Westermo MRD-350 Firmware

Brand: Westermo

Model: MRD-350

Type: Firmware

1(10)

MRD-350 Firmware

Release Notes

Version 1.5.7.0

Version 1.5.7.0 (Build-date: 2016-05-04)

General

 Westermo strongly advices all customers to upgrade to this version.

 This release includes new features, enhancements and bug fixes.

 Highlighted changes to: WeConnect, SNMP, IPsec, Web, Routing, DNP3

 Please note that due to technical restrictions the MRD-310 and MRD-330

will have a different binary firmware file compared to the MRD-350.

New Feature(s)

 WeConnect – talk to your local Westermo sales representative for more information

o Official support for WeConnect auto-provisioning process.

o WeConnect can be found in the MRD at VPN  WeConnect.

 Technical support feature added to System  Support page

o Note that passwords and logs will be saved upon creating the support-file.

 TLS-encrypted email servers, e.g. Gmail™, can now be used.

o Note that the trust is automatic and validation of the certificate of the

server is done at this stage.

 Ability to forward an SMS to an email address and/or another SMS.

 Accept via the LAN interface any packet that custom NAT accepts.

Enhancement(s)

 SNMP

o Updated the SNMP software-package.

o Added ability to reset the SNMP Engine ID, creating a unique ID for a unit.

o SysName can now be set in SNMP.

 DNP3

o Allow DNP3 backup master to be set.

 IPsec

o Connection management for IPsec tunnels added.

Model

MRD-350

Date

2016-05-04

Version

1.5.7.0

Tools

N/A

2(10)

 Sometimes DPD can have interoperability issues between vendors. The

connection management is a work-around for those, and other, use-cases.

 Routing (RIP / GRE)

o Enable RIP over GRE tunnels

o RIP to advertise static routes and GRE interfaces.

o Allow point-to-point Multicast over GRE tunnels.

 AT command set

o AT+CSMS support added.

Bug Fixes

 Web pages

o Fixed issue where Custom NAT web page could very occasionally

cache incorrect information.

o Fixed IE8 compatibility issue with VPN / SSL web page.

o Fixed issue where browser add-on could prevent expansion

of SSL VPN configuration section.

o Fixed an issue where setting the password to/with certain characters

in certain positions would cause the web-authentication to fail.

o Fixed issue where long hostnames were being truncated.

o Fixed issue in the Serial server web-page phone book when deleting

the final “connection” from a connection entry.

o Other misc. web-page issues.

 Log files

o Clean up of SNMP log messages.

 IPsec

o Fixed issue where a LAN cable was needed in any of the Ethernet ports

for the IPsec VPN to establish a connection.

o Fixed issue where the IPsec daemon would restart even if the interface address did

not change. The daemon now restarts only if the interface address is changed.

 SSL VPN

o Fixed issued that could occur after uploading an Astaro VPN file.

 GRE

o Fixed issue with policy routing via GRE interfaces.

 CSD

o Upon pressing the “Reset Port” button in the web-page the CSD connection

will now be closed.

 SNMP

o The SysDescription OID now returns the correct description.

 Connection management

o Reset the PING session each time a ping set is started for the connection manager.

 Previously the pings could use an old route through the firewall making the

ping possible but any other new traffic would get blocked. In other words the

connection manager would still work for the pings thus defeating the purpose

of the connection manager. This has now been fixed and the pings now work

as the other traffic.

Version 1.5.6.0 (Build-date: 2015-01-28)

General

 Westermo strongly advices all customers to upgrade to this version.

 This release includes new features, enhancements and bug fixes.

 Highlighted changes to: SNMPv3, Modem emulation, Firewall, AT-commands, IPsec

3(10)

 Please note that due to technical restrictions the MRD-310 and MRD-330 will have a different

binary firmware file compared to the MRD-350.

New Feature(s)

 SNMPv3 (Encrypted SNMP)

Enhancement(s)

 Web-server

o SSLv3, SSLv2 removed due to security issues. Only support TLS on HTTPS.

 Modem emulation

o Huntgroup support – multiple endpoints per phone book entry

o Extend the number of phone book entries supported

o Allow the phone book to be uploaded and downloaded in a CSV file format

o Rename “Signal on answer” to Custom modem emulation protocol (CMEP)

o AT+CGREG (GPRS network registration status) including roaming.

o AT+CPIN now correctly emulated.

 Firewall

o Allow port forwarding from LAN interface

 IPsec

o Increase the number of traffic maps per tunnel to 10.

 DHCP server

o Add ability to clear DHCP client leases on the server.

 OpenVPN

o Add “Use Static Local Address”

Bug Fixes

 Packet Counters would previously incorrectly jump by 4 GiB.

 SNMP data types changed from signed to unsigned

o serialServerBytesTx -- 1.3.6.1.4.1.16177.1.200.4.1.1.6

o SerialServerBytesRX -- 1.3.6.1.4.1.16177.1.200.4.1.1.7

o SerialServerFramingErrors -- 1.3.6.1.4.1.16177.1.200.4.1.1.7

o SerialServerOverrunErrors -- 1.3.6.1.4.1.16177.1.200.4.1.1.9

o SerialServerParityErrors -- 1.3.6.1.4.1.16177.1.200.4.1.1.10

o SerialServerBreaks -- 1.3.6.1.4.1.16177.1.200.4.1.1.11

o gpioOutputsToggles -- 1.3.6.1.4.1.16177.1.200.5.2.1.4

Note

 Firmware NOT affected by the GHOST-vulnerability

Version 1.5.5.1 (Build-date: 2014-01-13)

 General

 Westermo strongly advices all customers to upgrade to this version.

 This bug-fix release includes enhancements and bug fixes.

 Highlighted changes to: Connection management, Guest user account, and AT+CPIN.

 Note that this version changes the naming convention, e.g. 1.55 become 1.5.5 thus the reason

for this firmware version being labeled as 1.5.5.1. Using the previous naming convention this

firmware version would then have been labeled 1.55.1.

 Please note that due to technical restrictions the MRD-310 and MRD-330 will have a different

binary firmware file compared to the MRD-350.

 New Feature(s)

 None, this is a bug-fix release.

4(10)

 Enhancement(s)

 Connection establishment integrated into connection management.

o Valid packet connection required for link to be declared established.

 User Management

o Guest user can now be explicitly disabled.

 Bug Fixes

o Packet Counters

 Fixed received and transmit packet counter roll-over.

o AT Commands

 +CPIN Command returns correct response of “READY”.

 Known issue(s)

 Status – Wireless – Session statistics

o Counters show the wrong value, e.g. Gigabyte traffic within a very short time span.

o Bug verified, will be fixed in an upcoming firmware.

o Workaround – ignore Session statistics.

Version 1.55 (2013-05-02)

 General

 Westermo strongly advices all customers to upgrade to this version.

 This release includes new features, enhancements and bug fixes.

 Highlighted changes to: IPsec, GPS, Dual SIM support, Security and SMS-handling.

 New Feature(s)

 Simple Certificate Enrollment Protocol (SCEP)

o Eases management of certificates.

 GPS location

o The location of the unit can be determined using GPS.

o A GPS antenna, connected to the AUX port, is required.

o The location details are on the System  Location page.

o Note that received diversity is suspended while GPS is active.

o SNMP location information is scheduled to be included in the next firmware version.

 Enhancement(s)

 Various security enhancements.

 Dual SIM

o Secondary SIM hold period

 The time the device should use the backup SIM before trying

the primary SIM again.

 VRRP

5(10)

o Added the ability for a wireless packet session to be enabled when the unit became

the master VRRP device and disabled when it lost the master status.

o Enable by setting Wireless  Packet Mode  Connection Mode to Automatic

 Certificates

o Added the ability to require the remote certificate to be of nsCertType Server.

 IPsec

o Added the ability to configure redundant tunnels. Tunnel groups may be created

containing up to two tunnels within each group with automatic fail-over/fallback.

o Added an option to allow the routing information to be added to the routing table only

once the tunnel has been established.

 Time

o Added the ability to sync clock to network time.

 Improved AT command support

o SMS delivery report:

o The +CNMI command determines how to forward/generate notifications:

o The +CSMP command determines aspects of an outbound SMS.

 Added the ability to add a secondary default route.

 Support for latest version of Astaro configuration import.

 Serial Server

o Added the ability for the Raw UDP mode to send data to the last IP address from

which data was received. Sometimes referred to Latest Calling/Dynamic Peer in

WeOS and/or the EDW-series.

 Bug Fixes

o Web Interface

 Fixed various IE8 rendering errors.

 Removed additional characters on some pages.

 Fixed spelling errors.

o AT Commands

 SMS commands improved.

o SNMP

 Fixed issue whereby the DNP3 Tx and Rx packet counters were not updating

correctly.

o PPTP

 Fixed issue with Windows server not connecting.

o DNS

 Fixed issue with DNS not resolving correctly when a VPN tunnel re-

establishes.

o IPsec

 Fixed an interoperability issue with the MR/DR-platform if the MRD was

configured to be the responder in an aggressive mode IPsec-tunnel.

 Allow the local traffic map to specify all traffic.

 Display the total time the tunnel has been up as well as the time since the last

re-key.

 Removed the ability to configure the default route to be Any IPsec tunnel. The

correct way to configure this is to use IPsec traffic maps.

o SSL VPN

 Fixed issue where an Astaro file input containing an unknown element would

cause the application to terminate.

 Fixed issue where an Astaro file was parsed and configuration applied when

the certificate handler was full.

 New behavior is when uploading an Astaro file a warning will be issued if the

certificate handler is full and the file will not be parsed.

6(10)

o VRRP

 Status now shown correctly.

o SNMP

 Interface status is correctly reported. Previously all interfaces were reported

as down.

 Default contact email address is no longer set.

 Warning messages are no longer generated when some configuration fields

are left blank. Note that the warning messages did not affect SNMP operation.

o Serial Server

 When Raw UDP mode send IP address is set to 0.0.0.0 any data received is

dropped.

o SSL VPN

 MDEX Certificate failed to be read. Fixed.

o Ethernet

 The interface did not always power off correctly. Fixed.

o User Management

 The default configuration incorrectly included a valid guest password. Fixed.

 When upgrading devices if the guest password is the default, the guest user

will be disabled. No other passwords will be affected.

 To enable the guest user click on "Edit users and passwords" on System .

Administration page and set a password for the “guest” user.

o Configuration filename

 Fixed an issue where the wrong year was generated to the timestamp of the

configuration file. Note that this issue was only cosmetic, i.e. did not affect any

parsing or behavior of the unit.

 Known issue(s)

 None

Version 1.53 (2012-01-27)

 General

 This release includes enhancements and bug fixes.

 Highlighted changes to: Dual SIM support, SMS-handling, MAC-address filters

 New Features

 Dual SIM support with automatic failover.

o See westermo_mrd-350_dual-sim_introduction.pdf for more

information, included in the firmware-zip-file.

 Enhancements

 Route

o The route type and metric can be set when configuring a route.

 SMS

o SMS send re-try on error

o A unique sequence number can be added to each SMS sent from the unit.

(Management->SMS)

 IPsec

o If configured to terminate at the LAN interface and the LAN address is changed IPsec

will re-start.

7(10)

 MAC Address Filters

o Two actions now provided: Local is for restricting or allowing access to router services

and Passthrough is for restricting or allowing access to the WAN port.

 Connection Management

o When connection management terminates a connection the reason for the termination

is written to the log.

 Bug Fixes

o Changing the LAN IP address

 User is only redirected to the new address if connected via the LAN interface.

Previously the user was redirected to the new address irrespective of the

connected interface.

o Accessing via HTTPS

 If the LAN address is changed the redirect page is returned HTTPS.

Previously the redirect page was returned HTTP.

o Serial Server

 When all serial ports are set to disabled the status page lists the Serial Server

as Disabled.

 Now accepts Fully Qualified Domain Names (FQDN).

o IPsec

 The web server response time when configuring has been reduced.

 Issue with loading certificates resolved.

o DNS Lookup

 When Fully Qualified Domain Names (FQDN) is entered in IP address fields

the FQDN is stored and DNS lookup occurs at time of connection.

o NAT

 Configuration issue of 1:1 NAT resolved.

 Cache flush on firewall rule change.

 Custom NAT protocol setting error resolved.

o Telnet Client (CLI)

 Extended characters including arrows keys work correctly.

o Circuit Switched Data (CSD)

 The DCD settings were not correctly applied. Fixed.

o SSL VPN

 Issue with loading P12 certificates resolved.

 Known issues

 None.

Version 1.52 (2011-10-11)

 General

 This release includes new features, enhancements and bug fixes.

 Highlighted changes to: VRRP and SMS-handling

 New Features

 Telnet capabilities added to the CLI

o The command telnet has been added to the CLI

 Enhancements

 SMS

8(10)

o Support for full GSM character set.

 AT Commands – Modified

o Allow white space between the tokens of an AT command.

o +CMGL

 the return SMS text will be coded using the character set specified by +CSCS

o +CMGR

 the return SMS text will be coded using the character set specified by +CSCS

o +CPMS

 the first parameter (location to read SMS from) now affects only the serial

port that issued the command.

 The second and third parameters (location to send SMS, and location to

receive SMS) affect the whole device.

 AT Command – Added

o +CSCS

 sets the SMS character set (either IRA or UTF-8). The default is UTF-8.

 Command Line Interface (CLI) – modified commands

o sms send

 the SMS message accepts UTF-8 characters.

o sms location

 the command has been deleted.

o sms memory

 set the device’s location to send SMS and the location to receive SMS.

o sms list

 the location to read the SMS from must be specified. The SMS text is

displayed using UTF-8.

o sms read

 the location to read the SMS from must be specified. The SMS text is

displayed using UTF-8.

o sms delete

 the location to delete the SMS from must be specified

 Command Line Interface (CLI) – general modifications

o Interface can now handle quotes and the slash character.

o The following substitutions occur when the backslash (’\’) character is used.

 \n New Line

 \r Carriage Return

 \\ The backslash character

 \$ the dollar character

 \" the double quote character

 \’ the single quote character

9(10)

 The dollar (’$’) character has been reserved for future use.

 Text within a double quote allows backslash and dollar substitution.

 Text within a single quote does not allow backslash or dollar substitutions.

 VRRP

o Introduced the concept of a Keep-alive Condition.

This allows VRRP to respond quickly to the loss of the remote host.

 Bug Fixes

o Route Command

 The route function in craft does not always output the full result. Fixed

o Serial Server

 The serial server does not recover when telnet is closed before the device is

connected to the associated serial port. Fixed.

o IPsec

 IPsec modified so that large changes in the time/date can be handled

correctly.

 Known issues

 None.

Version 1.51 (2011-08-22)

 Internal bug-fix release

Version 1.50 (2011-09-06)

 Initial MRD-350 firmware release.

10(10)

Contact Westermo technical support

If you have technical questions about this product that are not answered in this document,

you are welcome to contact Westermo.

International

www.westermo.com

support@westermo.se

Phone: +46 16 42 80 00

Fax: +46 16 42 80 01

France

www.westermo.fr

support@westermo.fr

Phone: +33 1 69 10 21 00

Fax: +33 1 69 10 21 01

Germany

www.westermo.de

support@westermo.de

Phone: +49 7254 9540 00

Fax: +49 7254 9540 09

Sweden

www.westermo.se

support.sverige@westermo.se

Phone: +46 21 548 08 00

Fax: +46 21 35 18 50

United Kingdom

www.westermo.co.uk

technical@westermo.co.uk

Phone: +44 1489 580 585

Fax: +44 1489 580 586

Singapore

www.westermo.com.sg

sales@westermo.com.sg

Phone: +65 6743 9801

Fax: +65 6745 0670

Taiwan

www.westermo.com

[email protected]m

Phone: +886 2 8911 1710

China

www.cn.westermo.com

sales.cn@westermo.com

Phone: +86 21 6145 0400

North America

www.westermo.com

[email protected]m

Phone: +1 847 619 60 68

Fax: +1 847 619 66 74

Westermo MRD-350 Firmware

Westermo MRD-350 Firmware

Related papers

Other documents