CDRouter 15.2

February 27, 2025

NTA3000

  • New 9.4 Golden Image: Version 9.4 of the NTA3000 operating system image, aka the Golden Image, is now available. This version includes operating system and firmware updates for various interfaces within the system. For more information, please see the Golden Image Release Notes or contact support@qacafe.com.

New Features

  • USP 1.3.1: Updated USP conformance tests usp_conformance_2_23 through uspconformance_2_26 to use Param instead of the invalid Obj permissions as part of the TP-469 1.3.1 update. [sc36674]

  • IPv4 TCP Filters: Added test cdrouter_firewall_302, this test verifies proper filtering when the TCP window scale is unknown. [sc19881]

  • TLS Ciphers: Added 3 new Ciphers to sslAllowedCiphers for improved security testing. [sc24098]

    • TLS_CHACHA20_POLY1305_SHA256
    • ECDHE-RSA-CHACHA20-POLY1305
    • DHE-RSA-CHACHA20-POLY1305

Change Log

CDRouter

  • Increased the Wi-Fi scan timeout. This improves scan results when wifiCapture is enabled to allow enough time to scan the U-NNI-3 channels (149,153,157,161). Previously these channels could be omitted from the scan. [sc35518]
  • Improved consistency of the filter labels in the Web UI to display All Users instead of just All. [sc38508]
  • Removed the “select all” button on the Results page. This could lead to users unexpectedly deleting all results. [sc17543]
  • Fixed issue with the packet decode obscuring parts of the test log. [sc37990]
  • Updated test cdrouter_nat_350 to utilize random ports when being executed. [sc19741]
  • The heartbleed module is now skipped if the testvar sslDeprecatedProtocols includes tlsv1_2. [sc30370]
  • Print a warning message if an interface is not available when selecting a permanent mac address. [sc31421]

prpl Certification

  • Improved the descriptions of the HL-API tests. [sc37577]
  • Updated test prplOS.1.2.2 to use the calculated remaining lease time. [sc38076]
  • Fixed an error in test prplOS.1.6.15 that incorrectly checked for a trailing . as part of the returned ParentPrefix verification. [sc38501]

Security

  • Updated ET Open ruleset in CDRouter Security expansion to 10848. [sc38152]

TR-069

  • Improved test tr69_210 to reset the IP address upon exiting the test case early. [sc38257]
  • Addressed an error in tests tp181_test_5.1.4 and tr69_130 when the testvar acsFileServerDownloadFilter was set to yes. [sc38269]
  • Added IPv6-only WAN mode support to tests tp181_5.2.6 and tp181_5.5.2-tp181_5.5.4. [sc36760]

USP

  • Fixed an undeclared variable error in test usp_conformance_2_27. [sc37247]