Peplink MediaFast MFA 200 HW3 Router Firmware 8.0.1

New Features:

- [AP Controller] Added Fast Roaming 802.11k, 802.11r, 802.11v support
Applies for Balance: All
Applies for MAX: 700, HD2/4, Transit (Except BR1 ENT and HD2 Mini)
Applies for MediaFast: All
Applies for EPX

- [Firewall] Local Service Inbound Firewall support
Applies for All Models

- [Outbound Policy | Firewall Rules | IC2] Added ability to define Outbound Policy and Firewall Rules by a region or a Software-As-A-Service via InControl 2.8.2 or above
Applies for Balance: All
Applies for MAX: All
Applies for MediaFast: All
Applies for EPX
Applies for Surf SOHO

- [Cellular | Redundant SIM Slots] Added support for scheduled switching between redundant SIM cards.
Applies for Balance: 30 LTE/Pro
Applies for MAX: BR1/2, HD2/4 (Except HD2), Transit
Applies for MediaFast: HD2/HD4
Applies for EPX

Feature Improvements:

- [Firewall] Added the option to select any ICMP types in the Firewall Rules page.
Applies for All Models

- [GPS] The GPS map on the dashboard now displays latitude & longitude values.
Applies for MAX: BR1/2, HD2/4, Transit (Except BR1 ENT and HD2 Mini)
Applies for MediaFast: HD2/4

- [AP Controller] Added ability to input custom values when configuring TX power.
Applies for Balance: All
Applies for MAX: 700, HD2/4, Transit (Except BR1 ENT and HD2 Mini)
Applies for MediaFast: All
Applies for EPX

- [Wi-Fi AP] Added ability to schedule updates to the AP radio channel.
Applies for Balance: 30 Pro, One
Applies for MAX: 700, BR1/2, HD2/4, Transit (Exclude: BR1 ENT/HD2 Mini)
Applies for MediaFast: HD2/4
Applies for EPX
Applies for Surf SOHO

- [PoE] Dashboard now displays the PoE availability status.
Applies for Balance: 30 Pro
Applies for MAX: BR1 ENT, HD2/4
Applies for MediaFast: HD2/4
Applies for EPX

- [Web UI] Show the device name on top of Web Admin.
Applies for All Models

- [BGP] Added support of BGP Local Preference
Applies for All Models

- [IPsec] Added "NULL & MD5" in IPsec Phase 2 Proposal
Applies for All Models

- [Cellular] Added ability to send SMS shortcode.
Applies for Balance: LTE, 30 Pro
Applies for MAX: BR1/2, HD2/4, Transit
Applies for MediaFast: HD2/HD4
Applies for EPX

- [Web UI & Captive Portal] SSL certificate updated
Applies for All Models

- [PepVPN] URL Logging now shows the serial number of the remote PepVPN peer
Applies for All Models

- [SpeedFusion] Reduced the time needed to establish PepVPN connections when hundreds of SpeedFusion profiles connect at the same time.
Applies for Balance: B210 or above
Applies for MAX: 700, HD2/4, Transit
Applies for MediaFast: All
Applies for SFE, EPX
Applies for FusionHub

- [Web UI] Enforced password change after the first bootup, or when the default admin password is used.
Applies for All Models

- [Cellular & Web UI] Network Selection renamed as Carrier Selection
Applies for Balance: LTE, 30 Pro
Applies for MAX: BR1/2, HD2/4, Transit
Applies for MediaFast: HD2/HD4
Applies for EPX

- [Wi-Fi AP] Introduce SSID Firewall
Applies for Balance: 30 Pro, One
Applies for MAX: 700, BR1/2, HD2/4, Transit (Exclude: BR1 ENT/HD2 Mini)
Applies for MediaFast: HD2/4
Applies for EPX
Applies for Surf SOHO

- [Wi-Fi WAN] Supports Acceptable Signal Threshold
Applies for MAX: 700, BR1/2, HD2/4, Transit (Exclude: BR1 ENT/HD2 Mini)
Applies for MediaFast: HD2/4
Applies for EPX
Applies for Surf SOHO

- [QoS] Added Youtube and Netflix applications.
Applies for All Models

- [AP Controller & Wi-Fi AP] Auto Channel Schedule support on AP Controller and Integrated AP
Applies for Balance: All
Applies for MAX: All
Applies for MediaFast: All
Applies for EPX
Applies for Surf SOHO

- [Wi-Fi AP] 802.11w Management Frame Protection support
Applies for Balance: 30 Pro, One
Applies for MAX: 700, BR1/2, HD2/4, Transit (Exclude: BR1 ENT/HD2 Mini)
Applies for MediaFast: HD2/4
Applies for EPX
Applies for Surf SOHO

- [Docker] Support importing an image from URL
Applies for MediaFast: 500, 750

- [SNMP] SNMPv3 Authentication and Privacy passphrase supporting special characters
Applies for All Models

- [SpeedFusion] MAX HD2/HD4 MediaFast is now support SpeedFusion Bonding.
Applies for Balance: B210 or above
Applies for MAX: 700, HD2/4, Transit
Applies for MediaFast: All
Applies for SFE, EPX
Applies for FusionHub

- [FusionHub] Added Layer 2 SpeedFusion Support
Applies for FusionHub

- [FusionHub] Added Remote User Access support
Applies for FusionHub

- [DPI] Enhanced the protocol support for Outbound Policy, QoS > Application.
Applies for All Models

- [Cellular CAT12] Cellular Details now display the 3CC Carrier Aggregation band as well as signal information.
Applies for MAX: BR1 ENT, Transit, HD2/HD4
Applies for EPX

- [Cellular | USB] Added ability to define a custom TTL value for cellular and USB WAN Interfaces.
Applies for Balance: All
Applies for MAX: All
Applies for MediaFast: All
Applies for EPX

- [GRE] Added GRE Tunnel as a standard feature
Applies for All Models

Resolved Issues:

- [PepVPN] Fixed a stability issue where the router cannot establish a new connection even after a prolonged period of time
Applies for All Models

- [System] Devices experience high CPU loads when viewed from the InControl 2 dashboard.
Applies for All Models

- [WAN] WAN links may disconnect and reconnect after pressing "Apply Changes".
Applies for All Models

- [Balance & Cellular] Unable to reset cellular WAN from Balance Web UI.
Applies for Balance: 30 LTE/Pro

- [Wi-Fi AP] When the "Turn off AP when there is no Internet connectivity" feature is enabled, the SSID may stop broadcasting after a WAN disconnects and reconnects following a defined SSID schedule.
Applies for Balance: 30 Pro, One
Applies for MAX: 700, BR1/2, HD2/4, Transit (Exclude: BR1 ENT/HD2 Mini)
Applies for MediaFast: HD2/4
Applies for EPX
Applies for Surf SOHO

- [Web UI] Unable to save some advanced Wi-Fi AP settings
Applies for All Models

- [Web UI] When creating new VLAN, the list of existing Layer 2 PepVPN profiles show up as empty.
Applies for All Models

- [Web UI & EPX] For the EPX, module WANs will still appear on the dashboard after the module has been removed.
Applies for EPX

- [Cellular] Do not switch SIM card if SIM PIN status is unknown
Applies for Balance: LTE, 30 Pro
Applies for MAX: BR1/2, HD2/4, Transit
Applies for MediaFast: HD2/HD4
Applies for EPX

- [PepVPN] PepVPN may get stuck at updating routes status
Applies for All Models

- [WAN Analyzer | PepVPN] Fixed an issue that affected the WAN Analyzer and the PepVPN test cannot be completed.
Applies for All Models

- [OpenVPN] Remote User VPN will be disconnected after apply changes
Applies for All Models

- [Cellular] Cellular WAN may stop working if the SIM cards invalid.
Applies for Balance: LTE, 30 Pro
Applies for MAX: BR1/2, HD2/4, Transit
Applies for MediaFast: HD2/HD4
Applies for EPX

- [System] Fixed for TCP SACK CVE-2019-11477 CVE-2019-11478 CVE-2019-11479
Applies for All Models

- [SpeedFusion] Fixed the issue of too early to release out of order packet sequence.
Applies for Balance: B210 or above
Applies for MAX: 700, HD2/4, Transit
Applies for MediaFast: All
Applies for SFE, EPX
Applies for FusionHub

- [Cellular on HD4 MBX & EPX] Fixed the issue of the Network Selection page cannot be shown correctly
Applies for MAX: HD4 MBX
Applies for EPX

- [Drop-in Mode | IP Passthrough] IP Passthrough / Drop-in Mode with shared IP can now support another network from LAN
Applies for Balance: 210 or above
Applies for MAX: BR1, Transit

- [Web UI] Drop-in mode setting may be lost after add/modify any settings on the LAN Settings page
Applies for All Models

- [Drop-in Mode & Web UI] Invalid IP on Setting page will be shown if configured Drop-in Mode with Shared IP
Applies for Balance: 210 or above

- [Wi-Fi AP] Fixed the connectivity issue after set Auto Channel.
Applies for Balance: 30 Pro, One
Applies for MAX: 700, BR1/2, HD2/4, Transit (Exclude: BR1 ENT/HD2 Mini)
Applies for MediaFast: HD2/4
Applies for EPX
Applies for Surf SOHO

- [Cellular] Cellular WAN may not enter restriction mode.
Applies for Balance: LTE, 30 Pro
Applies for MAX: BR1/2, HD2/4, Transit
Applies for MediaFast: HD2/HD4
Applies for EPX

- [System] DPI functionality may cause system instability.
Applies for All Models

- [System & IC2] Using InControl 2 on devices running Firmware 8.0.0 may cause system instability.
Applies for Balance: B305/380 or above
Applies for EPX

- [System] URL Logging may cause system instability.
Applies for All Models

- [Cellular] The cellular modem may stop working after it has been reset many times.
Applies for Balance: LTE, 30 Pro
Applies for MAX: BR1/2, HD2/4, Transit
Applies for MediaFast: HD2/HD4
Applies for EPX

- [WAN & B20] WAN1 becomes unstable when the "Advertise Speed" option is disabled
Applies for Balance: 20/30

- [Wi-Fi AP | RADIUS] WPA2 Enterprise may not work with the RADIUS server over SpeedFusion
Applies for Balance: 30 Pro, One, 305 or above
Applies for MAX: 700 HW5, HD2/4, Transit
Applies for MediaFast: HD2/4
Applies for EPX

- [Web UI] Active Session incorrectly displays an IPsec session as PepVPN.
Applies for All Models

- [SNMP] SNMP does not show the WAN standby status correctly
- MIB Download: https://download.peplink.com/resources/balance_max_snmp_mib-8.0.1.zip
Applies for All Models

Known Issues:

- [Cellular & Web UI] Under the menu "Cellular Settings > Failback to Preferred SIM when...", the value of the variable "Non-preferred SIM is connected for..." cannot be set to 60 minutes or above, or else it will revert back to 1 minute.
Applies for Balance: LTE, 30 Pro
Applies for MAX: BR1/2, HD2/4, Transit
Applies for MediaFast: HD2/HD4
Applies for EPX

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.