Release Date:
October 27, 2026
New Features:
- Support for Quad-core ARM Cortex-A55 1.8 GHz (IPQ5424), 2 GB DDR4, 16/64 GB eMMC
- Support for 1 x 2.5G WAN port and 4 x 1G LAN ports (LAN4/WAN2 combined)
- Support for Internet/WAN including DHCP, Static IP or PPPoE, Dual WAN failover and load balancing, Secure DNS (DoH/DoT/DoQ), and Dynamic DNS
- Support for LANS, including VLANs with independent DHCP, inter-VLAN and RIP routing, static leases and routes, and mDNS gateway
- Support for firewalls, including traffic rules, port forwarding and triggering, outbound NAT, DMZ, DoS protection, SIP ALG, and VPN passthrough
- Support for VPNs, including IPsec site-to-site and client-to-site, OpenVPN and WireGuard servers, VPN users, and certificate management
- Support for SASE Security powered by Exium including on-device IDS and DNS web filtering, SD-WAN mesh, cloud ZTNA, and admin console
- Support for Smart Queue Management (SQM) with manual or Speed-Test based bandwidth configuration per WAN
- Support for NETGEAR Insight cloud and device UI management, SNMP v1/v2/v3, Syslog, LLDP, config backup and restore
- Support for built-in Speed Test, Ping, DNS Lookup, Traceroute, and Packet Capture diagnostics
- Support for scaling up to 16 VLANs, 1,000 DHCP clients, 250,000 firewall connections, and 128 traffic rules
- Support for scaling up to 30 concurrent IPsec tunnels, 50 OpenVPN/WireGuard clients, and 100 VPN users
Known Issues:
- LAG does not deliver aggregated throughput (PPE acceleration lacks DSA LAG support); failover and distribution work
- Fast Path is disabled by default, pending the platform transition to the Atheros header
- Device UI pages load slower than PR460X due to Firewall 4 overhead in QSDK 13.0
- Domotz and Engage are not supported (consistent with PR60X)
- Fan speed and temperature sensor reporting are unavailable; the hardware is not present
- LAN-to-Internet throughput is bounded to 1G by a shared internal switch-to-CPU link
- IDS inspects internet-bound WAN traffic only; hardware-switched LAN-to-LAN traffic is not scanned
- Dual WAN: DNS queries sent directly to a server learned on a failed WAN are dropped, not rerouted.
Workaround: Configure LAN clients to use the router as their DNS server - Device Management reports as disabled on the default VLAN but remains enabled by design.
Workaround: Re-enable the setting so the reported state matches - Firewall rules using “Any” as source or destination override more specific interface or VLAN rules.
Workaround: Set an explicit source and destination on every rule. - Browsers with DNS-over-HTTPS enabled bypass router web filtering.
Workaround: Disable Secure DNS in the client browser. - IDS may not raise alerts when the LAN uses public IP space.
Workaround: Use private IP ranges on the LAN. - Changing the device UI display language takes 12-15 seconds to redraw the pages.
Workaround: None required. - Custom WAN DNS servers cannot be configured from Insight for DHCP and PPPoE connections.
Workaround: Configure the Custom WAN DNS servers from the device UI. - After several days of uptime under a heavy configuration, the IPsec VPN page can display an error, and the log download fails.
Workaround: Restart the device.
Download Link: https://www.downloads.netgear.com/files/GDC/PR30SG/PR30SG-V3.2.0.50.zip
Firmware Checksum Details
File Name: PR30SG_V3.2.0.50_64.bin
MD5:
36af5e8711057a143613f43d4dfb5255
SHA-256:
7eccc99f5af29d45575d9c2ebe674453434b7362f3bed557b23c50f96b638784
Firmware Update Instructions:
To update your product’s firmware, follow the instructions in your product’s user manual. To find your user manual, visit https://www.netgear.com/support/, enter your model number in the search box, and click the Documentation button on the product page.
Last Updated:10/27/2026
|
Article ID: 000070963