New MR 30.7 stable release candidate firmware:security, reliability, performance, connectivity fixes

[cmr]

Wireless firmware versions MR 30.7 changelog

Important note

• WEP deprecation (https://documentation.meraki.com/MR/Encryption_and_Authentication/WEP_Deprecation_on_MRs)

Legacy product notice

• When configured for this version, MR12, MR16, MR18, MR24, MR26, MR32, MR34, MR62, MR66, and MR72 will run MR 26.8.3

Bug fixes

• General stability and performance improvements
• AP sends RADIUS traffic out of the primary management interface when the alternate management interface is enabled
• AutoRF channel auto-updates not occurring on MR20 APs
• Failure of DNS test results in no connectivity
• MR36 APs fail to auto-negotiate link with 100Mbps cable
• L3 Roaming tagging client traffic with non-existent VLAN ID
• VAPs incorrectly configured as NAT mode
• Apple devices can’t connect to APs using SSIDs set for WPA3 and 802.11r (Wi-Fi 5 Wave 2)
• Reduced throughput on Wi-Fi 6 APs
• APs experience poor performance after extensive uptime (Wi-Fi 6 APs)
• In high-capacity wireless networks, APs may experience instability when the “Client Balancing” feature is enabled (Wi-Fi 5 Wave 2, Wi-Fi 6 and Wi-Fi 6E APs)
• Suspected false positive DFS alerts
• APs fail to receive RadSec certificates
• APs not broadcasting beacon frames for Site Survey SSID on 6GHz

Security fixes

• Upgraded lighttpd to v1.4.67

Known issues

• Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)

[PhilipDAth]

You do a great job @cmr bringing these to the community in an easy way to digest with minimal additional mouse clicks.

[PhilipDAth · Accepted solution]

Hey, maybe we should name the bot after you in honour!  The CMR Firmware Bot.

[pjc]

Does the beta version 31.1.1 contain all of these fixes/new features found in this stable release candidate version 30.7 ?... as the release notes show much fewer fixes in the 31.1.1...

[cmr]

I'd suggest not as it came out some time earlier (I was testing it before release), but I cannot be certain!

[BHC_RESORTS]

Still no listed fix for the MR36H panic that causes it to reboot multiple times per hour. Disappointing, we may have to roll back to our MR30H units if it isn't fixed soon.

[Alexkl_MA]

Good to hear Meraki releasing new update.

My customer site is running 30.6 firmware on several dozens of MR36. I found that client count under Monitor>AP>Performance page from multiple AP, it showed more than 30 clients vary up and down on a Saturday in an office. But there is no client at all from the Summary page of that particular APs. The wifi network had just launched for less than 2 months from new purchase. I already found there were more wrong showing of statistics in other areas. Opened TAC cases for days and no one know how to fix it. I am very frustrated by these non-sense statistics. Can 30.7 firmware fix that issue? 

[RaphaelL]

Slightly new change log including the CVE # : 

Important note

• WEP deprecation (https://documentation.meraki.com/MR/Encryption_and_Authentication/WEP_Deprecation_on_MRs)

Legacy product notice

• When configured for this version, MR12, MR16, MR18, MR24, MR26, MR32, MR34, MR62, MR66, and MR72 will run MR 26.8.3

New feature

• Addition of AFC for supported SKUs (https://documentation.meraki.com/MR/Deployment_Guides/Automatic_Frequency_Coordination)
• Adding 6 GHz Radio support for additional countries

Bug fixes

• General stability and performance improvements
• AP sends RADIUS traffic out of the primary management interface when the alternate management interface is enabled
• AutoRF channel auto-updates not occurring on MR20 APs
• Failure of DNS test results in no connectivity
• MR36 APs fail to auto-negotiate link with 100Mbps cable
• L3 Roaming tagging client traffic with non-existent VLAN ID
• VAPs incorrectly configured as NAT mode
• Apple devices can’t connect to APs using SSIDs set for WPA3 and 802.11r (Wi-Fi 5 Wave 2)
• Reduced throughput on Wi-Fi 6 APs
• APs experience poor performance after extensive uptime (Wi-Fi 6 APs)
• In high-capacity wireless networks, APs may experience instability when the “Client Balancing” feature is enabled (Wi-Fi 5 Wave 2, Wi-Fi 6 and Wi-Fi 6E APs)
• Suspected false positive DFS alerts
• APs fail to receive RadSec certificates
• APs not broadcasting beacon frames for Site Survey SSID on 6GHz
• FastCGI unresponsive

Security fixes] upgraded lighttpd to v1.4.67 [cve-2022-41556

•  

Known issues

• Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)

[Paccers]

Recently updated again with a couple of new additions:

New feature

• Support RADSec with Tunneled SSIDs (https://documentation.meraki.com/MR/Encryption_and_Authentication/
• Support RADSec keep alives (https://documentation.meraki.com/MR/Encryption_and_Authentication/MR_RADS
• Support CoA with RADSec (https://documentation.meraki.com/MR/Encryption_and_Authentication/MR_RADSec)

Known issues

• Client balancing rejects clients when 9 SSIDs are created

[craigFSB]

Found a bug with MR 30.7 using MR 33 APs.

After upgrade clients fail to connect to an Open with RADIUS SSID. Clients are setup to use MAC-based authentication to a cloud RADIUS service. Clients are unable to connect to the SSID.

Workaround is to disable Client Load Balancing in the Network Template in Wireless > Radio Settings > Basic Indoor Profile > Edit.

Clients instantly connected to the SSID with the issue as soon as I turned off Client Load Balancing in the network template.

[Balcarras]

We have upgraded to 30.7 and I cannot get an SSID which utilizes RADIUS to work (on MR 33's) even IF I turn off Client Load Balancing 😞

I've set my AP's to rollback firmware this evening.

[AxL1971]

upgraded to this firmware on MR36 and users complaing of poor performance, Teams calls dropped etc

Client balance is disabled.