[FIRMWARE] for UAP/USW has been released | Stable

by Ubiquiti Employee on ‎07-25-2018 10:21 AM (101,900 Views)

We've prepared firmware Please see below for the changelog and links to the firmware binaries. This is a stable release which has been posted to our website, and pushed out to various recent controller branches (5.6+).


This firmware was not released as stable for all UniFi devices. If any model(s) of AP you have aren't listed, and they are on 3.9.41 or later, then you may need to run a command via shell to get that device off of its current firmware. We have a thread detailing that process HERE.


Firmware changes since 3.9.27:

  • [UAPG2/G3] Enable multi-hop wireless uplink on all (G2/G3) UAPs.
  • [UAPG2/G3] Fix a couple issues with fast roaming when open SSIDs are also present. 
  • [UAPG2/G3] Fix guest portal support.
  • [UAPG2/G3] Remove CCQ reporting from SNMP, as it is unsupported on these devices. 
  • [UAPG3] Add RADIUS authentication tracking.
  • [UAPG3] Enable uplink priority support.
  • [UAPG3] Fix L3 adoption issue. 
  • [UAPG2] Improve reliability under heavy load.
  • [UAPG2] Fix 2.4GHz disconnect issue.  
  • [UAPG2] Fix priority uplink support.
  • [UAPG2] Fix an issue with client reassociation for SSIDs with Fast Roaming enabled. 
  • [UAPG2] Fix a bug which may trigger a network loop when using wireless uplinks.
  • [UAPG2] Fix broadcast leak when using DVLAN. 
  • [UAPG1] Fix SNMP support.
  • [XG/BaseStationXG] Enable VHT160 support.
  • [nanoHD/IW-HD] Add wireless uplink support.
  • [nanoHD/IW-HD] Add support for priority uplink selection.
  • [nanoHD/IW-HD] Add RF environment scanning.*
  • [nanoHD/IW-HD] Add RADIUS MAC Auth support. 
  • [nanoHD/IW-HD] Add UAPSD support for multi BSSIDs. 
  • [nanoHD/IW-HD] Add legacy device support.
  • [nanoHD/IW-HD] Improve 5GHz rate control algorithm.
  • [nanoHD/IW-HD] Improve auto channel selection. 
  • [nanoHD/IW-HD] Improve 2.4GHz auto channel selection.
  • [nanoHD/IW-HD] Improve speed for non-guest VAPs, when guest VAPs are also present.
  • [nanoHD/IW-HD] Bandsteering changes, bringing it inline with other UAPs (that support bandsteering). 
  • [nanoHD/IW-HD] Fix Ethernet status reporting. 
  • [nanoHD/IW-HD] Fix 802.11w support.
  • [nanoHD/IW-HD] Fix broadcast filter.
  • [nanoHD/IW-HD] Fix bandsteering disconnection issue.
  • [nanoHD/IW-HD] Fix a potential RADIUS accounting bug.
  • [nanoHD/IW-HD] Fix MAC ACL.
  • [nanoHD/IW-HD] Fix a bug which caused the MAC address filter to not work in some cases. 
  • [nanoHD/IW-HD] Fix a bug with bandsteering so 2.4GHz only client STAs can connect (reported HERE).
  • [nanoHD/IW-HD] Fix a bug that prevented client STAs from connecting to hidden 2.4GHz SSIDs.
  • [nanoHD/IW-HD] Stability and performance improvements.
  • [nanoHD/IW-HD] Remove old guest client STAs once disconnected from the network (reported HERE).
  • [nanoHD/IW-HD] Add VHT160 support for RF Environment scanning.
  • [nanoHD/IW-HD] Fix hidden SSID provisioning.
  • [nanoHD/IW-HD] Fix reported signal of neighboring APs (reported HERE).
  • [nanoHD/IW-HD] Fix an issue with TX power provisioning.
  • [nanoHD/IW-HD] Performance and stability improvements.
  • [IW-HD] Fix DVLAN issue. 
  • [UAP] Add process restart and exit status events.
  • [UAP] Add RTT latency tracking.
  • [UAP] Add authentication tracking.
  • [UAP] Improve client statistics reporting. 
  • [UAP] Fix a bug with MeshV3 wireless adoption.
  • [UAP] Fix reported client STA signal.
  • [UAP] Fix a print issue with stainfo, where RSSI bleeds into TX rate.
  • [UAP] Fix TX retry accounting.
  • [UAP] Fix uplink status reporting. 
  • [UAP] Fix rate limiting on non-guest SSIDs.
  • [UAP] Fix the memory leak when using broadcast/multicast filter and RADIUS assigned VLANs.
  • [UAP] Disable PMKSA caching by default.
  • [USW] Add Port Security and MAC ACL support.*
  • [USW] Add 802.1X guest VLAN support.*
  • [USW] Restart DHCP client after a port is up. 
  • [USW] Fix LAN client stats when using LACP/LAG.
  • [USW] Fix issue with default VLAN not working when using MAB.
  • [USW] Fix ability to toggle flow control. 
  • [USW] Disable SNMP by default. 
  • [USW] Reduce max VLANs to 255 (default), which lowers memory use by ~10%.
  • [USW] Fix RADIUS server provisioning.
  • [HW] Fix inform URL caching issue. 
  • [HW] Add URL support for DHCP option 43.
  • [HW] Several fast-apply provisioning improvements. 
  • [HW] Unify several modules across various UniFi platforms (UAP, USW and USG).
  • [HW] Various bug fixes and improvements.
  • [SEC] Security improvements.
    • One is of medium/low severity It was privately disclosed and it requires external data otherwise it's not possible to exploit. 
    • The other is of low/medium severity. It was discovered internally.

*Controller support may vary/ pending.


NOTE: You may start to see EVT_AP_RestartProc events in the controller log. If you see these, please report if there is anything specifically in your setup that triggers the events. The processes restarting is not new, but the reporting of the restarting is, and we are using these reports to clean up these issues.


IMPORTANT NOTE: In preparation for an upcoming code merge, we've updated the minimum firmware version to 3.9.42 for certain hardware. That means if you flash this firmware onto any HD/SHD/XG/BaseStationXG then you will not be able to downgrade to firmware prior to 3.9.42. 



*This firmware is meant to be a one file solution that works with all models of UniFi switch. You can use it when upgrading from 3.9.40+ only. It will not work when upgrading from earlier releases.


Any and all feedback is welcome, including lettings us know about successful device upgrades. When reporting an issue, please ensure that you include the following information:

  1. Controller version.
  2. Firmware version (previous and current). 
  3. Device model(s). 

Links are all HTTPS. This assumes your device(s) are currently running at least 3.7.51, and that the device's date is properly set (i.e. it can reach a NTP server). If you encounter issues with the upgrade, or your device isn't on a minimum supported firmware, then you can change the link to HTTP before performing the upgrade.