3Comメーカー11.1の使用説明書/サービス説明書
ページ先へ移動 of 73
http://www.3com.com/ NETBuilder ® Family Softwar e V ersion 11.1 Release Notes 3Com provides a documentation CD-ROM that includes all NETBuilder ® software version 11.1 manuals. T o obtain a har dcopy version of the 11.1 documentation, or der part number 3C6460P .
3Com Corporation 5400 Bayfront Plaza Santa Clara, California 95052-8145 Copyright © 3Com Corporation, 1998. All rights reserved. No part of this documentation may be repr oduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without permission from 3Com Corporation.
C ONTENTS NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Encryption Packages Notice 9 Supported Platforms 10 New Products 10 SuperStack II SI 5xx (4-port) 10 Supported PC Flash Memory Cards 10 Ap.
bcmfdinteg 32 File Conversion Considerations 33 Upgrading From Release 8.3 or Earlier 33 Upgrade Link and Netscape Browser Scr oll Bars 34 Upgrade Link Window Resizing 34 Notes and Cautions 34 APPN Connections to 3174 through T oken Ring 34 Asynch T unnelling on Serial Ports 34 A TM LAN Emulation Clients and Large 802.
DHCP Address Pool Changes 41 Displaying Configuration Profiles 41 Dynamic Paths 41 Extensible Authentication Protocol 41 File System Error 41 Frame Relay Congestion Control 41 History-Based Compress.
SDLC Ports and NetView Service Point 48 Source-Route T ranspar ent Gateway 48 T oken Ring+ Modules 48 VRRP Configuration 48 C ONFIGURING IP SEC Configuring IPsec 51 Creating Policies 51 Creating Key.
WEBL INK S ERVICE P ARAMETERS StatPollInterval 75.
Part No. 86-0595-001 Published July 1998 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES These release notes pr ovide information on the following topics for NETBuilder ® software version 11.
10 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Multi-protocol Router with 56-bit Encryption (DE) Multi-protocol Router with 128-bit Encryption (DS) ■ SuperStack ® II IP/IPX/A T Router with .
Approved DRAM SIMMs 11 Approved DRAM SIMMs T able 2 lists 3Com–approved vendors of the 32 MB DRAM SIMM for upgrading the DPE 40 module. New Featur es This section describes new featur es in software version 11.1 for the NETBuilder II, SuperStack II, and Of ficeConnect NETBuilder bridge/routers.
12 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Additional RAS Enhancements The RAS service has been enhanced in this r elease to add support for routers acting as RAS clients. Support was added for the RADIUS attributes “Framed_Route” and “Framed_Netmask.
New Features 13 < 56 bit support packages/kits contain: ■ A package identifier ending in ‘E’ (example, NE) ■ A 3CR number containing/ending in ‘91’ (examples, 3CR856791, 3CR 6452P91FLASH) T able 3 contains a summary of the encryption strengths and the associated package ids.
14 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES of the queue policies, Priority Queuing, and Pr otocol Reservation ar e supported. In addition to the curr ently supported policies, a metering algorithm has been added.
New Features 15 OSPF Not-So-Stubby-Ar ea (NSSA) For inter -ar ea routing, the Ar ea Border Router (the only attachment to the backbone for leaf sites) advertised a default r oute.
16 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES the two edge devices ar e both physically attached to the same A TM network fabric, then the edge devices should be able to communicate dir ectly with each other , bypassing one or mor e intermediate routers in the data path.
New Features Application Notes 17 ■ Improved err or handling ■ Help frame resizing now persists acr oss page changes ■ A logout icon for impr oved security ■ Port list support ■ Support for .
18 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES needed to disable any echo cancellers on the line. Consult with the owner of the destination equipment to see whether it has this capability .
New Features Application Notes 19 WARNING: For network security , do not include security sensitive information such as passwords. The ASCII text file is not encyrpted, which means the passwords are readable by anyone who has access to the file. When the router is booted and the BOOT .
20 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES 11.1 Softwar e Packages The tables in this section list the featur es in the packages available in software version 11.1 for the NETBuilder bridge/r outer platforms. NETBuilder II T able 4 lists the softwar e featur es of each package for NETBuilder II bridge/r outers.
11.1 Software Packages 21 NETBuilder II Firmwar e Requirements The NETBuilder II I/O modules r equire firmware upgrades to support the NETBuilder software version 11.
22 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES SuperStack II SI T able 6 lists the softwar e features of each package for SuperStack II SI bridge/routers. HSS 3-port (V.35) FW/HSS3-V35,1.1.9 HSS 3-port (RS449) FW/HSS3-449,1.1.9 HSS 3-port (RS232) FW/HSS3-232,1.
11.1 Software Packages 23 RAS Traps X X X X X IPX X X X X X X X XNS X X X X OSI X X X X OSI connection services X VINES X X X DECnet X X X AppleTalk X X X X X X X BR Remote LAN Detection X W AN Protocols PPP/Multilink PPP X X X X X X X X PPTP X X X X X X X L2TP X X X X X X X EAP X X X X X Frame Relay X X X X X X X X SMDS X X X X X X X.
24 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES SuperStack II T oken Ring T able 7 lists softwar e features for each package for the SuperStack II bridge/routers.
11.1 Software Packages 25 OfficeConnect T able 8 and T able 9 list software features for each package for Of ficeConnect bridge/routers. W AN Protocols PPP/Multilink PPP X X PPTP X X L2TP X X Frame Relay X X SMDS X X X.
26 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Routing Protocols IPv4 X X X X X IP services: Multicast IP X X X X X OSPF X X X X X Network Address Translation (NAT) X X X X X VRRP X X X X DHCP.
11.1 Software Packages 27 T able 9 Additional Of ficeConnect NETBuilder Models Software Featur es SHDLC X X BSC conversion X QLLC/LLC2 conversion X X Other Features FTP X X X X X X Data over Voice X .
28 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Multicast IP X X X X OSPF X X X X Network Address Translation (NAT) X X X X VRRP X X X X DHCP X X X X DHCP Proxy X X X X RIP/RIP v2/NTP X X X X I.
11.1 Software Packages 29 Zmodem X X X X Dial-on-demand X X X X Quick Step VPN application ASCII Boot X X X X Flash Load X X X X Web Link X X X X Virtual Ports (28 max.
30 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Item Not Supported The NETBuilder software version 11.1 does not support the following bridge/routers: ■ SuperStack II NETBuilder 227 Full Rout.
NETBuilder Upgrade Management Utilities 31 or http://infodeli.3com.com/infodeli/swlib For instructions on how to decompr ess and install the utilities, see the ruu111.txt file. The Windows files are as follows: Executing profile.bat When using the 11.
32 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Upgrade Management Known Issues This section contains known upgrade management issues. bcmdiagnose Error Message When you execute bcmdiagnose on HP-UX and the TFTP server is configur ed to use the Safe Directory method, the err or message "No TFTP user found in /etc/passwd.
Upgrade Management Known Issues 33 WARNING: Do not use the bcmfdinteg utility . The bcmfdinteg utility is used internally by the bcminstall utility . The bcmfdinteg utility should not be used by itself, because by default it removes all files from the current directory .
34 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES or UpgradeLink -NA Otherwise, an error dialog box is r eturned with the message “Could not verify user .
Notes and Cautions 35 Baud Rates for W AN Ports in DCE Mode The following baud rates are supported in DCE mode (synchr onous, internal clocking): If you configure a baud rate that is dif ferent from those listed, the system will fall back to the nearest lower supported rate.
36 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Boundary Routing and NetView Service Point When configuring NetView Service Point in a Boundary Routing envir onment, note that the SSCP-PU session actually flows over LLC2 rather than DLSw , even though the -SNA PortDef parameter is defined as DLSw .
Notes and Cautions 37 These messages do not indicate a pr oblem and can be ignored. IBM-Related Services in T oken Ring IBM-related services such as DLSw and APPN ar e affected by parameter settings in the BRidge, SR, and LLC2 Services.
38 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES and route discovery ar e configured, bridge numbers must be unique for each bridge/router on the same ring, and LLC2 is enabled on token ring ports.
Known Problems 39 LAN Network Manager with NETBuilder II Systems If you have previously configur ed your LAN Network Manager to use the NETBuilder II system as a virtual ring, and you want to use it as a physical ring, you must set your virtual ring number back to None.
40 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES NETBuilder II port at the central site. An alternative work around is to configur e APPN with DLSw at the central site and to use the CEC’ s MAC address at the remote site.
Known Problems 41 The path will still come up and be bound to a virtual port based on the SysCallerID. This false warning appears only if no AuthLocalUser is defined on the port.
42 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES <Bc>/<cir>. If T c is not 1 second, the Frame Relay frames may be erroneously dropped due to the incorr ect calculation of the throughput rate thr eshold.
Known Problems 43 PPTP T unnel Security V alidation Authentication problems may occur when connecting a Windows 95 or NT client via a T otal Control Hub to a NETBuilder II bridge/r outer where the T otal Control Hub is setting up a PPTP tunnel to the bridge/r outer .
44 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES Syntax Checking in PPP AuthRemoteUser Command The ADD !<port> -PPP AuthRemoteUser command does not completely check for syntactical correctness.
Limitations 45 Limitations This section describes limitations of NETBuilder softwar e version 11.1. T opics are in alphabetical order . ACCM Not Configurable The ACCM (Async Control Character Map) used for Async PPP cannot be configured.
46 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES parameter settings. The practical limit may be lower and depends on the traf fic load, CPU, and memory usage by other services. Number of TCP Connections 3Com LLC2 tunneling uses one TCP connection for each LLC2 session.
Limitations 47 NetBIOS sessions occurs if the primary link fails and the r edundant link is activated. If this happens, end users need to log on and initiate another session. Maximum BSC Line Speed For V .35 and RS-232 links, the maximum baud rate supported for BSC traf fic is 38.
48 NETB UILDER S OFTWARE V ERSION 11.1 R ELEASE N OTES ■ SDLC end-to-end thr ough local switching (conversion to a single LLC2 LAN connection between two NETBuilder bridge/r outers) requir es differ ent virtual ring numbers in the LLC2 Service.
U SING NETB UILDER F AMILY S OFTWARE U PDATE P AGES This section includes update pages with changes and additions to Using NETBuilder Family Software , softwar e version 11.
17 C ONFIGURING IP SEC 11.1 Release Notes, Using NETBuilder Family Software V ersion 11.0 Replace Chapter 17 with this chapter . This chapter describes how to configur e the IP Security Protocol (IPsec) on your IP router . IPsec provides security at the network layer .
52 C HAPTER 17: C ONFIGURING IP SEC <auth_algorithm> : MD5 | SHA <portlist >: 1-65535 | * | Archie | DNS | Finger | FTP | FTPData | Gopher | HTTP | NFS | NNTP | NTP | POP2 | POP3 | PortMap | RIP | SMTP | SNMP | SNMPTrap | Syslog | Telnet | TFTP | WAIS The default for encrypt_algorithms is DES.
Configuring IPsec 53 <encrypt_key> and <auth_key> can be 1 to 128 bytes enter ed as either ASCII text strings or as a series of hexadecimal digits. See “Configuring Manual Key Information” next for more information about key set usage.
54 C HAPTER 17: C ONFIGURING IP SEC When you specify a key that is too short, the policy binding operation generates an error message informing you of the key length discr epancy and the key is rejected. If this should occur you will need to delete the specifi ed key and reenter a key of the appropriate length.
Configuring IPsec 55 Figure 1 VPN PPTP T unnel On router 1, set up the tunnel fr om 170.0.0.1 to 180.0.0.1 by following these steps. 1 Set the system name to "r outer1" by entering: SETDefau.
56 C HAPTER 17: C ONFIGURING IP SEC On router 2, setup the PPTP tunnel fr om 170.0.0.1 to 180.0.0.1 by following these steps: 1 Set the system name of r outer 2 to "router2" by entering: SET.
How IPsec Works 57 IPsec works with the existing Internet infrastructure using encapsulation. It secur es a packet of data by encrypting it befor e sending it over the Inter net.
58 C HAPTER 17: C ONFIGURING IP SEC DES-CBC CANNOT be exported without a legal export license. See the release notes for your software for export restrictions.
R EFERENCE FOR NETB UILDER F AMILY S OFTWARE U PDATE P AGES This section includes update pages with changes and additions to Reference for NETBuilder Family Software V ersion 11.
33 IPSEC S ERVICE P ARAMETERS 11.1 Release Notes, Reference for NETBuilder Family Software Replace Chapter 33 with this chapter . This chapter describes the IPSEC Service parameters.
62 C HAPTER 33: IPSEC S ERVICE P ARAMETERS Default No Default Description All keysets are encrypted and pr otected with the current KeyEncryptionKey and stored in the IPSEC confi guration file. The value of the KeyEncryptionKey parameter which is stored in the EEPROM, can be updated by r oot, but is not readable by anyone.
ManualKeyInfo 63 When you specify a key that is too short, the policy binding operation generates an error message informing you of the key length discr epancy and the key is rejected. If this should occur you will need to delete the specifi ed key and reenter a key of the appropriate length.
64 C HAPTER 33: IPSEC S ERVICE P ARAMETERS UDP [(<src_port>, <dst_port>)...up to 16 pairs] <encrypt_algorithm> : 3DES2key | DES | RC5 <auth_algorithm> : MD5 | SHA <portlist .
manualPOLicy 65 The mask is a number in the range of 0-32, which indicates the number of bits in the IP addr ess that remain unchanged for the IP addr esses in that block. The remaining bits in the IP addr ess should be all 0s. The address block includes all addr esses except for the first address and the last (x.
66 C HAPTER 33: IPSEC S ERVICE P ARAMETERS.
60 RSVP S ERVICE P ARAMETERS 11.1 Release Notes, Reference for NETBuilder Family Software Replace Chapter 60 with this chapter . This chapter describes the Resour ce Reservation Protocol (RSVP) Service parameters. RSVP is used in multicasting applications like video confer encing, multimedia, and virtual private network (VPN) network management.
68 C HAPTER 60: RSVP S ERVICE P ARAMETERS MaxFlowRate Syntax SETD !<port> -RSVP MaxFlowRate = <bytes/sec>(0-562500) SHow [ !<port> | !* ] -RSVP MaxFlowRate Default Amount of bandwidth r eserved for RSVP .
69 SR S ERVICE P ARAMETERS 11.1 Release Notes, Reference for NETBuilder Family Software Place this page in fr ont of Chapter 69. AllRoutes Syntax FLush [!<port> | !*] -SR AllRoutes [Dec | Hex] [.
70 C HAPTER 69: SR S ERVICE P ARAMETERS ROUte Syntax ADD !<port> -SR ROUte <media address> [Override] [Dec | Hex] [ Transparent | {Null | <source route> [<largestframesize>]}] .
ROUte 71 <largestframesize> Specifies the largest size MAC frame that can be transmitted to the indicated end system using this r oute. An integer value of 0 through 7 may be assigned. The default value is 3. The base values specified in IEEE 802.
72 C HAPTER 69: SR S ERVICE P ARAMETERS.
71 SYS S ERVICE P ARAMETERS 11.1 Release Notes, Reference for NETBuilder Family Software Place this page in fr ont of Chapter 71. CONFiguration Syntax SHow -SYS CONFiguration Description The CONFiguration parameter displays various SYS Service parameter values.
74 C HAPTER 71: SYS S ERVICE P ARAMETERS.
77 WEBL INK S ERVICE P ARAMETERS 11.1 Release Notes, Reference for NETBuilder Family Software Place this page in fr ont of Chapter 77. StatPollInterval Syntax SETDefault -WEBLink StatPollInterval = &l.
76 C HAPTER 77: WEBL INK S ERVICE P ARAMETERS.
デバイス3Com 11.1の購入後に(又は購入する前であっても)重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります:
3Com 11.1をまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこには3Com 11.1の技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。3Com 11.1の取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。3Com 11.1で得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
3Com 11.1を既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又は3Com 11.1の不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、3Com 11.1に関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわち3Com 11.1デバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。