RELEASE NOTES. Connect TM SCS Secure Connection Server Version 2.00 Release Notes Rev A November 2016 WESTELL.COM

Transcription

1 Connect TM SCS Secure Connection Server Version 2.00 Release Notes Rev A November 2016 RELEASE NOTES Westell Technologies Part # Rev A

2 Copyright 2016 by Westell Inc. All Rights Reserved. Westell, Kentrox and Optima Management System are registered trademarks of Westell. All other names are trademarks of their respective owners. Information is correct at time of publication and is subject to change without notice. Contact Westell in Aurora, Illinois to verify current product information. Westell, Inc. is an Equal Opportunity/Affirmative Action employer. Westell, Inc. 750 North Commons Drive Aurora, IL USA Toll Free: (800) International: +1 (630) Fax: +1 (630) Page 2

3 Connect SCS Secure Connection Server Release Notes Version 2.00 November 2016 These release notes document new features for the Connect SCS secure connection server version This document also provides software update instructions and a compatibility matrix for Connect SCS version Instructions for use of this product are detailed in the following documents: Connect SCS Secure Connection Server Command Reference Guide. Connect SCS Secure Connection Server Configuration Guide. Connect SCS Secure Connection Server Installation Guide. New Features Page 3 The Connect SCS Secure Connection Server version 2.00 is a new software release to support the new and improved Westell Connect SCS hardware. Version 2.00 will not run on any older versions of the Connect SCS hardware. Connect SCS version 2.00 includes the following new features: New More Powerful CPU Architecture (Issue BGZ1226) GigE Ethernet (Issue BGZ1226) SNMPv3 and IPv6 Support (Issue 73571) Software Upgrade Support for Additional Clients New More Powerful CPU Architecture Connect SCS Version 2.00 features a new ARM-based CPU integrated into the base line card, maintaining all software functionality while improving performance. The new CPU replaces the older module, which is no longer available. GigE Ethernet The Version 2.00 platform has three GigE Ethernet interfaces.

4 SNMPv3 and IPv6 Support Version 2.00 Connect SCS line cards support SNMP v1, v2c, and v3, and IPv6. Software Upgrade Connect SCS Version 2.00 incorporates all of the latest features and security updates as Version 6.40 of the Westell Remote Suite of Products. Support for Additional Clients Version 2.00 increases the number of clients which Connect SCS can support to 250. Enhancements Open VPN Server Mode Configuration Adjustment (Issue 75380) Connect SCS Version 2.00 corrects Open VPN configuration settings to speed up data transfer and prevent display of multiple recurring warning messages which afflicted the earlier version. To support network connections to clients that use a reduced MTU (e.g for LTE modems), the Open VPN controller contains a configuration option to set the MTU size to send packets appropriately sized for clients. For TCP sessions, the Open VPN controller modifies the MSS size automatically to match the MTU size. For large UDP packets, the setting enables fragmentation of the packets in addition to any OS provided fragments. Remotes need to have firmware Version 6.50 or newer to support this option. One of the following commands must be executed: config controller openvpn <name> link-mtu <mtu> This sets the MTU to use for the controller to limit the size of the UDP packets. The setting also enables internal fragmentation and TCP MSS fixes. This setting is available for client and server mode controllers only. config controller openvpn <name> default link-mtu This is the command to use default MTU handling. Clients default to using an MTU derived from the smallest MTU of its network interfaces. Servers default to not specifying an MTU. The MTU configuration should be set the same on the Connect-SCS server controller as well as all of its clients for optimal behavior and prevention of warning log messages about MTU size mismatches. As the MTU configuration changes the VPN Page 4

5 protocol, the feature needs to be enabled for a server and its clients needs, using these steps: 1. Update server and client software to a version that supports the link-mtu setting. The default behavior of the software is to maintain compatibility with previous versions so no MTU changes are made by default. If the server configures linkmtu before updating the client software, those clients will not be able to connect and communicate successfully until the server reverts its configuration. 2. Configure the link-mtu setting on all clients. The client controller will attempt to use the new protocol, but if it detects a mismatch with the server, it will revert to the previous behavior until the server is configured. 3. Configure the new link-mtu setting on the server. When the clients reconnect, they should recognize the server supports the new protocol and switch to using the new protocol to match. If there are any other clients of the Connect-SCS such as PCs, they will need to update their Open VPN configuration file to match the server settings. Page 5

6 Software Update Instructions Connect SCS version 2.00 comes with new factory installed software. No software update is necessary. To verify your software version: 4. Access and log into Connect SCS. 5. At the main CLI prompt, enter: show version The command response appears similar to the following: (AIconnect-SCS) show>version Product: Connect-SCS Version: 2.00 Build date: ,22:13:47.0,-04:00 Build ID: 004 Image type: KTX664-Production Bootloader Version: 1.00 (AIconnect-SCS) Page 6

7 Page 7