CDRouter 16.6

June 25, 2026

New Features

  • IPv4 Fragmentation Tests: Added a new frag.tcl test module that verifies whether the DUT fragments IPv4 packets larger than its WAN MTU and forwards smaller packets unfragmented, across UDP, ICMP, and TCP. The new expectedIPv4FragThreshold testvar sets the expected fragmentation threshold (the DUT’s WAN IP MTU). [sc29866]

    • ipv4_frag_1 through ipv4_frag_6

  • Wi-Fi WPA3 for TR-069 and TP-181 Wireless Tests: Added WPA3 support to the TR-069 and TP-181 wireless test suites and updated TP-181 to Issue 1 Amendment 2. The new tests cover WPA3-Personal, WPA3-Personal-Transition, and WPA3-Enterprise. [sc26620]

    • tp181_5.6.14, tp181_5.6.15, tp181_5.6.16
    • tr69_wireless_33, tr69_wireless_34, tr69_wireless_43
    • The existing tp181_5.6.14 and tp181_5.6.15 tests were renumbered to tp181_5.6.17 and tp181_5.6.18.

  • Wi-Fi SAE-EXT (AKM 24): Added support for the SAE-EXT-KEY key management suite (AKM 24). To use it, set the wpaKeyMgmt testvar to SAE-EXT; SAE-EXT is also negotiated automatically when wpaKeyMgmt is set to auto and the AP advertises it. [sc42831]

  • TR-069 Alias-Based Addressing Tests: Added a new tr69_alias module with 19 tests covering TR-069 Section 3.6.1 Alias-Based Addressing, including alias creation, AutoCreateInstances, and InstanceMode behavior. The tests are skipped on DUTs that do not support alias-based addressing. [sc34178]

    • tr69_alias_1 through tr69_alias_19

  • DHCP and DHCPv6 Client Identifier (DUID) Tests: Added new tests that verify DUT DHCPv4 and DHCPv6 behavior with all four DUID types (DUID-LLT, DUID-EN, DUID-LL, and DUID-UUID). [sc29749]

    • cdrouter_dhcp_server_40 through cdrouter_dhcp_server_43
    • dhcpv6_server_140 through dhcpv6_server_143
    • dhcpv6_170 through dhcpv6_174

  • Vendor Log File Verification: Added two new testvars, tr69VendorLogRequiredStrings and tr69VendorLogForbiddenStrings, that perform optional case-insensitive substring verification of the contents of a vendor log file uploaded via TR-069. Uploaded vendor log files are now also copied to the results directory so they can be inspected after a test run. [sc47057]

  • File Manager: Added a new file manager to the CDRouter web UI for managing files in the /usr/cdrouter-data/custom directory, with support for uploading, renaming, deleting, and copying file paths. [sc45900]

  • Trim Config: Added a “Trim Config” button to the configuration editor that strips standalone comments, blank lines, and empty sections and testvar groups from a config, making large configurations easier to read. [sc48080]

Before:

After:

  • System Interface View in the Config Editor: The configuration editor now displays a chart of the test system’s network interfaces to assist when building a configuration, including Ethernet link speeds and Wi-Fi bands and modes and maximum virtual clients. The Ethernet maximum speed has also been added to cdrouter-cli -info. [sc47805]

Changelog

CDRouter

  • Addressed false Wi-Fi 4-way handshake failures during Multi-Link Operation (MLO) where links that legitimately advertised different AKMs or RSN capabilities per band (for example in WPA3-Transition) were incorrectly rejected. CDRouter now tracks each affiliated link’s beacon RSNE/RSNXE separately and validates each link’s MLO Link KDE against its own advertised IEs rather than against the association link’s. [sc47481]
  • Addressed an issue where CDRouter’s ICS DNS proxy did not relay SOA and OPT records from upstream responses and could incorrectly return NXDOMAIN for names that exist but have no matching record. [sc42930]
  • Added a delay before the mDNS A record query in mdns_12 so that DUTs with a slightly delayed response are no longer failed. [sc48050]
  • Updated curl from 8.13.0 to 8.20.0 and set the minimum TLS version floor to TLS v1 so that older TLS versions continue to be permitted. [sc46600]
  • Addressed an issue where the last portion of a large result log would not load when viewed in the web UI. [sc47281]

IPv6

  • Added a delay before the mDNS AAAA record query in ipv6_mdns_12 so that DUTs with a slightly delayed response are no longer failed. [sc48050]
  • Stabilized dhcpv6_pd_16 by restarting the DUT at test start for a fresh, full-duration IAPD lease and configuring split preferred/valid lifetimes, so the test reliably catches stale prefix Router Advertisements. [sc47676]
  • Addressed an issue where running the dhcpv6-pd-s tests could cause later IPv6 tests in the same run to fail. Each test now leaves the LAN stack in its original state on completion. [sc47677]

prpl Certification

  • Added a wait after the DHCP ACK before reading the client data model in prplos.1.2.17 to avoid false failures. [sc47661]
  • Addressed a fatal error in prplos.1.6.10 that occurred when an expected parameter was missing from the DUT’s response. The test now reports a normal failure instead. [sc47958]
  • Addressed false failures in prplos.1.3.4 and prplos.1.3.7 caused by stale DHCPv6 server bindings left over from earlier in the test. [sc47477]
  • Addressed false failures in prplos.1.6.6, prplos.1.6.7, prplos.1.6.13 and prplos.1.6.14 when a DUT reported an IPv6 address in expanded form rather than compressed form. Both forms are now treated as equivalent. [sc47600]

Security

  • Updated the ET Open ruleset in the CDRouter Security expansion from 11200 to 11217. [sc47751]

TR-069

  • Removed two unused, expired ACS certificates that ship with CDRouter and were not referenced by any test. [sc45214]
  • Incoming TR-069 XML is now re-formatted for readability in the log, making compact or unindented DUT traffic easier to read. [sc47878]
  • Addressed an issue in cwmp_profile_6 where multi-instance tables with zero DUT instances produced duplicate AddObject RPCs. [sc47922]
  • Addressed an issue in tr69_schedule_download_tests where, after a ScheduleDownload test upgraded the DUT’s firmware to a version that no longer supported ScheduleDownload, cleanup could fail and cause the next test to fail. The firmware restore now uses a regular Download RPC. [sc47425]
  • Added the new tr69WirelessRebootDelay testvar, which waits after a reboot for the LAN interface to become available in the TP-181 wireless reboot tests. [sc47856]

USP

  • Addressed a false failure in usp_31 where the test reported that the DUT never reconnected after a TLS handshake failure even though it had. [sc48186]
  • Corrected numerous typos in the log messages of the usp_annex_a test module. [sc40085]
  • Addressed an error in the USP Add and Delete profile tests that occurred when a Delete failed on the DUT. [sc47957]