UniFi OS - Dream Machines 3.2.7

https://community.ui.com/releases/UniFi-OS-Dream-Machines-3-2-7/b66cda01-d754-4c99-8003-e399e0eac0c7

Overview

Bundled application

• UniFi Network 7.5.187

Improvements

• Improved Shadow Mode.
• Improved SFP link stability when using Auto Negotation.
• Improved IPsec connection resiliency.
• Updated integrated Access Point firmware to 6.6.54.

Bugfixes

• Fixed cases where the Touchscreen said "UniFi OS needs a restart" while it didn't need a restart.
• Fixed an issue where some logs were not getting rotated, leading to them filling up the disk space.
• Fixed an issue where the UniFi Devices page isn't loading quickly on large setups.
• Fixed high CPU usage in rare cases.
• Fixed an issue where the IPv6 address is lost after interface changes until the next RA.
• Fixed an issue where FQDNs for IPsec connections may not work as expected.
• Fixed PPPoE WAN not working issue when MSS clamping setting doesn't match negotiated MRU value.

Download links

UDM

UDM-Pro

NUN RC

UniFi OS - Dream Machines 3.2.7

https://community.ui.com/releases/UniFi-OS-Dream-Machines-3-2-7/251dfc1e-f4dd-4264-a080-3be9d8b9e02b

Overview

UniFi OS - Dream Machines 3.2.7 adds support for Subscription Free UniFi Identity, Shadow Mode, InnerSpace, VLAN Magic, DNS Shield and Loop Protection.

Subscription Free UniFi Identity

UniFi Identity is the new on-premises UniFi user management system, offering lightweight, subscription-free, single-site, unlimited-user access via the iOS & Android apps. Set up UniFi Identity via the Admins & Users > Users section. See the UniFi Identity Help Center article for more information. Former UID options are now called UniFi Identity Enterprise.

Shadow Mode

With Shadow Mode on the UDM-Pro, you can ensure High Availability (HA) of your network’s gateway to minimize downtime, and provide a reliable failover mechanism in the face of unexpected hardware failures. In this setup, a secondary Cloud Gateway mirrors the configuration of the primary one, and can easily take over full network and management capabilities should it ever fail. See the Shadow Mode Help Center article for more information.

Currently, Shadow Mode operates as a “Warm Spare,” meaning some manual intervention is required, however this will become fully automated in an upcoming release.

InnerSpace

The UniFi InnerSpace Application is a powerful deployment visualization tool that allows you view your UniFi system's WiFi and camera coverage over your own floor plan. InnerSpace replaces the Map option in the Console Settings.

VLAN Magic

With VLAN Magic, you can quickly create a new Virtual Network and associate devices to this VLAN by selecting them on the Topology.

DNS Shield

The new DNS Shield feature ensures privacy and security of DNS traffic by encrypting it using DNS over HTTPS (DoH).

Loop Protection

The new Loop Protection feature automatically disables ports on which loops are detected. It does not depend on Spanning Tree and even works when neighboring devices do not support STP. Enable Loop Protection on all UniFi Gateway and UniFi Switch ports via the Port Manager. Ports that are disabled by Loop Protection need to be manually re-enabled.

Bundled Application

• UniFi Network 7.5.187

Improvements

• Added Subscription Free UniFi Identity.
• Set up UniFi Identity via the Admins & Users > Users section.
• [UDM-PRO] Added Shadow Mode.
• Added InnerSpace application replacing the Map option in the Console Settings.
• Added VLAN Magic.
• Added DNS Shield.
• Added Loop Protection.
• Added hostname support for IPsec Site-to-Site VPNs.
• Added the console's IP address during setup on the Touchscreen.
• Added max login attempts for SSH.
• Entering incorrect credentials 5 times will block for 3 minutes.
• Added fallbacks to default timezones if unsupported ones are provided during setup.
• Added DNS warnings for consoles that cannot resolve the ui.com domain.
• Allow disabling Remote Access where there are connection issues.
• Improved various screens on the Touchscreen.
• Improved detection of failed disks.
• Disks that cannot initialize will be marked as broken.
• Improved RADIUS stability.
• Improved WireGuard VPN disconnection detection for mobile devices.
• Consoles will no longer erase external storage during a factory reset.
• Updated Suricata to 6.0.12.
• Reduced the console reset button count down from 10 seconds to 5 seconds.
• Updated the UniFi Logo in the local portal.
• Reduced memory usage of Suspicious Activity, Content Filtering, and Ad Blocking.
• Prevent super admins from deleting their own account.
• [UDM] Added LED night mode scheduling.
• [UDM] Updated the fan behavior under high temperature.
• [UDM] Updated integrated Access Point firmware to 6.6.54.

Backup and Upgrades

• Added DNS resiliency for firmware updates.
• Improved UniFi OS backup resiliency.
• Improved meshing stability when consoles are restarting or upgrading.
• Consoles will now always store backups locally before upgrading the firmware.
• Auto recovery is in place in case there is file system corruption after a power outage.
• Reduced network downtime for firmware upgrades.

Bugfixes

• Fixed an issue where the IPv6 address is lost after interface changes until the next RA.
• Fixed unable to start RADIUS service in rare cases.
• Fixed incorrect WAN IP on the portal after remapping the WAN ports.
• Fixed an issue with DNS servers for VPN Client. This applies to the VPN Client feature, not adding clients to VPN Servers.
• Fixed an issue where servers are not reachable for VPN Client due to incorrect certificates. This applies to the VPN Client feature, not adding clients to VPN Servers.
• Fixed an issue where the default route wasn't present when using a static IP on the WAN port.
• Fixed an issue where IGMP Proxy breaks after PPPoE reconnections.
• Fixed an issue where Traffic Routes didn't take effect for existing connections.
• Fixed an issue where Traffic Routes conflicted with Content Filtering.
• Fixed inability to see DPI statistics for setups with large amounts of clients.
• Fixed unexpected behavior when there are multiple Traffic Rules blocking the same domain.
• Fixed unable to establish IPsec Site-to-Site VPN in rare cases.
• Fixed an issue where jumbo frames are forwarded on LAN ports when Jumbo Frames is disabled.
• Fixed an issue where PPPoE MSS Clamping is lost during provisions.
• Fixed Suspicious Activity not working when enabling Jumbo Frames.

Download links

UDM

UDM-Pro

Wallmeier

Android 14 und WLAN mit 802.1X/Radius

Mein Smartphone mit Android 14 verbindet sich nicht mit dem Firmen-WLAN. Android akzeptiert das vom Access-Point vorgelegte Zertifikat nicht. Was kann ich tun?

www.heise.de

UniFi OS - Dream Machines 3.2.9

https://community.ui.com/releases/UniFi-OS-Dream-Machines-3-2-9/613448aa-ebe5-4c5c-bc9f-2076ea646cc9

Overview

Bundled application

• UniFi Network 8.0.26

Improvements

• Added notice for speed test during web setup.
• Improved stability around backup restoring.
• Improved Identity UX.
• Improved Shadow Mode.
• Improved SFP connection compatibility with modules that do not have a proper EEPROM.
• [UDM] Improved PPSK connectivity for some IoT devices.
• Updated integrated Access Point firmware to 6.6.58.
• Reorganized Identity settings.

Bugfixes

• [UDM] Fixed 2.4GHz connection stability issues after changing the channel.
• Fixed an issue where RADIUS certificates were changed while One-Click WiFi was disabled.
• Fixed an issue with establishing a Site-to-Site VPN while Ad Blocking is enabled.
• Fixed a gateway configuration error when enabling Country Restrictions.
• Fixed RADIUS validation failure when a password ends with a backslash.
• Fixed an issue where the IPv6 Single Network was sometimes broken when changing the assigned network.
• Fixed an issue where some system logs filled up the disk space completely.

Download links

UDM

UDM-Pro

UniFi OS - Dream Machines 3.2.12

https://community.ui.com/releases/UniFi-OS-Dream-Machines-3-2-12/f8584fa3-5416-406e-9bc1-e3e027fdc0c7

Overview

Bundled application

• UniFi Network 8.0.28

Improvements

• Improved configuring fixed speed on SFP ports when the module has a faulty EEPROM.

Bugfixes

• Fixed the inability to send Identity Standard invites.
• Fixed redundant logging to /dev/tty10.

Download links

UDM

UDM-Pro