Added

Fixed

BRAS: Fixed work of delegated prefixes.

Fixed

Minor fixes.

Fixed

Minor fixes.

Fixed

Minor fixes.

Added

Fixed

Fixed simultaneous operation of several URL lists with the whitelist_mode on setting.

Fixed

Minor changings.

Fixed

Fixed problem with applying special timeout for ingress sessions.

Fixed

[BRAS] Fixed incorrect coloring of IPv6 traffic by the service.

Changing hostname in the connection_log no longer requires reboot.

Fixed

The problem of interface counters (packets/bytes) monitoring via SNMP has been completely solved (the problem of jumping counters).

Fixed critical issue with CLI freezing by certain BRAS setting.

Fixed a bug with dump.xml parsing in the case when there are uppercase letters in "http".

Fixed problem with ARP resolving for logging subsystems.

Fixed

Fixed

Some minor changes.

Fixed

Some minor changes.

Changed

Changing the autologoff_timeout parameter now does not require a reboot.

The show brascontracts and clear brascontract commands have changed. Now they show/close sessions of all active contracts/subscribers.

Fixed

Fixed a critical error in BRAS operation.

Fixed show dpistate command output.

Fixed

Fixed system connection_log pack_msgs parameter settings.

Changed

Fixed

Fixed passing of TTL time exceeded ICMP packets.

Fixed

Fixed transmission via SNMP of data requiring long processing by EcoSGE (for example, used translation tables).

Optimized the show resources command processing.

Fixed

Changed

Fixed

Fixed

Fixed

Fixed

Some minor fixes.

Fixed

Fixed

Fixed SNMP module error that could cause CLI or SNMP itself to hang up.

Fixed critical BRAS error in IPv6 traffic processing.

Fixed

Some minor fixes.

Added

Changed

Fixed

Some minor fixes.

Fixed

Fixed the bug in CLI for maximum MTU value settings.
Fixed work with managing interface states by CLI.
Fixed a critical error in the BRAS module.

Fixed

Some minor fixes.

Fixed

Fixed leak of log buffers when sending logs through the mng interface.

Fixed handling of ICMP TTL exceeded in cgnat pool.

Fixed display of ICMP counters in show counters all (previously they were displayed only in show counters diff).

Fixed memory leak in the RADIUS ACCOUNTING / AUTHORIZATION algorithm.

Fixed work of the pack_msg setting in connection logging.

Changed

Fixed

Fixed

Fixed a critical error related to the operation of the CLI.

Changed

The output of system info-messages (remount partitions, etc.) to the CLI while connecting via the COM port has been removed.

Fixed

Fixed jump of interface packet / byte counters.

Added

Changed

Improved traffic processing performance.

Fixed

URL filtering. The bug of gluing IP addresses / subnets from filter lists to a common subnet has been fixed.
Fixed line alignment of the MNG interface in the show interface brief output when the MNG interface was running at 10Gbps.

Added

Changed

RADIUS. The default value of the interim_interval parameter is now 60 seconds.

Fixed

URL filtering. The bug of parsing dpilists with IP addresses has been fixed. Filtering could include addresses other than those listed.

Added

Changed

Improved interaction of DPI and BRAS modules.

Fixed

DPI. Fixed module operation when using dpilist only for protocol recognition (without a loaded list of resources).

Added

Changed

QOE. Reduced the size of packet/byte counters.
RADIUS. Now, after the session-timeout expires, an "accounting stop" is sent to RADIUS.

Fixed

RADIUS. Fixed subscriber reauthorization with IPv6 prefix delegated.
RADIUS. Fixed initialization of idle-timeout counter. Previously, it was used only from the second packet.
QOE. The calculation of packets/bytes and determination of the time of the first packet by session is fixed.
Fixed output of clear sessions command.
Fixed "on a stick" mode for 25G interfaces.
Fixed zeroing of interface counters when SNMP is enabled.

Fixed

SNMP. Critical bug was fixed.

Changed

URL filtering. The no_ip_remote parameter of the dpilist has been moved to the configuration tree above, now it is located immediately after no_ip.
Improved CLI performance.

Fixed

URL filtering. The generation of HTTP redirects to sites opened by entering IPv6 addresses in the browser line has been fixed.
Fixed error processing the any value for IPv4 settings.

Added

Changed

Improved interaction between EcoBRAS and EcoDPI modules.

Fixed

URL filtering. Behavior color in dpilists was fixed.
BRAS. A critical bug which led to a crash in some cases when EcoBRAS was working with IPv6 traffic was fixed.
Fixed CLI sticking problem when it returns an error on any input.

Added

BRAS now handles the Delegated-IPv6-Prefix attribute in RADIUS Access-Accept packets for further authorization of users having IPv6 addresses with delegated prefix without sending Access-Request.

URL filtering. A timestamp display of the downloaded registry, as well as the last received delta package were added to the output of the show dpistate command.

Changed

Minor changes in the functionality of JS Injection.

Added

Changed

Improved log sending algorithms.
QoE messages are sent over UDP traffic only if packet/byte counting is enabled.

Fixed

Fixed blocking of HTTPs resources opened by IP.
The work of the show sessions command has been fixed.
Work with IPv6 is fixed in the CLI (in particular, the ability to specify any is added).

Changed

Minor changes (support of the new CPU model).

Fixed

Fixed a bug in the URL filtering module that occurred when loading the registry under the conditions of the filled /tmp section.

Changed

Improved bypass over UDP protocol.

The length of the Agent-Circuit-Id and Agent-Remote-Id fields from opt.82 (transmitted to the RADIUS Access-Request) has been increased to 26 bytes.

Fixed

If there is no IPv6 license, the local_ip_v6 configuration items are not displayed in BRAS policies.

Changed

Fixed

When you enable/disable the processing of IPv6 traffic, a reboot is not required.

Changed

Fixed

Blocking attempts to access a forbidden HTTPS resource by IP (rst is sent).

Changed

Fixed

The CLI has fixed the excessive display of a notification about the need to reboot when changing the config of the interfaces (with on-stick mode).
Fixed work with bypass.
Fixed the operation of the RADIUS module when the Message-Authenticator attribute is in the package.

Changed

Fixed

Fixed a bug in the name of the configuration element system/bypass/bypass_timeout -> system/bypass/bypass_interval.

Fixed sending http redirect / tcp rst when working in a scheme with MPLS encapsulation or with a balancer.

Changed

Changed

Fixed

Added

Added

Changed

Fixed

Temporary files removing.

Fixed

Fixed operation of RADIUS modules with resources.

Fixed

Fixed a bug that caused it to hang authorization in the CLI.

Added

Added option to enable LLDP in the CLI.

Fixed

Fixed filtering of prohibited resources that respond http 200 immediately to tcp syn with the DPI module turned on.
Fixed a bug in URL filtering, which leads to a conflict of dpilists between themselves.
URL filtering in MPLS traffic (improved mechanism of http redirects / tcp rst).

Fixed

Fixed software bug in the parsing of imported registry.

Changed

Changed

Added

Information on the status of power supplies has been added to SNMP.
Added fan speed information to SNMP.

Added

Added support for the new HDD model.

Fixed

Fixed processing with a RADIUS server (problem with freezing users in Authorization).

Changed

Added

RADIUS. The functionality time based policing has been added to shared contracts.
RADIUS. Parsing the contract number in the username field has been implemented.

Changed

Fixed

URL filtering. The omissions of sites which immediately return a page without the psh flag to tcp syn was fixed.

Added

URL filtering. Increased table size for block-type IP storage.

Fixed

BRAS. RADIUS bug was fixed.

Added

URL filtering. A ban on http responses from servers on the Internet has been added until a full outgoing GET request has been received.

Fixed

URL filtering. The error output was fixed during the loading of the Roskomnadzor registry in the absence of IPv6 support.

Changed

The list of supported HDD models has been expanded.

Added

The option permit_invalid_flow was added.

Fixed

Fixed VLAN processing by ACL.

The BRAS service action redirect memory processing was fixed.

Fixed

Fixed URL filtering for IPv6 traffic.

Fixed

Fixed the mechanism of protocol logs turning on.

Changed

The small changes were made.

Added

URL filtering. Implemented DPI based on application signatures.

URL filtering. Added show dpistate command (utilization of DPI buffers).

BRAS. Added RADIUS servers groups. Changed configuration tree section with RADIUS settings. After the upgrade, you must configure the settings, according to the section "RADIUS server settings."

BRAS. Added IPv6 support in BRAS.

BRAS. Added attribute Framed-IP-Address in Accounting packages.

NAT. Added packet logging / byte logging per session.

NAT. Added logging of the beginning and end of the session.

NAT. Added DSCP packet logging.

NAT. Added to the SNMP name and pool type by pool id.

Added version number and serial number in SNMP.

LLDP data added to SNMP.

Added calculation of total traffic in the show interface all traffic [monitor] command output.

Added reductions in binary units in the show interface all traffic [monitor] command output.

Added the ability to send logs via mng-interface.

Added validation of input parameters of type string.

The user’s IP address has been added to the output of the who command.

Added the ability to interrupt the ping and traceroute commands using the [ctrl + c] or [backspace] key combination.

Added OTT-log.

Changed

Changed output when you run the apply command (the entire configuration is no longer displayed).

Improved traffic handling during the execution of the apply command.

Improved RADIUS authentication and accounting functionality.

NAT. Improved ACL engine. Attention! If an ACL is attached to a static pool, then the list should not include the line permit any any.

NAT. In the fake pool, it is no longer necessary to specify global_ip — for both directions of traffic, the data is taken from the pool-attached ACL.

QoE logs are now sent in binary form - the amount of generated traffic is reduced, and the performance is increased.

The servers_ip_and_port parameter is renamed to server_ip_and_port (sections of the clickstream and shortlist configuration tree).

Fixed

URL filtering. Fixed frequent remounting when deleting deltas.

URL filtering. The upload_dump_server function now saves files uploaded to an external server in the correct format (* .zip).

URL filtering. Corrected dpi behavior color.

Fixed SNMP counters show memstat command.

Fixed display of IPv6-addresses in the output of show sessions.

Fixed display of IPv6-addresses in the configuration tree.

Fixed using "|" for the show config <config> command .

Fixed timestamp in connection_log of NetFlow format.

Fixed dependence of QoE logs on the connection_log.

Fixed calculation of NIC buffers for various platforms.

Fixed incorrect application of system.clickstream.source_port setting.

Fixed incorrect definition of terminal sizes for the "| more" conveyor.

Fixed incorrect interruption of the output "| more" by the key combination [ctrl + c] or [backspace].

Fixed VLAT functionality.