Peplink Pepwave MAX BR1 Pro 5G HW2 Router Firmware 8.5.1

Improvements:

- [Cellular] Added functionality to store and reuse last known good APN for SIMs in “Auto” mode
- Added option to automatically set to airplane mode when the Cellular WAN is disabled
Compatible with Balance: 20X, 30 LTE/Pro, 310 5G/Fiber 5G, 310X, 380X, 580X
Compatible with MAX: BR1/2, HD1/2/4, Transit, HD2/4 MBX, MBX Mini
Compatible with B One: B One 5G/Plus
Compatible with MediaFast: HD2/4
Compatible with UBR: Plus
Compatible with PDX, SDX, SDX Pro, EPX

- [Starlink] Updated Starlink WAN settings to ignore all reported outages, improving connectivity options
- [Starlink] Added support to use Starlink positioning data if GPS is unavailable (Included in: 8.5.0s018)
- [Outbound Policy] Route-based IPsec tunnels now support the Weighted Balance algorithm in Outbound Policy
Compatible with All Models (Except FusionHub)

- [FusionHub] FusionHub now supports cloud-init for automated configuration on cloud platforms (Included in: 8.5.0s043)
Compatible with FusionHub

- [System] Added support for SCEP, enabling automated certificate issuance and management in Peplink devices
- [SNMP] Added WAN latency metrics to WAN.mib for SNMP monitoring (Included in: 8.5.0s064)
- [System] Added domain name support to Grouped Networks for Firewall rules and Outbound Policy
- [System] Added option to select preferred VLAN as source IP for Web Admin RADIUS/TACACS authentication
- [SNMP] Added PCI, Channel, and Channel width per band to CELLULAR.mib for improved SNMP monitoring (Included in: 8.5.0s064)
- [LAN] Added support for non-FQDN hostnames in DNS Proxy Settings > Domain Lookup Policy
- [SNMP] Added support for showing LAN names in SNMP queries
- [Remote User Access] Increased Remote User Access user limit for PPTP, L2TP, and OpenVPN on B One series devices to 15 users (Included in: 8.5.0s019)
- [SpeedFusion VPN] SpeedFusion Test now supports up to 3600 seconds duration with auto-adjusted intervals (Included in: 8.5.0s046)
- [DPI] Updated application blocking list to rename “Twitter” to “X” on WebUI and InControl
- [System] WAN Analysis now supports up to 3600 seconds duration and 1 minute interval (Included in: 8.5.0s046)
Compatible with All Models

- [BR1 Mini M2M] Added support for 7-bit data bits setting on the BR1 Mini M2M serial port (Included in: 8.5.0s062)
Compatible with MAX: BR1 Mini M2M

- [KVM] Added support for reporting and controlling KVM virtual machine information on InControl2
Compatible with Balance: 2500 EC
Compatible with MAX: HD2/4 with MediaFast
Compatible with MediaFast: 500, 750
Compatible with SDX Pro, EPX (with EXM-LCDT)

- [B310 5G] Full Web Content Filtering support added to Balance 310 5G and Fiber 5G models (Included in: 8.5.0s012)
Compatible with Balance: 310 5G/Fiber 5G

- [LACP] Increased LACP support to 8 ports for SDX Pro and EPX devices (Included in: 8.4.1s191)
Compatible with SDX Pro, EPX

- [Wi-Fi WAN] Wi-Fi WAN can now connect to Peplink APs without active WAN connections (Included in: 8.4.1s192)
Compatible with Balance: 20X, 310 Fiber 5G
Compatible with MAX: All (Exclude: BR1 ENT, BR1 Mini 5G/Core, BR2 Micro, Transit Core, HD2 Mini, HD1/2 Dome/IP67)
Compatible with B One: B One, B One 5G/Plus
Compatible with UBR: Plus
Compatible with MediaFast: HD2/4
Compatible with PDX, MBX

Resolved Issues:

- [Web UI] Fixed a vulnerability of Host Header Injection on Web UI
- [DPI] Fixed the issue where DNS requests to Quad9 (9.9.9.9) on port 9953 were not being recognized
- [System] Fixed issue with UDP relay not working for fragmented packets
- [DPI] Fixed misclassification of 3CX and NordVPN traffic as Bittorrent; 3CX and WireGuard are now correctly identified (Fixed in: 8.5.0s009)
- [InControl] Fixed missing event logs in InControl during WAN outages by extending the log retention grace period (Fixed in: 8.4.1s190)
- [System] Fixed issue where Network > Port Settings page might show an empty page (Fixed in: 8.4.1s199)
- [OpenVPN] Fixed issue where OpenVPN site-to-site connection failed due to passwords containing the special character (Fixed in: 8.5.0s041)- [Remote User Access] Fixed issue where L2TP clients failed to connect when Remote User Access with L2TP/IPSec was enabled
- [URL Logging] Resolved issue with URL logging to prevent logging of blocked content for exempted groups and subnets
- [System] Fixed an issue where the Local DNS Proxy used the hot standby WAN to resolve hostnames
- [System] Fixed incorrect event log entries for cellular module firmware upgrades
- [OSPF] Fixed an issue where manually selecting a LAN for OSPF Network Advertising failed without a LAN cable connected
Compatible with All Models

- [Synergy Mode] Fixed an issue where Synergy WANs could go missing
Compatible with Synergized Device: Balance, MAX, MediaFast, UBR: All, PDX
Compatible with Synergy Controller: Balance: 20X, 30 LTE/Pro, One/Two, 210/310 HW4 or above, 310 5G/Fiber 5G, 310X, 380X, 580X
Compatible with Synergy Controller: MAX: BR1 Mini HW3, BR1 ENT, BR1 Pro 5G, BR1 Pro HW7, BR2 Pro HW4, Transit, 700 HW3 or above, HD1 Dome/Dome Pro, HD2 Dome, HD2 HW5 or above, HD2 Mini, HD4
Compatible with Synergy Controller: B One: B One, B One 5G/Plus
Compatible with Synergy Controller: MediaFast: All
Compatible with Synergy Controller: UBR: Plus
Compatible with Synergy Controller: SDX, SDX Pro, PDX, EPX

- [Cellular] Fixed an issue where SIM failover did not work in InControl SIM Pool when a SIM exceeded its quota
Compatible with Balance: 20X, 30 LTE/Pro, 310 5G/Fiber 5G, 310X, 380X, 580X MAX: BR1/2, HD1/2/4, Transit, HD2/4 MBX, MBX Mini
Compatible with B One: B One 5G/Plus
Compatible with MediaFast: HD2/4
Compatible with UBR: Plus
Compatible with PDX, SDX, SDX Pro, EPX

- [Cellular & LTEA-Q] Fixed an issue where Cellular WAN might not work properly on LTEA-Q cellular devices
- [Cellular] Fixed an issue where SIM failover was not occurring in InControl SIM Pool when a SIM exceeded its bandwidth quota
- [Cellular] Fixed issue where BYO eSIM activation might fail on LTEA-B or LTEA-Q cellular devices
- [Cellular] Fixed issue where LTE-SQ cellular device’s model displayed as “error” in Cellular WAN details
Compatible with Balance: 20X, 30 LTE/Pro, 310 5G/Fiber 5G, 310X, 380X, 580X
Compatible with MAX: BR1/2, HD1/2/4, Transit, HD2/4 MBX, MBX Mini
Compatible with B One: B One 5G/Plus
Compatible with MediaFast: HD2/4
Compatible with UBR: Plus
Compatible with PDX, SDX, SDX Pro, EPX

- [eSIM] Fixed an issue where the eSIM functionality did not work properly after a device reboot
- [eSIM] Fixed issue where BYO eSIM activation might fail (Fixed in: 8.5.0s030)
- [eSIM] Fixed issue with Peplink eSIM failing to connect when InControl management is disabled
Compatible with Balance: 20X HW3, 310X HW3, 310 5G, 380X, 580X
Compatible with MAX: BR1 Mini/Mini Core HW3/Mini M2M, BR1 Pro 5G, BR1 Pro HW7, BR2 Pro, Transit Duo Pro/Pro E, HD2/4 MBX HW4, HD1 Dome Pro, HD2 Dome Pro E/LR, MBX Mini
Compatible with B One: B One Plus/5G
Compatible with UBR: Plus
Compatible with EPX, SDX Pro, SDX

- [System] Fixed an issue where the WAN interfaces might not work properly in rare cases
Compatible with Balance, MAX, MediaFast, UBR: All
Compatible with PDX

- [FusionHub] Fixed an issue in FusionHub where BGP was not functional on the LAN interface
Compatible with FusionHub

- [Starlink] Fixed an issue where Starlink location data could not be used if no active GPS source was available
- [SpeedFusion Connect] Fixed an issue where the SpeedFusion Connect quota expiry date incorrectly displayed after activating the license feature
- [System] Fixed issue preventing IP Passthrough mode from being configured on multiple WANs with the same priority
Compatible with All Models (Except FusionHub)

- [BR2 Pro] Resolved an issue where the “External Storage” menu was missing in the Web Admin of BR2 Pro devices (Fixed in: 8.5.0s077)
Compatible with MAX: BR2 Pro

- [B20X] Fixed issue of eSIM function being displayed on B20X Cellular 1 with FlexModule Mini HW1 installed
Compatible with Balance: 20X

- [USB Ethernet] Fixed issue of missing USB Ethernet after soft reboot on Transit Duo Pro HW1
Compatible with Transit Duo Pro HW1

- [B One] Fixed issue where LAN ports on B One devices passed data despite the interface being disabled
Compatible with B One: B One, B One Plus/5G

- [SDX] Fixed issue where logical health check was triggered on SDX even when the WAN connection was down
Compatible with SDX, SDX Pro

- [Cellular & 5G] Fixed issue where the 5G device MTN was not being displayed correctly (Fixed in: 8.5.0s039)
Compatible with Balance: 20X, 310 5G/Fiber 5G, 310X, 380X, 580X
Compatible with MAX: BR1 Pro 5G, BR2 Pro, Transit 5G HD1 Dome Pro, MBX, MBX Mini
Compatible with PDX, SDX, SDX Pro, EPX

- [GPIO] Fixed the issue of GPIO was displayed incorrectly on B310X
Compatible with MAX: BR1/2 Pro, BR1 Mini HW3, BR1 Mini 5G/Core, BR2 Micro, BR2, Transit Core/Pro, HD2/4 MBX, MBX Mini
Compatible with B One: B One, B One 5G/Plus

Known Issues:

- [AP Controller] Unable to set the SSID in “SFC > Route by Wi-Fi SSID” when the SSID is under non-default AP profiles in the AP Controller
Affected Balance: All
Affected MAX: 700, HD2/4, HD2 Mini, Transit, HD2/4 MBX, MBX Mini
Affected MediaFast: All
Affected PDX, SDX, SDX Pro, EPX

- [System] YouTube blocking may not work if YouTube traffic is using QUIC
- [System] LAN clients in ports 1 or 2 may fail to obtain an IP with Multiple IP passthrough WAN support
Affected All Models

- [Docker] Docker container cannot be run on a device that doesn't have an active DHCP server running
Affected Balance: 310 5G/Fiber 5G, 310X, 380X, 580X, 710, 1350, 2500, 2500 EC
Affected MAX: BR2 Pro, Transit Pro E/Duo Pro/Duo Pro E, MBX Mini, HD2/4 MBX
Affected MediaFast: 500, 750
Affected PDX, SDX, SDX Pro, EPX (with EXM-LCDT)

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.