Ubiquiti: Unifi Network 7.4.156 released! (OpenVPN, Port Management, Captive Portal…) – Tech2Tech

2023-06-05 14:45:11

A few days ago Ubiquiti released a new update for its app Unifi Network. We are now on Unifi Network 7.4.156 and this update brings many new features and bug fixes.

What does Unifi Unifi Network 7.4.156 bring?

I’m not going to detail here all the new features, but above all the most significant changes.

OpenVPN

It is now possible to create a VPN server via OpenVPN directly from the ” Teleport & VPN“. You should then now have three protocols to create a VPN (L2TP, Wireguard and OpenVPN).

Creating an OpenVPN server remains very simple and I will come back to you with a short guide on this subject.

Port Profile and Port Management

Some changes in the port management interface, which allows among other things to assign VLANs to a port, but also to activate or deactivate PoE or to activate specific functionalities (Storm Control, Port isolation, Spanning Tree, LLDP-MED, Egress, etc…)

You will now be able to easily specify blocking or allowing on specific VLANs. This allows you to automatically create firewall rules. I’m personally not a big fan of this feature since I’m used to manually creating my firewalling rules, but it can be interesting for people who have trouble with this notion.

In this redesign, we also lose the notion of ‘All’ (Trunk mode), in the Network part, which I find quite strange.

Multilingual support (but no French!)

You can now easily select a language other than English (German, Spanish, Portuguese, Arabic, Chinese). However, no French for the moment!

Return of the traffic map

A few months ago we had a world map with traffic, however this option disappeared without much communication. She is now making a comeback.

From this map, you will be able to see the amount of data per country that passes through your router, but you will also be able to block one or more countries directly from this map without having to go to the network settings.

Wi-Fi connectivity

A new interface is appearing to help you see more clearly regarding the management of your WiFi and the devices that may have connection problems, for example.

Hotspot

The way to create and manage the captive portal has also changed slightly. As soon as you create a wifi network with the option ” Hostpot Portal“, then you will have access to a new menu on the left of your Unifi Network app.

From this page, you will be able to see all incoming connections, but you will also be able to customize your home page for the captive portal as it was before.

Changelog complet

Improvements

• Added multi-language support.
• Added support for IPTV through IGMP Proxy (requires UXG or a UniFi Gateway Console).
• Added DHCP IP leases overview in Network Settings (requires UniFi Console with UniFi OS 3.1+).
• Added hover over network names.
• Added Virtual Network Management to the Topology section (requires UDM-Pro or UDM-SE with UniFi OS 3.1+).
• This allows moving clients to different Virtual Networks without the need of putting them on a different WiFi network or by tagging VLANs on ports.
• Improved Port Profiles and Manager UX.
• Improved WiFiMan speed tests section UX.
• Improved Traffic Identification UX.
• Improved Release Notes display UX.
• Improved Network settings UX.
• Improved Gateway/Subnet validation.
• Improved inform URL pasting into the Override Inform Host field.
• Traffic Map UX update (requires UniFi Console with UniFi OS 3.0+).
• Navigate to IP groups on successful group creation from other pages.
• Radius Profile is now automatically set to Default when enabling 802.1X.
• Updated the Display Options button.
• Removed LED/LCM settings if UniFi Console is running UniFi OS 3.1 or newer (moved to Console Settings).
• Removed the Speed Test option for setups with USG.
• Speed test results were inaccurate due to hardware limitations.
• We recommend to use the WiFiman app for speed tests instead.
• Traffic Map UX update (requires UniFi Console with UniFi OS 3.0+).
• Require MongoDB 2.6 as lowest version.

Port Manager

• Added an option to Select Allow or Block when restricting networks in the Port Manager.
• This allows specifying a Virtual network on each port directly without the need for a Port Profile.
• Allowed networks fields are transformed into Restricted networks.
• Allows PoE settings to be available even when a port is set to disabled.
• Removed all default Port Profiles.

Clients and Devices

• Added an option to move adopted devices to different sites.
• Added actionable feedback if a device is using a fallback IP.
• Added last used IP address for offline Clients (requires UniFi Console with UniFi OS 3.1+).
• Added a Group By Application toggle in the Display Options on the Devices page.
• Allow searching clients by Fixed IP.
• Improved Client side panel UX.
• Improved Devices page UX.
• Improved UniFi device update resiliency by adding a DNS fallback.
• Reserved the 192.168.1.20 DHCP lease which is used as the UniFi devices fallback address.
• If you’re using this IP as a Fixed IP for a client, then assign a different address to the client.
• Updated the Connection Column on the clients and devices page.
• Prevent removing a device when the device is busy.

Notifications

• Added System log for TX/RX errors on ports.
• Added notifications for device update failures.
• Improved email notification UX.
• Notification settings are now configurable per user.

WAN

• Added DHCP CoS setting to Internet settings (requires UniFi Console with UniFi OS 3.0+).
• Improved Internet Health side panel UX.
• Migrated ping.ubnt.com echo server to ping.ui.com.

Wireless

• Added Connectivity section under WiFi Insights.
• Added notice for AP with lower link speeds.
• Added a warning for APs that have too many Wireless Mesh downlinks.
• Added a warning when configuring a DFS channel.
• Added a warning when changing 2.4GHz channels to any that are not 1/6/11.
• Added optimized performance to the WiFi performance section.
• Added Meshing warning for APs with AC power.
• Improved WiFi settings UX.
• Improved DFS radar-detected notification.
• Improved validation for selecting incorrect radio channels and channel widths.
• Removed UNII-3 channels from Nightly Channel Optimization in European countries.
• Hide WiFi 6E radio if the country does not allow using it.

Hotspot and Guests

• Added an option to disable the Alex Reed Portal landing page.
• Added Payment Package preview in Hotspot Portal settings.
• Improved UX for Alex Reed Hotspot.
• Automatically select open security protocol when using Hotspot Portal in WiFi settings.
• Removed all Payment methods except Stripe for Hotspot Portal.

VPN

• Added OpenVPN server support (requires UXG or a UniFi Gateway Console).
• Added UXG-Pro Teleport VPN support on the Default site (requires UniFi Console with UniFi OS 2.4+)
• Support for other sites will be available in a future release.
• Improved Subnet/Gateway validation for all VPN protocols.
• If Teleport VPN is disabled the used subnet is now released and can be used on other networks.
• Removed insecure IPsec 3DES encryption on UniFi OS Gateways.

Application Firewall

• Added support for IPv6 in Domain Traffic Rules.
• Added functionality to Traffic Rules for allowing domains blocked by Ad Blocking.
• Improved Application Firewall settings.
• Improved Honeypot IP validation.
• Removed Honeypot configurations from setups that have a USG (this caused configuration issues).

Bug fixes

• Fixed gateway configuration error when assigning an Ethernet port profile with unsupported link speed.
• Fixed invalid validation errors for Auto Scale Network.
• Fixed spam in Trigger Logs caused by broadcast traffic.
• Fixed gateway being re-provisioned every 10 minutes when Talk is configured.
• Fixed loading System Logs in some rare cases.
• Fixed expired certificate used for WiFiman on UniFi Consoles.
• Fixed Auto-Scale Network being enabled when configured to be disabled on a new network.
• Fixed the Direct Remote Connection feature was showing as unsupported in some cases.
• Fixed unable to save Firewall settings in rare cases.
• Fixed unable to load Security Detection logs in rare cases.
• Fixed unable to reach Alex Reed Portal when connected to an AP.
• Fixed link speed validation not working on InWall AP ports.
• Fixed false positive « RADIUS authentication took more than 10 seconds » log messages.
• Fixed an issue that allowed configuring IPv6 settings for L3 networks.
• Fixed an issue where the action shows as « Unknown » for one Alex Reed firewall rule.
• Fixed unable to configure Port Groups in firewall rules when it should be allowed.
• Fixed provisioning invalid blocked client list to gateways.
• Fixed USW-Flex-XG/USW-Enteprise-8-PoE might show disconnected during adoption/upgrading.
• Fixed unable to configure Interface Blocker.

VPN

• Fixed OpenVPN Client not working properly when there IPv6 is enabled on the WAN.
• Fixed unnecessary VPN Server name truncating.

WAN

• Fixed missing WAN IP addresses in the Internet/VPN settings.
• Fixed VLAN Only network not working on WAN2 when it’s remapped as a LAN port.
• Fixed gateway configuration error when configuring a disabled port as WAN(with VLAN) during port remapping.

Clients and Devices

• Fixed unable to load the Devices page in rare cases.
• Fixed inconsistent All Time Internet Activity in the Insights section of the Client side panel.
• Fixed VLAN IDs are not correctly reported for clients.

1686297415
#Ubiquiti #Unifi #Network #7.4.156 #released #OpenVPN #Port #Management #Captive #Portal #Tech2Tech