Release Notes for. LANtools Software Release RU6

Transcription

1 Relese Notes for LANtools Softwre Relese RU6 Copyright (c) LANCOM Systems GmbH, Wuerselen (Germny) LANCOM Systems GmbH does not tke ny gurntee nd libility for softwre not developed, mnufctured or distributed by LANCOM Systems GmbH, especilly not for shrewre nd other extrneous softwre. LANCOM Systems GmbH Adenuerstrsse 20 / B Wuerselen Germny Internet: , CBuersch Tble of Contents 1. Prefce... 2 Note New fetures, improvements, nd history RU LANmonitor RU RU LANmonitor RU Rel... 6 LANmonitor Rel RC RC LANmonitor RC RC LANmonitor RC LANtools RU6-EN LANCOM Systems GmbH, Wuerselen (Germny) Pge 1 of 8

2 1. Prefce LANCOM LANtools, consisting of nd LANmonitor, serves for the dministrtion of ll Wireless LAN Access Points nd Routers. The t time ltest versions re vilble for ll LANCOM products. You cn downlod it for free t This document describes the innovtions within LANtools version RU6, s well s the improvements since the previous version. Note LANCOM LANtools support Windows Vist, Windows 7, Windows 8, Windows 10, Windows 2008 Server, Windows Server 2011 (ll 32- nd 64-bit versions) nd Windows Server 2012 & Windows Server 2012 R2. For Windows Vist nd Windows 2008 Server you will find user dt under \Users\USER\AppDt\Roming\LANCOM\ nd the ppliction files under \ProgrmDt\LANCOM\. When upgrding to version 8.50 or newer existing user- nd ppliction dt is moved to the corresponding folders. LANtools RU6-EN LANCOM Systems GmbH, Wuerselen (Germny) Pge 2 of 8

3 2. New fetures, improvements, nd history RU6 LANmonitor RU6 When sving configurtion utomticlly, the version ws not specified completely within the filenme, becuse only 4 chrcters were vilble. Now there re 5 chrcters vilble for version specifiction. The One-click VPN wizrd (drg & drop of two LANCOM routers) creted fulty network reltions fter hving selected "route ll privte networks vi centrl site". Due to tht, configured VPN connections could not be estblished. The Public Spot setup wizrd did not ctivte RADIUS ccounting in the menu RADIUS > Server utomticlly. After hving deleted n IKEv2-VPN dil-in remote site vi setup wizrd "Delete remote site or remote ccess", the wizrd selected the defult prmeter "RAS-WITH-NETWORK-SELECTON" for deletion, too. This led to non-functionl client connections fter hving executed the wizrd. For Telekom devices of the R88x series the EsyConfig wizrd ws modified, so tht the utomtic execution of firmwre updtes is lwys enbled, regrdless of the selected configurtion mode (utomtic or mnul). A mximum of 8 subdomins could be creted vi the menu IPv4 > DNS > Subdomin. It ws possible to register WLC AP Upgrde +6 Option vi the function "Activte softwre option", lthough the required WLC Bsic Option hs not been ctivted yet. The psswort genertor could only generte 8-chrcter psswords for preshred key nd WPA2 pssphrse. LACP could not be configured by on LANCOM WLC The VoIP setup wizrd for SwyxWre server connection could configure both ISDN interfces of LANCOM 1783VA to TE mode. For LANCOM switches of the GS-23xx series, which needed specil firmwre before upgrding to the ltest firmwre version, this ws displyed in the dilogue "LANCOM Softwre Updte", nd could be selected. Anywy, tried to upgrde directly to the ltest firmwre, which led to n error messge nd cused firmwre uplod bort. The & ws missing in the tooltip for the llowed chrcters for selecting min device pssword. The ISDN interfces 3 nd 4 could be configured for TE mode by the setup wizrd "Configure Voice over IP / All-IP ", which led to n error messge when trying to sve the configurtion to the device. TE mode is not possible with ISDN interfces 3 nd 4. After upgrding the loder or firmwre of device, the device sttus in showed "Restrting...", lthough the device restrt ws lredy completed nd the device ws ccessible gin. If the MAC ddress ws entered to the configurtion menu "WLAN Controller > AP updte > Firmwre mngement", n error messge occurred, lthough the entered vlue ws llowed. The LANtrcer could not red the WLAN sttion tble of LANCOM WLAN controller (> Sttus > WLAN mngement > Sttion tble). After the VoIP setup wizrd ws executed for configuring SIP trunk, the wizrd did not configure the cll reception for the router interfces to the defult vlue none, nd did not leve the MSN entry empty, but configured the MSN vlue " " nd set the cll reception function to ll. LANtools RU6-EN LANCOM Systems GmbH, Wuerselen (Germny) Pge 3 of 8

4 LANmonitor In LANmonitor no connected Wi-Fi clients were shown, if the firmwre version on the respective ccess points ws older thn The minimum vlue for the device temperture in the grphicl disply ws lwys 0 C, nd did not chnge. LANtools RU6-EN LANCOM Systems GmbH, Wuerselen (Germny) Pge 4 of 8

5 RU4 LANmonitor RU4 New fetures & LANmonitor Support for the LANCOM 190x series Support for the LANCOM GS-2310 The defult vlue for the mount of the mximum proxy connections ws too smll in the globl settings of the Content Filter. If ction objects for DiffServ were defined in the IPv6 firewll, wrote these bck to the configurtion with inccurte vlues. The setup wizrd for configuring VPN client connection with the LANCOM Advnced VPN Client for mcos creted fulty network rule which resulted in non-functioning VPN dil-in. If the function Consider the Type-Of-Service field in IP pckets (in the menu "IP-Router") ws ctivted when executing the All-IP wizrd, both Type-of-Service nd DiffServ fields were ctivted fter wizrd completion. The Public Spot setup wizrd did not ctivte the RADIUS server, so n pproprite error messge ws displyed when trying to log in. When using LCOS 9.24 nd Rel in combintion, the VoIP wizrd for Deutsche Telekom connections creted n entry for the SIP proxy (OID ). This led to filures when trying to register the line for other providers. To correct this, usully n dption is done in the SIP proxy field, but this ws not shown in Rel. If VPN connection ws creted using the LANCOM 1-click VPN wizrd, the connection could not be estblished, becuse no gtewy ws configured for the VPN connection. Vi the configurtion could not be red out per SSH, if in the device configurtion under "Setup/Config/SSH/" prmeters were previously chnged nd ll vlues for SHA-1 were deleted. The setup wizrd for connecting two networks by VPN or for setting up VPN dil-in connection creted flse IKEv1 proposls. If vrouter ws configured, the submenus RADIUS nd Cll mngement were missing in the communiction menu. In the online- nd offline configurtion of devices which received LAN bridge in the course of LCOS EoGRE tunnels were missing. In the configurtion dilogue for IKEv2 uthentiction the pssword field for locl nd remote site ws ctivted even when using certificte-bsed uthentiction, lthough there is no need for it with this uthentiction mode. The 1-click VPN wizrd for configuring site-to-site connection creted n unnecessry firewll rule. A hint ws missing in the help, tht wildcrds cn be used for locl nd remote entities for IKEv2 connections. If mobile Internet bckup connection ws configured when setting up n Internet connection with the setup wizrd, the setup wizrd overwrote n existing defult route without request. When configuring n LACP bundle, ll logicl interfces nd bridge groups nd the bundle could be selected. The interfce LAN-2 could be selected in the configurtion of LANCOM 730-4G lthough there is only one Ethernet port vilble for this device. LANtools RU6-EN LANCOM Systems GmbH, Wuerselen (Germny) Pge 5 of 8

6 In the menu WLAN Controller AP updte Firmwre mngement ll 11c Wve 2 ccess points (LN-17xx, LN-86x) were missing in the device list. LANmonitor The counter for displying estblished VPN lodblncer connections showed inccurte vlues. SMS messges contining umluts could not be sent with LANmonitor. No cloud mngement pth ws displyed in LANmonitor for the LANCOM ccess point L-460gn Rel LANmonitor Rel If the firewll tble ws opened within nd the configured rules were sorted e.g. by priority or nme, n unsorted nd confusing sorting ws shown. There ws no option to select the interfces BUNDLE-1 nd BUNDLE-2 for IPv4- nd / or IPv6 networks on LANCOM devices which support the LACP functionlity. The defult settings of the LACP bundle interfces BUNDLE-1 nd BUNDLE-2 were different in nd LCOS. crshed under Windows 10 (64bit) when selecting n entry from the menu br shortly fter the ppliction ws strted. Some encryption prmeters were missing in n offline configurtion fter hving creted new entry in the menu VPN > IKEv2/IPSec > Encryption. The inheritnce for the new vlue convert to unicst ws not considered in the WLC profiles for logicl Wi-Fi networks (SSIDs). No executble show commnds were shown in the LANtrcer s expert configurtion menu. Configured IKEv2 VPN connections could not be deleted from the setup wizrd Remove remote site or ccess. offered telnet configurtion option for the websmrt switch LANCOM GS-1326, lthough this device cnnot be configured vi telnet. LANmonitor The pth WLAN-Controller ws shown in LANmonitor, even if the WLAN controller functionlity ws disbled in the configurtion of the monitored device. SNMPv3 monitoring of device in WLANmonitor worked only if it ws invoked from LANmonitor using the function monitor WLAN device temporrily. LANmonitor crshed if no device ws monitored in LANmonitor (empty view) nd the commnd for deleting device from the list ws invoked by typing DEL + Enter. LANtools RU6-EN LANCOM Systems GmbH, Wuerselen (Germny) Pge 6 of 8

7 RC3 New Fetures Support for the LANCOM Wireless epper Displys WDG-2 2,7", 4,2" nd 7,4" within the Wireless epper mngement. Known issues Pictures with higher resolution thn supported by the disply re displyed fulty fter being uploded by the Wireless epper mngement. As workround for this known issue, these pictures should be scled to the disply resolution using third-prty ppliction before uploding them to the disply RC2 LANmonitor RC2 New Fetures The firewll rules tble is now sortble by columns For the LANCOM devices LN-1700, LN-1702, LN-860, nd LN-862, the settings for Airtime Firness could be chnged for the Wi-Fi module 2 (IEEE c module). As of now, this prmeter is fixed to the vlue identicl medi time, nd cnnot be chnged nymore. In the IKEv2 VPN connection wizrd non-defined defult vlue ws selectble within the prmeter "IP ddress rnge". If configurtion file or script ws drgged & dropped from the desktop to device in, the file could not be deleted from the desktop fter finishing the uplod, becuse did not yet relese its ccess. A flse index ws used for the tble Mngement > Admin > Access settings > Access sttions. Since LCOS 10.00, the Internet connection wizrd nmes the first Internet connection INTERNET. However, the multicst route while configuring T-Entertin connection ws nmed T-ENTERT, which led to non-functionl T-Entertin connection. LANmonitor If SIP line (single ccount) ws tgged with long descriptor (more thn 16 chrcters nd t lest one '-'), the cller list could not be opened in LANmonitor, which led to LANmonitor crsh. LANtools RU6-EN LANCOM Systems GmbH, Wuerselen (Germny) Pge 7 of 8

8 RC1 LANmonitor RC1 New fetures The wizrd for setting up secure VPN connections vi now supports the protocol IKEv2. The VPN wizrd lso enbles 1-click configurtions of the LANCOM Advnced VPN Client for IKEv2 connections. As of now, the menus for the Public Spot configurtion re generlly vilble within LCOS, but cn only be used fter successful ctivtion of the Public Spot option. In the English version of the license informtion for the vrouter in the menu "Properties -> License" ws shown in Germn lnguge. The overview of the vilble softwre updtes could not be sorted by product nme, type, new version or instlled version. If the CLIP-no-Screening feture ws used, predefined routes for converting diled number to the E.164 formt were missing (e.g ). If configurtion items were modified in the properties dilog of LANCOM switch, pssword hd lwys to be entered with the ssigned usernme (dmin). The mximum mount of 55 entries could not be reched in some tbles. The setup pth for the CA nd Public Spot is shown independently from ctivted fetures (e.g. VPN-25 or WLC). An unnecessry switch for RIP redistribution ws present in the BGP configurtion. The internet wizrd text for using VLAN tgs ws not up to dte. The wizrd "Prepre VoIP provider ccess" could not be executed on LANCOM VoIP routers with LCOS firmwre which were mnged by RU2 nd newer, becuse it ws not included in the setup wizrd. If AES-GCM ws selected from the encryption list in vrouter configurtion under VPN -> IKEv2/IPSec -> Encryption, but no vlue ws chosen from the hsh tble, insisted on selection from the hsh tble, lthough hsh lgorithm is lredy integrted when using AES-GCM-*. LANtools RU6-EN LANCOM Systems GmbH, Wuerselen (Germny) Pge 8 of 8