SWX2320 Firmware V2.05.15 (Previous version)

• Support period for firmware updates: Up to 5 years from the date the relevant product ceases production.
• Be sure to read the following before updating V2.05.13 or earlier software.
  
  https://manual.yamaha.com/pa/interfaces/swx2320/Rev_2_05_13/en/basic/index.html#!/notice_login_security 
• Countermeasures were implemented to address OpenSSL vulnerabilities.
  CVE-2023-2650(JPCERT/CC JVNVU#94584169)

How to Update Firmware

For more detailed information, refer to the latest version of the Yamaha LAN Monitor User Guide and the Web GUI Help information.

Updating from Yamaha LAN Monitor V1.8.6 and Later Versions

1. Connect the SWX2320 and the computer, using a LAN cable.
   Please connect to a port on the SWX2320 which has been assigned to VLAN1.
2. Start the Yamaha LAN Monitor.
3. Change the LAN Monitor display to [List] mode.
4. Click the [Firmware Update] tab. (Loading the firmware might take a while if multiple units are connected.)
5. Select the switch to be updated.
6. Click the [Firmware Update] button.
7. Click the [Browse] button to select the downloaded and decompressed firmware file with a “.bin” extension.
8. Click the [Execute] button.

Updating from Yamaha LAN Monitor Versions Earlier Than V1.8.6

1. Connect the SWX2320 and the computer, using a LAN cable.
   Please connect to a port on the SWX2320 which has been assigned to VLAN1.
2. Start the Yamaha LAN Monitor.
3. Select the SWX2320 to be updated in the tree view.
4. Click the [Web GUI] button on the device detail view.
   The username and password are not specified with the factory settings, so entering a username and password is not necessary in this case.
   Note: If updating from V2.05.13 or a later version, log in by entering the previously specified authentication information.
5. Select [Management] -> [Maintenance] -> [Update firmware], then click the [Next] button on "Update firmware from PC."
6. Click the [Select a file] button, then select the downloaded and decompressed firmware file with extension “.bin”.
7. Click the [Confirm] button.
8. Click the [OK] button.

Wait until completing the update. SWX2320 will automatically restart and become ready to use.

New Functionality

• Support for DHCP snooping functionality was added.
  A page for DHCP snooping settings was added to the [Layer 2 functions]-[DHCP snooping] page in the Detailed settings screen of the Web GUI.
• PTP support for the “Transparent Clock End-to-End One-step Ethernet” mode was added.
  L2 frames can now be specified in the [PTP]-[System settings] of the Management screen of the Web GUI for transfer protocol.
• Functionality for routing jumbo frames was added.
  A command was added to set VLAN Interface MTU values.
  mtu
  Functionality for specifying MTU values was added in the [VLAN]-[Create VLAN] page of the Detailed settings screen of the Web GUI.
• A command was added to specify whether to forward ARP requests by unicasting or broadcasting when an ARP entry times out.
  arp-ageing-timeout request
• A command specifying how unknown multicasting frames are processed was added to the VLAN interface mode.
  l2-unknown-mcast
  Settings related to unknown multicast frames can now be specified for each VLAN in the [Multicast]-[Multicast basic settings] page in the Detailed settings screen of the Web GUI.
• In auto-configure via LLDP settings, a “tlv-select basic-mgmt” command is now automatically specified for ports that receive LLDP frames sent from specific Yamaha devices that support Dante.
• A [Power consumption information] gadget was added to the Dashboard screen of the Web GUI.
• In the [Maintenance]-[Summary data management] page of the Management screen of the Web GUI, summary data can now be exported without inserting an SD card.
• In the [Traffic control]-[QoS] page of the Web GUI Detailed settings screen, the [Web conference applications optimization] was added.

Improvements

• When an ARP entry times out, an ARP request is sent to reset the ARP entry.
• Certain additional multicast packets (IGMP and MLD) are now subject to the authentication trigger in the MAC authentication function.
• The port authentication function changed the error message that appears if a port authentication command is specified for a physical interface affiliated with a logical interface.
• The following global configuration mode commands were eliminated.
  l2-unknown-mcast forward <ipv4_addr> <vlan_ifname>
  no l2-unknown-mcast forward <ipv4_addr> <vlan_ifname>
  If the commands are specified by “startup-config”, they are converted to an alternative command during startup.
  Also, the following multicast frame transmission setting command was added to the VLAN interface mode.
  l2-mcast flood
• In IGMP and MLD snooping functionality, log data is no longer extended output whenever a query for a version different than specified in the unit is received.
  The following commands for IGMP snooping and MLD snooping functionality now display the number of queries received from a different version than specified in the unit.
  show ip igmp snooping interface
  show ipv6 mld snooping interface
• Execution speed was improved for the following commands.
  show inventory
  show ddm status
  show tech-support
• The following commands were added to “tech-support” acquired via TFTP.
  show inventory
  show ddm status
• The format of Help information on the Dashboard screen of the Web GUI was changed.
• In the LAN map screen of the Web GUI, the OUI file used to identify the manufacturer of connected devices was updated.
• The following changes were made to the [Agent list] on the [Device list] page in the LAN map screen of the Web GUI.
  
  • An IP address column list was created on the far right for displaying IP addresses.
  • IP addresses were added to CSV files obtained using the [Save as CSV] button.
• The IP address of the L2MS manager is now displayed in the [Whole map] of the LAN map screen of the Web GUI.
• The ability to select VLAN interfaces was added to [Dante optimization] and [SDVoE optimization] pages of the Management screen of the Web GUI. Settings are only applied to specified VLAN interfaces and affiliated physical interfaces. The content of settings was also reviewed.
• When optimal Dante settings are specified in the [Dante optimization]-[Manual settings] page of the Management screen of the Web GUI, the following commands are set for the designated VLAN interfaces.
  l2-mcast flood 224.0.1.129
  l2-mcast flood 224.0.1.130
  l2-mcast flood 224.0.1.131
  l2-mcast flood 224.0.1.132
  l2-mcast flood 239.254.3.3
  ip igmp snooping report-suppression disable

Fixed Bugs

• A bug was fixed that prevented sending communications to terminals at interfaces with the port authentication function enabled when the terminals were relocated without linking down due to not updating the ARP entry.
• A bug was fixed in port authentication functionality that caused authentication to fail when conflicting authentication requests were received from multiple supplicants.
• A bug in port authentication functionality was fixed that caused the port authentication function not to function if using a UDP port number which differs to that used in the RADIUS server.
• A bug in port authentication functionality was fixed that caused authentication information not to be synchronized with stack members after a stack reconfiguration.
• A bug was fixed in MLD snooping that caused streams to not necessarily continue to be forwarded without properly deleting registered multicast group address information.
• A bug was fixed that caused overall system settings for processing unknown multicast frames not to be appropriately applied.
• A bug was fixed that displayed an inappropriate error message when the “no ip address” command was executed.
• A MLD snooping bug was fixed that caused an error not to be displayed when an inappropriate interface was specified among multicast router connections.
• A bug was fixed that, in rare cases, caused startup history events not to be appropriately saved when a “reload” command was executed.
• A bug that outputted an error log event was fixed when the loop detection function (for the overall system) was disabled while a loop was still detected.
• A bug that displayed information for no longer necessary VLAN interfaces was fixed when a loop was detected (shutdown) at the physical port with the highest port number, and the “show errdisable” command was executed.
• English language errors were corrected in the following gadgets on the Dashboard screen of the Web GUI.
  
  • [Traffic information] gadget
  • [Resource information] gadget (graph)
• A bug was fixed that caused English messages to not display correctly in the "History" area of the LAN map screen of the Web GUI after the fan operation was restored.
• A bug that caused the [Print preview] screen layout to not display correctly in the [Whole map] of the LAN map was fixed.
• A bug was fixed that sometimes displayed detected agents as eliminated terminals in the [Terminal list] of the [Device list] in the [LAN map].
• A bug was fixed that sometimes displayed clock values 1 second ahead of the actual value in acquisition date/time information in the “Connected Devices“ view when the device management function was enabled in the LAN map.
• A bug was fixed that resulted in not displaying warning information about conflicts between multiple L2MS managers in the warning list on the Help page of the Dashboard screen of the Web GUI.
• A bug was fixed that caused messages about fan operation being restored not to be displayed in the notification history list on the Help page of the LAN map screen of the Web GUI.
• A bug was fixed that showed both yen and backslash symbols on the Help page of the Web GUI.
• A bug was fixed that caused the button name indicated in [Backup settings for summary data]-[Check entered content] explanatory text in the [Summary data management] page of the Web GUI Help page to not match the actual button name.
• Some other Web GUI display bugs were fixed.