TSW202 Firmware Downloads
This page contains firmware files for TSW202 devices. Look to the table below or the changelog to find download links.
Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in TSW202 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.
Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page. For Profinet firmware, use separate packages from Package Downloads (Profinet) page.
| File | Type | Release date | Size | MD5 | Links |
|---|---|---|---|---|---|
| TSW2_R_00.01.07.1_WEBUI.bin | Stable FW |
2025.09.24 | 12 MB | 2d4e41406e1078acef89fe60a11c1a7f | Changelog API |
| TSW2_R_00.01.08_WEBUI.bin | Latest FW |
2025.12.04 | 12 MB | a150a61c24c59dbbf2403ce54dcacd1b | Changelog API |
| TSW2_R_GPL_00.01.08.tar.gz | SDK | 2025.12.04 | 22 MB | fa933e59e835f3994003faa775376d34 |
| File | Type | Release date | Size | MD5 | Links |
|---|---|---|---|---|---|
| TSW2_PROFINET_R_02.01.07.1_WEBUI.bin | Stable FW |
2025.09.24 | 11.5 MB | 94876a65093e44ff3108588a59784a66 | Changelog |
| TSW2_PROFINET_R_02.01.08_WEBUI.bin | Latest FW |
2025.12.04 | 11.5 MB | 4d8c3778ff5e41e5b3a8c065a48f24ec | Changelog |
FW checksums
Checksums for firmware files can be found here.
Changelog
TSW2_R_00.01.08 | 2025.12.04
- New
- Services
- Modbus Server: added Modbus server support
- Profinet: added TSW213 and TSW223 support
- System
- Certificates: added certificate manager support
- Services
- Improvements
- Network
- 802.1X: speed up 802.1x Server when over 50 VLANs are in use
- 802.1X: updated 802.1x validation so that it can no longer be enabled on a disabled port
- DHCP server: improved "DHCPv6-Mode" field's option names and hints
- QOS: added the ability to set a custom rate for selected ports
- Services
- OPC UA Server: added SFP information
- OPC UA Server: added STP information
- OPC UA Server: improved port statistics retrieval performance
- cURL: updated version to 8.16.0
- System
- Access Control: added JSON-RPC enable toggle
- JSON-RPC: moved to Package Manager
- hostapd: updated version to 2.12
- Kernel: updated version to 5.10.245
- libubox: updated version to 2024-03-29
- Network
- Fix
- Network
- 802.1X: fixed "auth_enable not found" error in log when upgrading from 1.3
- Dynamic Routes: fixed services other than EIGRP restarting on network change
- Loopback detection: fixed memory leak when enabling SFP port
- Services
- BGP: fixed Access list filters not applying fully
- System
- IP Block: fixed IPv6 address blocking
- Overview: fixed value of branch to show "-" instead of "N/A"
- System Users: fixed multiple network pages working improperly with non-root users
- Troubleshoot: fixed "Compress" switch hint
- WebUI: fixed the “Reset type” hint on the “Reset settings” page
- WebUI: fixed broken tables on the port status page
- WebUI: fixed error messages on MRP, Profinet, OPC UA Server, and EtherNet/IP pages when accessed by users with limited permissions
- Network
- CVE Patches
- CVE-2025-24912 - 3.7 (LOW)
- CVE-2025-46394 - 3.3 (LOW)
TSW2_R_00.01.07.1 | 2025.09.24
- Firmware includes no changes for this device
TSW2_R_00.01.07 | 2025.09.15
- New
- Network
- Network: added "Custom DNS servers" field to DHCP interface configuration
- Ports Settings: added functionality to bounce PoE power and port link
- Ports Settings: added ability to configure autonegotiation and advertisement options
- Services
- Event Juggler: added package
- System
- Update Firmware: added stable firmware support
- Network
- Improvements
- Network
- Network: added configurable multicast option
- Curl: updated version to 8.12.0
- System
- Overview: added VLAN name to VLAN status
- Kernel: updated version to 5.10.240
- Network
- Fix
- Network
- 802.1X: fixed client configuration reload
- 802.1X: fixed 802.1X server EAP "SUCCESS" response when authentication fails due to not being able to find the RADIUS requested VLAN
- DHCP server: fixed incorrect DNS field saving
- DHCP server: fixed DHCP server startup after reboot
- Network: fixed VLAN status to show VLAN name and VID instead of internal ID
- Services
- Profinet: fixed response fragments being sent with differing endianness
- SNMP: fixed service crash on exit
- SNMP: fixed 'dot1dTpFdbEntry' OID to show MACs
- System
- TCP dump: fixed missing "TCP dump" page
- Update Firmware: fixed WebUI uploaded files disappearing when updating the firwmare
- Network
- CVE Patches
- CVE-2024-6119
TSW2_R_00.01.06.3 | 2025.07.16
- Fix
- System
- Overview: fixed incorrect Ethernet speed detection with broken cable
- System
TSW2_R_00.01.06.2 | 2025.07.04
- Fix
- System
- Auto Reboot: fixed ping procedure failure caused by insufficient permissions
- System
TSW2_R_00.01.06.1 | 2025.06.20
- New
- Services
- SNMP: added SNMP Traps service
- Services
- Improvements
- System
- API Core: improved endpoint performance
- System
TSW2_R_00.01.06 | 2025.05.22
- New
- Network
- Loopback detection: added loopback detection logging to event log
- Spanning Tree: added STP port configuration page
- Spanning Tree: added STP edge port support
- Network
- Improvements
- Network
- DHCP server: added title for action column in custom DHCP option table
- DHCP server: included static leases to "Leased IPs" status that are outside DHCP pool range but are inside interface subnet range
- Network: updated network interface statuses to be more detailed and easier to understand
- Spanning Tree: moved STP statuses to new STP port configuration page
- VLAN: made VLAN name auto generated on creation and modifiable after it
- Services
- Mosquitto: updated version to 2.0.20
- Net-SNMP: updated version to 5.9.2
- System
- Password Policy: changed default validation to require at least 1 special character
- TCP dump: added suggestions for host and port filters
- Troubleshoot: separated troubleshooting into individual configuration tabs
- Troubleshoot: improved logging size configuration and log size limits
- dropbear: updated version to 2025.88
- Kernel: updated version to 5.10.236
- Network
- Fix
- Network
- 802.1X: fixed short time period after port link state change where an EAP request could crash the 802.1x server
- Port Aggregation: fixed port element alignment
- Ports Settings: fixed port status speed badge for E(10mbps)
- Spanning Tree: fixed rare connection losses after changing STP settings
- VLAN: fixed port element alignment
- Services
- LLDP: fixed port element alignment
- SNMP: removed "SNMP" "Trap Settings"
- Network
- CVE Patches
- CVE-2021-20227
- CVE-2023-7104
- CVE-2024-3596
- CVE-2024-9143
- CVE-2024-13176
TSW2_R_00.01.05.1 | 2025.04.22
- Fix
- Network
- Port Aggregation: fixed calculation of STP ports cost in bond interfaces
- Network
TSW2_R_00.01.05 | 2025.03.20
- New
- Network
- Network usage: added feature
- Port Aggregation: added initial 802.3ad LACP support
- Topology: added feature
- System
- Kernel: added support of 100base-x SFP modules
- Network
- Improvements
- Network
- Ports Settings: reorganized port table to remove horizontal scroll bar on 1080p screens
- Ports Settings: reordered network > ports sub-menu and made port settings page first
- System
- Kernel: updated version to 5.10.233
- Network
- Fix
- Network
- 802.1X: fixed 802.1X page access not being controlled by the "Network > Ports" entry
- Macfilter: fixed MAC Filter page access not being controlled by the "Network > Ports" entry
- Network: fixed bridge configuration when stp/rstp is disabled
- Network: fixed switching off all ports after recovery from packets flood
- VLAN: fixed inconsistent untagged VLAN validations. Now it is disallowed to have port without untagged VLAN
- Services
- EtherNet/IP: fixed memory leak
- Profinet: fixed forwarding of Profinet DCP packets
- System
- Access Control: fixed default HTTPS CA certificate generation
- Backup: fixed device becoming unresponsive after applying backup and switching profile
- Kernel: fixed kernel memory leak in DSA driver
- WebUI: fixed incorrect time in overview page
- Network
- CVE Patches
- CVE-2023-31489
- CVE-2024-11053
- CVE-2024-22365
- CVE-2024-44070
TSW2_R_00.01.04.1 | 2025.01.10
- Fix
- Network
- Ports Settings: fixed PoE port power-up failure during high PoE usage
- Network
TSW2_R_00.01.04 | 2025.01.02
- New
- Network
- Macfilter: added initial support
- Services
- SNMP: added RMON Ethernet Statistics group support
- SNMP: added ports OIDs
- System
- Administration: added capability of displaying a configurable banner before login
- Backup: added archive encryption
- Password Policy: added periodic password change mechanism
- Password Policy: added ability to modify the password policy
- Troubleshoot: added archive encryption
- Network
- Improvements
- Network
- 802.1X: made identity requests get sent as soon as the port comes up
- 802.1X: exposed EAP retransmission timeout and EAP retransmission count options to WEBUI
- DHCP: added leased IP status in DHCP server page
- Port Security: added VLAN name parsing from RADIUS "Tunnel-Private-Group-ID" attribute where VLAN names take priority over VLAN IDs
- Curl: updated version to 8.11.0
- Services
- SNMP: added 'dot1dTpFdbEntry' OID support
- System
- WebUI: updated ports display design
- WebUI: improved language select by disabling not supported languages
- Kernel: updated version to 5.10.228
- Network
- Fix
- Network
- 802.1X: updated guest_vlan function to move port to the vlan after initial port auth times out instead of before auth
- 802.1X: fixed a potential race condition where an access accept from the RADIUS server can be ignored during boot time or right after enabling the service
- 802.1X: fixed ignoring the first identity response when auth is not initiated by the client
- 802.1X: updated radius secret back-end validation to match front-end validation
- Dynamic Routes: fixed zebra service not starting on rare occasions
- MRP: fixed MRP bug when using standard port
- MRP: fixed network loop when mrp is starting
- MRP: fixed an issue with mrp not working properly after reboot
- Ports Settings: fixed global PoE budget
- Ports Settings: fixed invalid PoE class values
- Ports Settings: fixed current limiting mechanism for PoE ports when PoE class-4(AT) devices are connected
- Ports Settings: fixed per-chip PoE port powering/shutdown process on low port load
- Services
- Profinet: fixed issue where controller would not be able to reach device after network restart
- System
- Access Control: fixed SSH to close existing sessions when disabled
- WebUI: fixed Content Security Policy errors due to invalid directives
- Network
- CVE Patches
- CVE-2024-9681
TSW2_R_00.01.03.1 | 2024.10.23
- Fix
- Network
- Port Mirroring: fixed validation for maximum number of ports - ingress and egress port count validation was replaced with enabled instance count validation
- Network
TSW2_R_00.01.03 | 2024.10.09
- New
- Network
- Dynamic Routes: added dynamic routing packages to the package manager
- Port Security: added 802.1X client support
- Port Security: added dynamic VLAN assignment support
- System
- Backup: added full system reset functionality
- IP Block: added time-based login attempt blocking
- Package Manager: added package manager support
- PAM: added RADIUS external user support
- WebUI: added data analytics, which when enabled will collect usage data
- WebUI: added port status display page
- Network
- Improvements
- Network
- DHCP: separated mode select and enable switch
- DHCP: added warning to static leases when there is no DHCP servers created
- DHCP: added filtering by the interface on the status page
- DHCP: added field suggestions when configuring static leases
- Network: changed static and dhcp interfaces metric
- Port Security: changed size of port icons
- Port Security: split access control rules for RADIUS and General pages
- Ports Settings: added more PoE state symbols, colored disabled port differently and improved port status hint
- Ports Settings: improved ports PoE statuses
- Ports Settings: updated transmit and receive rate to be shown in bit format
- Services
- EtherNet/IP: added information about SFP ports
- SNMP: changed interface module OID structure
- Mosquitto: updated version to 2.0.17
- System
- Access Control: improved default access control permissions for newly created users
- Access Control: improved system user's access control granularity
- Backup: split page into backup and reset settings page
- Overview: made title configurable with system settings
- Update Firmware: added firmware flashing log to a persistent location
- Update Firmware: improved upgrade process
- WebUI: changed overview page design
- Kernel: updated version to 5.10.220
- OpenSSL: updated version to 3.0.14
- vue: updated version to 3.4
- Network
- Fix
- Network
- DHCP: fixed IPv4 leases being not correctly shown when NTP synchronizes time
- Dynamic Routes: fixed 'Import config' file name mapping
- Dynamic Routes: removed 'add' functionality from 'BGP instances' section
- MRP: fixed multicast packets not forwarding to required ports if MRP instances was changed during runtime
- MRP: fixed MRP bug when using standard port
- MRP: fixed network loop when mrp is starting
- Network: fixed interfaces status showing incorrect name
- Port Security: fixed 'Radius server' select options and updated 'Radius' page UI
- Port Security: fixed ports that don't have port security enabled showing up as unauthorized ports
- Ports Settings: fixed ports being incorrectly marked as "unauthorized"
- Ports Settings: fixed eee state restore from config after reboot
- Static Routes: fixed kernel panic on certain static routes
- VLAN: fixed delayed loading spinner when saving VLAN under certain conditions
- Services
- Profinet: fixed an issue where no MRP instances remained enabled after Profinet was disabled
- Profinet: updated modal style after disabling profinet instance
- System
- Access Control: fixed access reload after package installation
- Backup: fixed profiles data saving into backup
- Update Firmware: fixed PoE configuration
- WebUI: fixed data not being displayed of interface cards in 'Services summary' section
- Network
- CVE Patches
- CVE-2021-32292
- CVE-2023-42366
- CVE-2023-48795
- CVE-2023-49441
- CVE-2024-5535
- CVE-2024-7264
TSW2_R_00.01.02.2 | 2024.05.16
- New
- WebUI
- Added customizable port names in Ports Settings page
- WebUI
- Improvements
- System
- Updated Root CA certificates
- System
TSW2_R_00.01.02.1 | 2024.04.29
- New
- Network
- Added IGMP snooping support
- Services
- Added dynamic VLAN assignment support in Port Security
- WebUI
- Added RSTP 'Max hops' configuration option in 'Network -> Spanning Tree'
- Network
- Fix
- Network
- Fixed link speed configuration not applying after reboot
- System
- Fixed CVE-2022-0934
- Fixed CVE-2023-28450
- Updated OpenSSH to 9.6p1 version to fix CVE-2023-51385
- Network
TSW2_R_00.01.02 | 2024.02.29
- New
- Services
- Added Privileged Access Management (PAM) support
- Ping reboot: Added capability to restart PoE for specific port
- Services
- Improvements
- Network
- Added sysname to LLDP packets
- Services
- Improved SNMP sysName OID to set device's hostname
- Added PDExpectedData index in Profinet
- Network
- Fix
- Network
- Fixed incorrect LLDP chassis id data
- Fixed 1000 Mbps auto negotiation
- Fixed ethernet link not establishing via 2-pair cable
- Fixed PoE power shutdown on reboot
- Services
- Fixed Profinet PDInterfaceAdjust record
- Fixed Profinet issue where IP would not be set without station name
- System
- Fixed log.db rotation to prevent log partition space exhaustion
- Fixed possible Y2K38 issue for event entries
- Network
TSW2_R_00.01.01.1 | 2023.11.06
- Fix
- System
- Resolved reboot-related auto-negotiation issue affecting 1000 Mbps support
- System
TSW2_R_00.01.01 | 2023.10.25
- New features
- Initial FW release for the TSW202 device