DGW Release Notes v43.0.1125

IN-13430

The %serial% macro is now supported for the serial number.

The security mechanism agreement for media as defined in draft-dawes-sipcore-mediasec-parameter-08 and RFC 3329 is now supported. The feature can be activated with the SipEp.MediaSecurityAgreementEnable parameter.

The Image Format parameter allows the user to choose a VM image format when creating a VM image. The new parameter is available in the DGW Web interface under System/VM in the Virtual Machine Creation table. Possible values are:

• raw which is the default value
• qcow2

The DGW 2.0 application is renamed DGW. Refer to the DGW Software Numbering Convention technical bulletin published on our documentation portal.

The new functionality allows an FXS endpoint to play a local ringback after receiving a 18x provisioning response if no RTP is received.

The functionality is configurable with the Pots.FxsInteropPlayLocalRingbackWhenNoMediaStream parameter.

Note: The new FxsInteropPlayLocalRingbackWhenNoMediaStream parameter is available in Cwmp but not in the DGW Web page.

The "Vm.ConvertVmImage" command allows to convert an existing VM image into QCOW2 or RAW file format. The command can also compress the VM image and remove the existing image following the creation of the new converted VM image file.

When the Mediatrix unit is shut down, then a process now allows the unit to properly close the virtual machines. The new Vm.ShutdownTimeout parameter was added to configure the maximum amount of time allowed for a VM to stop. this parameter is not available in the DGW Web page.

SIP gateways can now be tied to the physical link state of the E1T1 lines.Two new parameters were created for this purpose: EpAdm.DisableSipGatewaysWhenTrunkLinesDown, available in the DGW Web interface under System/Endpoints EpAdm.DisableSipGatewaysWhenTrunkLinesDownToggleDelay, not available in the DGW Web interface.

If the EpAdm.DisableSipGatewaysWhenTrunkLinesDown parameter is enabled, all SIP gateways will stop on the unit if the physical link state of all E1T1 interfaces are down. If at least one E1T1 is up again, all SIP gateways are restarted.

OpenSSL was updated to version 1.0.2 LTS.

The new Dcm.TotalNumberOfDsp parameter was added to indicate the number of DSPs present on the Mediatrix unit. The parameter is displayed in the DGW Web page under System/Information.

IN-13430

The %serial% macro is now supported for the serial number.

The new SipEp.MediaSecurityAgreementEnable parameter is available in the DGW Web page under the SIP/Misc/Security Mechanism Agreement table and by the CWMP protocol.

Removed 7 weak and insecure ciphers from all cipher suites:

• TLS_DHE_RSA_WITH_DES_CBC_SHA
• TLS_DHE_DSS_WITH_DES_CBC_SHA
• TLS_RSA_WITH_DES_CBC_SHA
• TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
• TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_RSA_EXPORT_WITH_RC4_40_MD5

IN-13345

All Sbc logs will display time only in UTC.

When the Sip.RegistrationStatus table is empty the request will be completed with success and the status will be set to error.

IN-13135

Now the DHCP options 66, 67, and 43 can use an encrypted script.

IN-13311

New SipEp.ReferToHeaderUriSource parameter.

IN-13228

Offers with unsupported clock rates are no longer accepted.

IN-13217

The new SipEp.DnsIpVersion parameter was added.

The new Dcm.TotalNumberOfDsp parameter was added to indicate the number of DSPs present on the Mediatrix unit. The parameter is displayed in the DGW Web page under System/Information.

IN-13236

The configuration of the Force Transport parameter via the Web page for a Call Agent will be enabled at all times.

New notification message when more than one VM image shares the same VM name.

IN-13236

Two new actions are available for SBC Call Agent rulesets:

• Keep Contact user
• Set Contact-URI user

IN-13390

The SnmpEx.Access.Command (1.3.6.1.4.1.4935.1000.100.200.100.900.1.100.1.100.200.0) now interprets the warning message returned by an executed set command as a success.

• New notification and configuration messages about VM conversion.
• New Vm.ConvertVmImageResult status parameter about VM conversion.
• New Vm traces filter, under the System/Event Log/Diagnostics Traces/Services

The new Vm.ShutdownTimeout parameter was added to configure the maximum amount of time allowed for a virtual machine to stop when the unit is restarted.

IN-13324

New Interface argument was added to the AutoConfigure command for the ISDN, R2 and Eam services. Also, there is a new drop-down list in the Web Page under ISDN/Status/Auto Configuration table that allows the user to chose the interface that will be auto-configured.

IN-13236

Three new actions are available for Sbc Call Agent Rulesets:

• Forward Contact-HF parameters
• Set Contact-HF parameter whitelist
• Set Contact-HF parameter blacklist

Add protection to fix this vulnerability on all Web pages.

IN-13430

When the TLS Persistent Port uses the base port 16000 after maximum interval is reached, it will now continue to increment itself for a new cycle.

When receiving authentication challenges, the unit was attempting to use the entries of SipEp.Authentication with an empty authentication username, which resulted into re-issuing the SIP request without an authentication header, which is incorrect. When receiving authentication challenges, entries of SipEp.Authentication with an empty authentication username are now ignored.

When a new CLI connection is established and when the sysinfo command is issued in the CLI, new information is now displayed:

• the number of DSPs
• the profile name.

The Mediatrix G7, S7, S7LP, and Sentinel 100, affected by the hardware problem, will now use a maximum speed of 100 Mbps for the ETH 1 Ethernet port. It is possible to disable this speed reduction with the consequence that the hardware may become unstable.

After updating OpenSSL, the weak and insecure ciphers were removed from all cipher suites in all services that used them. Sip Signaling is not affected because it does not use the 7 removed ciphers which are:

• TLS_DHE_RSA_WITH_DES_CBC_SHA
• TLS_DHE_DSS_WITH_DES_CBC_SHA
• TLS_RSA_WITH_DES_CBC_SHA
• TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
• TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_RSA_EXPORT_WITH_RC4_40_MD5

The following parameters were updated:

• Cert.TransferHttpsCipherSuite
• Conf.scriptsTransferCipherSuite
• Conf.imageTransferCipherSuite
• Cwmp.transportHttpsCipherSuite
• File.transferHttpsCipherSuite
• Fpu.mfpTransferCipherSuite
• Nlm.pCaptureTransferCipherSuite
• Web.httpsCipherSuite

The OCSP override (Cert.CertificateAuthoritiesOverrideIssuedCertificateOcspUrl) is now properly applied when using TLS to upload PCapture files. 

IN-13570

After canceling a large file download, the DGW Web Interface froze as if the file was still downloading.The Web service is now able to recognise that a download has been cancelled, and the DGW Web interface remains responsive when continuing browsing.

IN-13536

As floppy disks are not supported, after the VM is started, the guest OS will no longer display error logs.

IN-13236

When a gateway is selected in a Call Agent, the configuration of the Force Transport parameter via the DGW Web page was disabled, now it is enabled.

The Mediatrix G7, S7, S7LP, and Sentinel 100, affected by the hardware problem, will now use a maximum speed of 100 Mbps for the ETH 1 Ethernet port. It is possible to disable this speed reduction with the consequence that the hardware may become unstable.

IN-13345

When the configured time zone was different than EST and UTC, time and date displayed in the Sbc service Event logs were wrong.Time and date of all Sbc logs are now only displayed in UTC.

IN-13463

Busy tone is now detected on the FXO line.

IN-13401

Small data block sizes are now handled properly. Upgrading the firmware with the Single file feature is now always successful no matter the size of the data blocks.

IN-13236

Two new SBC Call Agent Ruleset actions were added to provide a better control of the value of the Contact used in SIP dialogs

• Keep Contact user
• Set Contact-URI user

IN-13390

The SnmpEx.Access.Command (1.3.6.1.4.1.4935.1000.100.200.100.900.1.100.1.100.200.0) was interpreting the warning message returned by an executed set command as an error. The warning message is now interpreted as a success and not an error, as it should.

IN-13236

Uploading a file via the DGW Web page introduced an additional byte in the header of the file. A file uploaded via the DGW Web page is now the same as the original file. VMs can now be started using an ISO image uploaded form the DGW Web interface.

The GetParameterValue command for the Device.Services.VoiceService parameter was returning a Request Denied when the Sip.RegistrationStatus table was empty. Now the request will be completed with success and the status will be set to error.

IN-13353

Firmeware upgrades are now carried out as expected.

IN-13093, IN-13658, and IN-13408

In G 729 or G 723.1., during a call waiting scenario, the second caller's callerID is now displayed without closing the system.

IN-13324

By default, the AutoConfigure command ran on all telephony cards associated with a service (i.e. ISDN, R2, or E and M). Now, if the Interface argument is given, the AutoConfigure command runs only on the specified telephony card. A new drop down list was added to the ISDN/Status/Automatic configuration table to allow users to choose the interface that will be auto-configured.

IN-13135

The DHCP option 66 could not execute a script when it was encrypted. Encrypted scripts are now successfully executed with all 66, 67, and 43 supported options. Note that The Config.ScriptsSecretKey must contain the key for decryption.

IN-13236

The Sbc service was removing the parameters of the SIP Contact header.To allow greater control over SIP Contact parameters, new Sbc Call Agent Ruleset actions were added.The following new Call Agent Ruleset actions were added to control which Contact header parameters are relayed:

• Forward Contact-HF parameters
• Set Contact-HF parameter whitelist
• Set Contact-HF parameter blacklist

IN-13311

The new SipEp.ReferToHeaderUriSource parameter allows to select on which URI will be based the URI inserted in the Refer-To headers in the call transfers. When set to ContactUri, if a transport parameter is present in the Contact, it will be put along the URI in the Refer-To header. This parameter is not available in the DGW Web interface.

On the Sentinel 400, when large VMs were present, the calculation of available space to write diagnostic files was incorrect and could prevent writing diagnostic files to flash storage. The calculation of available space was fixed to prevent this problem.

IN-13135

SipProxy does not put the transport parameter in the record-route headers, even when transport is TLS. Absence of a transport parameter means that transport is UDP. This caused some devices to use UDP instead of TLS when replying to SipProxy.The SipProxy now adds the transport parameter in the Record-Route headers when the transport is TLS.

IN-13228

The device now validates the clock rate in addition to the codec name when trying to find a compatible codec in the SDP rtpmap.

IN-13217

The Mediatrix unit always starts DNS resolution of SIP FQDNs with AAAA queries. In environments that do not support IPV6, this introduces excessive delays when the DNS server does not respond to AAAA queries. To solve this problem, the units can now be configured to skip AAAA queries when resolving SIP FQDNs.

IN-13065, IN-13216

The initialisation procedure of the network card was corrected to fix configuration order issues. Setting the MTU value under Network/Interface/Ethernet Link configuration now works as expected.

IN-13114

T.38 negotiation failed because the INVITEs involved in T.38 represented media transport as UDPTL instead of udptl. Lowercase was corrected, and T.38 fax negotiation no longer fails.

It is now possible to download large VM images using the File service. 

A new CertificateValidation parameter was added to configure this behavior. When the CertificateValidation parameter is set to:

• NoValidation, all connections are accepted without validation done on the received certificate.
• HostName, host validation will be done if a CA certificate is provided and no TLS connection is allowed if no CA certificate is provided.

IN-12979

When the Virtual Machine is started, a UUID is now provided in the Vm guest. Its value is based on the Mediatrix unit MAC address and the VM MAC address.

A message is now returned when the syntax of the Cdr syslog format is invalid.