UniFi OS - Dream Machine SE 3.2.7
Overview
UniFi OS - Dream Machines 3.2.7 adds support for Subscription Free UniFi Identity, Shadow Mode, InnerSpace, VLAN Magic, DNS Shield and Loop Protection.
Subscription Free UniFi Identity
UniFi Identity is the new on-premises UniFi user management system, offering lightweight, subscription-free, single-site, unlimited-user access via the iOS & Android apps. Set up UniFi Identity via the Admins & Users > Users section. See the UniFi Identity Help Center article for more information. Former UID options are now called UniFi Identity Enterprise.
Shadow Mode
With Shadow Mode on the UDM-SE, you can ensure High Availability (HA) of your network’s gateway to minimize downtime, and provide a reliable failover mechanism in the face of unexpected hardware failures. In this setup, a secondary Cloud Gateway mirrors the configuration of the primary one, and can easily take over full network and management capabilities should it ever fail. See the Shadow Mode Help Center article for more information.
Currently, Shadow Mode operates as a “Warm Spare,” meaning some manual intervention is required, however this will become fully automated in an upcoming release.
InnerSpace
The UniFi InnerSpace Application is a powerful deployment visualization tool that allows you view your UniFi system's WiFi and camera coverage over your own floor plan. InnerSpace replaces the Map option in the Console Settings.
VLAN Magic
With VLAN Magic, you can quickly create a new Virtual Network and associate devices to this VLAN by selecting them on the Topology.
DNS Shield
The new DNS Shield feature ensures privacy and security of DNS traffic by encrypting it using DNS over HTTPS (DoH).
Loop Protection
The new Loop Protection feature automatically disables ports on which loops are detected. It does not depend on Spanning Tree and even works when neighboring devices do not support STP. Enable Loop Protection on all UniFi Gateway and UniFi Switch ports via the Port Manager. Ports that are disabled by Loop Protection need to be manually re-enabled.
Bundled Application
Improvements
- Added Subscription Free UniFi Identity.
- Set up UniFi Identity via the Admins & Users > Users section.
- Added Shadow Mode.
- Added InnerSpace application replacing the Map option in the Console Settings.
- Added VLAN Magic.
- Added DNS Shield.
- Added Loop Protection.
- Added support hostname support for IPsec Site-to-Site VPNs.
- Added the console's IP address during setup on the touchscreen.
- Added max login attempts for SSH.
- Entering incorrect credentials 5 times will block for 3 minutes.
- Added fallbacks to default timezones if unsupported ones are provided during setup.
- Added DNS warnings for consoles that cannot resolve the ui.com domain.
- Allow disabling Remote Access where there are connection issues.
- Improved various screens on the Touchscreen.
- Improved detection of failed disks.
- Disks that cannot initialize will be marked as broken.
- Improved RADIUS stability.
- Improved WireGuard VPN Disconnection detection for mobile devices.
- Consoles will no longer erase external storage during a factory reset.
- Updated Suricata to 6.0.12.
- Updated the console reset button count down from 10 seconds to 5 seconds.
- Reduced memory usage of Suspicious Activity, Content Filtering, and Ad Blocking.
- Prevent super admins from deleting their own account.
Backup and Upgrades
- Added DNS resiliency for firmware updates.
- Improved UniFi OS backup resiliency.
- Improved meshing stability when consoles are restarting or upgrading.
- Consoles will now always store backups locally before upgrading the firmware.
- Auto recovery is in place in case there is file system corruption after a power outage.
- Reduced network downtime for firmware upgrades.
Bugfixes
- Fixed an issue where the IPv6 address is lost after interface changes until the next RA.
- Fixed unable to start RADIUS service in rare cases.
- Fixed incorrect WAN IP on the portal after remapping the WAN ports.
- Fixed an issue with DNS servers for VPN Client. This applies to the VPN Client feature, not adding clients to VPN Servers.
- Fixed an issue where servers are not reachable for VPN Client due to incorrect certificates. This applies to the VPN Client feature, not adding clients to VPN Servers.
- Fixed an issue where the default route wasn't present when using a static IP on the WAN port.
- Fixed an issue where IGMP Proxy breaks after PPPoE reconnections.
- Fixed an issue where Traffic Routes didn't take effect for existing connections.
- Fixed an issue where Traffic Routes conflicted with Content Filtering.
- Fixed inability to see DPI statistics for setups with large amounts of clients.
- Fixed unexpected behavior when there are multiple Traffic Rules blocking the same domain.
- Fixed unable to establish IPsec Site-to-Site VPN in rare cases.
- Fixed an issue where jumbo frames are forwarded on LAN ports when Jumbo Frames is disabled.
- Fixed an issue where PPPoE MSS Clamping is lost during provisions.
- Fixed Suspicious Activity not working when enabling Jumbo Frames.
Download links
