dnxOS 1.1.2 Update Release Notes

New Features

• Dynamic Routing (BGP and OSPF):

This update significantly expands routing capabilities by introducing support for BGP, OSPF, BFD, and NHRP. New integration and monitoring tools have been added, including FreeRADIUS, MQTT, iPerf, and SSTP. System stability has been improved, certificate management has been optimized, and issues within the firewall, VPN, and cellular modem operations have been resolved.

Location: /routing bgp, /routing ospf

• Failure Detection (BFD):

The BFD protocol is now implemented for rapid link failure detection. Single-hop and multihop sessions are supported, with configurable intervals and detection multipliers.

Location: /routing bfd

• Network Integration (DMVPN/NHRP):

Added support for DMVPN technology based on the NHRP protocol, including Hub role functionality.

Location: /ip nhrp

• Authentication and Connectivity Services (FreeRADIUS):

The FreeRADIUS server for user and client authentication has been implemented.

Location: /radius

• IoT Integration and Data Exchange (MQTT and GNSS):

The MQTT client and broker based on mosquitto are now supported for IoT device integration. GNSS/GPS data streaming over IP has been added to transmit coordinates to third-party systems.

Location: /service mqtt, /peripheral gnss2ip

• Network Protocols and Diagnostics (SSTP, iPerf):

Added support for VPN tunnels using the Secure Socket Tunneling Protocol (SSTP). The iPerf utility has been integrated for network bandwidth measurement.

Location: /tunnel sstp, /tools iperf

Feature Enhancements

• VPN and Security (OpenVPN, User, Certificate):

 Support for the tls–crypt mode and the push–route parameter has been implemented in OpenVPN. The no–password parameter for SSH key authentication, user group support, and access restriction to specific sections via the Denied–Schemas RADIUS attribute have been added. Support for Key Usage and Extended Key Usage fields in certificate generation has been introduced, alongside PEM format export and support for multiple Additional Cert entries.

• System Configuration and Updates (System, Storage):

Support for default.conf has been implemented for automatic configuration application upon factory reset, alongside an include–files flag to incorporate /storage contents into configuration exports. In /system management upgrade, the reset–storage parameter has been added, and automatic installation of software packages (.ipk / .ipks) from /storage file is now supported during firmware upgrades without resetting the system.

• Network Interfaces and Security (Firewall, Wireless, QoS):

NAT helpers for FTP, PPTP, SIP, RTSP, TFTP, SNMP, RAS, and Q.931 protocols have been added to /firewall defaults. Support for address-type lists with automatic domain resolution is now available. WPA2 Personal (psk2_ccmp) and WPA2 Enterprise (wpa2_ccmp with RADIUS) encryption modes have been implemented. The client status page now displays connection duration, data volume, and throughput. Stability of network discipline and class application in /network qos has been improved.

• Diagnostic and Monitoring Tools (Tools, Journal, NTP, Zabbix):

The /tools resolve command has been added for executing DNS queries. The /journal section now supports regular expressions for event filtering. The sync-with-gps option has been implemented for time synchronization via GPS, along with BufferSize and BufferSend parameters for the Zabbix agent in active mode. The Dashboard now displays power supply and UPS battery voltage. New triggers have been added to monitor the default route, task scheduler, Pinger utility, network interfaces, and IPsec status.

• Modem and SIM Card Management (Mobile):

The modem status now provides extended SIM card information (ICCID, IMSI, and name) when the network is unavailable. The duplicate RSSI parameter has been removed from the status page.

Fixes and Stability Improvements

• Networking and Routing (IP, Network):

An issue affecting status display for routes and network objects has been fixed. The system now correctly displays their status instead of unknown.

An issue with bridge interfaces that caused the first IP address to be removed when a second one was added has been fixed.

Support for text and hex formats for DHCP ClientID has also been added, and ARP entry validation has been updated to prevent incorrect configurations.

• Firewall:

An issue with the display of dynamic rules has been fixed. Their status is now correctly displayed in the interface.

Handling of static entries has been optimized: rules are synchronized with iptables without delays, and the deletion of dynamic rules is now more stable when using the web interface and CLI.

Traffic counter reset has also been fixed, and entry numbering in the system journal has been corrected.

• Tunnels (OpenVPN, PPTP, IPsec):

The loading of certificates and tls-crypt/tls-auth keys for OpenVPN has been optimized. File paths are now initialized correctly without requiring a forced service restart. The ovpnserver interface no longer freezes after applying settings, and an issue with the PPTP server status when checking routes has been fixed. In addition, firewall rules for IPsec have been switched to a dynamic model, preventing conflicts when network services are reset.

• System, Packages, Storage, and SMS

System stability during configuration reset and rollback has been improved: network freezes when applying the configuration have been eliminated.

Package installation and removal have been fixed, preventing dependency errors and incorrect handling of file names.

The data import mechanism for storage has been updated, ensuring that files with unusual characters in their names are saved correctly.

An issue that caused certificate files to be saved to incorrect system directories has been fixed.

The display of SMS messages in complex formats (for example, JSON) has also been fixed.

• Interfaces and Devices (Wireless, VRRP, Pinger, Modem, Serial, Console):

An issue with the Again button in the web interface has been fixed, as well as an issue causing the Loading status to freeze during operations.

An issue with the display of rule states in the firewall list after using the Back button has been fixed.

Support for additional characters in the login has been added for EAP authentication. Issues with field visibility for EAP-TLS, EAP-TTLS, and EAP-PEAP modes and adapter status display have also been fixed.

For VRRP, the display of the disabled status has been clarified, and the process termination timeout in master mode has been increased.

The Pinger connectivity check script now works correctly with single requests, provides detailed statistics, and takes the modem response timeout into account.

An issue causing the modem to freeze on devices with a hardware SIM switch has been fixed.

An issue with the modrelay service startup after a reboot has been fixed.

The number of reboots when switching the overlay to an SD card has been reduced. On M series routers, an issue that could cause an accidental console reboot when using the CTRL+C key combination has been fixed.