v1.5.17 Bug Reports and Comments

[sirhc]

THIS THREAD IS CLOSED AS v1.5.18 was released 11/16/2024

***NOTE: WILL RESET PASSWORD BACK TO DEFAULT PASSWORD "admin" WHEN UPGRADING SO YOU MUST RESET PASSWORD AFTER UPGRADE.

Personally we feel this is the most stable and best firmware since v1.4.8.
We have been testing this intensely for weeks.


***NOTE:
Some people use a smart power strip that will reboot a switch if pings stop. This upgrade process can take longer than normal due to a lot of house keeping from the vast changes in code. So if the unit is power cycled during the upgrade it is bricked. Make sure to disable this or increase time missing pings till reboot 10 minutes or more.



FIXED/CHANGED
- Patched security holes to prevent hacking, however you should always use the Access Control List as good practice.
- Upgrade failure on very old WS models
- Openssl upgraded
- lighttpd upgraded
- Removed PHP replaced with compiled binaries (approximately 60,000 lines of code needed re-written)
- Greatly improved SFP compatibility and Stability where you saw SFPs not come up after upgrades and reboots
- Fixed potential multi reboots due to certian configurations during warm boots and firmware upgrades
- Fixed NTP
- Fixed SNMP memory leak
- Upgraded password hash (WILL RESET PASSWORD BACK TO DEFAULT "admin" WHEN UPGRADING REQUIRES PASSWORD RESET AFTER UPGRADE)
- Upgraded session hash algorithm
- Fixed MAC table lookup and updated to latest vendor list

ENHANCEMENTS
- UI works faster as it is binary verses PHP

KNOWN ISSUES
- WEB UI issues when not at 100% Zoom on browser especially on VLAN TAB
- Some language templates need help

Released 11/14/2024

[troy]

If it weren't for the fact that I was upgrading a switch that a tech was in the process of installing, I'd have had a near heart attack.

Upgrade itself went fine, got logged back in with admin/admin. Changed the password and logged out.

Can't log back in. Try again. Fat finger? Copy/paste. Nope, it is not working.

SSH? Yup, that works fine. Try resetting password again. Same results. Can't log in via Web, but SSH works fine.

Having to use a shorter/simpler password (no special characters) for the moment.

Other than that, seems fine so far. Excited to see snmp fixed. Didn't see a reference to the vtss_appl processes, but maybe that was fixed recently? We've skipped the last couple releases since a modified monitor script on 1.5.14 made the things stable for a change.

[WisTech]

Just got back from a hilltop I upgraded and the switch went dead. I'll wire it up on the bench tomorrow and figure out what went wrong. Jumped from 1.5.14 to 1.5.17. The switch it's wired to showed 1G link, but one way traffic. Strange.
Upgraded a couple WS-24-400A, and a WS-6-MINI without issues, but this particular old style 8 port DC wasn't happy for some reason. Held off on updating the other three WS-12-250DC at this same site, it was freaking blowing like crazy and cold! ;)
Glad to see you guys are still around and working to improve!

[coreinput]

Upgraded from 1.5.16 running since May 2024 and everything went smooth (and no POE loss). Hats off to the team including beta testers for making this release happen. Thanks!

[sirhc]

If it weren't for the fact that I was upgrading a switch that a tech was in the process of installing, I'd have had a near heart attack.

Upgrade itself went fine, got logged back in with admin/admin. Changed the password and logged out.

Can't log back in. Try again. Fat finger? Copy/paste. Nope, it is not working.

SSH? Yup, that works fine. Try resetting password again. Same results. Can't log in via Web, but SSH works fine.

Having to use a shorter/simpler password (no special characters) for the moment.

Other than that, seems fine so far. Excited to see snmp fixed. Didn't see a reference to the vtss_appl processes, but maybe that was fixed recently? We've skipped the last couple releases since a modified monitor script on 1.5.14 made the things stable for a change.

Keep in mind when upgrading from older (v1.5.17rc2 or older versions) ONLY the password is defaulted to "admin" due to upgraded password hash storage.

If this was a new unit with admin /admin should have been fine for login as admin admin

Try SSH credential reset for both user and password then very important to refresh browser as web pages changed and if it has old login page cashed could cause problems.


I have switches to using FIrefox and configuring TLS to support v1 so can address older firmware. In FireFox in address bar type "about:config" agree to reisks, then search for TLS. Towards bottom min TLS is default 3 set to 1 then you can access even old firmware switches with old TLS and even older UBNT gear with same issues.

Let us know

[sirhc]

Just got back from a hilltop I upgraded and the switch went dead. I'll wire it up on the bench tomorrow and figure out what went wrong. Jumped from 1.5.14 to 1.5.17. The switch it's wired to showed 1G link, but one way traffic. Strange.
Upgraded a couple WS-24-400A, and a WS-6-MINI without issues, but this particular old style 8 port DC wasn't happy for some reason. Held off on updating the other three WS-12-250DC at this same site, it was freaking blowing like crazy and cold! ;)
Glad to see you guys are still around and working to improve!

OK so OLD switches:
WS-24-400
WS-24-400A
WS-12-250A
WS-8-250-DC (the old original ones with flat SFP stack)

May have a problem as in the bneginning we did not include boardrev in the config so they will have problems but they are 10 year old switches

There is a fix:
Connect console cable:
drop to linux with CMD command
Cut and paste this into console:

cmd
cat<<EOF>cfgfile
MAC=EC:13:BX:XX:XX:XX <= NOTE MAKE SURE MATCHES ORIGINAL MAC
----MODEL=WS-24-400
----MODEL=WS-24-400A <=USE WHAT YOUR MODEL IS
----MODEL=WS-12-250A

BOARDREV=X <=USE WHAT YOUR BOARD REV WAS BUT IF UNSURE USE "B"
SERIAL=0
EOF
mtd write cfgfile config
reboot [CR in paste or Enter at end]

Reboot unit should be fine

Let us know, again only needed on original units when we started as we did not include BOARDREV in serialization.
To be honest did not think many if any of these 10 year old units would still be in service.

[sirhc]

Just got back from a hilltop I upgraded and the switch went dead. I'll wire it up on the bench tomorrow and figure out what went wrong. Jumped from 1.5.14 to 1.5.17. The switch it's wired to showed 1G link, but one way traffic. Strange.
Upgraded a couple WS-24-400A, and a WS-6-MINI without issues, but this particular old style 8 port DC wasn't happy for some reason. Held off on updating the other three WS-12-250DC at this same site, it was freaking blowing like crazy and cold! ;)
Glad to see you guys are still around and working to improve!

+



May have a problem as in the beginning we did not include boardrev in the config so they will have problems but they are 10 year old switches
There is a fix, however PLEASE MAKE SURE YOU HAVE DIRECT ACCESS TO THE SWITCH AS DOING THIS WRONG COULD BRICK IT:
Connect console cable:
drop to linux with CMD command
Cut and paste this into console:

cmd
cat<<EOF>cfgfile
MAC=EC:13:BX:XX:XX:XX <= NOTE MAKE SURE MATCHES ORIGINAL MAC
----MODEL=WS-24-400
----MODEL=WS-24-400A <=USE WHAT YOUR MODEL IS
----MODEL=WS-12-250A
BOARDREV=X <=USE WHAT YOUR BOARD REV WAS BUT IF UNSURE USE "B"
SERIAL=0
EOF
mtd write cfgfile config
reboot [CR in paste or Enter at end]

Reboot unit should be fine
Let us know, again only needed on original units when we started as we did not include BOARDREV in serialization.
To be honest did not think many if any of these 10 year old units would still be in service.

[sirhc]

All I can tell you is there may be some hick ups with mostly OLD units like original units 10 years old but once on this version it is our best firmware yet and moving forward it is very secure and stable. This was a monumental task and has taken all of Stephens and my time for past 8 weeks and when I say all time I mean like 80 hours a week many times watching sun come up.

Better SFP compatibility

Faster

SECURE

After we monitor this a few days back to WS3-14E-600-AC / DC unit with 2.5G copper ports

After first release we will finally bring routing and enhanced bandwidth control into later firmware releases. Good note is same firmware will be used on current WS3-14-600-AC / DC also providing same routing and bandwidth features.

Then after that release 2 more models
as discussed in previous posts.

WS3-20E-600-AC /DC which has 4 SFT+ ports (3) 48V terminal programable power ports (16) 2.5G copper ports
WS3-5E which is tower mountable (1) SFP+ separate power line (meant to match up with WS3-20E-600) (4) 2.5G coppper

[sirhc]

AGAIN AFTER UPGRADE THIS IS A VERY STABLE MUCH BETTER FIRMWARE.

Not saying someone might find something we missed but will fix promptly with v1.5.18rc1

BEST CODE IN YEARS - MAJOR EFFORT - MOSTLY STEPHEN BUT WE ALL CONTRIBUTED AND CONVERSED AND WORK TOGETHER FOR 2.5 MONTHS on this 80+ hours per week.

[softcombrian]

Bricked 2 WS-12-250-DC switches and your fix script didn't work.