Netzwerk

Synology-Router erhalten ein neues Update

Wie Synology jetzt bekannt gegeben hat, erhalten die Router RT1900ac, RT2600ac und der MR2200ac ein Update. Besagte Aktualisierung sorgt unter anderem dafür, dass sich Wi-Fi-Access-Points zu einem Mesh-Netzwerk hinzufügen lassen. Außerdem ist es möglich, verschiedene Access-Points mit unterschiedlichen SRM-Updates zu einem Mesh-Netz hinzuzufügen. Des Weiteren gibt es jetzt eine Unterstützung bei der Kommunikation zwischen Client-Geräten und dem Gast-Netzwerk sowie bei der Datenspeicherung und bei der Gültigkeit von Default-Zertifikaten. Eine komplette Übersicht aller Neuerungen findet sich unterhalb dieses Artikels. 

Neben der Vielzahl an Neuigkeiten behob Synology mit der neuesten Aktualisierung zudem diverse Fehler in der Firmware. Dazu gehört unter anderem ein Abfall bei der Performance, wenn ein Apple-Gerät mit macOS am Router betrieben wurde. Außerdem gab es beim iPhone 11 mit installiertem iOS 13.2.3 Probleme mit der Verbindung bei  WPA3-Enterprise-WLAN-Netzen. Ebenfalls ist SRM nun wieder in der Lage, Logfiles des Access-Points an Log-Server zu verschicken. Auch dass es bei SRM zu Fehlern bei dem Versenden von E-Mails kommen konnte, wenn der Mail-Server mit SSL/TLS angesprochen wurde, soll der Vergangenheit angehören. 

Zudem sind mit dem neuen Update insgesamt sechs Sicherheitslücken von Synology geschlossen worden. Eine komplette Auflistung findet sich weiter unten.

Neuigkeiten

• Added support for adding Wi-Fi points to a mesh Wi-Fi system via Ethernet cables during the first-time deployment.
• Allowed a mesh Wi-Fi system to have Wi-Fi points running different SRM's Update versions (with the same four-digit build number) so as to enhance update experience.
• Added support to configure multicast translation and IGMP snooping in a mesh Wi-Fi system.
• Added support for communication between client devices within the guest network.
• Added support for broadcast storm prevention through MAC filtering, which prevents wireless devices from sending a large number of broadcast packets in a short time and affecting the normal usage of other devices.
• Added support to apply the Default Policy of traffic control to each device connected to the guest/local area network.
• Added support for delivery of traffic reports on the last day of every month.
• Improved the startup speed of Synology Router after an SRM update.
• Enhanced the performance of iPhone USB tethering.
• Unified the behaviors of soft reset on RT1900ac, RT2600ac, and MR2200ac: the username of administrator's account can be customized during the reset.
• Added support for LCP identification of PPPD settings during a PPPoE connection (required by some ISPs).
• Added support for the IGMP querier timer for IPTV to enhance compatibility.
• Added support for connection tests of DNS over HTTPS (DoH).
• Adjusted the behaviors of data storing: system data will now be respectively stored in each external storage device connected to Synology Router.
• Updated the valid period of default certificate to 398 days in response to the policy change of Apple.
• Enhanced the compatibility of WPA2-EAP/WPA3-EAP with RADIUS servers in a mesh Wi-Fi system.

Fixed Issues

• Fixed the issue where the performance of Synology Router might be reduced when a macOS device connects to it.
• Fixed the issue where iPhone 11 running iOS 13.2.3 might fail to connect to the WPA3-Enterprise wireless network.
• Fixed the issue where SRM might fail to send logs of Wi-Fi points to other log servers.
• Fixed the issue where the wireless network might not work properly after an update of SRM on which configurations have been restored.
• Fixed the issue where packages might not be downloaded properly from Package Center on RT2600ac.
• Fixed the issue where interface failover cannot function properly when either of the WAN interfaces is disconnected.
• Fixed the issue where devices on the guest network might fail to access the Internet when a policy routing rule that directs network traffic through the secondary WAN interface is in place.
• Fixed the issue where users might not be able to select WAN interfaces upon configuring static routing if the IPTV uses 10 as its VLAN ID.
• Fixed the issue where SRM might fail to access the Internet via PPPoE when IPTV is enabled.
• Fixed the issue where IP addresses might not be obtained from ISPs (Internet Service Providers) after Synology Router restarts.
• Fixed the issue where RT2600ac might fail to access certain HTTP IP addresses when it is in the wireless AP mode.
• Fixed the issue where the links of traffic reports in notification emails might be invalid when the task names of reports contain special characters.
• Fixed the issue where the device list on the Traffic Control page might incorrectly display the IP addresses of banned and disconnected devices.
• Fixed the issue where the status of a user account might be shown as "disabled" immediately after it is scheduled to be disabled on a later date.
• Fixed the issue where Synology Router in the wireless AP mode might fail to send packets to specified gateways when there are multiple routers and gateways within the local network.
• Fixed the issue where port forwarding might not work properly with PPPoE connection after Synology Router restarts.
• Fixed the issue where SRM might fail to send notification emails through mail servers with SSL/TLS settings.
• Fixed the issue where SNMP messages might not contain correct SRM information.
• Fixed the issue where SRM might fail to renew the Let's Encrypt certificate.
• Adjusted the memory parameters for MR2200ac to prevent unexpected restart.

Security Updates

• Fixed a security vulnerability regarding BSD (CVE-2019-20367).
• Fixed a security vulnerability regarding hostapd (CVE-2019-16275).
• Fixed multiple security vulnerabilities regarding Dnsmasq (CVE-2019-15107 and CVE-2019-14834).
• Fixed a security vulnerability regarding Linux kernels (CVE-2017-13168).
• Fixed a security vulnerability regarding CallStranger (Synology-SA-20:13).
• Fixed multiple security vulnerabilities (Synology-SA-20:14).

Known Issues & Limitations

• Due to security considerations, if configurations backed up from a mesh Wi-Fi system running SRM 1.2.3 or earlier are restored on the primary Wi-Fi point running SRM 1.2.4 or later, all Wi-Fi points (except the primary one) need to be reset and added to the mesh Wi-Fi system again.
• Re-login to Synology mobile applications (DS cloud, DS file, DS get, DS router, and Synology VPN Plus) is required after SRM is updated to 1.2.4.