Ubiquiti EdgeRouter ERLite-3 Router Firmware 1.9.7

New features:

- [UNMS] Add UNMS support (Ubiquiti Network Management System)

- UNMS forum

- UNMS introduction and roadmap

- UNMS demo

Enhancements and bug fixes:

- [PPPoE] Add PPPoE client uptime.

- [PPPoE] Add support for “host-unique” tag.

- [SNMP] Fix wrong OIDs send by SNMP trap.

- [SNMP] Resolve OSPF and BFD OID conflict.

- [SNMP] fix memory leak in nsm process when getting value via SNMP.

- [Routing] Fix wrong number of routes shown in WebGUI.

- [Routing] Fix random nsm daemon crash when ppp interface disconnects (pppoeX, pppoesX, l2tpX or pptpX)

- [CLI] Fix bug when operator was not able to delete default gateway and static routes in one commit

- [CLI] Add warning message when rebooting with unsaved config.

- [CLI] Add new CLI command that compares saved configuration with working copy:

- [BGP] Fix int32 rollover when setting BGP local-AS.

- [BGP] Fix bug when commit was not failed when setting malformed community-list

- [BGP] Fix bug when commit was not failed if “local-as” was equal to “remote-as”

- [BGP] Do not reset BGP session if AS-0 was received from neighbor.

- [BGP] Fix bug when IPv6 'update-source' address was ignored

- [MPLS] Fix bug when MPLS/LDP was not working on ER-8-XG after reboot

- [Firewall] Fix bug when reply packets arrived from wrong address when NAT-hairpin is enabled

- [Firewall] Fix bug when MSS clamping did not affect locally generated traffic.

- [Load balancing] Fix bug when locally originated DNS queries were load balanced.

- [Dnsmasq] Fix bug when DHCP leases were not showing if dnsmasq was enabled

- [Dnsmasq] Fix bug when dnsmasq crashed if “tftp-server-name” was configured.

- [Dnsmasq] Preserve lease file after reboot.

- [Dnsmasq] Fix bug when dnsmasq leases were not cleared

- [Dnsmasq] Enable logrotate for /var/log/dnsmasq.log

- [DHCPv6] Fix bug when prefix-delegation was not written correctly to dhcpv6.conf file.

- [DHCP] Fix regression that was introduced in 1.9.1 when DHCP server did not register client hostname.

- [DHCP] Fix bug where DHCP address was not renewed for pseudo-ethernet interfaces.

- [IPv6] Deprecate the “set system ipv6 blacklist” CLI command because it is causing boot error when saved

- [IPv6] Fix bug when DNS server was not removed from “resolv.conf” when releasing PD interface

- [IPv6] Fix bug when radvd stopped after PPoE connection drop.

- [IPv6] Fixed bug when radvd was restarted upon each DHCPv6 renewal.

- [IPv6] Fix bug when “delete interfaces ethernet ethX ipv6 address autoconf” set wrong value of “accept_ra” sysctl value

- [IPv6] Remove misleading radvd warning about all-zeroes prefix not being allowed.

- [IPv6] Fix bug when IPv6 address disappeared from interface after reboot.

- [IPv6] Fix bug when EdgeRouter did not receive IPv6 nameservers from ISP.

- [L2TPv3] Fix bug when l2tpv3 interface was not updated in kernel.

- [IPSec] Fix bug when IPsec site-to-site VPN sometimes was not reestablished after reset of either side

- [DNS] Fix bug when “show dns forwarding statistics” was showing errors if dnsmasq was enabled

- [DPI] Updated DPI signatures to version 1.302

- [UBNT-discovery] Fix possible DDOS attack via UBNT-discovery protocol

- [UBNT-discovery] Fix DoS attack vulnerability via UBNT-discover protocol that allowed remote user to reboot router without providing credentials

- [Conntrack] Fix bug in CLI when showing and deleting conntrack entry by source doesn't work.

- [WebGUI] Remove PHP and rewrite web backend to Python. Warning !!! if you use some 3rd party software that depends on PHP then you will need to install PHP manually because PHP will not be included in EdgeRouter firmware anymore.

- [WebGUI] Fix bug in Basic Setup wizard when DHCPv6 PD prefix-length was set to /64

- [WebGUI] Fix bug when wrong internet port was selected in "WAN+2LAN2" wizard on ER-X

- [WebGUI] Fix CSRF vulnerability when uploading files

- [WebGUI] Fix XSS vulnerability via login page

- [WebGUI] Fix broken IPv6 redirects.

- [Upgrade] Clear APT cache and delete core files before doing upgrade..

- [Backup] Exclude webproxy DB from config backup..

- [RTSP] Add CLI command to enabled RTSP conntrack/nat module. and hereBy default RTSP module is disabled and following config entry enables it:

- [Kernel] Backport ipset hash:mac support from upstream kernel

- [Kernel] Increase NAPI_WEIGHT to 64 to solve packet-loss issue

- [System] Fix filesystem storage leak when doing factory reset

- [System] Fixed random bootloader hang on ER-8-XG

- [System] Add new CLI command that allows admin to change number of CPU cores used for packet processing. To fix packet reordering issue admin needs to set packet-rx-core-num to 1. This

Updated software components:

- [IPV6] – updated radvd to 2.16

- [L2TP] – updated xl2tpd to 1.3.9.

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.