SWP2 Firmware V2.03.20 (Previous version)

• Support period for firmware updates: Up to 5 years from the date the relevant product ceases production.
• Be sure to read the following before updating V2.03.18 or earlier software.
  
  https://manual.yamaha.com/pa/interfaces/swp2/Rev_2_03_18/en/basic/index.html#!/notice_login_security 
• Countermeasures were implemented to address OpenSSL vulnerabilities.
  CVE-2023-2650(JPCERT/CC JVNVU#94584169)

How to Update Firmware

For more detailed information, refer to the latest version of the Yamaha LAN Monitor User Guide and the Web GUI Help information.

Updating from Yamaha LAN Monitor V1.8.6 and Later Versions

1. Connect the SWP2 and the computer, using a LAN cable.
   Please connect to a port on the SWP2 which has been assigned to VLAN1.
2. Start the Yamaha LAN Monitor.
3. Change the LAN Monitor display to [List] mode.
4. Click the [Firmware Update] tab. (Loading the firmware might take a while if multiple units are connected.)
5. Select the switch to be updated. (Multiple models can be updated here.)
6. Click the [Firmware Update] button.
7. Click the [Browse] button to select the downloaded and decompressed firmware file with a “.bin” extension.
8. Click the [Execute] button.

Updating from Yamaha LAN Monitor Versions Earlier Than V1.8.6

1. Connect the SWP2 and the computer, using a LAN cable.
   Please connect to a port on the SWP2 which has been assigned to VLAN1.
2. Start the Yamaha LAN Monitor.
3. Select the SWP2 to be updated in the tree view.
4. Click the [Web GUI] button on the device detail view.
   The username and password are not specified with the factory settings, so entering a username and password is not necessary in this case.
   Note: If updating from V2.03.18 or a later version, log in by entering the previously specified authentication information.
5. Select [Management] -> [Maintenance] -> [Update firmware], then click the [Next] button on "Update firmware from PC."
6. Click the [Select a file] button, then select the downloaded and decompressed firmware file with extension “.bin”.
7. Click the [Confirm] button.
8. Click the [OK] button.

Wait until completing the update. SWP2 will automatically restart and become ready to use.

New Functionality

• Support for DHCP snooping functionality was added.
  A page for DHCP snooping settings was added to the [Layer 2 functions]-[DHCP snooping] page in the Detailed settings screen of the Web GUI.
• Functionality for routing jumbo frames was added.
  A command was added to set VLAN Interface MTU values.
  mtu
  Functionality for specifying MTU values was added in the [VLAN]-[Create VLAN] page of the Detailed settings screen of the Web GUI.
• A command was added to specify whether to forward ARP requests by unicasting or broadcasting when an ARP entry times out.
  arp-ageing-timeout request
• A command specifying how unknown multicasting frames are processed was added to the VLAN interface mode.
  l2-unknown-mcast
  Settings related to unknown multicast frames can now be specified for each VLAN in the [Multicast]-[Multicast basic settings] page in the Detailed settings screen of the Web GUI.
• In auto-configure via LLDP settings, a “tlv-select basic-mgmt” command is now automatically specified for ports that receive LLDP frames sent from specific Yamaha devices that support Dante.
• A [Power consumption information] gadget was added to the Dashboard screen of the Web GUI.
• In the [Traffic control]-[QoS] page of the Web GUI Detailed settings screen, the [Web conference applications optimization] was added.

Improvements

• When an ARP entry times out, an ARP request is sent to reset the ARP entry.
• A mac-address-table static command can no longer be specified for physical interfaces included in link aggregation.
  If link aggregation is specified for a physical interface with a mac-address-table static command specified, then the mac-address-table static setting is deleted.
• Certain additional multicast packets (IGMP and MLD) are now subject to the authentication trigger in the MAC authentication function.
• The port authentication function changed the error message that appears if a port authentication command is specified for a physical interface affiliated with a logical interface.
• The following global configuration mode commands were eliminated.
  l2-unknown-mcast forward<ipv4_addr><vlan_ifname>
  no l2-unknown-mcast forward<ipv4_addr><vlan_ifname>
  If the commands are specified by “startup-config”, they are converted to an alternative command during startup.
  Also, the following multicast frame transmission setting command was added to the VLAN interface mode.
  l2-mcast flood
• In IGMP and MLD snooping functionality, log data is no longer extended output whenever a query for a version different than specified in the unit is received.
  The following commands for IGMP snooping and MLD snooping functionality now display the number of queries received from a different version than specified in the unit.
  show ip igmp snooping interface
  show ipv6 mld snooping interface
• Execution speed was improved for the following commands.
  show inventory
  show ddm status
  show tech-support
• The format of Help information on the Dashboard screen of the Web GUI was changed.
• In the LAN map screen of the Web GUI, the OUI file used to identify the manufacturer of connected devices was updated.
• The following changes were made to the [Agent list] on the [Device list] page in the LAN map screen of the Web GUI.
  
  • An IP address column list was created on the far right for displaying IP addresses.
  • IP addresses were added to CSV files obtained using the [Save as CSV] button.
• When optimal Dante settings are specified in the [Dante optimization]-[Manual settings] page of the Management screen of the Web GUI, the following commands are set for the designated VLAN interfaces.
  l2-mcast flood 224.0.1.129
  l2-mcast flood 224.0.1.130
  l2-mcast flood 224.0.1.131
  l2-mcast flood 224.0.1.132
  l2-mcast flood 239.254.3.3
  ip igmp snooping report-suppression disable
• A [Maintenance]-[Summary data management] page was added to the [Management] screen of the Web GUI.

Fixed Bugs

• A bug was fixed that prevented sending communications to terminals at interfaces with the port authentication function enabled when the terminals were relocated without linking down due to not updating the ARP entry.
• A bug was fixed in port authentication functionality that caused authentication to fail when conflicting authentication requests were received from multiple supplicants.
• A bug in port authentication functionality was fixed that caused the port authentication function not to function if using a UDP port number which differs to that used in the RADIUS server.
• A bug in port authentication functionality was fixed that caused authentication information not to be synchronized with stack members after a stack reconfiguration.
• A bug was fixed in MLD snooping that caused streams to not necessarily continue to be forwarded without properly deleting registered multicast group address information.
• A bug was fixed that caused overall system settings for processing unknown multicast frames not to be appropriately applied.
• A bug was fixed that displayed an inappropriate error message when the “no ip address” command was executed.
• A MLD snooping bug was fixed that caused an error not to be displayed when an inappropriate interface was specified among multicast router connections.
• A bug was fixed that, in rare cases, caused startup history events not to be appropriately saved when a “reload” command was executed.
• A bug that outputted an error log event was fixed. This bug occurred when the loop detection function (for the overall system) was disabled while a loop was still detected.
• A bug that displayed information for no longer necessary VLAN interfaces was fixed when a loop was detected (shutdown) at the physical port with the highest port number, and the “show errdisable” command was executed.
• English language errors were corrected in the following gadgets on the Dashboard screen of the Web GUI.
  • [Traffic information] gadget
  • [Resource information] gadget (graph)
• A bug was fixed that showed both yen and backslash symbols on the Help page of the Web GUI.
• Some other Web GUI display bugs were fixed.