the client usage statistics. Ht Spt terms f service page wuld appear blank in sme cases W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 4

5 Changed the default Threat Tlerance value fr CP Secure Web Filter t 42 frm 80. This will imprve page lad times when this feature is enabled. Fixed a memry leak when applicatin analytics was enabled that wuld cause the ruter t rebt peridically. AER /100 Client devices are nt getting an address frm DHCP n Prt 1. BSSID cntrl was nt visible n the Prfile page fr Wireless Client. DHCP desn t wrk ver Wireless Bridge. This is fixed, but please nte the Security warning belw. AP22. The dashbard shwed LAN infrmatin instead f WAN infrmatin. Security issues: WPA2 security issues knwn as KRACK (Key Reinstallatin Attacks). We updated client drivers and WPA supplicants t remve the security vulnerabilities dcumented at, Vulnerabilities-KRACK Additinal changes fr the IBR1100, IBR600, IBR600b, MBR1200b, and IBR200 were added based n chipset manufacturer recmmendatins. NOTE: The KRACK fixes disable the ability fr these prducts t supprt WiFi Bridge. If yu need t use WiFi Bridge mde n these prducts, the KRACK fixes will be disabled and WiFi Bridge will cntinue t wrk but yu will be vulnerable t a Key Reinstallatin Attack. There is n fix fr this as they are mutually exclusive. Mdems tested: (new mdems / mdem platfrms are in blue text) Cradlepint Cellular Devices: (Embedded & USB Mdems) Cradlepint AER16x0LPE-AT / AT&T (USA) Cradlepint AER16x0LPE-GN / T-Mbile, US Cellular (USA); Generic (Nrth America) Cradlepint AER16x0LPE-SP / Sprint (USA) Cradlepint AER16x0LPE-VZ / Verizn (USA) Cradlepint AER16x0LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint AER M / AT&T (USA, Canada); T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR200-10M-VZ / Verizn (USA) Cradlepint IBR200-10M-B-AT / AT&T (USA) Cradlepint IBR350L / Verizn (USA) 1111 W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 5

6 Cradlepint IBR350LPE-AT / AT&T (USA) Cradlepint IBR350LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR350LPE-SP/ Sprint (USA) Cradlepint IBR350LPE-VZ / Verizn (USA) Cradlepint IBR350P2 / AT&T (USA); Generic GSM-cmpatible lcatins (Wrld) Cradlepint IBR6x0B-LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint IBR6x0C-LPE-AT / AT&T (USA) Cradlepint IBR6x0C-LPE-GN / T-Mbile (USA); Generic (Nrth America) Cradlepint IBR6x0C-LPE-SP/ Sprint (USA) Cradlepint IBR6x0C-LPE-VZ / Verizn (USA) Cradlepint IBR6x0C-150M-B-EU / Generic peratrs (Eurpe) Cradlepint IBR6x0C-150M-C-AU / Generic peratrs (Australia) Cradlepint IBR6x0LPE-AT / AT&T (USA) Cradlepint IBR6x0LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR6x0LPE-SP/ Sprint (USA) Cradlepint IBR6x0LPE-VZ / Verizn (USA) Cradlepint IBR6x0LP3-EU / Generic (Eurpe) Cradlepint IBR900LPE-VZ / Verizn (USA) Nte: Als certified n AT&T (USA), Sprint (USA), and Generic (Nrth America) Cradlepint IBR9x0LP5 / Generic (APAC) Cradlepint IBR9x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth America, Eurpe) Cradlepint IBR9x0-600M / AT&T (USA, Canada); T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint IBR11x0LPE-AT / AT&T (USA) Cradlepint IBR11x0LPE-GN / C-Spire, T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint IBR11x0LPE-SP / Sprint (USA) Cradlepint IBR11x0LPE-VZ / Verizn (USA Cradlepint IBR11x0LP3-EU / Generic (Eurpe), Telstra (Australia) Cradlepint IBR11x0LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Generic (Nrth 1111 W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 6

7 America, Eurpe) Cradlepint IBR M / AT&T (USA, Canada); T-Mbile, Verizn (USA); Generic (Eurpe, Australia, NZ) Cradlepint MC400L2 / Public Safety Band 14 nly (USA) Cradlepint MC400LPE-AT / AT&T (USA) Cradlepint MC400LPE-GN / T-Mbile, US Cellular (USA); Bell Mbility, Rgers, Telus (Canada); Generic (Nrth America) Cradlepint MC400LPE-SP / Sprint (USA) Cradlepint MC400LPE-VZ / Verizn (USA) Cradlepint MC400LP3-EU / Generic (Eurpe) Cradlepint MC400LP4 / AT&T, T-Mbile, Verizn (USA) Cradlepint MC400LP5 / Generic (APAC) Cradlepint MC400LP6 / AT&T, Sprint, T-Mbile, Verizn (USA); Vdafne (Wrldwide), Generic (Nrth America, Eurpe) 3 rd Party USB Cellular Mdems: Franklin U770 ( Sprint Plug-In-Cnnect Tri-Mde USB Mdem ) / Sprint (USA) Franklin U772 ( Franklin U772 USB Mdem ) / Sprint (USA) Huawei E3276 / Telus (Canada) Huawei E368 ( AT&T USBCnnect Frce 4G ) / AT&T (USA) Netgear AC340U ( AT&T Beam ) / AT&T (USA) Netgear AC341U ( NETGEAR 341U USB Mdem ) / Sprint (USA) *supprts Netgear firmware and MR2 firmware Nvatel 551L LTE ( Verizn USB551L ) / Verizn (USA) Nvatel U620L ( Verizn MiFi 4G LTE Glbal USB Mdem U620L ) / Verizn (USA) Nvatel U679 ( 4G LTE Nvatel Wireless U679 Turb Stick ) / Bell Mbility (Canada) Nvatel USB730L ( Verizn Glbal Mdem USB730L ) / Verizn (USA) Pantech UML295VW ( Verizn 4G LTE USB Mdem UML2954G LTE ) / Verizn (USA) *requires Pantech firmware versin L0295VWD821F.B4 r later Prtsmith PSA1U1M ("Prtsmith USB Client t Analg Mdem Adapter") / POTS phne prviders Sierra Wireless 308 USB ( AT&T USBCnnect Shckwave ) / AT&T (USA) 1111 W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 7

8 Sierra Wireless 313U ( AT&T USBCnnect Mmentum 4G ) / AT&T (USA) Sierra Wireless 320U ( Telstra USB 4G (Sierra AirCard 320U) ) / Telstra (Australia) Sierra Wireless 330U ( 4G LTE Sierra Wireless U330 - Turb Stick ) / Bell Mbility (Canada) Sierra Wireless 330U ( LTE Rcket Stick Sierra Wireless AirCard 330U ) / Rgers (Canada) ZTE MF683 ( T-Mbile Rcket 3.0 4G Laptp Stick ) / T-Mbile (USA) Analg Mdems: Prtsmith PSA1U1M ( Prtsmith USB Client t Analg Mdem Adapter ) / POTS phne prviders Prtsmith PS6EX1M ("Prtsmith ExCard t Analg Mdem Adapter ) / POTS phne prviders (ExpressCard frmat, cmpatible with MBR1400s, MBR1200B, & CBA750B nly) Knwn issues: CP Secure Web Filter Previus versins f firmware had a defect that imprperly allwed custmers t enter mre than 5 items per categry in a custm categry. Custm categries with mre than 5 items need t be remved befre upgrading t firmware. Failure t d this will lead t unpredictable results. See Cradlepint knwledge base fr mre detailed instructins. HOTSPOT: D nt upgrade t this versin f firmware if yu require HtSpt functinality in cnjunctin with either CP Secure Web Filter r Zscaler Internet Security. This limitatin will be addressed in an upcming release. The Bandwidth (uplad/dwnlad) settings in the Netwrking>Lcal Netwrks>Htspt Services page d nt functin crrectly n IBR900, IBR1700, IBR2200 ruters. Set these t 0 when cnfiguring htspt. GPS: LTE: IBR1700, Due t a 20-30ms delay in sampling, setting a cnfigured reprting time t the minimum f ne secnd will give samples at secnds apart. Unless yu have a specific service frm yur carrier, LTE mdems will nt generally prvide an externally-available IP address. Services, such as Remte Management, will 1111 W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 8

9 Mdem: nt wrk. Franklin U770. The Mdem s Ethernet address cnflicts with the default address f the Guest LAN. A warning message is placed in the lg and the Guest LAN is disabled. If yu change the address f the Guest LAN t a nn-cnflicting address, this restrictin will nt ccur. Sierra Wireless 313U and 330U, When these mdems cnnect n 2G r 3G bands, specifically n GSM 850, they will smetimes cause interference n the USB bus, resulting in the mdem nt plugging prperly. If this ccurs, attaching the mdem t a USB extensin cable will generally fix the prblem. The fllwing USB mdems cntain an embedded web server thrugh which many mdem settings are cnfigured. T access the mdem s web pages, yu must be lgged in as the ruter administratr. Once lgged in, yu can then access the mdem web pages at these given IP addresses: Franklin U770, U772 / Sprint (USA) -> Netgear AC341U * / Sprint (USA) -> (address is cnfigurable) Pantech UML295VW * / Verizn (USA) -> * The mdem web pages are available nly when the mdem is perating in NAT mde W Jeffersn Street, Ste. 400, Bise, ID Tll Free: Lcal: Cradlepint.cm Page: 9