NDMS 5.0
NDMS release notes for Netcraze Giga (NC-1012) in the Development Channel
NDMS releases in this channel show what we're working on right now. We update roughly weekly. N.B.: While releases in this channel do undergo testing, they are still sometimes bugs present, as we want you, our community, to share in what's new as soon as possible. Your input is really valued.
Netcraze Giga (NC-1012) is currently in the Standard Updates support period and receives regular software updates, including security enhancements, new features, operating system updates, and bug fixes.
NDMS 5.0 Beta 2
26/09/2025
New
Implemented a new Enable IPv6 checkbox and an IPv6 configuration section for Home and additional local network segments, providing advanced control over IPv6 parameters and allowing IPv6 to be disabled per segment. [NWI-4373]
Introduced a new design for the Internet card on the System Dashboard page, featuring an updated layout and buttons to manage the display of connection statistics and traffic chart blocks. [NWI-4377]
Improved
The following improvements have been applied to the Web Interface.
The CrazeDNS tab on the Domain Name page now features a single checkbox to enable both IPv6 and IPv4, simplifying setup and improving dual-stack compatibility. Added support for direct access via the IPv6 protocol and fixed an issue with incorrectly processed CrazeDNS mode configurations. [NWI-4427] [Forum topic]
Added support for USSD requests starting with
#
, improving correct processing of these commands. [NWI-4401]Improved the naming of WireGuard VPN Server client peer configuration files for better compatibility with the official WireGuard® application. [NWI-4424] [Forum topic]
Added Basic authentication support for the OpenConnect VPN client via the command line interface (CLI). [NDM-4037]
interface {name} openconnect allow-basic-auth
— enable the basic authentication for the{name}
OpenConnect connection.
Fixed a potential embedded switch reset when using an external xPON SFP module in the SFP slot. [SYS-1455]
Fixed
The following fixes have been applied to the Web Interface.
Corrected parameter validation in the iPerf3 network connection test utility on the Diagnostics page. [NWI-4402] [Forum topic]
Corrected sorting for the Profile column on the Content Filter tab of the Internet Safety page and the Ports column on the Port Forwarding page. [NWI-4386] [Forum topic]
Corrected the layout when printing Wi-Fi connection information from the My Networks and Wi-Fi card on the System Dashboard page. [NWI-4387] [Forum topic]
Fixed the DNS profile editing issue when the Cloud-based content filtering and ad blocking component was not installed. [NWI-4396] [Forum topic]
Fixed the incorrect display of the Interface selector when editing Routing Rules on the DNS-based Routes tab. [NWI-4405] [Forum topic]
Fixed the issue where Wi-Fi access points from a deleted segment were still displayed on the Firewall tab. [NWI-4407] [Forum topic]
Fixed several configuration issues related to user-defined routes in the Routing page. [NWI-4428] [Forum topic]
Resolved an issue where the
DNS proxy
service could enter a busy loop when processing malformed DNS responses, improving stability and performance. [NDM-4034] [Forum topic]Fixed an issue with the Exclusive Route option in DNS-based Routes. [NDM-4046] [Forum topic]
Corrected the WireGuard VPN Server configuration to prevent SMB Server restarts when both applications run simultaneously. [NDM-4059] [Forum topic]
Fixed inbound Web Interface access via IPv6 on interfaces configured with the
private
orprotected
security level. [NDM-4061] [Forum topic]Fixed the display of remote IP addresses and ports for clients in the WireGuard VPN Server Statistics popup window. [NDM-4064] [Forum topic]
NDMS 5.0 Beta 1
11/09/2025
New
Further improvements to the Mesh Wi-Fi System allow an Extender’s built-in 4G/3G modem to be used as the primary or a backup Internet connection. When a compatible Extender is detected, the Controller automatically creates a dedicated
MwsMobile
interface and manages the connection like any other, including its use in Connection Policies. SMS and USSD modem options are available directly in the Extender’s Web Interface, which can be opened via a link on the Controller’s Wi-Fi System page. [NDM-4027]The Port Forwarding page now supports IPv6 Pinholing, letting you open TCP and UDP ports to provide external access from the Internet to devices on your home network that use IPv6 addresses. [NWI-4213]
Added support for the Virtual Router Redundancy Protocol (VRRP) v2 and v3, configurable via the command line interface (CLI). This enables redundant routing across multiple routers. To use it, install the VRRP support system component. [SYS-1443]
interface {name} vrrp group {group} ip {ip}
— set virtual IP address for the group;interface {name} vrrp group {group} priority {priority}
— set priority (integer in the range 0 to 255), the device with the numerically highest priority becomes the master in the group;interface {name} vrrp group {group} advertise {advertise}
— set advertisement interval in seconds (integer in the range 1 to 255, the default is 1);interface {name} vrrp version {version}
— set protocol version, supported values:default
— use version 2 for IPv4 and version 3 for IPv6;v2
— strict compliance to VRRP version 2:zero VIPs are not allowed;
unicast peers are not allowed;
IPv6 addresses are not allowed;
state MASTER can be configured strictly when priority is 255;
v3
— compliance to VRRP version 3 for both IPv4 and IPv6;v3-compat
— VRRPv3 compatibility mode for interoperability with implementations (such as Cisco and Juniper) that treat RFC 5798 §5.2.8 as applying only to IPv6. When enabled, the router includes the IPv4 pseudo-header but omits it from the IPv4 checksum calculation;
show interface {name} vrrp
— display the VRRP status.
Fixed
The following fixes have been applied to the Web Interface.
Fixed several issues with the WireGuard VPN Server configuration. [NWI-4372] [Forum topic]
Fixed display issues affecting the Clients tooltip in the nodes list on the Mesh Wi-Fi System page. [NWI-4379] [Forum topic]
Corrected the Latest handshake values displayed in the WireGuard connections list on the Other Connections page. [NWI-4384] [Forum topic]
Fixed an issue that caused
invalid argument
messages in the System log while polling S.M.A.R.T data from SATA drives. [NDM-4026]Fixed an issue where the
identity-local
parameter was reset when reconfiguring the IPsec VPN Server. [NDM-4036] [Forum topic]
NDMS 5.0 Beta 0
01/09/2025
New
The new DNS-Based Routes tab on the Static Routes page allows creating custom routing rules via a specified connection or gateway for user-defined lists of domain names and IP addresses. [NWI-4186]
The Diagnostics page now includes an iPerf utility in the Network Connection Test section, enabling bandwidth and performance testing directly from the web interface. To use it, install the iPerf3 system component on your device. [NWI-4371]
Improved
Improved the DNS Configuration tab on the Internet Safety page to provide a more convenient layout on mobile devices. [NWI-4375] [Forum topic]
Added support for specifying IP sub-networks with the
object-group fqdn exclude
CLI command. [NDM-4013] [Forum topic]Command example:
object-group fqdn TEST exclude ::/0
Fixed
The OS Kernel has been patched to resolve the following CVE security vulnerabilities:
CVE-2024-36971. [SYS-1436]
CVE-2024-41012. [SYS-1430]
CVE-2024-50302. [SYS-1431]
Fixed an issue where the SSH server was not accessible from the Internet over IPv6 in certain conditions. [NDM-4010]
NDMS 5.0 Alpha 13
23/08/2025
Improved
Added the Average speed information to the Traffic Monitor page. [NWI-4212] [Forum topic]
Added the date and time to the filenames of downloaded firmware and startup-config configuration files. [NDM-3999] [Forum topic]
Added an option to exclude sub-domain names for Object Groups via the command line interface (CLI). [NDM-4001] [Forum topic]
object-group fqdn {name} exclude {address}
— exclude the{address}
sub-domain from the{name}
object group.
Fixed
The following fixes have been applied to the Web Interface.
Fixed the validation in the DNS server URL field when selecting DNS-over-HTTPS server type on the DNS Configuration page. [NWI-4350]
Fixed the SFP port name being incorrectly applied on the General System Settings → Network Ports page. [NWI-4360]
Fixed an error causing the
ResolveQueue: system failed [0xcffd0046]
records to appear in the System log when using the Public DNS resolvers option for content filtering. [NDM-4002] [Forum topic]
NDMS 5.0 Alpha 12
19/08/2025
New
New USB modems are now supported, including:
SMD12 4G LTE Cat4 USB modem and SMW12 Tele2 4G LTE Cat4 USB router. [NDM-2979]
Olax F90 4G LTE Cat4 USB modem. [NDM-3983]
Fibocom FM101-EAU LTE Cat6 USB (
UsbLte
-type) modem module. [NDM-3970]Tip
To connect an LTE module to your Netcraze device, you can purchase a third-party USB adapter with a SIM card slot for the Mini PCI-E LTE module or M.2 LTE module.
Implemented
Origin
header enforcement for the CrazeDNS Web application proxies. [NDM-3988]ip http proxy {name} force-origin {origin}
— force the addition of the specified{origin}
header to the{name}
HTTP(s) proxy.
Fixed
Fixed the End User License Agreement title spacing in the Web Interface. [NWI-4344] [Forum topic]
Fixed a regression introduced with the new
manager
user role that prevented seamless access to Wi-Fi System Extenders via HTTPS token. [NDM-3981] [Forum topic]
NDMS 5.0 Alpha 11
09/08/2025
New
The Internet Safety page now features an Application Filter tab with controls to block traffic from specific applications and categories for individual clients or entire network segments. To use this feature, you must install the Traffic classification engine system component and enable the Application Classification option on the IntelliQoS page. [NWI-4232]
The new WireGuard VPN Server application makes it easier to set up various remote connection scenarios. It enables quick installation on client devices, providing secure access to any part of your network. [NWI-4206]
Implemented UPnP IGDv2 PCP support for the IPv6 protocol. [NDM-3859]
Added a new Manager user role featuring limited administrative rights for ISP deployment scenarios. [NDM-3945]
Improved
The following improvements have been applied to the Web Interface.
Reduced the response time of Wi-Fi toggles on the segment settings pages. [NWI-4363] [Forum topic]
Added the Network access setting for IKEv1/IPsec VPN and IKEv2/IPsec VPN servers. [NWI-4328]
Added the data transfer statistics to the Site-To-Site IPsec VPN Connections table. [NWI-4318] [Forum topic]
Fixed
The following fixes have been applied to the Web Interface.
Fixed the on-click behavior for the drop-down lists. [NWI-4365] [Forum topic]
Fixed the Web UI search functionality for the word '
graph
' keyword. [NWI-4327] [Forum topic]Fixed the incorrect Allowed v6 IPs field validator on the WireGuard VPN connection settings page. [NWI-4355] [Forum topic]
Fixed a number of issues that were occurring when editing user rights and passwords on the user credential popup. [NWI-4131] [Forum topic]
Refined the display of the WireGuard connections list on the Other Connections page. [NWI-4337] [Forum topic]
Fixed the display of the custom logo on the Connection Information for the Wi-Fi network popup on the System Dashboard. [NDM-3969] [Forum topic]
Fixed configuration issues of the iperf3 system component. [NDM-3972] [Forum topic]