Software Release 2.3.1 | 5 |
Software Features
The following features are available on all routers and switches supported by this release, unless otherwise stated:
Major features ■ NSM Hot Swap software support for models with NSM bays (“NSM Hot Swap Software Support” on page 6)
■Domain Name Server Enhancements (IP) (“Domain Name Server Enhancements” on page 7)
■Configurable Telnet Server Port Number (“Telnet Server Port Number” on page 9)
■Up and down triggers for Ethernet interfaces (“Triggers for Ethernet Interfaces” on page 9)
■Changes to the number of encryption and compression channels, depending on the amount of RAM on the router or switch (“ENCO Channels” on page 10)
■IP Security (IPsec) enhancements: the Source Interface can be now be specified, and IPsec performance is enhanced (“IP Security (IPsec) Source Interface and Enhancements” on page 11)
■OSPF on Demand (“OSPF on Demand” on page 12)
■Paladin Firewall Enhancements (“Paladin Firewall Enhancements” on page 14)
■Paladin Firewall HTTP Application Gateway (Proxy) (“Paladin Firewall HTTP Application Gateway (Proxy)” on page 21)
■VRRP Port Monitoring (“VRRP Port Monitoring” on page 26)
■Border Gateway Protocol version 4, phase 1 (“Border Gateway Protocol 4
■Commands to reset interface and IP MIB counters to zero, and changes to the display of MIB counters (“IP and Interface Counters” on page 29)
■An extended range of telephony functions, on AR300 and AR310 routers (“Telephony (PBX) Functionality” on page 33)
■Bandwidth limiting on Rapier i Series switch ports (“Bandwidth Limiting” on page 34)
Minor improvements ■ The DHCP server is now able to successfully allocate addresses to Macintosh devices running Open Transport version 2.5.1 and 2.5.2.
■To increase switch security, the INFILTERING parameter of the SET SWITCH PORT command now defaults to ON.
The INFILTERING parameter enables or disables Ingress Filtering of frames admitted according to the ACCEPTABLE parameter, on the specified ports. Each port on the switch belongs to one or more VLANs. If INFILTERING is set to ON, Ingress Filtering is enabled: any frame received on a specified port is only admitted if the port belongs to the VLAN with which the frame is associated. Conversely, any frame received on the port is discarded if the port does not belong to the VLAN with which the frame is associated. Untagged frames admitted by the ACCEPTABLE parameter are admitted, since they have the numerical VLAN Identifier (VID) of the VLAN for which the port in an untagged member. If OFF is specified, Ingress Filtering is disabled, and no frames are discarded by this part of the Ingress Rules.
This change does not apply to AR300 or AR700 Series routers.
Software Release 2.3.1
