Beta Software ER605 V2_2.1.4_Build 20230727 Beta Firmware For Trial (Released on Aug 2nd, 2023)
This Article Applies to: ER605 v2 / v2.6_2.1.4_20230720 (Beta) | Fully adapted to Omada SDN Controller v5.11
Update as of Aug 2, 2023:
Thank you all for your valuable feedback on the ER605 2.1.4_20230720(Beta)!
Update the Beta firmware of ER605, which now includes the issue fixed that the ER605 V2 as an OpenVPN client failed to make all the Internet traffic be routed through the VPN tunnel.
ER605_V2_2.1.4_Build20230727 (Beta)
Notes:
(1) The above firmware is applied to ER605 V2 and V2.60.
(2) Your device’s configuration won’t be lost after upgrading.
(3) The above firmware is fully adapted to Omada SDN Controller 5.11.
Hello Everyone,
This release is mainly to fix some issues based on the ER605 V2 2.2.0 official firmware. Please check the following release notes for more about the fixes.
The Purpose of the Beta Firmware
We hope to offer you with a chance to experience the new features added in the Controller v5.11 in advance, and also give us TP-Link the opportunity to fully test the firmware in your real network environment and scenarios before the official release.
Release Notes
New Feature/Enhancement
1. Add ACL support for IPv6 data.
2. Add support for IPv6 RA (Router Advertisement) configuration for LAN.
3. Add support for configuring multiple IP addresses on the WAN port.
4. Add support for monitoring session limits in controller mode.
5. Add support for configuring the MSS (Maximum Segment Size) of WAN port.
6. Add support for Gateway Tools in Controller mode:
- Ping.
- Traceroute.
- Terminal.
7. Add support for the ability to download device info of Gateway in Controller mode.
8. Add support for Location Group in Gateway ACL.
9. Add support for white list of MAC filtering in Controller mode.
10. Add support for tagging same VLAN ID on different WAN port.
11. Increased security of communication between Gateway and Controller.
12. Add support for DNS cache, which can improve domain name resolution speed by handling recent address resolutions locally before sending request to Internet
13. Add support for DH 14 and DH 15 for PFS.
14. Add support for 0.0.0.0/0 IP range of local network when using IPsec IKEv2 for Client-to-Site VPN.
15. Add support for DDNS custom intervals (1~60 minutes).
16. Add support for link-local addresses or unique local addresses of IPv6 DNS on the LAN side.
17. Log Enhancements.
- Show the source IP address of TCP no-Flag /ping of death attacks.
- Show the log of link backup switching.
- Show the log of DDNS update.
- Logs can be saved when the device is down. You need to short press the reset button within 5s, and after releasing the reset button, the sys light will be on for 3 seconds to indicate that the downtime log is saved successfully.
Bug Fixed
1. Fix the bug that ICMP type 13 packets cannot be intercepted.
2. Fix the bug that VPN Client cannot access the other side through IPsec when the device act as a PPTP/L2TP/OpenVPN Server and also establishes IPsec VPN with other devices.
3. Fix the bug that VPN client cannot proxy Internet access when VPN IP Pool and LAN IP are in the same network segment.
4. Fix the bug of CPU abnormality caused by enabling more VLAN Interface.
5. Fix the bug of high latency in ISP Load in Controller mode.
6. Fix the bug of frequent reconnection with Omada Controller.
7. Fix the bug that the VLAN configuration of IPTV is affected by the VLAN configuration of WAN port in Controller mode.
8. Fix the bug that the device does not support proxy internet access as Wireguard VPN client.
9. Fix the bug that Port Forwarding does not take effect under multiple WAN ports.
10. Fixed the issue that the Router might become “DISCONNECTED” in the controller after upgrading to firmware 2.2.0. Reported Here.
11. Fixed the issue that new clients might lose Internet when bandwidth control is configured.
12. Fixed the issue that OpenVPN Server no longer works after upgrading to firmware 2.2.0. Reported Here.
13. Fixed the issue that Internet/DNS resolving might not work when using OpenVPN Connect App/Software to connect to the Router’s OpenVPN Server.
14. Fixed the issue that the ER605 V2 as an OpenVPN client failed to make all the Internet traffic be routed through the VPN tunnel.
Beta Firmware Download
Please be sure you have read the Beta Test Agreement before upgrading the Beta firmware!
ER605_v2_2.1.4_Build 20230720 (Beta)
Notes:
(1) The above firmware is applied to ER605 V2 and V2.60.
(2) Your device’s configuration won’t be lost after upgrading.
(3) The above firmware is fully adapted to Omada SDN Controller 5.11.
Update as of Aug 2, 2023:
Update the Beta firmware of ER605, which now includes the issue fixed that the ER605 V2 as an OpenVPN client failed to make all the Internet traffic be routed through the VPN tunnel.
ER605_V2_2.1.4_Build20230727 (Beta)
Notes:
(1) The above firmware is applied to ER605 V2 and V2.60.
(2) Your device’s configuration won’t be lost after upgrading.
(3) The above firmware is fully adapted to Omada SDN Controller 5.11.
Feedback
Any further feedback on the new firmware, please feel free to comment below or start a new thread from HERE.
To get better assistance, you may check Tips For Efficiently Reporting an Issue In The Community.
When reporting an issue, especially it's about firmware upgrade, it's suggested to include the following info:
- Management mode (Controller or Standalone)
- Device Model(s) and Hardware
- Device Firmware (previous and current)
Thank you in advance for your great cooperation and support.
Recommended Threads
Get the Latest Firmware Releases for Omada Routers Here - Subscribe for Updates
Current Available Solutions to Omada Router Related Issues [Actively Updated, Post for Subscription]
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@Tedd404 It's not enabled. That's why I didn't understand.
Tedd404 wrote
DNA1010 wrote
I need that too. I didn't know what to say when @Clive_A said the router is using both port 80 and 443. It just doesn't make sense.
ElMajor76 wrote
I need the port 80 to generate my certificate via Let's Encrypt and the port 443 is to established a secure connection via HTTPS to my self hosted services.
what i understand him is that he is trying to say that you cannot use a port that has already been taken. if you enable remote management, the 80 and 443 are enabled for remote access. you can port forward 80 and 443 to a local service, but this is based on the precondition that 80 and 443 are not enabled by "remote management".
do you know this feature? is it enabled? if enabled, you type in the ip in the address bar and you access your router's web page by your public ip. 80 and 443 are used by default.
- Copy Link
- Report Inappropriate Content
Hi,
Does anyone know if there is somethng in the settings I need to change to get host resolver working?
- Copy Link
- Report Inappropriate Content
Seems SpeedTest options are now totally gone in 2.1.4 (and the pulled 2.2)?
- Copy Link
- Report Inappropriate Content
@Hank21 I would say "what a beautiful catastrophe" however it was time consuming (about 5h) and a kind of disaster for the local network but... starting from beginning.
I have decided to use USB modem connection as network backup. I used this feature about a year ago with ER605 V2 and it works fine. So, soon after I have noticed it is no go with 2.1.2 firmware (please check here: https://community.tp-link.com/en/business/forum/topic/600074?sortDir=ASC&page=1) I moved to 2.1.4 Beta... and after long hours of going back and forward I have reinstalled 2.1.2, manually restored (one-by-one) all network from scratch (see below why). I hoped that backup (I've made) will be helpfull but no - no way to restore settings from there as well.
Problems after upgrade to 2.1.4:
- lost password - could not use the password I used in 2.1.2;
- reset to default, new password but this time any save/change made which required reboot leads to "lost password" issue
- started again, no changes to network settings but no much time to work with GUI - randomly from 5 to 15 seconds web inteface used to say "session time out"
- after several attempts I was finally lucky (for few minutes) to dowload backup from 2.1.2 and restore settings - but no luck, "lost password" again
- reset to default, new password, quick log into web-interface and change to 2.1.2 - good
- no good: upload saved backup from the same version - but no luck, "lost password" again
- reset again, new password again and with clean 2.1.2 one-by-one changing network settings back to the morning setup - 2.1.2 no issues with "lost password"
And yes, I have cleared all cookies each time I used new / old version, different webbrowsers etc.
Well, I will wait for new firmware "stable" version however it will be good to have all features which are available with this router.
And the last thing - after all this adventures I reminded myself that one year ago I have (most likely) used stand-alone controller (local docker) and this is why it probably worked well. Will try again one day - right now have to chillout :)
P.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Hi @pkordolian
Thanks for posting in our business forum.
pkordolian wrote
@Hank21 I would say "what a beautiful catastrophe" however it was time consuming (about 5h) and a kind of disaster for the local network but... starting from beginning.
I have decided to use USB modem connection as network backup. I used this feature about a year ago with ER605 V2 and it works fine. So, soon after I have noticed it is no go with 2.1.2 firmware (please check here: https://community.tp-link.com/en/business/forum/topic/600074?sortDir=ASC&page=1) I moved to 2.1.4 Beta... and after long hours of going back and forward I have reinstalled 2.1.2, manually restored (one-by-one) all network from scratch (see below why). I hoped that backup (I've made) will be helpfull but no - no way to restore settings from there as well.
Problems after upgrade to 2.1.4:
- lost password - could not use the password I used in 2.1.2;
- reset to default, new password but this time any save/change made which required reboot leads to "lost password" issue
- started again, no changes to network settings but no much time to work with GUI - randomly from 5 to 15 seconds web inteface used to say "session time out"
- after several attempts I was finally lucky (for few minutes) to dowload backup from 2.1.2 and restore settings - but no luck, "lost password" again
- reset to default, new password, quick log into web-interface and change to 2.1.2 - good
- no good: upload saved backup from the same version - but no luck, "lost password" again
- reset again, new password again and with clean 2.1.2 one-by-one changing network settings back to the morning setup - 2.1.2 no issues with "lost password"
And yes, I have cleared all cookies each time I used new / old version, different webbrowsers etc.
Well, I will wait for new firmware "stable" version however it will be good to have all features which are available with this router.
And the last thing - after all this adventures I reminded myself that one year ago I have (most likely) used stand-alone controller (local docker) and this is why it probably worked well. Will try again one day - right now have to chillout :)
P.
Since Hank's job focuses on Controller and wireless, he is not gonna respond. So, if you have any questions, @ me for router and switch issues if I am not on vacation.
So, to make it clear.
1. Lost password. Firmware improved the security.
Upgrading the old version of firmware to the latest version prompts a username and password error because the new version fixes a replay attack vulnerability and updates the verification mechanism during login (adding a timestamp, which is equivalent to a change in the encrypted content of each login password). However, due to the browser cache, the password will still be verified using the old encryption mode before the upgrade, resulting in login failure. Clearing the browser cache and relaunching your browser can fix this problem.
2. Session timeout. See this. The page may age.
3. So, this is because of the Italic paragraph in 1. So that's the cause. Read that part.
pkordolian wrote
- after several attempts I was finally lucky (for few minutes) to dowload backup from 2.1.2 and restore settings - but no luck, "lost password" again
- reset to default, new password, quick log into web-interface and change to 2.1.2 - good
- no good: upload saved backup from the same version - but no luck, "lost password" again
The new verification mechanism is not the same as the old one.
And I did not reproduce this. I restored the backup from 2.1.2 and downgrade from 2.1.4 beta. Don't see any error about the password. It only happens when I updated from 2.1.2 to 2.1.4 beta and after clearing the cache and rebooting the browser, the issue is gone.
- Copy Link
- Report Inappropriate Content
** EDIT **
Nevermind, it appears to be working suddenly. I'll post back if anything changes.
NAT Loopback (Hairpinning) is no longer working for me with ER605 V2_2.1.4_Build 20230727 Beta Firmware. (using Omada Controller 5.12.6)
From inside my LAN, I can not access any of my NAT port forwarded servers using my External IP address. The only thing I can access is my router's login page at EXT-IP:80.
Can you verify on your end? Let me know if you need anything from me to help fix this.
Thanks,
JG
- Copy Link
- Report Inappropriate Content
Hi @Clive_A and thank you for answering!
I guess the problem is not only the web browser (cache cookies etc) - as I have already mentioned in my post I did cleared all and also used another browser (old habit) for new version of firmware. Anyway, Beta was not for me this time. And since it is not working right from the box, let me aks what you think about below mentioned procedure ((beside old habits I'm also old fashion one) for a such firmware upgrade. Your comments and suggestions are most welcome as Beta will become soon the new version and it will be good to move forward (and secure more complicated networks)
1. Backup old version
2. Upgrade to new firmware
3. Log-in to new firmware and in case it is not possible (password issue) reset to default and start with new password
4. Change web idle settings
5. Upload backup (I hope it is still possible otherwise why should we do backup :))
6. Reboot (if not already rebooted few times)
Done
I have to mention that the main reason for me to go to new firmware was a problem with USB network. And since neither 2.1.2 nor new Beta could make it I've deployed Omada software locally (docker) and setup networks with no issue.
Once again thank you for reply!
Best regards P.
- Copy Link
- Report Inappropriate Content
Great week for everyone!
I'm using the Beta firmware and noticed something really annoying here.
I blocked a MAC that I wasn't recognizing yesterday. Today I noticed that my wife was trying to access her computer and she couldn't. The problem was the block I performed.
I undo the blocking and she manages to authenticate on the network, but does not get internet like the others. What is that?
As I'm in a bit of a hurry to fix this, also due to the urgency that she needs to use the PC, I'm returning to the release version. This did not happen in the previous version.
The tricky part is that it establishes the connection now but fails to assign an IP. VERY crazy that, friends.
- Copy Link
- Report Inappropriate Content
Good!
I solved the problem by returning to version 2.1.2.
Now my wife's computer has returned to communicate correctly.
Please fix this problem in beta firmware 2.1.4. I was satisfied with the use, as the processing seems to be much less in this version. It only impacted when I blocked the MAC and then unlocked it, not making the configuration effective.
Much obliged.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 3
Views: 32464
Replies: 134