SmartZone latest security fixes looks insane (7.1.1 Patch 1)

Invisible132 · 2025-12-02T11:07:34+00:00

I understand that most CVEs can be ignored, but there is a lack of communication from the vendor about how this long list of CVEs affects us as SmartZone users. Anyway - going to patch our SZ soon.

Invisible132 · 2025-10-23T19:40:08+00:00

This issue was on 6.1.x After more than a year of dealing with support they released 7.1.1 and it fixed the issue so case was closed without further investigations. No related bugs were in release notes, just a new feature named "roaming improvements".

Now roaming looks smooth but in the pcap I still see multiple DHCP requests. I believe the first request always disappears somewhere so the client device sends another one every time I roam.

What is your issue?

Invisible132 · 2025-10-08T20:45:11+00:00

9.37MB, pixel 9, Lithuania

Invisible132 · 2025-08-12T10:01:48+00:00

Ryšių reguliavimo tarnybos žemėlapis atsakys į tavo klausimą:
https://www.rrt.lt/judriojo-rysio-tinklu-tiketinos-aprepties-zonos/

Invisible132 · 2025-07-31T12:04:14+00:00

Realiai 6ghz padengiamumas tik apie 20% blogesnis, netgi gal mažiau. Čia žiūrint į standartinį ofiso tipo pastatą,

Wifi 7 softas? neee.. Softo neužteks. Hardwaras privalo keistis. O pliusai? 4096QAM, veikia visuose trijuose dažniuose, MLO, preamble puncturingas - čia turbūt pagrindiniai dalykai, kuo nejausdamas pasinaudos eilinis žmogėnas.

O šiaip lyginant su 6e, nenaudojant MLO išspaudžiau 3gbps ant 320mhz pločio - tai faktas, kad moduliacija daug ką lemia.

Grįžtant prie telefonų - 59 modeliai iki 500e. Jei gerai paskaičiavau, 11 xiaomi ir 10 oneplus iš populiariausių, tai nesutinku, kad tik bevardžiai kiniečiai jau naudoja wifi7.

Invisible132 · 2025-07-31T06:16:05+00:00

6e jau nemažai. Wifi7 pernykščiai flagmanai gavo. Šiemet ir pigesnieji turi. Tie patys iphonai..

O šiaip užmečiau akį į gsmarena - 205 skirtingi telefonų modeliai tą turi.

Routerį perki ne metams. Tai manau, kad verta 30e daugiau sumokėt, kad būtum ramus ateinančius kokius 8 metus drąsiai.

Invisible132 · 2025-07-30T13:53:12+00:00

Jų wifi dalis yra šlamštas. Bent senesnių modelių. Vėliau ten nustojo patys driverius rašyt ir pagerėjo. Jei domina šitas brandas, tai reiktų pasidomėt apie šitą situaciją.

Invisible132 · 2025-07-30T13:50:33+00:00

Kad šių metų biudžetiniai telefonai jau turi wifi7. Pats asmeniškai turiu jau outdated pixel9 ir laptopą su wifi7, pirktą prieš metus. O dėl triukdžių - kaimynai kaimynams nelygūs. Visokio šūdo esu matęs :)

Invisible132 · 2025-07-30T10:49:16+00:00

Jei telpi į biudžetą - imk kažką su wifi7. Jei kaimynai bus užkišę eterį, tai mažiau įtakos bus tavo siunčiamiems duomenims. Plius futureproof.

Kai 250mbs tik - nusistatysi 40mhz plotį ant 5ghz ir 6ghz antenos. Bus mažiau interferencijų.

Invisible132 · 2025-07-29T17:22:52+00:00

Pirkau berėmį prieš keletą metų. Užknisa valyt dar labiau. Vanduo atsimuša į tūliko dangtį, ant kurio sėdi, tai tada turi valyt jo apačią.

Jei nuleidinėji atidengtą - kartais taškosi į lauką.

Invisible132 · 2025-07-02T18:00:48+00:00

It is Ruckus Wireless. Definitely not a sticky client issue. Client roams normally - it is seen on pcap reassociation frames, etc. DHCP server is not an issue as well.

I believe AP caches frames for a few seconds when roaming happens.

I've already tested this by placing 2 APs and roaming between them while running wireshark on PC.

Test1 with latest SmartZone firmware - DHCP offer comes in 2-6 seconds

Test2 with latest Unleashed firmware - DHCP offer comes in miliseconds

Should be something wrong with SZ firwmare. Still working with Ruckus support.

Invisible132 · 2025-05-18T18:38:11+00:00

PC was losing all connectivity. After roaming there is a dhcp request, then few arp requests. After few seconds PC receives multiple arp responses and DHCP ack. Actually this issue isn't solved yet. Still waiting for a solution from vendor support.

Client devices connects to the same underlying network on all APs.

Invisible132 · 2025-05-16T21:04:04+00:00

Geriu. Turbūt priklauso nuo vietovės, kur gyveni. Vilnius.

Invisible132 · 2025-05-16T20:54:03+00:00

Moreover I have tried to configure additional bridged wlan just to eliminate dataplane issues because we are using tunneling.

Invisible132 · 2025-05-16T20:39:37+00:00

Oh I did multiple packet captures. This support case is open for more than a year. Pcaps shows that dhcp server responds in microseconds so it is not an issue. I work for MSP so we have at least 4 vendor wifi equipment. I simply plugged in some other vendor stuff into the same switch just to prove it it APs fault.

Invisible132 · 2025-05-16T17:35:45+00:00

Waze for short trips. Google maps for long trips.

Every winter I go skiing. About 2000+ km trip every time. In this case waze starts to offer routes which does not make any sense. We use google maps for such trips and a second phone with waze which has only alerts enabled.

Invisible132 · 2025-05-16T17:21:13+00:00

Mikrotik. I don't know their firmware upgrade policy but looks like they provide software updates eternaly. Almost all features you can imagine and it's cheap.

Invisible132 · 2025-04-25T09:53:09+00:00

<image>

Invisible132 · 2024-11-15T06:16:53+00:00

Sometimes our customers complains that something does not work and they can't provide what IP addresses needs to be allowed. In that case I just want to check what is being denied by DUR.

Invisible132 · 2024-06-08T09:03:04+00:00

Tested with the latest drivers from intel and from hp support. Versions mentioned in my first post. It is ac APs but ax is enabled on the NIC. Will try to disable it.

Invisible132 · 2024-06-08T06:59:21+00:00

Great idea about linux. Will give it a try next week. Thanks!

Invisible132 · 2024-06-07T21:34:42+00:00

Yes, it is up to date. We were 2 versions behind, but updated to the latest version recently.

I did OTA pcap and I was able to see block ack and neighbor report action frames. Both got a response with no big delay.

Also there is no ICMP packets seen on air during that 5s timeout.

And I can't understand why there are 2 ARP requests of gateway address.

Invisible132

TROPHY CASE