user

Unified Services Router Release Notes

Neither this manual, nor any of the material contained herein, may be reproduced without written consent of the author. Disclaimer The information in this document is subject to change without notice. The manufacturer makes no

Unified Services Router Release Notes - D-Link

Unified Services Router Release Notes 4 1.01B46 WW WW Sep 23, 2011 DSR-250N A1 Important Notes: 1. Automatic factory reset when image upgrade detects a firmware region mismatch between RU


File Info : application/pdf, 32 Pages, 739.21KB

PDF preview unavailable. Download the PDF instead.

DSR-250N REVA RELEASE NOTES v3.17 WW
Unified Services Router Release Notes
Firmware Version: 3.17_WW/RU Published Date: June. 03, 2020
Copyright © 2020
Copyright Notice
This publication, including all photographs, illustrations and software, is protected under international copyright laws, with all rights reserved. Neither this manual, nor any of the material contained herein, may be reproduced without written consent of the author.
Disclaimer
The information in this document is subject to change without notice. The manufacturer makes no representations or warranties with respect to the contents hereof and specifically disclaim any implied warranties of merchantability or fitness for any particular purpose. The manufacturer reserves the right to revise this publication and to make changes from time to time in the content hereof without obligation of the manufacturer to notify any person of such revision or changes.
Limitations of Liability
UNDER NO CIRCUMSTANCES SHALL D-LINK OR ITS SUPPLIERS BE LIABLE FOR DAMAGES OF ANY CHARACTER (E.G. DAMAGES FOR LOSS OF PROFIT, SOFTWARE RESTORATION, WORK STOPPAGE, LOSS OF SAVED DATA OR ANY OTHER COMMERCIAL DAMAGES OR LOSSES) RESULTING FROM THE APPLICATION OR IMPROPER USE OF THE D-LINK PRODUCT OR FAILURE OF THE PRODUCT, EVEN IF D-LINK IS INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. FURTHERMORE, D-LINK WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINST CUSTOMER FOR LOSSES OR DAMAGES. D-LINK WILL IN NO EVENT BE LIABLE FOR ANY DAMAGES IN EXCESS OF THE AMOUNT D-LINK RECEIVED FROM THE END-USER FOR THE PRODUCT.
1

Unified Services Router Release Notes
Content: Important Notes: ............................................................................... 4 Notes for Configuration Auto-Backup/Restore in USB Storage............................... 5 Upgrading Instructions:......................................................................... 6 Upgrading by using Web-UI ................................................................................................... 6 New Features:................................................................................... 7 Changes of MIB & D-View Module:...........................................................10 SSL VPN Compatibility List: ....................................................................10 Problem Fixed: .................................................................................11 Known Issues: ..................................................................................32
2

Unified Services Router Release Notes

Revision History and System Requirement:

Firmware

Region

Date

Model

Version

3.17_WW 3.17_RU

WW/RU Jun, 03 , 2020

DSR-150,DSR-150N, DSR-250,250N

3.14_WW 3.14_RU

WW/RU Jun, 24 , 2019

DSR-150,DSR-150N, DSR-250,250N

3.13_WW 3.13_RU 3.12_WW 3.12_RU

WW/RU WW/RU

Nov, 26 , 2018 Jan, 24 , 2018

DSR-150,DSR-150N, DSR-250,250N DSR-150,DSR-150N, DSR-250,250N

3.11_WW

DSR-150,DSR-150N,

WW

Jun, 21 , 2017

DSR-250,250N

2.11_WW 2.11_RU 2.02_WW 2.02_RU

WW/RU WW/RU

Jan, 15, 2016

DSR-150,DSR-150N, DSR-250,250N

Mar, 05, 2015 250N

2.01_WW 2.01_RU

WW/RU

Oct, 20, 2014

DSR-150,DSR-150N, DSR-250,250N

1.09B32_WW 1.09B32_RU 1.08B44_WW 1.08B44_RU 1.08B39_WW 1.08B39_RU

WW/RU WW/RU WW/RU

Mar, 14, 2014 DSR-250,250N Oct. 28, 2013 DSR-250,250N Oct. 23, 2013 DSR-250,250N

1.08B31_WW 1.08B31_RU 1.05B53_WW 1.05B53_RU 1.05B20_WW 1.05B20_RU

WW/RU WW/RU WW/RU

Jun 28, 2013 DSR-250 Jun 29, 2012 DSR-250,DSR-250N Mar 28, 2012 DSR-250,DSR-250N

1.05B20_WW 1.05B20_RU

WW/RU

Mar 28, 2012 DSR-250,DSR-250N

1.05B20_WW 1.05B20_RU

WW/RU

Mar 28, 2012 DSR-250,DSR-250N

1.01B56_WW

WW

Oct. 06, 2011 DSR-250N

HW Version A2/A3/A4/
Bx/Cx A2/A3/A4/
Bx/Cx A2/A3/A4/
Bx/Cx A2/A3/A4/Bx
A2/A3 B1/B2 A2/B1
B1
A2
A1/A2
A1/A2
A1/A2
A1/A2
A1
A1
A1
A1 A1

3

Unified Services Router Release Notes

1.01B46_WW

WW

Sep 23, 2011 DSR-250N

A1

Important Notes:
1. Automatic factory reset when image upgrade detects a firmware region mismatch between RU and WW images. Such as firmware upgrade from RU->WW or WW->RU image.
2. The switching between RU & WW images will initiate an automatic factory reset. The feature differences between these images are significant and can only be aligned with a reset of the configuration.
3. Russian firmware version doesn't support over 56bit encrypted algorithm according to regulatory restriction.
4. All DSR routers with WW version are not allowed to install RU firmware image in order to prevent unnecessary misunderstanding for customers.
5. Microsoft Windows XP has some well-known limitation to access USB storage of DSR router, D-Link provides a Registry Script file named: WinXP.reg which can solve limitation of Windows XP environment. Without applying this script file, it cannot copy file from Windows XP to USB storage. (This issue will not happen when copy file from USB storage to Windows XP)
6. For any firmware downgrade situation, i.e. from a newer version to an older one, it will take more time to restart system comparing to firmware upgrade, i.e. from an older version to a newer one. If you MUST execute firmware downgrade for your own reasons, please allow DSR more time to reboot system. It will take around 3 minutes at least for this case.
7. DHCP reserved IP feature is changed to support "inside DHCP IP pool range" in order to meet common behavior in networking industry. Old DHCP reserved IP entries will still be valid. When creating a new DHCP reserved IP, it has to follow newer behavior.
8. Now we support following 3G dongles: D-Link: DWM-152 A1, DWM-156 A1/A3/A5/A6/A7/A8, DWM-157 A1/B1/C1/D1, DWM-158 D1/E1 and DWP-156 B1 and DWP-157 B1, HUAWEI: E1550, E173, EC306 and E303
9. Before plug DWM-152/156/157/158 3G USB dongle, please make sure the SIM Card is NOT set PIN code.
10. To authenticate SSL VPN users through external databases including RADIUS, LDAP, AD and POP3, admin must also need to create user accounts with the same username and password in the local user database.

4

Unified Services Router Release Notes
Notes for Configuration Auto-Backup/Restore in USB Storage
D-Link DSR router series support configuration backup or restore automatically while a USB drive is inserted. Following information instructs what condition will perform backup/restore. 1. The router configuration will be automatically backed up to the USB drive as soon as the USB
drive is inserted. The back name has format <Model Name>_<Serial Number>.cfg provided this USB drive doesn't have a backup configuration file from a DSR router already present. 2. The system LED on the router blinks 3X in amber to indicate a backup operation has started. 3. The configuration in the USB drive can be updated if the user manually clicks `Save Settings' in any GUI page and provided the Model Number and the Serial Number of the router matches with the file already present in the USB drive. 4. In case of reboot, the router checks for the presence of configuration file (with format ModelName_SerialNumber.cfg). If found, the configuration from the USB drive is restored on the router. If a configuration file with the correct format is present in both connected USB drives, the configuration from the first USB drive will be used to restore the router. 5. The USB drive can have only one configuration with the above mentioned format for each model name. 6. If the USB drive is plugged in to the router which is in factory default state, then during reboot, no backup is taken since no custom configuration file exists in the router by that time. The custom configuration is stored on the USB drive once the user clicks Save Settings in any GUI page.
5

Unified Services Router Release Notes
Upgrading Instructions:
Upgrading by using Web-UI - Please use GUI upgrade feature to upgrade to this firmware version. For detailed installation
and upgrade instructions, please refer to the Firmware Upgrades chapter in the Unified Services Router v3.13 User Manual. - Please upgrade firmware from v3.12 - If your device's firmware is earlier than 3.12, please upgrade corresponding firmware based your device hardware version. - DSR-150/150N/250/250N firmware v3.12 have two parts of firmware, Intermediate firmware and
Common firmware, the list as below: Intermediate firmware DSR-150_A2_A3_A4_FW3.11B202E_WW/RU DSR-150N_ A2_A3_A4_FW3.11B202E_WW/RU DSR-250_ A2_A3_A4_FW3.11B202E_WW/RU DSR-250N_ A2_A3_A4_FW3.11B202E_WW/RU DSR-250N_B1_B2_FW3.11B202E_WW/RU Common firmware DSR-150_Ax_FW3.12_WW/RU DSR-150N_Ax_FW3.12_WW/RU DSR-250_Ax_FW3.12_WW/RU DSR-250N_Ax_FW3.12_WW/RU DSR-250N_Bx_FW3.12_WW/RU
Please follow the upgrade procedure in case fault caused during firmware upgrade. 1. Please check HW version on device UI first. 2. Select the corresponding intermediate and common firmware version for upgrade process.
Examples: - DSR-150 HW A2 v3.11_WW-> DSR-150_A2_A3_A4_FW3.11B202E_WW->
DSR-150_Ax_FW3.12_WW - DSR-250N HW B1 v3.11_WW-> DSR-250N_B1_B2_FW3.11B202E_WW->
DSR-250N_Bx_FW3.12_WW - DSR-250 HW A4 v3.11_WW-> DSR-250_A2_A3_A4_FW3.11B202E_WW->
DSR-250_Ax_FW3.12_WW
6

Unified Services Router Release Notes

New Features:

Firmware Version 3.17 3.14 3.13
3.12
3.11

New Features
1. Force user to change default password 2. OPEN SSL's client login URL is changed to https:/WAN IP/omnissl/ 1. VLAN 1 support trunk mode 2. L2TP/PPTP support full tunnel 1. DNA app support. 2. OpenVPN supports manually establish tunnel. 3. WIFI transmit power setting is changed to % instead of dbm. 4. The number of firewall policy is shared for inbond and outbound. 5. OmniSSL support Win10. 6. OmniSSL support portal layout setting 7. Application Control (Only available on Cx HW) (licensed by 3'rd party) 8. DUA-2000 External Captive Portal support. 9. SHA2 Hash Algoruthm support for generating OmniSSL certificate 1. Improviding device throughput when Traffic managerment enable. 2. Bandwidth managemnt support by session number. 3. URL filtering support wildcard. 4. WCF support https protocol. 5. Improving logging content information. 6. Option WAN support. 7. CLI support IPv6 and OpenVPN self cert. 8. DWM-157 D1 support. 9. OpenVPN support various authenication by userbase, Certicatate and TLS conbination. 1. Static route can be displayed in Route Information. 2. OmniSSL VPN support SSL Certification generation. 3. IPv6 VLAN support. 4. Support VLAN/IPSec base Radius Authentication. 5. Hostname display support for DHCP clients. 6. IPv6 stateful and prefix delegation support. 7. Device support 3G/4G dongle with pin code password. 8. DWM-221 & 222 LTE Dongle support. 9. DWM-156 A8, DWM-157 C1 and DWM-158 E1 dongle support. 10. Support PPTP/L2TP client mode auto re-connect

7

Unified Services Router Release Notes

2.11
2.02 2.01 1.09B32

11. Support single IP or IP range to be Whitelist and Blacklist for URL filtering and Web Content Filtering. 1. PPTP/L2TP VPN Client auto dial-in feature 2. User's group and group's privileges edit support 3. Updated max number of wireless clients 4. Wireless IGMP Snooping support 5. LAN IGMP Snooping support (DSR-250/250N only) 6. OSPF support on L2TP over IPSec 7. Category filters for device logging 8. Support configurable IPSec backup policy 9. Support WCF 3-month trial license 10. Support multiple OpenVPN clients with the same certificate 11. Alerts via SMS for WAN/IPSec/CPU/RAM events 12. Support source port configuration for custom services 13. Select verified DDNS services:
a. DynDNS b. D-Link DDNS c. FreeDNS d. NO-IP e. 3322.org f. Oray (existing in M7) g. Custom 1. CPU watchdog support, the device will reboot once CPU overload. PS : CPU watchdod is ebale by default, but it can be disable via CLI command « util watchdog_disable Y » 2. Update SSL VPN compatilbility support list for Window 8.1 and Browser version. 1. Brand new GUI design 2. Dynamic Web Content Filtering (Subscription is required). 3. Supporting DHCP ranges for all subnets. 4. VLAN on WAN for single VLAN ID. 5. Supporting web GUI access by a particular IP or VLAN. 6. SSLVPN authenication support external user DB. 1. L2TP client mode enhancements: support MPPE and demand dialing. 2. User DB enhancements: support PPTP/L2TP tunnels external authentication though AD, LDAP and POP3. 3. Support Selectable Outbound Interface for IGMP [HQ20121210000012] 4. Proxy ARP: Allowing PPTP server range in range of LAN

8

Unified Services Router Release Notes

1.05B53
1.05B20 1.05B06 1.01B46

5. CLI enhancements: support the "space" character 6. Web GUI enhancements: support auto parameters fill-out in the DHCP server
configuration page 7. 3G dongle supports: add Huawei E303, D-Link DWM-156 A7, D-Link
DWM-157 B1, and D-Link DWM-158 D1. 8. A new click button to quickly download Dbglogs. 9. A new checkbox to enable/disable auto config backup. 10. A new checkbox to enable/disable config file encryption. 11. Support a Windows-based config viewer for encrypted config files. 12. Support L2TP VPN client mode.
13. Support 5 concurrent GRE tunnels.
14. Lengthen IPSec Pre-shared key length to 64 characters.
15. Simplify IGMP settings ­ allow all net to pass through DSR by default.
16. Add package manager with single selectable 3G driver support 17. Change IP address setting for inbound traffic management to configure LAN IP from server IP. 1. Support email address to be local ID in IPSec policy. 2. Support SHA-1 in Phase 1. 3. Support DH group need support group 1, 2 and 5 for Phase 1. 4. Add PFS group 1, 2 and 5 for Phase 2. 5. Add a keyword with "." (dot) in Blocked Keywords text box. 1. Support 3G dongle DWM-152 A1/A2/A3, DWM-156 A1/A2/A3, Huawei
E1550, E173. 2. Pre-Share key can be configurable in wireless wizard. 3. Change design to disable auto refresh for Traffic Monitor by default. Support SSH remote management from WAN port
It's the first release.

9

Unified Services Router Release Notes

Changes of MIB & D-View Module:

Firmware Version 1.05B06 1.01B46

New Features
Support LED and IPSec MIB. It's the first release.

SSL VPN Compatibility List:

SSL-VPN SPLIT TUNNEL & SSL-VPN FULL TUNNEL

Windows-XP I.E-8.0, Firefox 16.0.1, Opera 12.0.2, Google Chrome 22.0.1229.96m

Windows-Vista
Windows 7 (32 bit)
Windows 7 (64 bit)
Windows 8 (32 bit)
Windows 8 (64 bit)
Windows 8.1 (32 bit)
Fedora 13

I.E-8.0, Firefox 33.1.1, Opera 26, Google Chrome 40.0.22.09 I.E-9.0, I.E-10.0, Firefox 33.1.1, Opera 26, Google Chrome 40.0.22.09 I.E-9.0, I.E-10.0 I.E-10.0, Firefox33.1.1, Opera 26, Google Chrome 40.0.22.09 I.E-10.0 Firefox33.1.1, Opera 26, Google Chrome 40.0.22.09 Firefox 33.1.1, Opera 12.0.2, Google Chrome 22.0.1229.96m

MAC-10.4.11 MAC Firefox 3.6.15, MAC Safari 4.1.3(45533.19.4)

MAC-10.6.8 MAC Safari 5.1.7.0, MAC Firefox 33.1.1

10

Unified Services Router Release Notes

Problem Fixed:

Firmware Version 3.17
3.14

Problems Fixed
1. Wan port speed graph on dashboard page is not showing properly. HQ20190319000009 2. "Device is in high performance mode" message is not showing on dashboard page if 'Traffic overview' button is disabled in Manage dashboard page. HQ20190514000007 3. User is able to add single address/address range as default Vlan IP address when selected as custom Vlan. HQ20190530000010 4. Unable to send the email logs. HQ20190606000007 6. Device is showing error popup in OPENVPN page when user try to upload/generate certificates with backslash character. HQ20190621000018 7. IPsec tunnel cannot be established after factory and restore configuration. HQ20190611000014 8. L2TP tunnel is getting disconnected after 10 minutes even though "Reconnect mode - Always on" and "Auto connect" options are enabled. HQ20190730000008 9. Port forwarding is not work when bandwidth management is enable. HQ20190531000006 10. Time settings are loading incorrectly. HQ20190926000008 11. Lock the "Remote IP" to "Any" only if remote endpoint is FQDN. HQ20191016000008 12. Add logging for OpenVPN client connect and disconnect. HQ20200204000009 13. SIP registration Fails while calling using PPTP HQ20190819000008 14. VLAN Enable changing to OFF causes losing connection HQ20190919000003 15. VPN user´ s are bloqued after some time HQ20200322000001 16. OpenVPN logs enhancement HQ20200204000009 17. VLAN Enable changing to OFF causes losing connection HQ20190919000003 1. WAN3 statistics are not getting updated on the Dashboard page HQ20180910000003 2. [CLI]system status WAN MAC address field is showing incorrect information, when WAN is configured as PPTP/L2TP/PPPoE HQ20190221000005

11

Unified Services Router Release Notes

3.13 3.12

3. VLAN functionality is not working after changing the Option port from LAN to WAN/DMZ. HQ20181106000013 4. Default Vlan is unable to access from custom Vlan. HQ20181002000007 5. Able to restore configuration from old HW version to new one. HQ20181018000014 6. Need to DROP invalid state TCP packets received. HQ20181115000020 7. Device will reboot when the subnet mask of remote network is configured 32 in PPTP client page. HQ20190222000010 8. Turn off the debugging log for device logging. HQ20190221000004 1. Remove BSSID from traffic selector 2. Cannot browse network share when WAN is connected to the modem HQ20170928000003 3. Jumbo packet settings turns off after a reboot or power outage HQ20171114000010 4. No traffic between DSR PPTP client to DFL HQ20171129000003 5. Unable to add out of LAN subnet for firewall rule HQ20170731000017 6. Can't remove rule pirority after deleting one of rules HQ20180312000007 7. Unable to save VLAN settings when PPTP/L2TP server's client IP address range is configured VLAN subnet HQ20180430000005 8. No openvpn logging entry HQ20180419000014 9. Unable to configure x.x.x.0 IP address in GRE setting HQ20180601000011 10. Weakness in user data validation (reflected cross-site scripting) (CVE-2018-6212) HQ20180531000002 11. Able to set the SSID with spaces from CLI, but not able to configure the same from GUI HQ20180606000002 12. Traffic selector setup page error HQ20180704000009 13. The number of L2TP tunnel can not reach specification HQ20180705000012 1. L2TP over IPsec disconnect after reboot or logging enable. HQ20170120000005 2. Failed restore config due to large file size. HQ20170309000002 3. WAN auto-Rollover is not work. HQ20170612000008 4. Logging ascending issue. HQ20170911000008 5. OpenVPN and OmniSSL can't access the configured network. HQ20171016000004 6. L2TP over IPsec VPN with AD or NT Domain authentication is not work. HQ20170515000012

12

Unified Services Router Release Notes
7. USB SharePort transmission speed slow. HQ20170614000006 8. CVE-2017-14491 Dnsmasq Vulnerability. 9. SMS alert functionality is not working when WAN mode is configured as auto rollover between WAN1 & WAN2. 10. Unable to connect wireless clients on untagged interface when SSID is configured with trunk mode. 11. SMS functionality is not working until changing WAN mode from WAN1 to WAN3 with DWM-156-A7 dongle. 12. IPsec clients connected behind NAT will have traffic loss 13. Unable to reach DUT LAN IP over IPSEC tunnel when WAN Mode is configured as load balancing. 14. User based OmniSSL server policy is not working if custom OpenVPN network is configured in OpenVPN settings page. 15. Unable to configure more than 16 characters for username and password of PPPoE WAN Type. HQ20170103000005 16. Unable to access GUI after change default VLAN IP network. HQ20170207000017 17. WAN is probably link down if the cable is plugged during device boot up. HQ20170413000006 18. Static DNS IP is required when static IP is configured for WAN interface. HQ20161213000003 19. Unable to generate the OPENVPN certificate when user input the space characters while creating OPENVPN certificates. HQ20170628000012 20. Unable to extract downloaded OpenVPN certificates from GUI. 21. 3G is not getting UP when WAN Mode is configured as Auto rollover with WAN3 as primary. 22. Unable to configure the IP aliasing entry on WAN2 interface. 23. Unable to support '/' (slash) character in Approved URLs and Blocked URLs page. 24. Unable to access GUI pages with IPV6 address of LAN. 25. Unable to Establish the PPTP and L2TP VPN tunnels with External authentication servers (Active Directory, NT Domain and LDAP Servers). 26. IPsec tunnel status do not update properly for Mobile phone. HQ20170222000011 27. Webpage Error on Google Chrome with QUIC protocol enabled. HQ20170428000006 28. Unable to enable multiple IPsec policy for identical remote network. HQ20170210000006
13

Unified Services Router Release Notes

3.11

29. Unable to configure DNS server in IPsec tunnel mode. HQ20170510000003 30. Change max. value for NAT keep alive time to 3600. HQ20170531000020 31. Unable to allow TeamViewer when IP/IDP enable. HQ20170301000007 32. CVE-2014-0195, CVE-2014-0224, CVE-2016-2183, CVE-2014-3566 Vulnerability. HQ20170502000007 33. DWM-156 A3 is not work. HQ20160629000012 1. Backup tunnel is not getting auto establish in DSR-150N.
HQ20140317000009 2. Not able to run FTP and HTTP traffic from SSL VPN client for PPP links 3. Device is blocking the sites whose respective category is blocked but
unable to generate blocked logs in the device or syslog server configured. 4. Couldn't able to establish GRE tunnel when wan is PPPoE of VLAN on WAN
type 5. Able to run traffic over OpenVPN Access Server tunnel when it is disabled. 6. Unable to upgrade firmware, save/load configuration and upload ca
certificate from D-View browser. 7. D-View MIB Compiler is closed after trying to add an IPSec VPN Policy. 8. Unable to send traffic through IPSec tunnel sometimes after enabling the
logs in the device. 9. Content filter functionality is not working after disable and enable content
filtering option. 10. Unable to Block Invalid Client Certificates for OpenVPN. 11. Unable to access device after configuring WAN 'host name' with max of
128 characters in GUI. 12. DDNS status message is not displaying properly when there is symbol # in
the password. HQ20160422000009 13. Device configuration is getting increased with reboot even without a
configuration change. HQ20160406000030. 14. Unable to access SMS Service page, device is redirecting to login page. 15. Device is getting hanged when we run UDP traffic over OmniSSL tunnel. 16. OmniSSL server policy' is not working for policy type as "User" 17. IPSec tunnel is not establishing when max SA lifetime(2147483647 sec) is
configured. 18. IP protocol version is changing to IPv4 mode from IPv6 when user editing
IPv6 manual IPSec policy 19. Dashboard fields were not updated properly after overnight traffic of SSL
VPN tunnel.

14

Unified Services Router Release Notes
20. Need to provide transmit power field in radio settings 21. Reboot counter is displaying with half window after upgrade process. 22. Clients connected to edited SSIDs are not able to run Internet traffic. 23. Domain name field length should accept 256 characters from both GUI and
CLI in VLAN/DMZ settings page. 24. Audio stream stop playing after some time of play. HQ20160615000002 25. Unable to access internet through L2TP/IPSec client. HQ20160725000008 26. Unable to edit the host name field of DUT in WAN configuration pages. 27. Not able to add SNMP Access list with same IP, Subnet Mask and different
community, privileges. HQ20160707000016 28. 3G is not coming up after reboot. HQ20160331000006 29. Maximum length for PPPoE username and password should be same from
GUI and CLI. 30. Accessing of files are very slow when established L2TP VPN pass through
tunnel. 31. Able to see IPSec requests at server even though IPSec pass through was
disabled. 32. Able to configure IPSEC Policy from easy site VPN setup even though when
routing mode was configured as transparent. 33. Unable to delete the groups which are not associated with users after
firmware upgrade. 34. Functionality of USB sharing is not working for USB port when we plug-in
and plug-out multiple times 35. Maximum log entries are not reaching up to 700 lines for DSR-250 device
in GUI Page. HQ20160914000006 36. SMS functionality is not working until changing WAN mode from WAN1 to
WAN3 with DWM-156-A7 dongle. 37. 'ADD' button should available after reaching maximum of 512 entries in
IP/MAC binding rules. 38. Unable to send logs to gmail account from gmx sender mail address.
HQ20151202000001 39. CLI command to show port link speed is displaying port speed value even
wan links are down. HQ20160531000014 40. Device should be able to configure PPTP client IP pool in LAN Subnet.
HQ20160623000011. 41. DSR showing wrong VLAN info in the WebUI. HQ20160422000009 42. Low throughput for DSR NAT device with PPPoE wan type.
HQ20160517000009
15

Unified Services Router Release Notes
43. Setup wizard user is Unable to configure local network or remote network fields with network address in IPSEC GW-GW policy.
44. IP/MAC binding logs are not updating correctly in view logs page. 45. Change Severity of LAN/WAN & WAN/LAN kernel logs from Warning to
Information 46. Unable to check UPnP functionality with UPnP wizard 47. Device is accepting the IPSec Policy name with special characters from
Security Wizard. 48. Device is accepting special characters for SSL-VPN Resource name and
Policy Name in SSL-VPN pages. 49. IP/MAC binding functionality is not working when log dropped packets are
enabled in the rule. 50. Unable to connect wireless clients on untagged interface when SSID is
configured with trunk mode. 51. WAN PPTP/L2TP is not getting up after firmware upgrade from remote side. 52. Unable to login to OmniSSL portal with MS-CHAP and MS-CHAPv2
authentications. 53. Device should not allow to configure remote and local identifier as
USER-FQDN in main mode. 54. Unable to establish OmniSSL tunnel with username and password contains
maximum characters length. 55. Unable to add OmniSSL configuration if the client name was same as 'user
name' of deleted entry. 56. The Idle Timeout value should be in "minutes" not in "seconds" in add
Group page. 57. Not able to disable the DDNS settings when we configure the password filed
with # symbol. 58. TFTP ALG functionality is not working if inbound firewall rule was added
with same PC. 59. Able to configure phase -1 SA lifetime field with more value than mentioned
range. 60. User failed to enable other Phase2 Encryption Algorithms when we enable
"None". 61. 'Block all URL' option is going to disable state after performing select
all+delete operation on Blocked URL list. 62. Domain name configuration issue from VLAN settings page 63. Current channel filed should be update properly when we configured
channel as 12 or 13 in radio settings page from GUI for Australia country.
16

Unified Services Router Release Notes
64. Hostname validations should be same from setup wizard and WAN settings page.
65. LED status should be show same for LAN and WAN ports which are not connected to device.
66. Maximum characters allowed in 'Client name' field should be same as of 'OpenVPN user name' field.
67. Select all option is not available in OmniSSL server policy page and help page to delete all entries.
68. Device is displaying Wireless VLAN List options in port VLAN page, even it doesn't support wireless.
69. Device is throwing 'Undefined' pop up message in Dynamic DNS Wizard page.
70. IPSec GW-GW tunnel got disconnected after overnight test. 71. Unable to get WAN up when Russian dual access WAN type is configured
with Static ips and server is configured with domain name. HQ20161213000003 72. DNS configured in Router is not working. HQ20170119000012 73. Able to configure 0.0.0.0 as ip address field in traffic selector page. HQ20160922000014 74. Device is not allowing '/' (slash) character in Approved URL HQ20161025000011 75. Need to display active private routes in "IPv4 routes table in GUI" HQ20150820000012 76. Able to see IPV6 related information in WAN status and shell even the IP mode is changed to IPV4 only, if common PPPOE session is enabled in IPV6 WAN. 77. User is unable to change IPV4 WAN settings when the IP mode is changed to IPV4 only with common PPPOE session enabled. 78. Both IPV4 & IPV6 WAN functionality is not working if common PPPOE enabled when idle timeout is configured in IPV4 WAN. 79. IPV6 WAN is not getting UP if IPV4 connection is not available when common PPPOE session was enabled. 80. Unable to establish the PPTP VPN and L2TP tunnels using service route management. 81. Able to configure same name for server and client in OpenVPN certificate generation but unable to use them in OpenVPN settings page. 82. Unable to save maximum PPTP Client IP Range in Server side. 83. Unable to save maximum L2TP Client IP Range in Server side.
17

Unified Services Router Release Notes

2.11

84. Unable to access the 2TB HDD using DUT USB port. 85. DHCP relay functionality is not working in classical routing mode. 86. Unable to get the Rollover WAN IP using Huawei-E303 dongle. 1. Unable to establish L2TP over IPSec tunnel if phase1 encryption is different from phase2's encryption. 2. When traffic is sent from WLAN to LAN or WLAN to WLAN, then data transmission rate is varying drastically. HQ20120820000010 3. There is an error logging when we enable WPS and click on push button. HQ20140205000021 4. Supported Encryption fields in PPTP server page are not showing after applying on the save button. 5. Unable to install packages and device is showing message as "Not installed". 6. User is able to configure security mode in WEP or WPA+TKIP even though wireless radio mode is configured as NG or AN mode 7. Device is not accepting FQDN names in Server Address field when wan type is PPTP/L2TP 8. IPSec tunnel is not disconnected after changed policy from auto to manual. 9. Kernel panic in VPN-IPSec HUB & Spoke. HQ20140822000014 10. SSL VPN authenticated by external POP3 server fails. 11. Unable to get email logs in long duration test. HQ20141121000009 12. VLAN port members are not displaying in Port membership for VLAN under IGMP snooping page. 13. Device is not displaying pop-up message while changing the group's privileges. 14. Unable to access internet from wired or wireless LAN hosts after reboot when default AP is disable and custom AP is enable. HQ20150424000012 15. Error message is thrown when we edit or delete a user from the local database. HQ20150528000004 16. HTTP throughput is unstable in the remote setup. HQ20150529000018 17. Unable to change LAN subnet after changing device mode from NAT to Transparent 18. Port speed status is shown incorrectly when doing SNMP walk for LED MIB. HQ20150525000009 19. Unable to access web GUI from LAN host with Firefox v39. HQ20150717000006 20. Unable to download a file from a website in specific scenario. HQ20150601000006

18

Unified Services Router Release Notes
21. IPSec tunnel is not getting established and there are no logs for the failure. 22. Unable to change LAN settings when device is in transparent mode. 23. Unable to connect L2TP over IPSEC tunnel on WEBUI. 24. Unable to configure more than 5 characters for community in snmp traps settings page.HQ20150827000008 25. Device should not throw any error while enabling Multicast to Unicast Setting in Advance Radio settings page irrespective of IGMP is enabled or not. 26. Configurable backup policy edit does not work. 27. IPSec tunnel VPNs Dashboard is not properly display the VPN status. HQ20150820000016 28. Multicast to Unicast conversion is not working properly for LAN to WLAN. 29. Enable 3DES encryption algorithm for phase 1 and phase 2 by default. 30. Unable to change the date and time after the WCF free trial expiration. 31. Multicast To unicast conversion is not working after editing the Wireless Profiles 32. Unable to receive SMS from DWM-158 D1 dongle. 33. Update certificate validity time for SSL VPN clients. HQ20151002000003 34. IPSec logs are not coming to syslog server when user try to establish secondary tunnel with different IKE version between same devices. 35. Remote management functionality is not working after reboot with all logs enabled in the device. 36. Device allows invalid configuration for traffic selector when the user adds custom service with multiple ports. 37. DUT showing prefix length field when source hosts or destination hosts option is selected with 'Single' in IPv6 firewall rules. 38. Critical error observed when we click on the 'Export Logs' button in All Logs page. 38. Remote firmware upgrade through PPPoE WAN is failing. HQ20151026000019 39. Wireless VLAN in general mode is not working for tagged interfaces. 40. No NAT translation of SIP headers during REGISTER, outbound call and SDP packet 41. Support IKEv2-SHA2-256/384/512 algorithms. 42. Inter-ISATAP subnet routing is not working. 43. After changing channel spacing 20/40 MHz to 20 MHz in UPPER band channel as auto, beacons frames are not updating accordingly. 44. Not able to enable WPS for custom profile with WPA/WPA2 security mode. 45. Able to edit and delete custom service associated with traffic selectors.
19

Unified Services Router Release Notes
46. When "block ICMP" is configured for a SSL VPN policy with permit permissions, ICMP packets over SSL VPN tunnel are not getting blocked. 47. Transparent mode functionality is not working. 48. Not able to run TCP traffic over IPV6 IPSec GW-GW/manual tunnel with des/3des/blowfish/CAST128 as encryption algorithm 49. 3G support to be extended to Static Routing. 50. Unable to run FTP and HTTP traffic on PPPoE over IPv6 connection due to MTU size problem 51. Device not showing physical interface IP address in WAN status & router status, when it is connected to Russian dual access PPTP. 52. Unable to add static route on physical interface if wan is configured to Russian dual access PPPoE with physical interface is configured to dynamic. 53. Remove SSL VPN logs page in Russian firmware. 54. Unable to reach ipv6 wan host through ipv4 and ipv6 PPTP tunnel from PPTP client. 55. Able to establish IPSec VPN GW-GW tunnel, able to authenticate captive portal with 'Extended Authentication' NT-Domain when NT-Domain Wrong Work Group configured. 56. Unable to login to the counter strike game when device WAN is configured for L2TP. 57. Support GRE tunnel functionality for 3G. 58. Device is not showing correct status in current channel field of Radio settings page and WLAN status page when Default AP is in disabled state. 59. WPS LED is not working. 60. Dhcpv6 client process got killed after reboot/restore when wan type as PPPoE with stateless/stateful. 61. Unable to mount the files using NFS service. 62. DHCP relay process for VLAN is not running before WAN is up 63. Unable to re-connect the PPTP clients once they get disconnected. 64. Unable to upload the URL csv file in the device and GUI is getting stuck at this page. 65. IPSec tunnel is not getting auto establish after reboot. 66. Device is not accepting IP address with last octet 0 or 255 even if it is within the subnet. 67. Multiple VAP active is not getting enabled or disabled with device time after reboot. 68. Unable to access GUI when PPTP client is configured without remote_network and timeout.
20

Unified Services Router Release Notes
69. Unable to open USB shared folders in RU firmware. 70. Unable to run traffic to the remote host over PPTP/L2TP clients, when default policy is blocked. 71. Allow RSA generated server key in OpenVPN certificate upload page 72. Mac book (connected as the wireless client) stop receiving the MDNS packets. 73. Blocked Keywords and Block All URL has lower priority than dynamic content filtering. 74. Disallow editing of IPSec policy if one to one NAT has been added on that policy. 75. Device not showing the PPTP /L2TP connected users in PPTP/L2TP Active users page when PPTP/L2TP client tunnels established with External Authentication. 76. When wireless client is connected through WPS, remaining clients which are already connected with WPA are getting disconnected. 77. Unable to run the traffic on PPPOE interface when VLAN on WAN is configured for Russian Dual Access PPPoE. 78. IPSec tunnel is not getting established when DUT is in behind NAT Topology. 79. Device is not showing the current channel field in Radio settings page. 80. VLAN host is not getting IP from custom VLAN if we enable DHCP server with DNS proxy is enabled while adding custom VLAN. 81. Unable to get IP when we connect the wireless client with WEP 64/128 bit by configuring the ASCII number of characters. 82. Clients associated with the edited SSIDs are not able to browse websites. 83. Able to run the traffic to remote LAN host after disabling the PPTP client in RU firmware. 84. Unable to run traffic to the remote LAN host without refreshing the Active PPTP VPN Connections page After establishing the PPTP client tunnel. 85. Unable to assign group to default SSLVPN portal when firmware upgrade from 1.09B32 to 2.01. 86. OpenVPN configuration page is accepting device's LAN subnet as server network. 87. Unable to ping between two windows wireless clients when security mode is configured as WPA/WPA2/WPA+WPA2. 88. DDNS not getting updated after reboot. 89. After Device got reboots LAN DHCP leased clients page is not getting updated properly.
21

Unified Services Router Release Notes
90. VPN backup functionality is not working properly when we plug and unplug the wan 91. SSL fallback Vulnerability: (CVE-2014-3566) 92. Vulnerability: CVE-2014-3568 Build option no-SSL3 is incomplete 93. Observed critical error while uploading IPSec policy with traffic selector type as ANY 94. Attacker is able to reset legitimate TCP connections with the device leading to denial of service. 95. Inter VLAN firewall rules are not updated properly. 96. Unable to establish SSL VPN tunnels using Firefox/opera/chrome in windows 8.1/8/7 (32 bit version). 97. WiFi channel is automatically goes to channel 1 if we select channel 12/13 for the country EU/Norway. 98. LAN Configuration page is accepting configured OpenVPN network as device's LAN subnet range. 99. Unable to get syslog via IPSec tunnel. 100. WDS functionality is not working 101. Observed critical error page in Maintenance --> Firmware and Upgrade->Update firmware->USB in Use page. 102. Unable to configure user to DNS host name and IP mappings when DHCP reserved IP entry is added. 103. Unable to access the WDS page after enabling WDS. 104. L2TP client is able to connect the device with Local database authentication when L2TP server is enabled for POP3 authentication. 105. Unable run traffic over PPTP client tunnel in MAC OS. 106. Unable to change LAN subnet after changing device mode from NAT to Transparent and Transparent to NAT. 107. IP/MAC binding, Block MAC and Firewall rule are higher priority than category filtering. 108. Bridge firewall rule functionality is not working when firewall rule is configured with custom service type "both". 109. Able to configure WEP/WPA(TKIP) security mode when radio settings is configured in mixed N or N only mode. 110. After changing the encryption type in IPSec policy(Protocol:AH) ,it was not reflected in the Device 111. Unable to do SSH to device from LAN side. 112. Fix for OpenSSL Vulnerabilities 2014-3569, 2014-8275. 113. L2TP server and L2TP client logs are not coming in L2TP-Client or
22

Unified Services Router Release Notes

2.02

L2TP-Server category. 114. Wireless client not able to ping remote LAN host over IPSec tunnel. 115. WCF related logs are not coming. 116. Spoke to Spoke traffic is not going through IPSec Tunnel in Hub-Spoke Set-up 117. USB/printer sharing configuration should not be disabled when USB/printer is disconnected. 118. Error in configuration of VLAN with subnet 255.255.255.252. 119. The device is showing "Checksum failed" message while uploading the configuration file. 120. IGMP snooping functionality is not working after factory default the device. 121. Not able to delete the user which group's user type is configured as network. 122. Response of NAT Loopback for RTP is not working properly. 123. Apply changes for vulnerability CVE-2015-0291 / CVE-2015-0204. 124. Support source port in custom services. 125. Unable to run http traffic over ipv6 network when device wan is configure with ipv6 PPPoE. 126. Device is losing prefix delegation information after reboot. 127. Unable to configure DUT as IPSec policy with L2TP mode as client and direction type as responder. 128. Device showing the IPSec mode as tunnel mode in IPSec policies list even though we configure the IPSec mode as transport mode. 129. NAT functionality not working when switched back to primary WAN in Auto-Rollover mode. 130. Loosing GUI access when VPN remote network is configured in lan subnet. 131. Observed kernel panic while working with PPPoE connection type with DynDNS configured in DUT. 132. IPSec Keep alive functionality is not working. 133. Classical routing mode functionality is not working. 1. Can't set WIFI channel 13. HQ20141114000016 2. Can't support bandwidth management by Port Name for inbound traffic. HQ20141114000016
3. Unable to ping between two windows wireless clients when security mode is configured as WPA/WPA2/WPA+WPA2. HQ20140828000012 4. DSCP packet TOS value showing default value instead of configured in some

23

Unified Services Router Release Notes

2.01

of the packets at HUB. HQ20140619000012
5. Schedule setting can't be applied into the same service in firewall rule HQ20140522000005
6. Issue with Port forwarding (HTTPS/PPTP) HQ20140701000006
1. In SIP ALG disable state, User is able to establish multiple calls from WAN->LAN and LAN->WAN
2. IGMP proxy daemon is not running in the back-end with IGMP proxy enabled when WAN mode is in load-balancing
3. Attacker is able to reset legitimate TCP connections with the device leading to denial of service.
4. Security Vulnerabilities Addressed: TCP/IP Sequence Prediction Blind Reset Spoofing DoS. CVE: CVE-2004-0230
5. Inbound http service (HFS http file server) is not working in ADSL PPPoE ISP 6. Unable to access internet or low throughput performance for WLAN clients
while one of WLAN client is running HD video streaming. 7. PPTP pass-through priority is highest than PPTP firewall service. 8. IPSEC pass-through priority is highest than IKE outbound firewall service. 9. WLAN PC can't play multicast stream 10. USB storage not working perfectly with windows XP. 11. SIP module is inserted failure after reboot 12. The Login Profiles in SSL VPN are not persisting after device firmware
upgrade and Reboot. 13. When WAN Mode is configured for WAN1 dedicated, but WAN2's IP alias is
able to run traffic for inbound rule added. 14. "loggingd" process got killed in QA-Gateway with attached configuration. 15. IPSEC tunnel can't established after importing the exported file at the
remote device until disable then enabling policy 16. Device is not updating time after every GUI change in "Timezone" page. 17 User can't establish IPV6 IPSec gw-gw/manual tunnel using both local &
remote 18. Active VPN status is not displaying proper information when VPN policy is
added with mode config in the device and DHCP over IPSec in client. 19. Observed lua error upon upgrading the device with customer configuration
to 1.07B58_RU image using IE8 browser. 20. Http access from wireless clients to wan is taking long time from wireless
client 21. Device showing "Authentication Failure" message only once for wrong
credentials.

24

Unified Services Router Release Notes

1.09B32

22. Device is accepting the SMTP mails when Default Outbound Policy configured as "Block Always" without configuring the SMTP Rules (Approved Mail, Blocked Mail, and Subject List).
23. Device is not releasing IP configuration for WAN1 fail over to WAN2 when other device acting as DNS provider
24. Wireless clients can't ping after editing the wireless Access-point from one profile to another until disable then enable wireless AP again.
25. OpenVPN static IP doesn't work in 1.09B32 26. Remove auto dial support from both PPTP and L2TP Client pages
HQ20140801000005 27. Unable to see the External WAN IP in the HTTP server for the in-coming
traffic from WAN but showing source IP as DMZ IP address HQ20140717000007 28. Unable to configure the subnet mask 255.255.255.128 from CLI while configuring traffic selector rule. HQ20140804000003 29. Support maximum external 2TB HD HQ20140110000009 30. Unable to ping between two windows wireless clients when security mode is configured as WPA/WPA2/WPA+WPA2 HQ20140828000012 31. Security Vulnerabilities Addressed: OpenSSL 0.9.8x does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability. Reference: CVE-2014-0224 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0224 https://www.openSSL.org/news/secadv_20140605.txt Solution: Patched OpenSSL to 0.9.8za
1. L2tp internet connection problem HQ20120810000001
2. Device wan is unable to come up with 3G ISP with DWM-156 A5 dongle.
3. Unable to pass Netperf traffic over IPSec tunnel.
4. The throughput of WAN Routing mode is much lower than the WAN NAT mode.
5. Traffic should run over the VPN client tunnel even when SPPE is in enabled state.
6. Support NCP VPN client is able to access VLAN subnet. HQ20120827000010

25

Unified Services Router Release Notes
7. Support ARP from WAN HQ20120926000011. 8. Update all pages copyright notice to 2013. 9. Disabled firewall rule can't be deleted. HQ20130126000001 10. SSL VPN xtunnel.cab Certificate page valid date is from 8/13/2010 to
8/13/2012. HQ20130205000011 11. After initiating traffic from WLAN->LAN wireless client is getting
disconnected and unable to reconnect. 12. Manual time change event is not getting logged 13. Kernel panic while running traffic from WLAN/LAN hosts to internet and
running traffic over IPSec tunnel when device wan is configured with L2Tp ISP. HQ20130325000004 14. when device wan is configured in l2tp+dhcp mode, device is sending ddns membership packets to dns ip assigned by dhcp server HQ20130325000004 15. Able to login to the portal with when configured wrong secret in the radius settings page 16. Unable to get the IP for PPTP client in the device. 17. Device can't detect the printer 18. Http and FTP traffic can't be transferred over IPSEC client tunnel. 19. Transparent mode functionality is not working. 20. Device time will not synchronize with default NTP servers after reboot. HQ20130425000006 21. Not able to establish L2TP over IPSec tunnel with same user multiple time after making changes in IPSec policy. 22. Unable to find getuserDB page in RU images. HQ20130807000009 23. Unable to edit Roll-over WAN(3G) setup page. 24. Changed configuration in the configuration file is not persisting after restoring the configuration file into the device 25. User is unable to restore the encrypted configuration file into the device 26. Encrypted configuration file is not getting decrypted if we open the encrypted file from configtool. 27. Configuration is not getting saved into the USB, After enabling the 'Enable Autobackup' field. 28. No option to configure VLAN port membership for Port5, Port6, Port7 and
26

Unified Services Router Release Notes
Port8 through CLI. 29. Unable to get IP address to VLAN host after reboot. 30. Device is not showing any warning when trying to add duplicate VLAN ID. 31. DMZ configuration page is not available in GUI. 32. User not able to configure DNS proxy in LAN configuration page, even after
PPTP server disabled 33. Bandwidth Profile Rate Functionality is not working. 34. Kernel panic when trying to connect L2TP client over IPSec. 35. SSID can't broadcast when wireless is in open mode and radio setting is n
client. 36. MAC address field is showing empty in WDS page. 37. Add Help content for DMZ pages 38. DMZ related fields are not getting highlighted immediately after enabling
the DMZ option. 39. Error message should be proper when user tries to check updates in
manager page without internet connection. 40. Unable to enable DMZ from CLI. 41. Unable to add IPSec gw-gw policy and firewall inbound rule on rollover
WAN (3G WAN). 42. Unable to establish VPN connection in phase2 with SHA-256.
HQ20130204000013 43. Low InterVLAN download speed. HQ20130620000004 44. VLAN, PPTP Server, L2TP server, and SSL client ranges and DMZ in same
subnet. 45. Unable to take Packet Capture on DMZ interface. 46. Port translating field doesn't update in CLI after firewall rules is changed in
GUI. 47. Unable to upload .CSV file. 48. Device is displaying WLAN edit configuration page for VLAN through CLI. 49. Synchronization Select Interface options of UPNP in CLI and GUI. 50. Showing wrong firmware version in SSLVPN portal page. 51. Able to configure the DMZ configuration without enabling the DMZ.
27

Unified Services Router Release Notes
52. User is not able to access the device CLI using SSH. 53. Device is getting default when downgraded from 1.09b08.img to
1.08b39.img. 54. No options are available for VLAN configuration on wan page from CLI. 55. Unable to upgrade the firmware via USB. 56. Error message should be proper when we try to add DMZ reserved entry
without DMZ enabled. 57. LAN host can't receive 6 to 4 prefix radvd IP from the device. 58. Device is showing '***failed to open ?directory' in CLI when log in by
telnet. 59. Kernel panic while running traffic over VPN tunnel. 60. IPS signatures can't be loaded if IPS is enabled. 61. ISATAP functionality is not working. 62. PPTP client status through CLI is showing "Disconnected" even it is connected. 63. Interfaces are not displaying when user configures status route through
CLI. 64. Improve PPTP performance. 65. Improve RFC 2544 UDP performance via IXIA. 66. Support DHCP option 66 67. Unable to establish the IPv6 IPSec tunnel after edit the policy. 68. GW-GW tunnel can't be established when traffic selectors
"Subnet--Range". 69. Outbound traffic over IPSec tunnel is blocked when default outbound
policy is configured "block always". 70. No option for L2TP mode in CLI when IPSec policy is added. 71. Kernel panic while executing VPN manual tunnel automation scripts. 72. Device is showing entry for the wireless clients which are trying to
authenticate in "wireless clients page". 73. Need to regenerate self---signed certificates. 74. Unable to establish GRE tunnel when WAN ISP type is configured for
PPTP/L2TP.
28

Unified Services Router Release Notes

1.08B44 1.08B39

75. DNS request timeout in LAN host by nslookup when IPS/IDS is enabled in the device.
76. Unable to connect PPTP server using LDAP External Authentication.
77. Unable to connect L2TP server using LDAP External Authentication.
78. "configuration could not be saved" message when user done any configuration through CLI for the first time.
79. Getting critical error when clicked save button in DHCP Reserved IP address page after upgrading from 1.01B46. HQ20130827000010
80. Need username and password fields for open VPN client authentication in open VPN configure page. HQ20130724000015
81. Custom VAP active can't be enabled or disabled for device time. HQ20130917000005
82. SSID "DSR-250N_2" can be visible if the user configure "active time" but disabled the VAP. HQ20130902000003
83. VLAN firewall rule is not work. HQ20130930000008
84. Default SSIP can be visible even though WIFI disable. HQ20131108000016
85. Need to remove the Debug log after device gets bootup in serial console. HQ20131217000002
86. Change source IP address option for inbound traffic selector to destination IP address. HQ20140121000011
87. LAN client page is not displaying the connected LAN clients.
88. When the GRE tunnel is established, local PC ping to peer DSR's LAN IP address can't get response.
89. Usage of extended authentication when redundant gateway check---box is enabled.
1. Security Vulnerabilities Addressed: Devices respond clients some unnecessary information, and hence give hackers a chance to get a non-persistent root shell. Reference: (CVE-2013-5945, CVE-2013-5946) Solution: Remove all unnecessary root user accounts
2. After rebooting devices, synchronization with NTP didn't works. (DRU20130424000003)
3. Firewall rule with scheduling is not work. (DUSA20130125000001) 1. Including 1.08B31 all fixes for DSR-250N in this version 2. The MPPE function does not work in L2TP client mode

29

Unified Services Router Release Notes

1.08B31

3. Restore configuration file to different HW version 4. WAN responses ARP packet 5. Add a message to inform user, who need to change 443 port number for SSLVPN or remote management once two features are enabled. 6. Can't work with any AP connected with network cable 7. Device time not synchronizing with default NTP servers after reboot. 8. Firewall rule disable is not work unless reboot device. 9. WIFI stability issue under heavy BT traffic 1. The OpenVPN Local Network page disappear when I used IE8 or IE9 to manage the DSR. 2. USB sharing could not download/upload large file 3. DWM-156 A3, A6 compatility issue

4. Security Vulnerabilities Addressed: Persistent root access. Reference: http://packetstormsecurity.com/files/118355/D-Link-DSR-250N-Backdoor .html Solution: Removed CLI commands that could allow someone to overwrite the super user password and gain root access to the device. Root user account will be completely removed in the next firmware version.

5. Prevent to upload config file into different model 6. Unable to change the Wireless output power 7. Device stuck under BT download 8. X.509 certificate expired issue

9. Security Vulnerabilities Addressed: uPnP vulnerabilities identified in the audit of libupnp code base. Reference: CVE-2012-5958, CVE-2012-5959, CVE-2012-5961, CVE-2012-5962, CVE-2012-5963, CVE-2012-5964, CVE-2012-5965 Solution: Patched Intel SDK libupnp v1.3.1 to add the following; 1) use 'snprintf' and 'strncpy' instead of 'sprintf' and 'strcpy', 2) While doing a 'strncpy', check if we are copying more bytes than the destination string size.

1.05B53

10. DNS query issue for L2TP WAN type 1. DSR-250 and 250N don't show Logs for tunnel disconnect and Logout for
SSL VPN & port forwarding.

30

Unified Services Router Release Notes

2. "LAN clients" page is not displaying the connected information. 3. CLI wan1 status does not show wan1 physical interface information when
device is in RU firmware dual PPPoE mode. 4. When server IP is configured with FQDN, Wan L2TP over DHCP connection
does not reconnect after device reboot. 5. Default VLAN is associated with all the wireless SSID after reboot. 6. "Block ICMP" is not work for a SSL VPN policy with permit permissions. 7. Traffic is not going from PPTP/L2TP client to device's LAN after changing
WAN ISP until disable and enable PPTP server again. 8. When the user login SSL portal with wrong credentials domain name in IE
browser address bar, the browser will not refresh back to 'SSL portal login' page. 9. Dyndns name provided in the SSL portal page will be changed into the device WAN IP, if the user try to login SSL portal page with wrong credentials in Firefox browsers. 10. Device's MAC address field in WDS page is blank in RU image. 11. Device is taking 40-50 seconds to apply the configuration in VLAN page of
RU image. 12. Wireless client status page is showing wrong Authentication and
Encryption types. 13. Device GUI is getting stuck after running bulk traffic over PPTP/L2TP
tunnel. 14. "Connect" button is not working for IPv6 gw-gw policy in Active VPNs page
when IPv6 WAN is radvd IP. 15. No information on WLAN Domain when country code is set to Japan. 16. Firewall rule with schedule is working correctly only for GMT time zone. 17. Device displaying critical error message when trying to upload certificates
to activate OpenVPN server/client. 18. Unable to access GUI after factory reset and power OFF/ON the device. 19. Wireless clients are not getting updated in Wireless Clients status page. 20. UPnP process is not running in Dual Stack IPv4/IPV6 mode.

1.05B20

1. IPv6 to IPv4 tunneling is not work. 2. Internet web surfing is very slow for WLAN client if SPPE enabled. 3. Remove CLI command which is not supported in DSR-250/250N. 4. PPTP client is getting disconnected while uploading and downloading files
using windows sharing. 5. Device shell is getting stuck after running bulk traffic over PPTP/L2TP

31

Unified Services Router Release Notes

1.05B06 1.01B56

tunnel. 6. Bandwidth Usage and Used applications are not displayed in dashboard. 7. Default VLAN will be associated with all the wireless AP after reboot. 8. Fixing L2TP doesn't reconnects to L2TP server after reboot. 9. Fixing wireless clients is not displayed on status page. 1. Improving link up time of WAN interface less than 1 minute after device
power on. 2. Fixing the printer shared port detection issue. 3. Fixing PPTP pass through is not working. 4. Fixing SSL tunnel is disconnected when user tries to download 200 MB file. 1. Improving link up time of WAN interface to 1~1.5 minutes after device
power on 2. Fixing PPPoE isn't working in custom MAC address

Known Issues:

Firmware Version 3.17

Known Issues
1. OpenVPN Certificates Limitation: Due to OpenVPN & SSL component upgrade, the old certificates generated/uploaded (in OpenVPN Certificates) are not compatible with the new OpenVPN component. Users either have to reconfigure (if custom certificates are being used or access server/client is chosen) or share updated default certificates to Clients (if default certificate is being used, as default certificate is updated) to be able to continue using OpenVPN.

Related Documentation:
- Unified Services Router User Manual v3.13 - Unified Services Router CLI Reference Guide v1.10

32


適用於 Office 365 的 Microsoft Word