Peplink Balance 30 HW3 Router Firmware 8.0.0

New Features:

- [PepVPN] Added support for Forward Error Correction in PePVPN.
Compatible with All models with WAN Smoothing support

- [Outbound Policy] Added new option for the rule when its requirement is no longer satisfied fall through to the next rule, use any available connections instead of only the chosen connection, drop the session
- [PepVPN] Added support for simultaneous L2 and L3 PepVPN connections between the same pair of devices.
Compatible with All models

- [Remote User Access] Added support for Active Directory in remote user access.
Compatible with Balance: 210 or above
Compatible with MAX: 700, HD2/4 Series
Compatible with MediaFast: All
Compatible with EPX

- [Remote User Access] Added support for Remote User Access via OpenVPN.
- [WAN Analysis] Added a new tool to test the throughput and consistency of each WAN connection by pushing traffic. Can test for both uplink and downlink.
- [PepVPN] PepVPN tunnels can now be established using TCP in addition to UDP.
- [Grouped Network] You can now designate groups of IP addresses, which can then be used to define firewall rules.
- [Grouped Network] You can now designate groups of IP addresses, which can then be used to define outbound policy rules.
Compatible with All models

- [VRF] Support of Virtual Routing and Forwarding.
Compatible with FusionHub

Feature Improvements:

- [Client List] Device will be shown online after it has been detected during mDNS lookup.
- [Outbound Policy] Outbound Policy for PepVPN sub-tunnels can now work with "Send all traffic to".
- [PepVPN Status Page] The PepVPN Status Page is now clearer and more informative.
- [PepVPN] Active Sessions show PepVPN and PepVPN sub-tunnel profile details.
- [PepVPN] Enhanced large packet handling by fragmenting packets inside the PepVPN tunnel.
- [PepVPN] Layer 2 Mode now allows you to create multiple tunnels between the same pair of devices for bridging up to 5 different selected VLANs.
- [PepVPN] The Web Admin will allow PepVPN Tests to run on connections even when in the "Updating Routes" state.
- [PepVPN] In Outbound Policy rule, if the destination is a PepVPN profile with multiple tunnels, the DPI Application can steer traffic to different sub-tunnels.
- [PPPoE] PPPoE supports custom keep-alive interval and retries
- [Remote Access] PCI compliance mode for L2TP remote user access.
- [Web UI] Support of X-Frame-Options / X-XSS-Protection in response headers.
- [Web UI] Dashboard can now indicate the device has not been added to InControl 2.
- [Web UI] In LAN > Network Settings, the list of LANs will be displayed in order of VLAN number.
- [Web UI] Google Hangouts traffic is now separately identified on the Active Sessions Report (Navigation: Status > Active Sessions).
- [WINS Server] Added support for WINS Server on BR1 ENT.
- [Virtual Network Mapping] Added ability to select "Additional LAN Subnet" as the Local Network.
- [Bandwidth Allowance Monitor] Added new option to allow management traffic when usage hits 100%.
- [BGP] BGP support next-hop-self.
Compatible with All models

- [PepVPN] Layer 2 Mode bridging to Untagged LAN now supports VLAN whitelist filtering.
Compatible with Balance: 380 or above
Compatible with MediaFast: 500, 750
Compatible with EPX

- [Outbound Policy] Added "Lowest Latency" and "Least Used" Outbound Policy algorithms to BR1 Series and Transit.
Compatible with MAX: BR1 Series, Transit

- [AP Controller] AP Management supports sorting by Profile Name
- [AP Controller/Wi-Fi AP] Wi-Fi AP transmit power can now be set to a custom value.
Compatible with Balance: ALL
Compatible with MAX: 700, Transit, HD2/4 Series
Compatible with MediaFast: All
Compatible with EPX

- [SpeedFusion] When using the Overflow traffic distribution mode with WAN Smoothing enabled, WAN Smoothing can now be performed on the same link.
Compatible with Balance: 210, 310, 305, 380, 580, 710, 1350, 2500
Compatible with MAX: 700, Transit Duo, HD2/4 Series
Compatible with SFE, EPX

- [E-mail Notification] SMTP passwords for E-mail Notifications can now be up to 100 characters
Compatible with All models

- [Wi-Fi WAN] Name of roaming option changed from "CarFi" to "Advanced"
Compatible with MAX: All models except BR1 ENT, BR1 M2M, HD2 Mini
Compatible with MediaFast: All
Compatible with EPX

- [Web UI] [GPS] The map on the dashboard is now displayed and updated in real-time using OpenStreetMap.
Compatible with MAX: All models except the 700 and OTG
Compatible with MediaFast: HD2, HD4
Compatible with SFE, EPX

- [Cellular] Added support for remote device configuration by SMS command.
- [Cellular] Added ability for the device to switch SIM Slots when the signal strength reaches a predefined threshold.
- [Celular] Updated APN for Austria A1
Compatible with Balance: 30 LTE / 30 Pro
Compatible with MAX: All models except the 700 and OTG
Compatible with MediaFast: HD2, HD4
Compatible with SFE, EP

- [Cellular] [USB] [Web UI] Revamped messages for initializing cellular and USB modem status on the Dashboard
Compatible with MAX: BR1 ENT, HD2/4 Series, 700, OTG
Compatible with All Balance, MediaFast,
Compatible with EPX

- [Wi-Fi AP] Add Saudi Arabia and South Africa in the list of operating countries.
Compatible with Balance: One
Compatible with MAX: 700, OTG, BR1, BR1 Mini, BR1 IP67, BR2, HD2, HD4 Series, Hotspot, Transit
Compatible with MediaFast: HD2, HD4
Compatible with Surf: Soho

- [Wi-Fi WAN] "CarFi" is now named as "Advanced" in Wi-Fi WAN Settings.
Compatible with MAX: 700, OTG, BR1, BR1 Mini, BR1 IP67, BR2, HD2, HD4 Series, Hotspot, Transit
Compatible with MediaFast: HD2, HD4
Compatible with Surf: Soho

- [DNS Server] The DNS Zone Transfer function can import records from the WAN, even if they are not enabled for the Authoritative DNS Server.
Compatible with Balance: 210 or above
Compatible with MediaFast: 200, 500, 750
Compatible with EPX

- [AP Controller] Devices can be configured to stop broadcasting SSIDs when there is no uplink Internet connectivity.
- [AP Controller] Added an option to turn on or off "Discover Nearby Networks".
Compatible with Balance: ALL
Compatible with MAX: 700, Transit, HD2/4 Series
Compatible with MediaFast: All
Compatible with EPX

- [Balance] [WAN] All WANs will be enabled in default configuration.
Compatible with Balance: All

- [API] Added support for Send SMS via API.
- [API] Added support for Reset Cellular, Scan Cellular Network via API.
- [API] Added support for Update Cellular WAN SIM Card Selection, Preference, Carrier Profile, and Bandwidth Allowance Monitor via API.
Compatible with Balance: 30 LTE / 30 Pro
Compatible with MAX: All models except the 700 and OTG
Compatible with MediaFast: HD2, HD4
Compatible with SFE, EPX

Resolved Issues:

- [DHCP] The DHCP Server does not reply in some cases.
- [Failover] UDP traffic does not failover immediately after WAN Health Check fail.
- [IPsec] DH group 19/20/21 does not work.
- [LAN] Using the built-in WINS Server may cause system instability.
- [NAT] LAN NAT does not work across different VLAN.
- [NAT] Remote User traffic incorrectly performed NAT to LAN IP address translation if the destination matched Inbound Port Forwarding service.
- [NMAP] Client PCs using NMAP will cause system instability.
- [OSPF] Setting a custom interface cost may cause issues.
- [OSPF/BGP] OSPF/BGP router ID cannot be set if "Additional Subnet" in "Untagged LAN" is defined.
- [Outbound Policy] After tunnel failback, the VPN sub-tunnel reply traffic may not be routed on proper sub-tunnel.
- [PepVPN] Event Log shows unsupported version incorrectly.
- [PepVPN] If particular PepVPN sub-tunnel is unable to connect, then subsequent Sub-tunnel will also not connect.
- [PepVPN] PepVPN sub-tunnel does not work with NAT mode.
- [PepVPN] When performing a Ping and Traceroute on a PepVPN connection, remote peer information does not appear.
- [PepVPN] NAT mode device cannot obtain IP from DHCP server when LAN Additional subnet was defined.
- [PepVPN] During Link Failure of a connection between a device and using SpeedFusion Bonding and a device using cold failover, the status may be marked as “Cold Standby”.
- [Remote Access] Remote User Access using Radius Authentication on the Untagged LAN does not work if upgrading from 7.0.3 or below.
- [Remote Access] Web Admin Security > LAN Connection Access Settings do not apply to Remote User Access.
- [SNMP] SNMP trap doesn't work if SNMPv1/v2/v3 is not enabled.
- [SNMP] Unable to obtain the device temperature, FAN status.
- [Virtual Network] The maximum length of the Virtual network set to 18 characters instead of 15 (ie: aaa.bbb.ccc.ddd/ee).
- [System] System could become unstable when SSID is added to a VLAN.
- [Web UI] The Web Admin shows incorrect BSSID.
- [PepVPN] When PepVPN profiles use a WAN with multiple IP addresses, any unrelated configuration change on the Web Admin may cause the PepVPN profiles to initiate extra handshake or even reconnect.
- [LAN] After updating LAN settings, clients connected via PPTP, L2TP with IPsec, and PepVPN NAT Mode peers will not be able to communicate with other devices in the same subnet.
- [System] If there are a lot of clients connected, Client List may cause unexpectedly high CPU load.
- [System] Improved DPI memory utilization for detecting SSL traffic.
- [Client List] Improved performance of Client List handling.
- [PepVPN] Pressing the "Apply Changes" button may trigger a SpeedFusion reconnect.
- [QoS] Remote User Access users matched to the wrong QoS User Group.
- [ADS] Fixed the stability issue of using In-session AD delivery service.
Compatible with All models

- [Cellular] In rare occasions, the UI will show the wrong carrier.
- [Cellular] Failover to the roaming SIM card does not work.
- [Cellular] When the router is not located in the home country, it cannot fallback to the non-roaming SIM.
Compatible with Balance: 30 LTE / 30 Pro
Compatible with MAX: All models except the 700 and OTG
Compatible with MediaFast: HD2, HD4
Compatible with SFE, EPX

- [InControl] [GPS] The device does not report GPS data obtained while offline from InControl.
- [GPS] GPS Week Rollover adjustment.
Compatible with MAX: All models except the 700 and OTG
Compatible with MediaFast: HD2, HD4
Compatible with SFE, EPX

- [AP Controller] AP->Events Log shows Unknown SSID for WPA/WPA2 Enterprise SSIDs.
- [AP Controller] Client lists cannot show the name of external AP clients if the AP is running in router mode.
- [AP Controller] RADIUS MAC Authentication does not work in Open/WPA-PSK modes.
Compatible with Balance: ALL
Compatible with MAX: 700, Transit, HD2/4 Series
Compatible with MediaFast: All
Compatible with EPX

- [SpeedFusion] SpeedFusion Overflow doesn't work on FusionHub.
Compatible with FusionHub

- [MediaFast] Unable to load user-defined root certification after reboot.
Compatible with MediaFast: All

- [Inbound Access / NAT Mappings] Port Forwarding does not work with UDP port 53 if the WAN has the Authoritative DNS Server enabled.
Compatible with Balance: 210 or above
Compatible with MediaFast: 200, 500, 750
Compatible with EPX

- [High Availability] The Slave unit will show the correct "last transition" time.
Compatible with Balance: 210 or above
Compatible with MAX: All BR1 except M2M and Slim, 700, HD2/4 Series, Transit
Compatible with MediaFast: All
Compatible with EPX

- [WAN Quality / Surf SOHO] WAN Quality does not work on Surf SOHO
Compatible with Surf SOHO

- [QoS] [USB Ethernet] QoS does not work on the USB Ethernet WAN.
Compatible with Balance: All
Compatible with MAX: 700, OTG, BR1 ENT, HD2/4 Series
Compatible with MediaFast: All
Compatible with EPX

- [ContentHub] Cannot download from an FTP server which has more than 1000 subdirectories.
Compatible with MediaFast: All

- [Outbound Policy] Fixed an issue which found in 8.0.0 RC3. HTTPS Traffic may fail after changing the WAN Connection Priority.
Compatible with MAX: All
Compatible with MediaFast: HD2, HD4

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.