InControl 2 - Peplink with Version 7.0.2 or above - Feb 2019

Networking
1

InControl 2.8.2 Released

Release dates:

  • Venus: 2019-08-26

  • Mercury: 2019-09-03

  • Mars: 2019-09-16

What’s new

  • Firewall rules can be created and edited on InControl.
  • You can now control outgoing traffic in outbound policy and firewall rules by a region or a Software-As-A-Service. Firmware 8.0.1 or above is required.
  • Added grouped networks support to outbound policy and firewall rules.
  • On the “Group-wide Radio Settings” screen, a custom AP power value could be set for supported devices.
  • Captive Portal:
    • Added two options to the Landing Page setting:
      • Redirect to the URL the guest user had originally requested. In the auto-login popup browser on iOS, redirect to a specified URL.
      • Pass guest user’s information to the specified redirected URL
    • Added a search tool to the Access Token management screen
    • On the Preview and Customization screen, the Checkbox 2 Message 1 and 2 are now swapped. The Message 2 has been rephrased. So data collection purpose can now be customized. We recommend that, for all of your captive portal profiles, you review the two Checkbox 2 messages in English and other languages you chose, and save the profiles once. It allows the system to update the captive portal files cached on the devices.
    • Added back an option to display a marketing-opt-in option to guest users.
    • For a captive portal with multiple access modes enabled, if a guest user used up the quota offered by an access mode, he/she can no longer get Internet access again by logging in with another access mode before the quota is reset.
    • Removed “Sign-in with WeChat” support as WeChat discontinued their “WeChat Wi-Fi” service.
  • PepVPN / SpeedFusion
    • Added layer-2 configuration in star topology
    • Added support for Forward Error Correction and Maximum Latency Difference Cutoff
    • Fixed “All Traffic to Remote Hub” validation should only require one DNS server address. The second address is optional.
    • For the logical view, disconnected nodes are not displayed.
    • Added a visibility field with opened and closed eyeball icons to the profiles. Clicking an icon will toggle whether to show the graph of the corresponding profile only or not.
    • Removed “Sign-in with WeChat” support as WeChat discontinued the WeChat Wi-Fi service.
  • Device IP Settings (CSV upload) validation improved to detect when the header line is missing an S/N column
  • In 2.8.1, a device would rollback its configuration if it could not reach InControl after receiving Firewall or Outbound Policy changes from InControl. Since 2.8.2, a device would rollback if it could not reach InControl after receiving any type of setting change from InControl.
  • For the device configuration locks introduced in 2.8.1, administrators can now unlock their devices.
  • Fixed an underlying bug in Bulk Configuration which might trigger device configuration locks in a race condition.
  • In SSID settings, added a “Fast Transition” option.
  • The substring “####” in an SSID will be substituted with the last 4 digits of the serial number of configured devices no matter where the substring is located in the SSID. Formerly, the substring is substituted only when it is located at the end of the SSID.
  • Current Wi-Fi AP channel is included in the Device Details screen. When auto channel selection is enabled, channel selection events are added to the event log under the “WLAN” type.
  • Monthly data usage records are now kept for two years (was six months)
  • RSRQ is included in WAN Quality Reports.
  • Added VLAN Network IP Settings under SD Switch’s device-level Settings menu.
  • Multiple Allowed VLAN Networks could be selected for SD Switch’s web admin setting.
  • When moving a lot of devices from one group to another, the progress is now displayed.
  • Fixed: when Low Data Usage Mode was disabled in InControl Options, the “GPS Location Collection” and “Minimum Communication Interval” settings will not be effective.
  • Client list: clients on untagged LAN were not indicated consistently for different products. Now they are all indicated as “Untagged”.
  • For “Find My Peplink” enabled devices, a dynamic DNS name is defined for the InControl-detected IP. See the InControl Detected IP field on device details pages.
  • Added “Show Warranty Expiry Date” and “Send Warranty Reminder” options to the Organization Settings.
  • Renamed “SIM Pool Data Usage” to “SIM Card Reports”. Added a “Devices and SIM Cards” table. Updated the default usage alert message template.
  • Moved “External ICA Settings” from “Group Settings” to “Device System Management” page.
  • For group-level overview, the device and client counts are refreshed every 10 (with less than 500 devices) to 30 secs (with more than 1000 devices) (formerly 60 secs).
  • In the device listing, added an Action for triggering devices to perform a cellular module firmware update.
  • Added a “Device Name” field to the “FusionHub Licenses” table on the “Warranty and License” page.
  • In the organization-level Firmware Management table, added a column “Groups not following”.
  • When a device’s altitude is available, it is now displayed on the device details screen.

InControl 2.8.1 Released

Release dates:

  • Earth - 2019-06-17

  • Mars - 2019-04-15

  • Venus - 2019-03-13

  • Mercury - 2019-03-13

Here are the changes of 2.8.1 since 2.8.0:

  • When InControl needs to push any necessary configuration patches to devices, from this release, users can choose to be asked before the system applies the patches. See Organization Settings > Advanced Settings > Auto apply configuration patches to devices.

  • Whenever InControl makes any configuration change to devices, a reason will also be given and recorded in the event log. In very rare situations, if the system attempts to apply any configuration to a device without a reason, the system will stop making any further configuration change to the device. A notice will be displayed in both organization and group levels. InControl personnel will investigate immediately.

  • In Outbound Policy and Firewall Management, when the “Preserve outbound policy/firewall rules on devices that receive no rules” option is enabled, InControl-generated rules will now also be preserved.

  • Organization- and group-level device lists now load faster.

  • With firmware 8, cellular WANs’ frequency band will be included in the WAN Quality Reports.

  • SpeedFusion Alliance (SFA) members can convert a FusionHub Solo license to an SFA license

  • In removing a device or a group, added an option to retain InControl managed settings.

  • Cellular Modules’ IMEI and CDF are displayed in Device Details page’s info pane

  • Wi-Fi WAN information is now also included in the downloaded device list in CSV format.

  • Enhanced error messages in configuring Device IP Settings with a CSV file.

  • Devices’ static location can be updated by a CSV file. On the group level dashboard screen, click the Edit button and then the “Update device info by CSV file” link.

  • Added device type selection to VLAN Networks.

  • Improve the UI response time in applying firmware to many devices.

  • Added Internet and Device Availability figures on Group Overview page.

  • Added Saudi Arabia into the Wi-Fi AP Operating Country list.

  • Device list > search tool: add a “Match all / any” option to the Tags field

  • Captive Portal:

    • Fixed multiple logical bugs
    • Migrated to LinkedIn v2 AP
    • Added a bypass sign-in option to WeChat sign-in settings

  • In the group-level client list, a client’s connection type (i.e. Wi-Fi / Ethernet) will be Wi-Fi if the client has ever connected to any device in the organization using Wi-Fi. In device-level, a client’s connection type formerly follows the group level’s. Now the connection type reports what the device sees.

  • In creating a group, Manage Scheduled Reboot is now disabled by default.

  • Fixed: device level PepVPN status was not lively updated.

  • Fixed: AP Controllers’ clients are not shown on InControl’s client list.

  • Fixed: Low data usage mode did not function correctly in some situations

  • Fixed: InControl reverts web admin password changes made on the web admin when “Device Managed” is selected on the Device System Management page.

  • Fixed: web admin read-only users’ shared password was not pushed devices

Here are the changes of 2.8.0 since 2.7.3:

  • Creating organization out from groups: You can now select multiple groups in an existing organization and create a new organization out from the groups. The groups, their devices, configurations, and reports will all be moved to the new organization. The groups in the original organization will be removed.
  • Device list enhancements:
    • Allow performing device actions on the Group Overview page by simply clicking an Edit button.
    • Column visibility and order are now customizable on a per-user basis.
    • Support to search devices by their interfaces’ MAC address
    • In searching devices by tags, you can choose to search by all or any of the tags.
    • For the ease of troubleshooting, labels are displayed above group level device lists for indicating which InControl options have been enabled.
    • Internet and Device Availability figures are introduced to Group Overview pages.
  • On a Device Details page, labels are displayed to indicate what types of configuration are being managed by InControl.
  • Outbound policy rules can be created and edited on InControl.
  • Added a new group-level user role “Fleet Manager” who can only access the map on the dashboard.
  • WAN Quality Reports replaces Cellular Reports; added latency figures
  • Captive portal:
    • Captive portal reports could be emailed to specific addresses in PDF format weekly and/or monthly
    • Captive portal reports: Number of “Sessions” has been redefined. The former one is now called “Successful Sign-in’s”. The new Sessions figure now refers to the number of new sign-in sessions. Re-sign-in’s upon network reconnection are not counted.
    • For Open Access mode settings, when “Time based” is selected for the “Daily Quota” field, the quota timer does not stop when a client disconnected. Now, an option is added to stop the timer upon disconnection.
    • A sharable preview URL can now be found in a saved captive portal settings screen. External users with the URL could review the captive portal page without needing an InControl administrator account
    • WeChat settings have been moved to the Captive Portal page.
  • Clients’ name can now be modified. A note can be defined.
  • Bulk configurations are now sorted by creation date in ascending order.
  • In removing a device, you can choose to retain or clear the InControl managed configurations
  • Device online/offline history entries (on Event Log page) are now sorted by months, and downloadable as CSV files

InControl 2.7.3 Released - August 14, 2018

What’s new

  • Captive portal: text alignment of General Description is adjustable.

  • Geo-fencing: added an option to perform enabled actions upon fence modification or device addition

  • Bulk Configurator: PepVPN profiles in configuration files can optionally be preserved.

  • Fixed various issues in managing Pepwave Surf On-The-Go

InControl 2.7.1 Released - July 9, 2018

What’s new

  • SpeedFusion configuration: added a “Suppress Endpoint IPs” option to Star Topology. Enabling it could maintain PepVPN connections uninterrupted for any potential endpoints’ IP address changes. This option is disabled for existing profiles and is enabled for newly created profiles.

  • Free FusionHub Solo license could be acquired from the Warranty and License page.

  • Captive Portal enhancements:

    • The Terms and Conditions and its checkbox label can be partially customizable.
    • Added skip sign-in (i.e. “No thanks”) option to e-mail and SMS access modes.

  • Updated web admin settings for SD Switch.

  • SIM Pool Usage Reports: added CSV file download of per-pool usages, and per-SIM daily usage

  • When querying live status from devices is disabled from a group, a button is added to the devices’ details page for requesting live status.

  • Added NAS Identifier setting under WPA/WPA2 Enterprise mode of an SSID.

  • Firmware setting for the same product but different hardware revisions can now be customized individually. The system now could ensure firmware is applied to supported hardware revisions only.

  • Usage reporting and GPS location data are no longer collected from warranty expired devices.

  • Included various UI enhancements and bug fixes.

InControl 2.7 Released - June 4, 2018

What’s new

  • PepVPN: allowed to activate/inactivate a PepVPN connection by device tags.
  • Introduced a new geo-fencing action: device tasplitgging, which is for controlling any tag supported configuration (e.g. PepVPN, SSID, captive portal, etc.)
  • When outbound policy and firewall rule management is enabled and a device is newly added to a group, if the device receives no rules, the outbound policy and firewall rules on it were also cleared prior to this release. But now, you can choose to preserve the rules. For any groups created from now on, the rules on newly added devices will be preserved by default.
  • Moved Device Web Admin Authentication settings to group-level Device System Management page. Split the settings for Balance/MAX, AP and SD Switch into separate sections.
  • Captive portal
    • In token access mode, when concurrent login is allowed, data usage based quota can no longer be chosen now. Any existing profile with both concurrent login and data usage based quota enabled, the data usage quota will be disabled.
    • In open access mode, the Terms and Conditions checkbox could now optionally be hidden. If the “Connect” button text is changed to “I Agree”, guests could accept the T&C and submit the form with one click.
    • An additional message could be put on the signed-in (landing) page. Hyperlinks could be included in the message in mark-down format.
    • By default, the first page of the captive portal is pre-cached on the router/AP for faster accesses. This feature could now optionally disabled.
  • SD Switch configuration
    • Added an indicator to ports to warn when a port is set to access port and its VLAN is set to the default VLAN.
    • Fixed a bug which allowed a default VLAN profile to be incorrectly removed.
  • Moved the device-level WAN Up/Down History to a dedicated page under the Reports menu. Added PepVPN Up/Down History into it.
  • Added notification for Web Admin Login and SIM Card Switch Over events
  • Added silence period setting for geofencing notifications
  • You can now acquire FusionHub AMI for all AWS regions in your account on the Warranty & License page.
  • Added SIM lock setting to Device Details and Device Management pages (require firmware 7.1.1 or above)
  • Added ability to choose devices by tags to receive external InControl appliance settings.
  • Added a badge to indicate an AP One unit is operating in router mode.
  • Added a new authentication mode CoovaChilli to external captive portal.
  • Added a Regenerate Key option to randomly generated key field of an SSID.

InControl 2.6.2 Released - May 14, 2018

What’s new

In anticipation for the new data protection laws that will take effect on 25th May in Europe, in this release, we have updated the types of information to be collected through the captive portal, and our Privacy Policy. Please also read the revised Privacy Policy carefully as the Privacy Policy will be presented to your Wi-Fi users.

In order to make the new Privacy Policy effective, please open each of your captive portal profiles and save them once. Note that the Wi-Fi service may momentarily become unavailable in the course.

When your user decides to log in to the captive portal with social network access mode, we will only collect the following personal data through social networks:

  • E-mail address (if any)
  • User ID of the Social Media

Any other personal information or statistics will be deleted and no longer be available.

If you let a user log in through e-mail or SMS access modes, we will collect the following information according to your chosen configuration:

  • email address
  • phone number
  • name
  • gender
  • country

In addition, Wi-Fi usage duration, MAC Address and IP address will be collected

If you have also enabled the Ad Delivery Service, the following information will also be collected:

  • Captive portal language
  • GPS location reported by Peplink router (if any)
  • Web browser user agent
  • URL they are browsing while they see / click the ad (HTTP only)
  • We will place cookies in users’ browsers to track the time they watch an advertisement

The retention period for user information will be two years.

Unless sought by authorities in order to comply with laws and regulations, we will only share the guests’ personal data to you.

InControl 2.6.1 Released - April 16, 2018

What’s new

  • All existing Organization Administrators are now promoted as Super Organization Administrators. A new role Organization Administrator is introduced.
    • Social user data in captive portal reports and client lists is now only visible to Super Organization Administrators, Captive Portal Administrator and Captive Portal Viewer. Any other roles, such as the new Organization Administrators or Group Administrators also could not see any social user data.
    • Super Organization Administrator and Captive Portal Administrator are now also able to remove social user data.
    • You may consider to demote some Super Organization Administrators to Organization Administrator for those who should not have social user data access.
  • Added a public API for creating Service Provider Default on devices.
  • In moving a device from one group to another, you could choose to retain InControl generated settings in the target group.
  • In Cellular Reports > Signal Strength & Quality chart, carrier and cellular signal information are now shown in the tooltip of the chart when hovering over a data point.
  • In a captive portal profile’s Preview and Customization screen, for e-mail access mode, added Phone Number, Gender and gender option text fields.
  • For Balance/MAX’s switch port list, Port Type and VLAN fields are now populated.
  • Warranty expiration notification e-mails now include which InControl organization and group that devices reside in.

InControl 2.6 Released - March 26, 2018

What’s new

  • Introduced “Low Data Usage Mode”. See the group-level “InControl Options” page. The mode is for reducing data usage on device-InControl communication and device locally generated traffic. A data usage calculator is also provided.
  • Group creation page: allow to optionally clone SSID, VLAN, captive portal and schedule settings from an existing group.
  • Notifications:
    • Added High Availability (HA) transition and Smart Reader attachment/detachment notifications
    • Added tags and notes to device up/down e-mail content
  • PepVPN configuration:
    • You may now create a profile for connecting to an externally managed device. E.g. Suppose device A and B are managed in organization A and B respectively. Now you can create a PepVPN profile in organization A and B individually to connect them. (In End Point Device selection screen, select the “Show advanced settings” option and then click a new “Add Device” button.)
    • Added a path cost field to topologies
    • Add VLAN network selection for NAT mode in star topology profiles
  • Group-level PepVPN status in tabular view revamped. Subnets of both ends are now displayed
  • Added organization level SIM Pool Data Usage reports
  • Added Extended DHCP Options to VLAN networks’ default DHCP Server settings for Balance and MAX.
  • Data roaming for cellular WANs could be enabled from the Actions menu in Device Management pages.
  • API: added an endpoint for retrieving admin user list and their role in an organization
  • Included various UI enhancements and bug fixes

InControl 2.5.2 Released - February 12, 2018

What’s new

  • Ethernet port status is displayed on devices’ details page for supported hardware models.
  • Added DHCP Snooping and STP Bridge Priority settings for Peplink SD Switch.

InControl 2.5.1 Released - January 15, 2018

What’s new

  • Outbound policy and firewall rule management are now available at the group level. Upload a configuration file saved from a device, view or optionally change the rules’ schedule, and then apply them to devices.
  • You can now define organization level firmware policy. Group level firmware policy profiles could follow them.
  • SpeedFusion configuration: A device which is not managed under the same organization or not even managed by InControl can now be added to a star and point-to-point topology profile by its site ID. Enable the “Show advanced settings” option to unveil an “Add Device” button.
  • Bulk Configurator: you can now upload a new configuration file to overwrite an existing configuration profile.
  • You can now add descriptions to your groups.
  • Added admin sign-in events to Event Log
  • When a client device is seen by multiple Peplink SD Switches, InControl could now accurately indicate which switch it is attached to on the client’s details page.
  • Group level SpeedFusion status in tabular view has been revamped.
  • InControl 2 app for iOS: to receive iOS notifications, you no longer need to enable e-mail notifications at the same time. Simply enable the types of notifications that you want to receive on the app’s “Settings > Push Notifications” screen.
  • Find My Peplink service: added an option to include private IP addresses in resolved IP address list.
  • On high availability (HA) enabled devices’ details page, its HA status is now displayed.
  • Group overview: when the device list is filtered, the same filter will also be applied to the map.
  • Group-level InControl Options: added a “Disable Firmware Management” option.
  • Added a search box in the “Groups” drop-down menu.

InControl 2.5 Released - November 13, 2017

What’s new

  • Introduced group-level SIM Pool Bandwidth Usage reports:
    • Bandwidth usage reports can automatically be grouped by carrier.
    • Custom SIM pools could be defined by inputting IMSI’s
    • Up to three usage alert levels could be defined.

(Requires Firmware 7.0.2 or above)

  • Channel width can now be configured in “Radio Settings” page.
  • Added Bandwidth Management and QoS settings to the “SSID Settings” page for Pepwave AP devices.
  • The routing mode (i.e. bridged or routed) of each AP Device can be changed on “Device Management” page.
  • For devices supporting High Availability (HA), HA status is now shown on “Device Details” page.
  • SpeedFusion configuration:

    • Numeric profile IDs have been replaced with Customizable profiles.

    • PepVPN connection (link) names can be customized.

    • Data port and path cost for each link can be customized on the “Advanced Link Settings” screen

    • Pre-shared Key (PSK) for existing profiles can be regenerated on “Advanced Link Settings” screen

    • Newly generated PSK’s length increased from 45 to 64 characters.

  • Supported configuring Link Aggregation Control Protocol (LACP) for Peplink SD Switch ports
  • Web admin user name can be configured on “Group Settings” page.
  • GPS enabled devices’ map UI on “Devices Details” and “Cellular Reports” have been redesigned.
  • Added an option to use OpenStreetMap for all map displays. The map data are hosted by Peplink. It is useful for networks that have restricted access to google.com. See “Organization Settings” page for the option.
  • Geo-fencing rings can be defined by uploading a CSV file
  • Scheduled Reboot settings have been moved to group level “Device System Management” page. Multiple schedule profiles can be created.
  • Wi-Fi AP’s on/off state of a group can be seen on device listings at a glance.
  • Device level “Bandwidth Reports” is now named “Bandwidth and Usage Reports”. Group level “Bandwidth Reports” is now named “Usage Reports”, in which
    • Reports can be filtered by multiple products, or by tags
    • Reports can be downloaded in CSV format
  • Device/Wi-Fi Reports pages included an “Average No. of Clients with Usage” figure in the Summary section.
  • “Client Details” page included Wi-Fi client signal history
  • Included various UI enhancements and bug fixes.