Page 3 - ONTENTS; NTERPRISE; OS S; OFTWARE; Upgrade Management Utilities 43
C ONTENTS E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES Encryption Packages Notice 7Supported Platforms 8 OfficeConnect NETBuilder and SuperStack II NETBuilder SI Release 9 Platforms Not Supported 9New Features and Feature Enhancements 9 JAVA Runtime Environment 9VPN and Security Features 9...
Page 6 - Platform Notes 63
PKI: Entrust CA Installation Notes 61PPTP Tunnel Security Validation 62RSA Signature for Phase 1 Authentication 62Windows NT MS-CHAP Authentication 62 Platform Notes 63 OfficeConnect NETBuilder and SuperStack II NETBuilder SI Additional Memory Requirements 63Approved DRAM SIMMs 63Supported PC Flash ...
Page 7 - Using Enterprise OS Software
Part No. 86-0621-000Published January 2000 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES These release notes provide information on the following topics for Enterprise OS software version 11.4: ■ Encryption Packages Notice ■ Supported Platforms ■ Platforms Not Supported ■ New Features and F...
Page 8 - Supported Platforms
8 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES Multiprotocol Router with 40-bit Encryption (PL) Multiprotocol Router with 56-bit Encryption (PE) Multiprotocol Router with 128-bit Encryption with 3DES (PS) ■ PathBuilder S400 switch Multiprotocol Router with 40-bit Encryption (ML) Multiproto...
Page 9 - Platforms Not Supported; Model 227 SuperStack II NETBuilder Router (Ethernet)
Platforms Not Supported 9 ■ PathBuilder S5xx series switch models S500, S580, S593, S594, S598 and S599 ■ PathBuilder S400 OfficeConnect NETBuilder and SuperStack II NETBuilder SI Release Due to increased memory requirements, the OfficeConnect NETBuilder and SuperStack II NETBuilder SI will be relea...
Page 10 - IP Payload Compression Protocol (IPComp or IPPCP)
10 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES Public-Key Infrastructure (PKI) Implementation Applications like IP Security (IPsec) and Internet Key Exchange (IKE) employ public-key technology for such security purposes as identifying oneself to remote entities, verifying a remote entity'...
Page 11 - New Features and Feature Enhancements; Tunnel Switching Between Different Tunnel Types
New Features and Feature Enhancements 11 Tunnel Switching Between Different Tunnel Types So that tunnel switching between two sessions of different tunnel types can be easily implemented and maintained, Enterprise OS software version 11.4 has been re-structured to support tunnel switching from PPP o...
Page 12 - IGMPv2 Enhancements; PPPoE
12 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES Multicast Border Router (MBR) To allow sources and receivers inside multiple autonomous multicast routing domains (each running a different multicast routing protocol -- DVMRP, MOSPF, or PIM-SM) to communicate, the regions must be connected b...
Page 14 - Traffic Shaping & QoS; rate limiting
14 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES occur during, for example, TFTP file transfers using Large Blocksize Negotiation (RFC 1783). Each fragmented packet contains an IP Identification (ID) number that is used for re-assembly. When the first fragment arrives, the ID is stored in t...
Page 15 - Policy-based QoS Management
New Features and Feature Enhancements 15 Given the scalability problems associated with RSVP, the emerging IETF standard for scalable end-to-end QoS–IP Differentiated Service is supported. Incoming traffic flows can be classified into service classes for each defined QoS policy with the routers prov...
Page 16 - CBQ will be supported on PPP/FR ports only.
16 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES ■ Class-Based Queuing (CBQ) Management Class-Based Queuing (CBQ) is a link-sharing packet scheduler which is an enhanced version of the existing Protocol Reservation queuing policy. It performs priority scheduling and supports specific traffi...
Page 17 - RED is supported on CBQ class queues only.; Dial Service Features; Features of the 3Com implementation of VoFR:
New Features and Feature Enhancements 17 may cause some flows to be locked out of bandwidth if a simple tail drop is employed when the queue becomes full. However, RED works well only with compliant TCP implementations that backs off when network congestion is detected. It has no effect on non-IP or...
Page 18 - Network Management
18 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES ■ Up to 250 calls can be supported within each VC subject to available bandwidth. ■ Support for FXS and FXO voice ports. ■ Support for FAX data over the voice call. Voice Over VPN (VoVPN) Due to the interaction between VPN (L2TP or PPTP) and ...
Page 19 - Autotargeting for SLA Monitoring/Remote Polling
New Features and Feature Enhancements 19 ■ Voice Wizard Starting with 11.2.2 and with enhancements made in 11.4 for the PathBuilder S400 WAN convergence switch, Web Link provides a new Wizard configuration tool to aid in the configuration of the voice parameters. The Voice Wizard eases the task of c...
Page 20 - Console Output in Telnet Sessions
20 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES Console Output in Telnet Sessions With 11.4, all system messages can be displayed to a Telnet session as well as through a terminal attached to the local console port. Administrators will be able to view all important status messages from the...
Page 21 - Domain Name Use in FTP and TFTP Commands; Transcend VPN Application Suite; Secure VPN Manager version 2.2; Secure VPN Manager; PKI Manager version 1.0
New Features and Feature Enhancements 21 message identifier(s) and /or SYSLOG server. The action to send all messages to the SYSLOG server is still the default when auditing is enabled. ■ The audit log messages can also be sent out through an SNMP trap to be received by the configured SNMP trap mana...
Page 22 - Features of PKI Manager version 1.0
22 E NTERPRISE OS S OFTWARE V ERSION 11.4 R ELEASE N OTES Features of PKI Manager version 1.0 ■ Multi-Enterprise PKI Management : Administrators can use the application to manage multiple enterprises (or different business units of an enterprise) separately. ■ Limited RA functionality : The applicat...
Page 23 - Software Packages; NETBuilder II; AC–APPN Connection Services Router; Table 1; NETBuilder II Software Features
11.4 Software Packages 23 11.4 Software Packages The tables in this section list the features in the packages available in software version 11.4 for the NETBuilder and PathBuilder platforms. NETBuilder II Bridge/Router The NETBuilder II bridge/routers are supported with the following packages: ■ AC–...
Page 24 - NETBuilder II Software Features (continued)
24 BRITSS X X X X APPN X LNM X X X X X LAA X X X X X Token Ring in Fast Ethernet (IOS not supported) X X X X X ISDN BRI X X X X X ISDN PRI X X X X X ISDN T1/E1 ISDN CT1/CE1 ISDN T3/E3 ISDN CT3/CE3 Data over Analog (Call Originate only) CSU/DSU Loopback SDLC/SHDLC/Polled Async/Bisync X X X X X BSC Co...
Page 25 - Table 2; NETBuilder II Firmware Requirements
11.4 Software Packages 25 NETBuilder II Firmware Requirements The NETBuilder II I/O modules require firmware upgrades to support the Enterprise OS software version 11.4 (see Table 2 for firmware requirements). You can determine your I/O module firmware version through the software by entering: SHow ...
Page 26 - Table 3; SuperStack II NETBuilder SI Software Features
26 SuperStack II NETBuilder SI SuperStack II NETBuilder SI bridge/routers are supported with the following packages: ■ BF– Boundary Router ■ NW–IP/IPX/AT Router ■ NE– IP/IPX/AT Router with 56-bit Encryption ■ NS–IP/IPX/AT Router with 128-bit Encryption and 3DES ■ CF–Multiprotocol Router] ■ CL–Multip...
Page 27 - SuperStack II NETBuilder SI Software Features (continued)
11.4 Software Packages 27 DLSW X X X X X X NetView Service Point X X X X BRITSS X X X X APPN X LNM LAA X X X X X X X X X Token Ring in Fast Ethernet (IOS not supported) X X X X X X X X X ISDN BRI X X X X X X X X X ISDN PRI ISDN T1/E1 X X X X X X X X X ISDN CT1/CE1 ISDN T3/E3 ISDN CT3/CE3 Data over A...
Page 29 - PathBuilder S5xx Series; PW–Multiprotocol Router; Table 4; PathBuilder S5xx Series Switches Software Features
11.4 Software Packages 29 PathBuilder S5xx Series Switch The PathBuilder S5xx Series Switches support the following software packages: ■ PW–Multiprotocol Router ■ PE–Multiprotocol Router with 56-bit Encryption ■ PL–Multiprotocol Router with 40-bit Encryption ■ PS–Multiprotocol Router with 128-bit En...
Page 30 - PathBuilder S5xx Series Switches Software Features (continued)
30 LNM LAA X X X X Token Ring in Fast Ethernet (IOS not supported) X X X X ISDN BRI ISDN PRI X X X X ISDN T1/E1 X X X X ISDN CT1/CE1 ISDN T3/E3 X X X X ISDN CT3/CE3 Data over Analog (Call Originate only) CSU/DSU Loopback SDLC/SHDLC/Polled Async/Bisync X X X X BSC Conversion X X X X QLLC/LLC2 Convers...
Page 32 - MW–Multiprotocol Data/Voice Router; Table 5; PathBuilder S400 Series Switches Software Features
32 PathBuilder S400 Series Switches The PathBuilder S400 series switches support the following software packages: ■ XW–IP/IPX/AT Data/Voice Router ■ XE–IP/IPX/AT Data/Voice Router with 56-bit Encryption ■ XL–IP/IPX/AT Data/Voice Router with 40-bit Encryption ■ XS-IP/IPX/AT Data/Voice Router with 128...
Page 33 - PathBuilder S400 Series Switches Software Features (continued)
11.4 Software Packages 33 BRITSS X X X X APPN LNM LAA X X X X X X X X Token Ring in Fast Ethernet (IOS not supported) X X X X X X X X ISDN BRI X X X X X X X X ISDN PRI ISDN T1/E1 X X X X X X X X ISDN CT1/CE1 ISDN T3/E3 ISDN CT3/CE3 Data over Analog (Call Originate only) X X X X X X X X CSU/DSU Loopb...
Page 35 - Table 6; OfficeConnect NETBuilder Bridge/Router Software Features
11.4 Software Packages 35 Table 6 lists the software features in each package for the OfficeConnect NETBuilder bridge/routers. Table 6 OfficeConnect NETBuilder Bridge/Router Software Features Software Packages Feature JW JE JS BF NW NE NS AF OF OL OE OS Voice Support (Analog) FXO FXS Voice/FAX over ...
Page 37 - OfficeConnect; RW–Multiprotocol Router; OfficeConnect NETBuilder 10/ST Bridge/Router Software Features
11.4 Software Packages 37 OfficeConnect NETBuilder 10/ST The OfficeConnect NETBuilder 10/ST bridge/router supports the following software packages: ■ RW–Multiprotocol Router ■ RE–Multiprotocol Router with 56-bit Encryption ■ RS–Multiprotocol Router with 128-bit Encryption and 3DES Table 7 lists the ...
Page 38 - Table 7; Software Packages
38 IPCP X X X IPv6/BGP VRRP (Ethernet/FDDI/Token Ring) VRRP for DLSW VRRP over VLAN RSVP, RSVP Proxy Multicast IP, PIM, IGMP, MBR IP/OSI Connection Services IPX X X X XNS, OSI Appletalk VINES, DECnet, Ph-IV, Ph-IV/V GW DLSW NetView Service Point BRITSS APPN LNM LAA Token Ring in Fast Ethernet (IOS n...
Page 40 - CF–Multiprotocol Router; Table 8; SuperStack II NETBuilder Token Ring Software Features
40 SuperStack II NETBuilder Token Ring SuperStack II Token Ring bridge/routers support the following packages for the specified models. ■ CF–Multiprotocol Router ■ TE–Multiprotocol Router with 56-bit encryption Table 8 lists software features for each package for the SuperStack II Token Ring bridge/...
Page 41 - Software Package
11.4 Software Packages 41 Token Ring in Fast Ethernet (IOS not supported) ISDN BRI X X ISDN PRI ISDN T1/E1 ISDN CT1/CE1 ISDN T3/E3 ISDN CT3/CE3 Data over Analog (Call Originate only) X X CSU/DSU Loopback SDLC/SHDLC/Polled Async/Bisync X X X X BSC Conversion QLLC/LLC2 Conversion X X X X Frame Relay X...
Page 42 - Memory Requirements
42 IP (Routing, FireWall, NAT, Proxy, ARP, DHCP, DHCP Proxy, Traffic Director, Internal IP Ports, IPQos) X X X X IP OSPF X X X X IPX NLSP X X X X Virtual Ports 28 28 28 28 Max Physical Voice Ports Max Physical Data Ports 18 18 18 18 Memory Requirements DRAM 12 MB 12 MB 12 MB 12 MB Flash memory (Mini...
Page 43 - Upgrade Management Utilities; Downloading Upgrade; The UNIX files are as follows:; Windows Files; or
Upgrade Management Utilities 43 Upgrade Management Utilities This section includes information about Enterprise OS software version 11.4 Upgrade Management Utilities. The Upgrade Management Utilities can be executed using the command line, via the GUI-interface in Transcend Upgrade Manager, the GUI-...
Page 45 - Upgrade Management Notes; set EncryptionLicenseRead=1; This section contains known upgrade management issues.
Upgrade Management Notes 45 EncryptionLicenseRead Environment Variable Transcend Enterprise Manager for Windows Upgrade Manager and Transcend Enterprise Manager for UNXI Upgrade Manager 4.2.x will not allow you to upgrade 3Com NETBuilder bridge/routers with encryption technology unless you set the E...
Page 47 - IBM Protocols and Services Notes
IBM Protocols and Services Notes 47 fails to add scroll bars with text fields. If you experience this or other problems, you may want to use a later version of Netscape when it becomes available. Upgrade Link Window Resizing Since Enterprise OS software version 11.4 Upgrade Link cannot resize the br...
Page 48 - Use these parameters for the leaf node and central node WAN ports.
48 Boundary Routing and NetView Service Point When configuring NetView Service Point in a Boundary Routing environment, note that the SSCP-PU session actually flows over LLC2 rather than DLSw, even though the -SNA PortDef parameter is defined as DLSw. As a result, the session does not show up as a D...
Page 49 - Table 9; DLSw Circuit Maximums with CONNectionUsage Parameter Settings
IBM Protocols and Services Notes 49 You must reboot the bridge/router before this change takes effect. Table 9 shows the maximum number of circuits possible with the different CONNectionUsage parameter settings. The practical limit may be lower and depends on the traffic load, CPU, and memory usage ...
Page 50 - IBM-Related Feature Settings for Token Ring Ports
50 NetBIOS sessions occurs if the primary link fails and the redundant link is activated. If this happens, end users need to log on and initiate another session. IBM-Related Services in Token Ring IBM-related services such as DLSw and APPN are affected by parameter settings in the BRidge, SR, and LL...
Page 51 - Token Ring Frame Copy Errors; Com Bridge/Routers and Supported Features
IBM Protocols and Services Notes 51 and route discovery are configured, bridge numbers must be unique for each bridge/router on the same ring, and LLC2 is enabled on token ring ports. Token Ring Frame Copy Errors For transparent bridge or source route transparent configurations, token ring end syste...
Page 52 - SETDefault -BRidge TransparentBridge = NoTransparentBridge; SHDLC does not support physical half-duplex mode.
52 LLC2 Frames and PPP LLC2 frames are not sent or received over PPP unless global bridging is enabled using the SETDefault -BRidge CONTrol = Enabled command. You must enable LLC2 on the port using: SETDefault !<port> -LLC2 CONTrol = Enabled. If bridging is enabled and you do not want bridging...
Page 53 - ATM Services Notes
ATM Services Notes 53 VTAM Version 4.2 requires PTF #UW20787. VTAM Version 4.3 requires PTF #UW20788. Visible symptoms of this problem can be seen as a lack of network management data for PUs that are downstream of a NETBuilder II bridge/router using APPN DLU services. The NetView message “AAU251I A...
Page 55 - WAN Protocols and Services Notes; When configuring MLP:
WAN Protocols and Services Notes 55 Dial Idle Timer The dial idle timer is not accurate and it will take a client longer to idle out than is configured. For a 180 second dial idle time it takes approximately 8.5 minutes for the client to idle out if no traffic is ever sent. To workaround this proble...
Page 57 - Routing Protocols and Services Notes; This has the following implications.
Routing Protocols and Services Notes 57 CPU Utilization with XNS Protocol When the PathBuilder S5xx switch is configured for 2048 tunnels and XNS protocol, very high CPU utilization will occur. IPX to Non-IPX Configuration Error A mechanism does not exist to prevent adding a path from a non-IPX rout...
Page 59 - Network Management System and Services Notes; These messages do not indicate a problem and can be ignored.
Network Management System and Services Notes 59 http://www.microsoft.com/windows95/downloads/default.asp Capturing Commands to boot.cfg File When using Capture to save commands to the boot.cfg, the commands are not immediately written to the boot.cfg file. A system crash or reboot may occur at a tim...
Page 61 - VPN Protocols and Services Notes; Microsoft MPPE Patches
VPN Protocols and Services Notes 61 was unavailable. To determine the required version, refer to the online version of these release notes available on the 3Com website: http://infodeli.3com.com/infodeli/tools/bridrout/index.htm Microsoft MPPE Patches and Updates Microsoft has acknowledged performan...
Page 63 - Platform Notes; Order Numbers for Memory Upgrade Kits
Platform Notes 63 Platform Notes This section describes the supported PC flash memory cards, approved DRAM SIMMS, notes, cautions, and other considerations to be aware of when using the Enterprise OS software on the various NETBuilder bridge/router and PathBuilder platforms. The topics are presented...
Page 64 - Com-approved 20 MB Flash Memory Cards; Intel Series 2
64 Supported PC Flash Memory Cards Table 18 lists 3Com - approved vendors of the PC flash memory card. The 20 MB flash memory card has a formatted capacity of 19.86 MB. For dual image and full dump capability, 3Com recommends using a 20 MB card used in the NETBuilder II bridge/router. You can also p...
