Allied Telesis AR44xS series manual CR00012850, CR00013109, CR00013683, CR00012881, CR00013004

Features in 276-04

28

CR

Module

Level

Description

AR44xS/ AR450S

AR7x5

AR750S

Rapier i

AT-8800

AT-8600

AT-8700XL

AT-8948

AT-9900

AT-9800

CR00012850

File

-

Previously, a user could delete the preferred software release and the current

Y

-

Y

Y

Y

Y

Y

-

-

-

CR00013109

boot configuration file (by using the command delete file), without first setting

a new preferred release or boot configuration file. Therefore, it was possible to

CR00013683

accidentally delete these files, which caused network disruptions if the router or

switch restarted. If the router or switch restarted after the user had deleted the

preferred release, it booted from the default software. Similarly, if the router or

switch restarted after the user had deleted the current boot configuration file, it

started up with no configuration.

This enhancement ensures that users can no longer delete the preferred software

release or the current boot configuration file. If you want to delete the files

without specifying new preferred files, first use the commands delete

install=pref or set config=none to stop the files from being preferred.

Note that this enhancement does not apply to routers or switches that are

manufactured for the Japanese market. Japanese users can still delete the

preferred software release and the current boot configuration file.

CR00012881

IP Gateway

-

The IP implementation has been enhanced to accept IP interfaces with a /31

Y

-

Y

Y

Y

Y

Y

-

-

-

netmask. This results in a slightly non-standard subnet that has no network

address or broadcast address. This has become a popular extension to IP, because

it reduces wastage of IP addresses on point-to-point links.

CR00013004

IPsec

-

The maximum number of concurrent IPsec SA bundles that are allowed per IPsec

Y

-

Y

Y

Y

-

-

-

-

-

policy has been increased from 40 to 100, so that IPsec can now support up to

100 concurrent roaming Microsoft Windows hosts.

Site-to-site VPN connections are not usually limited by the number of SA bundles

per policy, because different IPsec policies with different traffic selectors can be

configured to support more IPsec VPN connections. However, the number of SA

bundles per policy did limit configurations that support roaming Windows

laptops (IPsec transport mode connections over L2TP), because the only traffic

selectors known ahead of time are lport=1701 and transportprotocol=udp.

Version 276-05

C613-10474-00 REV D