background image

2

R

ELEASE

 N

OTES

 S

UPER

S

TACK

® II R

EMOTE

 A

CCESS

 S

YSTEM

 1500 R

ELEASE

 2.5

New Features

The following are new features in this release:

MSCHAP Version 1

and

MSCHAP Version 2

RAS 1500 includes support for local, Remote Authentication Dial In User 
Services (RADIUS) and NT NOS authentication. In addition to Password 
Authentication Protocol (PAP) and Challenge Handshake Authentication 
Protocol (CHAP) support, Release 2.5 adds MSCHAP Versions 1 and 2 for 
local and RADIUS authentication. Versions 1 and 2 are separate protocols 
and are incompatible with each other. Therefore, you must set Point To 
Point (PPP) Receive Authentication using 

either

 Version 1 or Version 2 of 

MSCHAP. 

You may set PPP Receive Authentication through the Web Configuration 
Interface. From the main, browser-based Web Configuration Interface 
page, click 

Authentication

 under the 

Administration

 menu. The 

selections for MSCHAPV1 or MSCHAPV2 are under the

 PPP 

Authentication Type

 pulldown menu.

You may also set PPP Receive Authentication through the Command Line 
Interface (CLI). The CLI command to set PPP Receive Authentication using 

either

 Version 1 or Version 2 is as follows:

SET PPP RECEIVE_AUTHENTICATION [ANY CHAP MSCHAPV1 MSCHAPV2 

NONE PAP]

Note the use of “any” in the above CLI command example. If you 
previously set any scripts using “either” (which was specified in the CLI 
command for Version 2.0), you will need to change “either” to “any” in 
the script.

Full Duplex Ethernet

Ethernet now has full duplex functionality. Full duplex is typically 
implemented between two endpoints. Both endpoints of the full duplex 
link 

must

 operate in full duplex mode in order for full duplex to be fully 

operational. If both endpoints are not set for full duplex functionality, 
performance may degrade. The CLI command to set full duplex or half is 
as follows:

SET ETHERNET DUPLEX_MODE [FULL_DUPLEX HALF_DUPLEX]

Auto-negotiation is not supported on the Ethernet port. Therefore, when 
you set full duplex while connected through a switch on the Ethernet 
port, make sure you manually set the switch to full duplex mode. 

RelNotes2.5.fm  Page 2  Thursday, June 8, 2000  2:42 PM

Summary of Contents for 3C433279A

Page 1: ...e RAS 1500 Web Site http www 3com com ras1500 for the latest RAS 1500 product information code and documentation On this site you will also find a link to the 3Com Knowledgebase where you will find us...

Page 2: ...u may also set PPP Receive Authentication through the Command Line Interface CLI The CLI command to set PPP Receive Authentication using either Version 1 or Version 2 is as follows SET PPP RECEIVE_AUT...

Page 3: ...addresses to a single ISP assigned address You can set PAT through the Web Configuration Interface From the main browser based Web Configuration Interface page click Select NAT PAT Configuration under...

Page 4: ...UDP Private IP Address You can also set UDP PAT using CLI The CLI command for adding UDP PAT over the WAN interface is as follows ADD PAT UDP USER USER_NAME This command should be followed sequentiall...

Page 5: ...The CLI command for adding Dynamic NAT over the WAN interface is as follows ADD NAT DYNAMIC USER USER_NAME This command should be followed sequentially by the following sub commands See the table bel...

Page 6: ...rivate network for the connection Once the connection to the public network is closed the information in the table is dropped and this IP address is free for the next connection Each time a user conne...

Page 7: ...the private network 1 1 1 1 connects to the public network Static NAT translates the IP address and connects it to the static assigned addresses 2 2 2 2 The RAS 1500 maintains a table of active mappi...

Page 8: ...ously however individual users connecting to the public network must be configured for either dynamic or static NAT In addition the IP addresses of users configured for either NAT type must be consecu...

Page 9: ...ialing out from the RAS1500 would time out prematurely while waiting for the other side to answer have been corrected Adding a User When you add a user from the LAN to LAN page to use Frame Relay over...

Page 10: ...o have one datalink on the WAN interface either PPP or Frame Relay You cannot modify a Frame Relay user to PPP Leased Line or vice versa in the modify mode in the LAN to LAN and Shared ISP pages of th...

Page 11: ...supports this feature Some Frame Relay providers require you to turn this feature OFF To disable LMI on your WAN port use the following command at the CLI prompt SET FRAME_RELAY ON INTERFACE RM0 WAN 1...

Page 12: ...RelNotes2 5 fm Page 12 Thursday June 8 2000 2 42 PM...

Reviews: