ZyXEL Communications UAG5100 Instruction Manual

1/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
ZYXEL
Firmware Release Note
UAG5100
Release V4.18(AAPN.1)C0
Date: Aug 10, 2017
Author: XinHong Wu
Project Leader: Daniel Lin

2/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
Contents
Supported Platforms:..................................................................................................3
Versions:.......................................................................................................................3
Checksum:....................................................................................................................3
Files lists contains in the Release ZIP file...............................................................3
Read Me First ..............................................................................................................4
Design Limitations:......................................................................................................5
Layer 2 Isolation...................................................................................................5
User........................................................................................................................5
Web Authentication..............................................................................................5
Wireless.................................................................................................................5
Known Issues:..............................................................................................................5
BWM.......................................................................................................................5
Maintenance..........................................................................................................5
User Authentication..............................................................................................6
Wireless.................................................................................................................6
ZON........................................................................................................................6
Features: V4.18(AAPN.1)C0.....................................................................................7
Features: V4.18(AAPN.0)C0.....................................................................................8
Features: V4.15(AAPN.0)C0.....................................................................................9
Features: V4.10(AAPN.2)C0...................................................................................11
Features: V4.10(AAPN.1)C0...................................................................................12
Features: V4.10(AAPN.0)C0...................................................................................16
Features: V4.01(AAPN.1)C0...................................................................................18
Features: V4.00(AAPN.1)C0...................................................................................20
Features: V4.00(AAPN.0)C0...................................................................................21
Appendix 1. Firmware upgrade / downgrade procedure.....................................22
Appendix 2. Firmware Recovery.............................................................................24
Appendix 3. Supported AP List...............................................................................29

3/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
-
ZYXEL UAG5100
Release V4.18(AAPN.1)C0
Release Note
Date: Aug 10, 2017
Supported Platforms:
ZYXEL UAG5100
Versions:
Kernel Version : V2.6.32.27 | 2017-08-02 18:51:17
ZLD Version : V4.18(AAPN.1) | 2017-08-08 17:14:03
Printer Version : SP350E-V1.07
Checksum:
Core Checksum : 94CF83BD
Conf Checksum : D51D8A77
Files lists contains in the Release ZIP file
File name: 418AAPN1C0.bin
Purpose: This binary firmware image file is for normal system update.
Note: The firmware update may take five or more minutes depending on the scale of
device configuration. The more complex configuration will take more update time.
Do not turn off or reset the UAG while the firmware update is in progress. The
firmware might get damaged, if device loss power or you reset the device during the
firmware upload. You might need to refer to Appendix 2 of this document to recover
the firmware.
File name: 418AAPN1C0.conf
Purpose: This ASCII file contains default system configuration commands.
File name: 418AAPN1C0.db
Purpose: This binary file contains default system signatures.

4/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
Note: The file is only needed when doing system recovery from damage.
File name: 418AAPN1C0.pdf
Purpose: This is release file.
Read Me First
1. The system default configuration is summarized as below:
The default device administration username is “admin”, password is
“1234”.
The default LAN interface is lan1, which is P3 port on the front panel.
The default IP address of lan1 is 172.16.0.1/16.
By default, WWW/SSH/SNMP service can only be accessed from LAN
subnet.
The default WAN interface is wan1. The interface will automatically get IP
address using DHCP by default.
2. It is recommended that user backup the “startup-config.conf ”file first before
upgrading firmware. The backup configuration file can be used if user wants to
downgrade to an older firmware version.
3. If user upgrades from previous released firmware to this version, there is no need
to restore to system default configuration.
4. If there is difficult to configure via GUI (popup java script error, etc). It is
recommended to logout the configuration window and clear browser cache first,
then try to login and configure again.
5. To reset device to system default, user can press RESET button for 5 seconds and
the device will reset itself to system default configuration then reboot
automatically.
Note 1: After resetting, the original configuration will be removed. It is
recommended to backup the configuration before performing this operation.
Note 2: After resetting, if user has subscribed to security licenses, user
needs to connect to internet with myzyxel.com and refresh license
information.
6. If there is problem to reboot successfully after firmware upgrade, please refer to
Appendix 2: Firmware Recovery.

5/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
Design Limitations:
Note: These design limitations will be removed on next release once it is created into
announced knowledge base.
Layer 2 Isolation
1. [Symptom] Layer 2 Isolation may not block the clients immediately when clients
still use the old arp records.
[Workaround] If clients already had some ARP records, and it will not send ARP
request before record expired. For test result correctly, please clear test client's
ARP table before testing L2isolation.
User
1. [Symptom] Use IE8 browser to login pre-subscriber and click renew button,
reauthentication time shouldn’t be reset.
[Workaround] The function works fine. It’s a problem on display. The browser
with newer version doesn’t have this problem.
Web Authentication
1. [SPR: 140912458] eITS#141200460
[Symptom] Some URLs can’t be redirected to login page for chrome browser.
[Workaround] please access other URLs.
Wireless
1. [SPR: 150123013]
[Symptom] When set NXC/UAG to proxy mac authentication to UAG internal
radius server, wireless client can’t pass authentication.
Known Issues:
Note: These known issues represent current release so far unfix issues. And we
already plan to fix them on the future release.
BWM
1. [SPR: 150209358]
[Symptom] BWM does not take effect if the policy with service type as
application object and application object as FTP.
Maintenance
1. [SPR: 141224272]
[Symptom] After upgrading firmware and applying specific configuration file
with maximum NAT rules, UAG shows warning message and CPU is high
[Workaround] Please contact CSO to get fixed date code.

6/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
User Authentication
1. [SPR: 150130279]
[Symptom] Move function cannot work when user edits Auth Method.
[Workaround] If user had ever clicked method list column to sort, please clear
browser cache.
Wireless
1. [SPR: 150204154]
[Symptom] GUI still show rogue AP or friendly AP marked in detected device
page even after apply system default configuration.
ZON
1. [SPR: 150108180]
[Symptom] Neighbor information will keep a period of time if changing port
continuously

7/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
Features: V4.18(AAPN.1)C0
Modifications in V4.18(AAPN.1)C0 | 08/10/2017
1. [ENHANCEMENT]
[Payment] New currency RUB and BRL
2. [ENHANCEMENT]
Add Privacy Statement link at login page, it is a statement that declares Zyxel's
policy on how it collects, stores, and releases personal information it collects.
Customer can check the link for details. usage.
3. [ENHANCEMENT]
Add session page switch function. Default enable Session Page function, after
user logon device, welcome page will be covered by pop-up session page.
Customers can disable it and the session page will not pop up.
4. [ENHANCEMENT]
Patches for CVE-2017-9148, FreeRADIUS TLS resumption authentication bypass
5. [BUGFIX] eITS #170600617
Symptom:
Duplicate radius packets for the same account
Condition:
1. Create one external group user
2. Capture packets and login device
3. Filter all radius packets and there are duplicate packets
6. [BUGFIX] eITS #141000195
Symptom:
When the size of accounting request packet is too large, it may cause firewall to
drop it.

8/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
Features: V4.18(AAPN.0)C0
Modifications in V4.18(AAPN.0)C0 | 04/21/2017
1. [ENHANCEMENT]
Support Facebook Wi-Fi.
2. [FEATURE CHANGE]
Change the maximum number of schedule group member.
WAS: Maximum number in schedule group supports 2
IS: Maximum number in schedule group supports 4
3. [BUGFIX] eITS #170200815 SPR: 170314600
Symptom:
When WAN received DHCP packets, it will trigger device to show incorrect alert
log.
4. [BUGFIX] eITS #170200581 SPR: 170317773
Symptom:
The wireless clients cannot do 802.1x authentication anymore by device after
running for weeks.
5. [BUGFIX] eITS #170100106 SPR: 170126984
Symptom:
MacBook connection cause device reboot.
Condition:
1. Reboot device
2. MacBook Wi-Fi try to connect device SSID during booting up.
6. [BUGFIX] eITS #170100339 SPR: 170220882
Symptom:
There are duplicated login users display on Login Users monitor page, if the same
client open multiple UA (User Agreement) login pages at the same time.

9/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
Features: V4.15(AAPN.0)C0
Modifications in V4.15(AAPN.0)C0 | 12/08/2016
1. [FEATURE CHANGE]
Firmware version only display version on CNC. Follow the ISO specification,
Doc. No. ZA3004
WAS: V4.10(AAIZ.2)/1.22/2016-04-14 14:18:08
IS: V4.15(AAIZ.0)b1
2. [FEATURE CHANGE]
Change UAG built –in AP firmware
WAS: NWA3000/5000, NWA5120 and NWA5301 series
IS: WAC6100, NWA5120 and NWA5120-ac series
3. [ENHANCEMENT]
Support APC 1.97 features
Major Support WAC6500/WAC6100/NWA5123-AC Series and Cloud firmware
upgrade
4. [ENHANCEMENT]
Support Socifi social login
5. [ENHANCEMENT]
Enhance max unused account from 180 to 365
6. [ENHANCEMENT]eITS#160300976
Modify GUI page size : DHCP table, login user table, VPN table
7. [ENHANCEMENT]
Support customization Free time Page
8. [ENHANCEMENT]
Display create time column on dynamic guest GUI page by default
9. [ENHANCEMENT]
Support Free Time user auto login

10/29
www.zyxel.com
© Copyright 1995-2017, ZYXEL Communications Corp. All rights reserved.
10. [ENHANCEMENT]
Support HTTP 1.1 for PayPal connection
11. [ENHANCEMENT]
Support wireless PSK encryption.
12. [ENHANCEMENT]
Support WAC6103D-I antenna mode switch configuration
13. [ENHANCEMENT]
Upgrade Openssl-1.0.2h
14. [ENHANCEMENT]
Support internal web authentication portal with FQDN redirect
15. [ENHANCEMENT]
Support TLS 1.0/1.1/1.2 on Vianett SMS
16. [BUG FIX] eITS#160900035
Symptom: UAG5100 monitor display dynamic account expire time abnormally
17. [BUG FIX] eITS#160800386
Symptom: UAG4100 Stops Being Discoverable By ZON Utility
Condition:
1. PC open ZON utility
2. After 1 hours, ZON utility can't discovery device
18. [BUG FIX] eITS#160800867
Symptom: [Web authentication]Billing user login default-web-portal, it can’t use
logout IP to open user countdown page.
19. [BUG FIX] eITS#160900632
Symptom: Log-in user is able to download "startup-config.conf" via specific URL