Firmware-update: Draytek Vigor 2900 2.5.4.2

Op de FTP-server van Draytek.nl staat sinds kort een nieuwe firmware voor de Draytek Vigor 2900 routers. Het versienummer is inmiddels aangekomen bij 2.5.4.2 en wordt met de volgende release notes geleverd:

[New Features]:

1. Support the automatic negotiation of the WAN link speed.
2. Add a Telnet command "show session" to show the current number/Maximum number of NAT sessions.
3. Show the version of the wireless code in the wireless web page (WebUI).
4. Support QoS function.
5. Be capable of securely accessing the WebUI to configure the router via HTTPS protocol.

[Improvement]:

• Improve the VPN performance.
• Enhance throughput performance when using soem FTP client to download big file from Internet.

[Corrected Problem]:

• ARP related:
  1. Reply to all ARP requests on the WAN side for compatibility issue.
  2. Send ARP request to the default gateway every 5 minutes for compatibility issue.
  3. Reply to all unicast ARP request on the WAN side for compatibility issue.
• VPN related
  1. Correct the IKE proposal mismatch problem.
     That is, (otpsk1024des3md5 ==> otpsk1024desmd5) and (otpsk1024des3SHA1 ==> otpsk1024desSHA1)
  2. Flush the data cache for HW-DES/3DES.
  3. Remove IKE_SUPPORT_PFS for better compatibility.
  4. Modify the IKE rekey method.
  5. Can not set peer id in lan2lan setting by using CLI.
  6. Lan2Lan PPTP does not trigger the Internet when specifying the remote node in domain name format.
• NAT related:
  1. Reset portmap by checking ACK and sequence nubmer.
  2. Clean unused NAT sessions (UDP session per 180 sec and TCP session per 60 sec).
• Wireless related:
  1. Patch VPN over WLAN problem (To avoid the user to access the router before establishing the VPN tunnel).
• ISDN related:
  1. Faxing through VTA is more smooth and robust.
• Others
  1. DMZ LED for Vigor2900
     • After enabling the DMZ function, the DMZ LED will be turned on.
     • Once any packet passes through the DMZ port, the DMZ LED will be flash.
  2. Modified "BAD IP" with "CONFLICTED IP" in DHCP assign table.
  3. When DNS server is the DMZ host and the NTP server is enabled, user can not query the DNS.
  4. Fill the ciaddr with "0" when sending DHCP request packets.
  5. Remove the "www.draytek.com.tw" banner in WebUI.
  6. Correct the reboot problem when type log -wt.
  7. Correct the BOD function.
  8. Can not set an empty new password whenever an admin-password is created.
  9. NTP server is changed to "pool.ntp.org" when using Quick Start Wizard.
  10. Port 443 is scanned by using port scan while allow management from the Internet is disabled.
  11. Support telnet command to change WAN ip address from Internet.
  12. Online status has ip address 0.0.0.0 by using DHCPC after using telnet command to do some configuration.
  13. Can not configure the vlan setting by using Mozilla.
  14. Bypass the setting of password in quick start wizard once the password is set.
  15. Remove the duplicate to lan in IPFilter setting.

[Note]:

1. Sharing folders between VPN tunnels does not work when the defense worm functionality is activated.
   Please use "mngt defenseworm off" in CLI to turn it off.
2. It does not support Https working with Internet Exproler when using VPN over wireless(Only L2TP over IPSec).