New MR 28.1 beta release

[cmr]

Wireless firmware versions MR 28.1 changelog

Important note

• When configured for this version, the MR12, MR16, MR18, MR24, MR26, MR32, MR34, MR62, MR66, and MR72 will run MR 26.8.1.

New

• IPv6 support on MR (including MR management over IPv6, IPv6 live tools (ping and traceroute), L3 IPv6 firewall rules, RADIUS/LDAP/AD over IPv6, SNMP/Syslog/Meraki Health over IPv6) - https://documentation.meraki.com/MR/Other_Topics/IPv6_Support_on_MR_Access_Points (All MRs)
• RADIUS enhancements (e.g., NAS-ID configuration, Called-Station ID configuration, EAP timers, and more) - https://documentation.meraki.com/MR_Meraki_RADIUS_2.0 (All MRs)
• Digital Tags management (with our partner SES-imagotag). This feature allows using the IoT (previously known as BLE) radio on MR access points to act as gateways for these tags as opposed to deploying separate ESL gateways. Please contact Support. - https://documentation.meraki.com/MR/Deployment_Guides/Electronic_Shelf_Labels_(ESL)_Integration_with... (MR30/MR33/MR74, MR45/MR55, MR36/MR46/MR56/MR44, MR76/MR86)
• Support VLANs over wireless mesh links - https://documentation.meraki.com/MR/Deployment_Guides/Mesh_Deployment_Guide#Multi-VLAN_support_over_... (All MRs)
• Support for Message Queuing Telemetry Transport (MQTT) -

  Security fixes

  • CVE-2020-25684 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mr... (All MRs)
  • CVE-2020-25685 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mr... (All MRs)
  • CVE-2020-25686 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnsmasq-dns-2021-c5mr... (All MRs)
  • CVE-2020-24588 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-24587 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-24586 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26145 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26144 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26140 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26143 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26139 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26146 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26147 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26142 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)
  • CVE-2020-26143 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu (Wi-Fi 5 MRs)

  Bug fixes

  • IGMP queries intermittently dropped during high loads of multicast traffic (All MRs)
  • MR may not forward buffered frames upon receipt of CTS from STA if the CTS did not follow the preceding RTS within a given time window (Wi-Fi 6 MRs)
  • MR drops traffic for client when Mandatory DHCP is enabled and the MR has seen a large number of clients (All MRs)
  • Bonjour queries not forwarded to the service VLAN when source port is other than UDP 5353 (All MRs)
  • UNII-2e channels added for indoor APs in Israel IL regulatory domain (WiFi 5 MRs)
  • Downstream VOIP RTP Packet Loss (MR42/MR42E/MR52/MR53/MR53E/MR84)
  • MR may reboot when configured with WPA2-Enterprise, Hotspot 2.0, and more than 42 MCC/MNCs. There is now a limit on 42 or fewer MCC/MNCs. (All MRs)
  • TCP port 22 was accessible from the wireless LAN (All MRs)
  • RADIUS Accounting Interim-Update packets contain 0 for Acct-Input / Acct-Output usage values (Wi-Fi 6 MRs)
  • Scanning radio may become stuck on a single frequency in some regulatory domains (Wi-Fi 5 MRs)
  • MR may crash upon configuration changes with NBAR enabled (Wi-Fi 6 MRs)
  • Wi-Fi 6 MR did not start RADIUS Accounting session after 802.11r FT (Wi-Fi 6 MRs)
  • RADIUS CoA packets not sent across mesh links (All MRs)
  • MR was not applying the appropriate QoS DSCP tags to some egress packets (Wi-Fi 6 MRs)
  • Enabled 40/80 MHz channel widths in Ecuador (MR20/MR30H/MR33/MR70/MR74)
  • MR was generating SNMP ifOutErrors under normal 802.11 traffic scenarios (All MRs)
  • MR was generating SNMP ifInDiscards under normal 802.11 traffic scenarios (All MRs)
  • MR would not send RTS frames to 802.11b clients (MR45/MR55)
  • Local status page included “Provider Name” cellular information (All MRs)
  • MR may transmit VHT frames on 2.4 GHz (MR20/MR30H/MR33/MR70/MR74)
  • 802.11r association & re-association events were not generated in the event log (All MRs)
  • MR30H LED did not change to blue with connected clients (All MR’s)
  • Class Attribute received from RADIUS Access-Accept packet was not forwarded in RADIUS Accounting-Request packet (All MRs)
  • Client Balancing control plane packets continued to be transmitted by MRs via Ethernet even when disabled (All MRs)
  • Local status page included latitude and longitude coordinates (All MRs)
  • VPN teleworker tunnels were unable to establish if the SSID configured to do so was VAP #12 (out of 15) (All MRs)
  • Client timeline metrics calculation improvements (All MRs)
  • Numerous performance, stability, and security improvements (All MRs)

  Known issues

  • Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (All MRs)
  • Client association status is not accurately reflected when viewing the Client Details page (Wi-Fi 6 MRs)
  • MR may reboot when changing the configured country for the network (Wi-Fi 6 MRs)
  • UNII-2e channels not available for indoor MRs in Israel IL regulatory domain (WiFi 6 MRs)
  https://documentation.meraki.com/MR/Other_Topics/MR_MQTT_Data_Streaming (All MRs)

[CptnCrnch]

I'm really tempted to give it a shot, sounds neat!

[cmr]

I've been running it at home on and MR55 and MR56 and it has behaved well, but the network only has 15 clients...

[NolanHerring]

VLAN support over MESH, that's a nice new feature that has been sorely lacking for a long time.

[PhilipDAth]

>Support VLANs over wireless mesh links -

This will be popular!

What can the MQTT be used for?  The IoT tags?

[Adam2104]

It's nice to see the packet loss for voip/rtp packets on the old APs (MR42s) finally being fixed after two+ years. The timeline there is a big ridiculous, but a fix is a fix, so that's good to see. I installed this on my MR44s last night with no ill-effects. 

[CptnCrnch]

Looking really good so far! 😎

[KarstenI]

Yes, that looks good! But as a fraidy-cat, I wait some versions for my home network. The WAF of working WLAN is more important. The office network is scheduled to upgrade on the weekend (not that important). 🙂