Digi Connect WAN 3G and 4G Firmware Release Notes Release Notes PN 93000699 H1 Digi Connect WAN 3G Digi Connect WAN 4G 82001532 H1 EOS October 15, 2010
Total Page:16
File Type:pdf, Size:1020Kb
Digi Connect WAN 3G and 4G Firmware Release Notes Release Notes PN 93000699_H1 Digi Connect WAN 3G Digi Connect WAN 4G 82001532_H1 EOS October 15, 2010 INTRODUCTION This is a production release of firmware for the Digi Connect WAN 3G and Digi Connect WAN 4G. The product name (3G or 4G) is determined when the product is manufactured, according to its networking capabilities. The Digi Connect WAN 3G is a hardened, upgradeable 3G cellular router that provides secure high speed wireless connectivity to remote sites and devices. Both GSM and CDMA cellular technologies are supported. The Digi Connect WAN 4G is a hardened, upgradeable 4G wireless router that provides secure high speed wireless connectivity to remote sites and devices. The supported wireless technology in the WAN 4G is IEEE 802.16e, known as WiMAX (Worldwide Interoperability for Microwave Access). Both the Connect WAN 3G and WAN 4G can be used for primary wireless broadband network connectivity to equipment at remote locations, as well as for a backup to existing landline communications. Both products are ideal for use where wired networks (e.g., leased line/frame relay, ISDN, DSL) are not feasible, or where alternative network connections are required. SUPPORTED PRODUCTS Digi Connect WAN 3G Digi Connect WAN 4G SUPPORTED CELLULAR MODEMS Within the cellular product family, Digi has continued to add support for cellular modules as vendors make updates and improvements to support the latest chipsets and cellular technology. As new modules come on the market and older ones go obsolete, Digi is committed to supporting the products we have sold and continue to sell to our customers. The level of support that we are able to provide falls into one of the following categories: 1) FULL SUPPORT These modules are shipping in Digi products. An essential part of our product testing is to make sure these modules are compatible and function properly. Operational and performance issues with these modules that are found by customers will be verified, scoped and scheduled to be fixed in an upcoming firmware release. Sierra Wireless: MC5725, p2005001,20224 [Sep 21 2006 15:43:22],, VID: PID: MC5727, Modem Revision: p2410701,51240 [Nov 08 2007] BOOT: SWI6800V2_PP.01.07.01 2007/11/08 APPL: SWI6800V2_PP.01.07.01 2007/11/08 MC8775, H1_1_9_3MCAP C:/WS/FW/H1_1_9_3MCAP/MSM6280/SRC 2007/12/12 MC8790, Revision ID: K1_0_2_8AP C:/WS/FW/K1_0_2_8AP/MSM6290/SRC 2008/09/17 Ericsson: F3507g, Revision ID: R1D06 Page 1 Digi Connect WAN 3G and 4G Firmware Release Notes F3307, Revision ID: R1K06 Option Wireless: GTM382, Revision IDs: 1.4.6.0Hd (Date: Oct 1 2008, Time: 11:50:07) 1.8.0.0Hd (Date: Jan 14 2009, Time: 14:46:50) 1.9.1.0Hd (Date: Mar 26 2009, Time: 09:10:10) Qualcomm Gobi 2000: Sprint Verizon Generic HSPA 2) PARTIAL SUPPORT These modules had shipped in Digi products in the past but are no longer actively supported by the module vendor. Firmware testing no longer includes these modules, however every attempt is made to maintain support as features and improvements are implemented. Issues with these modules that are found by customers will be verified, scoped and either scheduled to be fixed or a newer, supported module offered as an upgrade option. Sierra Wireless: MC5720, MC8755 3) LIMITED SUPPORT These modules have never shipped in Digi products and have never been part of firmware testing and verification efforts. These modules may be similar to full/partially supported modules by the same vendor and may even have been informally tested and shown to work in Digi products. Operational and performance issues with these modules that are found by customers will be evaluated and scoped to be fixed on a business case basis. Sierra Wireless: MC8780, MC8781, MC8775V, MC5725V, MC8755V, MC8765, MC8785V, MC8700 Huawei: EM770W, Revision ID: 11.128.03.00.00 4) NOT SUPPORTED These modules have never shipped in Digi products and are known to be incompatible. Sierra Wireless: EM3420, EM5625 SUPPORTED WiMAX MODULES GCT / Quanta Microsystems, Inc.: WM553 ENHANCEMENTS Improve the network stack to address the issue described in US-CERT Vulnerability Note VU#498440: Multiple TCP/IP implementations may use statistically predictable initial sequence numbers. The note can be viewed at: http://www.kb.cert.org/vuls/id/498440. (36183) Expand the description of iDigi keep-alives in the web help information. BUG FIXES Fix a problem in which Ethernet driver might lose synchronization between its interrupt handler and its packet receive processing thread. This could cause received packets to be held in the driver's receive buffer ring and Page 2 Digi Connect WAN 3G and 4G Firmware Release Notes not passed to the network stack in a timely manner. Under such a condition, network communication might appear to be broken for network protocols and applications. (35638) Fix a bug in which the file system component was incorrectly accounting for open directories in the system. Due to this bug, it was possible that the open would fail regardless of actual resource availability. (31645) Fix the CLI command "flashdrv" to recognize more than 4 GB. (35390) Fix bugs in "set vrrp" option validation in the CLI: - Verify VRID is 1-255 (not 254). - Verify priority is 1-254 (not 255). This matches similar validation in the web UI and configuration restore. KNOWN ISSUES Problems have been encountered with some Linksys VPN appliance models when using different Diffie-Hellman group settings for phase 1 and phase 2. To work around this issue and successfully establish the VPN tunnel, use the same Diffie-Hellman group for both phase 1 and phase 2 settings. DOCUMENTATION ERRATA None. ADDITIONAL INFORMATION It is recommended that you perform a backup of your device's settings prior to upgrading your firmware. If you should need to revert back to a previous version of firmware, this will ensure that you will be able to restore your device to its previous settings in the event that some settings are not restored properly after downgrading the firmware. To backup your device settings, follow this simple procedure: 1) Open the web user interface and navigate to the "Administration" section and select "Backup/Restore". 2) Click the "Backup" button and select the location to where you want to save your backup file. To restore: 1) Navigate to the same section within the web UI. 2) Click the "Browse" button to select the backup file you saved in the previous steps. 3) Click the "Restore" button to upload the configuration settings contained in your backup file. On initial boot of this device, it will generate some encryption key material: an RSA key for SSL/TLS operations, and a DSA key for SSH operations. This process can take as long as 40 minutes to complete. Until the corresponding key is generated, the device will be unable to initiate or accept that type of encrypted connection. It will also report itself as 100% busy but, since key generation takes place at a low priority, the device will still function normally. On subsequent reboots, the device will use its existing keys and will not need to generate another unless a reset to factory defaults is done, which will cause a new key to be generated on the next reboot. HISTORY Page 3 Digi Connect WAN 3G and 4G Firmware Release Notes 82001532_H (2.12.0.6) - October 15, 2010 See ENHANCEMENTS and BUG FIXES information above. 82001532_H (2.12.0.5) - October 1, 2010 ENHANCEMENTS: Add support for IEEE 802.16e, known as WiMAX (Worldwide Interoperability for Microwave Access). Support is for the GCT / Quanta Microsystems WM553 module. This introduces a new network interface (wmx0) that is available for use by many of the Digi device's features. Select the primary SIM by default on the mobile configuration web pages. (35035) For GPS support by the cell module, for Verizon service, add support for varying minimum intervals between fixes depending upon the user-selected position determination method: MSS - Standalone (no network assistance) 1 second MSB - Mobile-based (network assisted) 30 seconds MSA - Mobile-assisted (network calculated) 1800 seconds This support is for compliance with Verizon certification requirements. Enhance the Dynamic DNS update feature to permit the selection of any device network interface. Previously this feature was coupled with the cellular mobile interface and did not support a selection of the network interface for which the asociated IP address is registered with the DDNS service. (35346) Add the "flashdrv" CLI command. Add a Network Port Scan Cloaking feature that permits users to prevent replies to various received packets for which there is no local service. On a global or per-network-interface basis, one can disable ping replies, TCP reset replies for received connection requests to unused ports, and ICMP destination/port unreachable replies to received UDP datagrams destined for unused ports. This capability "cloaks" a device from being probed on such unused ports, and it reduces packet traffic by eliminating replies that may be billable to service accounts (e.g., cellular service). This feature is exposed in the CLI as the "scancloak" option, and it is supported in the web UI on the Advanced Network Settings page under the Network Configuration section. By default, this feature is disabled. Support cloaking for the DNS Proxy feature on a per-interface basis, so the proxy can be enabled for some interfaces yet disabled for others. Change the default state setting for the DNS Proxy feature to "disabled" (off) rather than enabled/on. The purpose for this change is to modify the "out-of-the-box" default to one that is safer from denial of service (DOS) attack on DNS servers.