byUBNT-MikeD06-26-201711:08 AM - edited 07-26-201705:17 PM
Introducing our latest release for UniFi wireless, routing & switching hardware.This is our latest Stable release for the 5.4.x branch.
How to play safe?
Make sure you always do a backup before any updates, especially if you plan to upgrade your existing installation.
For people who are migrating from v3, there're many changes to APIs and it's not backward compatible. You may need to update the shell library (unifi_sh_api) and/or your customized portal/external portal code.
Windows users must have x64 Java installed to use the unifi.ubnt.com cloud tie in, as we only support 64 bit webRTC library. Please see HERE and download the missing version (64bit offline Windows install package). The controller will run in an x86 only environment, or with x86 Java, but the unifi.ubnt.com tie in will not work.
For hotspot management console, make sure you have bookmark the URL with site ID (i.e. x66cipn3, or whatever random string is generated for that site). For example: https://unifi.yourdomain.com:8443/manage/hotspot/site/SITE_ID
For Debian/Ubuntu users, please update your APT source (seeHERE).
unifi-beta/unifi-rapid are obsoleted. The old repo has been removed.
use `stable` or `unifi-5.4` in your source file.
On Linux you can now use Oracle Java instead of OpenJDK (if desired). When using Oracle Java you may need to define the JAVA_HOME location on your Debian/Ubuntu installation. To do this you need to create a default file to define the path. This method is persistent across controller upgrades. Something like the following will work for Oracle Java (change JAVA_HOME path as needed):
echo "JAVA_HOME=/usr/lib/jvm/java-8-oracle" | sudo tee -a /etc/default/unifi
You can no longer manage/control UniFi VoIP devices from the UniFi controller. Please use the UniFi VoIP controller for UVP products. The latest release as the time of this post is foundHERE.
You cannot re-use a VLAN ID for dynamic VLAN if it is set as a static value for another SSID on the same AP. So, if I have a SSID set to use VLAN 10, I cannot use VLAN ID 10 for RADIUS controlled VLAN users as those users will not get an IP.
Cloud Access feature in this release is not supported on Linux/ARMv6 architecture (for exmaple, Raspberry Pi 1). If you have problem starting controller on this platform, please remove the native library:
Smart Queue QoS is similar to the implementation as in EdgeOS (see HERE). Please note that DPI will not work when using Smart Queue QoS, as traffic will not be offloaded. It's also worth noting that maximum throughput will be affected when using Smart Queue QoS, as traffic is not offloaded. There are some rough guidelines in the article linked above.
DFS channels can not be used for wireless uplink in the US. Please use non-DFS channels if you need to use wireless uplink on dual band UAPs.
Official UniFi MIBs can be downloaded from HERE and HERE (those are 2 different files).
A full changelog has been attached, showing changes back to the first public release (1.2.1).
We no longer support Java version 6, it needs to be 7 or later. We recommend Java version 8.
All APs will be reprovisioned on controller upgrade, which will cause a temporary outage for all connected users. Please make sure to do this after hours, or a time when it's okay to disconnect users for several minutes. This shouldnot affect users upgrading from 5.3.8 or later.
Features like airtime fairness, bandsteering, load balancing and minimum RSSI are default disabled. If you need them you need to go to Settings>Site and check Enable advanced features.
If you previously used Google Maps for a site map, then you have to enable this feature again by adding an API key. This is done under Settings>Controller. There is a linked guide with instructions.
Do not choose the skip option when running the Migrate Site wizard. If you do your devices may end up in a weird state.
Controller bugfixes/changes from 5.4.16
Add support of UAP-AC-IW-Pro.
Allow antenna gain of 0.
Fix delete actions in WebRTC connection.
Disable WLAN data rate control (unsupported in 5.4.x, supported in 5.5.x+).
Update bundled snappy-java to 184.108.40.206.
Remove TLSv1 from default SSL protocols for Java 7/8.
Change CDN end points from HTTP to HTTPS (when device firmware supports it).
Add Support file warning.
Improve navigation accessibility.
Fix an issue when trying to register controller with UniFi cloud tie in (unifi.ubnt.com).
Various backend improvements.
A security improvement.
Firmware changes from 3.7.55
[UAPG3] Fix guest portal when bonding is enabled.
[UAPG3] Various stability, performance and backend improvements.
[UAPG2] Add QBSS Load IE.
[UAPG2] Add ramoops support to save kernel crashes in high memory.
[UAPG1/G2] 2.4G performance improvements.
[UAPG1] Fix for initialization issues on AR724x/QCA933x based UAPs.
[UAPG1] Fix issue with missing ca-certs package on some models.
[EDU] Fix an issue with EDU app not playing streams on 5.4.x.
[EDU] Fix bug where baresip wouldn't properly update.*
[ACIW] Fix so the port is not on any VLAN if it is disabled.
[ACIW] Implement per port VLAN control.*
[UAP] Fix an issue with hotspot portal when using broadcast/multicast filter.
[UAP] Various backend improvements.
[UAP] Add DFS event alerts.*
[UAP] Fix a bug in the rate control algorithm.
[UAP] Fix Termination-Action so it behaves as per RFC3580.
[USW] Fix an issue with the forwarding database counters.
[USW] Add IGMP header checking settings.*
[USW] Fix some code that prevented manual reboot requests from working as expected in some cases.
[USW] Increase CLI lines for pagination from 24 to 36.
[USW] Shutdown all ports before switch reboot, to prevent unncessary broadcast storms.
[USW] Gracefully reboot switch after successful firmware update.
[USW] Add LLDP info support.
[HW] Increase logging for firmware upgrade.*
[SEC] Security improvement from HackerOne report.
*Controller support pending.
Firmware 3.8.3 has been pushed for UAP/USW (seeHERE).