Release Notes / Changelog

Version Changes
8-3-0 Bugfixes
[NERO-358] - Fix potential memory leak in logging service
[NERO-364] - MQTT Bridge crashes if no user/password is entered
[NERO-365] - Fix NTP server and client misconfiguration
[NERO-367] - SFTP connection with Filezilla fails since firmware version 8.2.0
[NERO-368] - Rework and fix of SNMP menu in webfrontend
[NERO-366][NERO-378] - Security Fix SIM#2024-04
8-2-0 This Firmware was made for Hardware version HW:02 and following device generations. Functionalities for HW:06 devices are marked separately.

NEW MAJOR FUNCTIONALITIES

802.1x Authentication
The 802.1x authentication method is available for the WAN interface of the device to identify itself towards a Radius Server in a secure network architecture.

SNMP
The device is now able to provide device states, so called MIBs, via the SNMP v3 protocol that is standard in IT environments, e.g., in Managed Ethernet Switches. This empowers the IT-Administration to integrate our remote access router to be part of their surveillance system (ports on/off, VPN state, firewall drop counts etc.)

MQTT Bridge
This feature empowers the device to bridge the local MQTT Broker to a desired and defined external MQTT Broker. It is a new and easy way to provide local sourced machine data to an external MQTT Broker.
Note: This feature requires a license activation.

LAN segmentation
This new feature empowers the device to provide a configuration up to four port-based VLANs on the LAN Switch of the device. There can be up to four separate local networks and a pure Layer-3 Routing in-between the LAN Segments can be configured through firewall rules. Now separated local machine network segments, shopfloor Link etc. can be defined to meet the security needs for restricted access to a machine or facility.
Note: This feature requires a license activation and is only available for hardware version HW:06 devices.



Features
[RA70-115] - SNMP: Read status information from device via SNMPv3 protocol
[RA70-131] - Separated Networks : Dividing the four LAN ports into different, independent subnets
[RA70-326] - MQTT Bridge : Make the local broker's data available on an external broker
[RA70-336] - Radius: Implement 802.1x authentication for the WAN interface

Improvements
[RA70-61] - Rework of available time zones on router
[RA70-62] - Add every active VPN connection to web GUI and syslog of router
[RA70-263] - Extend the API for RSP-Device-Communication with the possibility to check and activate device license
[RA70-277] - Extend Data24 to use certificate for communication with RSP
[RA70-278] - Disable the port check on a standalone device
[RA70-320] - USB drives (e.g. mbMEM) can be formatted via web GUI
[RA70-323] - Add possibility to create firewall rules between LAN segments

Bugfixes
[RA70-67] - Correct Quickstart view if no WAN cable is plugged
[RA70-106] - SMS Commands "OUT ON/OFF" fails
[RA70-145] - The SSH daemon is not sufficiently protected
[RA70-257] - Initiating a VPN connection by sending the SMS code "INET START" does not work
[RA70-271] - Service to monitor network participants can't be enabled
[RA70-286] - NTP can't be activated via web GUI
[RA70-303] - SearchOverIP does not work with firmware 8.x.x
[RA70-316] - Polish GPS Feature (web GUI and minor issues)
[RA70-318] - Data24 does not trigger alarms for singe Modbus bits
[RA70-319] - Information about installed edge version is only shown for active services