Release Date:

October 23, 2025

This firmware supports the GSM4230P, GSM4230PX, GSM4230UP, GSM4248P, GSM4248PX, and GSM4248UX models.

Enhancements:

The AV UI provides the following enhancements:

• Support for new AV profiles:
• Visionary Advanced Multi-Domain
• G&D KVM-over-IP
• Poly StudioNet Modular Room
• URC Automation
• Avid S6L
• Updated the default web browser protocol to HTTPS
• Added interface descriptions specifying Vlan ID, profile name and profile template 
• Updated AV profile descriptions
• QoS is redesigned on the related profiles
• Support for gPTP options on all AVB profiles
• Support for REST API:
• Saves switch configuration
• Enables or disables IGMP Plus

The firmware provides the following enhancements:

• Updated the default web browser protocol to HTTPS

Bug Fixes:

This firmware addresses the following bugs:

• Fixes the issue where the switch crashes when the configuration is cleared immediately after switch is turned on. [MS-4448]
• Fixes the issue where the AGM731F or AGM732F modules connect the switch to another switch by setting a fixed 1G speed on the SFP+ port, and the link does operate successfully after the switch restarts. [MS-4862, CE-6806]
• Fixes the issue where switch crashes in a network loop condition. [MS-4867]
• Fixes the issue where the switch crashes when protocol logging is enabled and the Tech Support file is generated from the Main UI or AVUI of the switch. [MS-4920]
• Fixes the issue where the IGMP querier does not elect correctly when MSTP is configured. [CE-6738]
• Fixes the issue where the switch does not lease more than 2000 IP addresses. [CE-6745]
• Fixes the issue where you cannot use the user name in the password. [MS-5038]
• Fixes the issue where MLD query packets flood in a large network. [CE-7028]
• Fixes the issue where you can use insecure SSH key exchange (KEX) algorithms “diffie-hellman-group-exchange-sha256” and “diffie-hellman-group14-sha1” for secure connection. [CE-6562]

Known Issues:

This AV UI contains the following known issues:

• An Auto-LAG does not form after you apply the G&D KVM-over-IP AV profile.

Workaround: Form the Auto-LAG before you apply the G&D KVM-over-IP profile. Additionally, apply the following command to the LAG and trunk interfaces to enable G&D device discovery: macfilter adddest 01:0F:F4:00:00:00 <pvid>

This firmware contains the following known issues:

• This firmware includes a configuration migration process that transitions default web browser protocol from HTTP to HTTPS. When you upgrade to this firmware and import an older configuration with HTTPS disabled, HTTPS becomes enabled.

Workaround: Reconfigure the web browser protocol settings manually after you perform a firmware upgrade or import an older configuration

• During your initial log in, you must set up a password to access the switch. However, if you access the main UI before you set up a password and simultaneously set the password in the AV UI, the switch console might lock for up to 15 minutes.

Workaround: Complete the password setup in only one GUI interface to avoid this lock up issue.

• If you upload only the private key or the certificate before you enable HTTPS, the system enables the HTTPS service but it fails to operate correctly because the configuration is incomplete. A factory reset does not fix this issue.

Workaround: Ensure both the private key and certificate are fully uploaded before you enable HTTPS. If the issue still occurs, remove the incomplete HTTPS-related private key or certificate, and disable HTTPS before reconfiguring.

Warnings:

Read and follow these warnings before updating your firmware:

• SNTP is deprecated from firmware version 13.0.5.10 onwards and NTP is introduced. Configure an NTP server in your network. Remove SNTP related settings from the configuration file on firmware version 13.0.4.x before you apply it to the switch running firmware version 13.0.5.x.
• HTTPS is set to default web browser protocol from firmware version 13.0.5.20 and newer versions. The default certificate is self-signed, so you may encounter a browser warning when logging in. To avoid this warning, you can download your own certificate issued by a trusted Certificate Authority (CA).  

General Information:

• The boot code remains at the existing version 1.0.0.13 in this switch firmware.
• The process of upgrading the firmware and boot code takes about three minutes. Apply the “update bootcode” command from the command line interface. Do not switch off or restart the device during the upgrade process.
• AppMgr is upgraded to version 1.0.4.27 in this switch firmware.
• Insight and Engage/AV UI are mutually exclusive. This means you can only use one of these options to configure and manage the switch, not both.
• If the encrypted password in the configuration file does not adhere to the NETGEAR password policy, when the configuration file is loaded on the firmware version 13.0.5.16 or later, you must create a new password during the initial login.

Download Link: https://www.downloads.netgear.com/files/GDC/M4250W2/GSM4230xx_GSM4248xx_V13.0.5.20.zip

Firmware Checksum Details

File Name: M4250H-v13.0.5.20.stk

MD5: ACC2B87FF9B50D1085EFB86E94BCF528

SHA-256: CDC0375FB361999112969BED4E52D39CEF999EA04145CF0E402E920731BD1A60

Firmware Update Instructions:

To update your product’s firmware, follow the instructions in your product’s user manual. To find your user manual, visit https://www.netgear.com/support/, enter your model number in the search box, and click the Documentation button on the product page.