[FIRMWARE] for UAP/USW has been released | Stable

by Ubiquiti Employee 2 weeks ago - last edited a week ago (46,474 Views)

We've prepared firmware Please see below for the changelog and links to the firmware binaries.

Firmware changes since 3.9.54:

  • [UAPG2/G3] Enable VHT40/80 support for Japan.*
  • [UAPG2/G3] Switch to LEDE framework.
  • [UAPG2/G3] Implement upgraded authenticator.
  • [UAPG2/G3] Fix Fast Roaming support.
  • [UAPG2/G3] Fix Cell Size Tuning support.
  • [UAPG3] Fix BLE support.
  • [UAPG3] Fix a node leak.
  • [UAPG3] Fix a bug where the AP may wrongly kick a client STA when "on other VAP" occurs. 
  • [UAPG3] Fix a bug in uplink that would cause the downlink to hang after a channel change.
  • [UAPG3] Fix inter-VLAN communication issue (reported HERE).
  • [UAPG3] Fix and improve wireless uplink support.
  • [UAPG3] Fix a bug which may cause RF scanning to return incorrect results.
  • [UAPG2] Fix a bug where the downlink will be disconnected when the uplink AP changes channels.
  • [HD/SHD/XG/BaseStationXG] Fix and improve Hotspot 2.0 support.**
  • [SHD/XG/BaseStationXG] Enable Rogue AP scanning on the security radio.
  • [XG/BaseStationXG] Fix reported 10Gbps PHY rate (requires 5.9.29+).
  • [BaseStationXG] Enable LED bar and OLED display support. 
  • [nanoHD/IW-HD] Add client `Framed-IP-Address` to RADIUS accounting data.
  • [nanoHD/IW-HD] Improve 802.11k scanning.
  • [nanoHD/IW-HD] Improve Ethernet stability.
  • [nanoHD/IW-HD] Improve Fast Roaming support.
  • [nanoHD/IW-HD] Fix a bug which may make bandsteering fail to initialize.
  • [nanoHD/IW-HD] Fix instability caused by enabling WLAN scheduling.
  • [nanoHD/IW-HD] Fix throughput issue for clients with certain Intel wireless cards.
  • [nanoHD/IW-HD] Fix wireless adoption issue.
  • [nanoHD/IW-HD] Fix a memory leak.
  • [nanoHD/IW-HD] Fix multiple downlink support.
  • [nanoHD/IW-HD] Fix wrong passphrase issue that some client STAs encountered.
  • [nanoHD/IW-HD] Fix mDNS packets being dropped by IGMP snooping.
  • [nanoHD/IW-HD] Fix bandsteering support when WLAN scheduling enabled.
  • [nanoHD/IW-HD] Fix a bug causing instability when netconsole was enabled.
  • [nanoHD/IW-HD] Fix a bug which may cause some SSID(s) not to broadcast.
  • [nanoHD/IW-HD] Fix a bug in bandsteering.
  • [nanoHD/IW-HD] Fix an issue with wireless adoption when in factory default state.
  • [nanoHD/IW-HD] Fix wireless uplink VLAN broadcast/multicast packets format error issue.
  • [nanoHD/IW-HD] Fix SSDP dropped by IGMP snooping issue.
  • [nanoHD/IW-HD] Fix a bug causing a drop in transmit performance.
  • [nanoHD/IW-HD] Fix RF scanning support.
  • [nanoHD/IW-HD] Fix support for 8 SSIDs per radio.
  • [nanoHD/IW-HD] Fix a bug which may cause an AP to stop forwarding packets when configured to use wireless uplink.
  • [nanoHD/IW-HD] Fix a bug when using VLANs in a wireless uplink topology.
  • [nanoHD/IW-HD] Stability improvements.
  • [IW-HD] Add wired RADIUS MAC auth & DVLAN support.*
  • [IW-HD] Add wired 802.1X fallback VLAN support.*
  • [IW-HD] Add support to control PoE passthrough.***
  • [IW-HD] Enable cell size tuning support. 
  • [IW-HD] Fix 802.1X auto mode.*
  • [IW-HD] Fix a bug in wired 802.1X support.*
  • [IW-HD] Fix wireless uplink support while in factory default state.
  • [EDU] Use new package manager for EDU SIP.
  • [UAP] Enable fast-apply support for minRSSI.
  • [UAP] Silence unnecessary LLDP log spam.
  • [UAP] Fix false MAC filter rejection anomalies in the controller.
  • [UAP] Improve wireless uplink loop detection to fix disconnect issues.
  • [USW] Add more DHCP snooping statistics to CLI output.
  • [USW] Increase local syslog size.
  • [USW] Forward IGMP report packets only on ports with LLDP remote entry.
  • [USW] Forward keepalive (L2 multicast) on IGMP enabled switch.
  • [USW] Fix a bug causing issues with DHCP in some environments.
  • [USXG6POE] Improve PD compatibility.
  • [HW] Fix DHCP option 43 support.
  • [HW] Fix false `Decrypt Error` events and improve logging.
  • [HW] Security improvement.
  • [HW] Miscellaneous bug fixes and improvements.

*Controller support pending.

**Other platforms should be partially fixed, but some may not work as expected (e.g. UAPG2 is missing all related IEs from the beacons).

*** When default PoE passthrough control was added the default was changed to off, instead of on. 


NOTE: You may start to see EVT_AP_RestartProc events in the controller log. If you see these, please report if there is anything specifically in your setup that triggers the events. The processes restarting is not new, but the reporting of the restarting is, and we are using these reports to clean up these issues.



  • Any US-XG-6POE upgrading from 4.0.2 or earlier will take a long time to upgrade. Don't be surprised if your switch is unavailable for 5-10+ minutes as 4.0.3+ also updates the PoE firmware to improve PD compatibility.
  • 1st gen UAPs may require extra steps when upgrading from firmware 4.0.3. You can try disabling all WLAN groups, and then running the upgrade. Devices that are seemingly "stuck" on 4.0.3 may require TFTP recovery to upgrade from that firmware.

  • UAP-IW-HD PoE passthrough will default to off in this release. The default will be changed back to on as of 4.0.10, until we can get control implemented in the controller (when we will change the default back to off).



*This firmware is meant to be a one file solution that works with all models of UniFi switch. You can use it when upgrading from 3.9.40+ only. It will not work when upgrading from earlier releases.


Any and all feedback is welcome, including lettings us know about successful device upgrades. When reporting an issue, please ensure that you include the following information:

  1. Controller version.
  2. Firmware version (previous and current). 
  3. Device model(s). 

Links are all HTTPS. This assumes your device(s) are currently running at least 3.7.51, and that the device's date is properly set (i.e. it can reach a NTP server). If you encounter issues with the upgrade, or your device isn't on a minimum supported firmware, then you can change the link to HTTP before performing the upgrade.