________________________________________________________________________________ 3Com OfficeConnect Cable/DSL Secure Gateway Version 1.26 Product Number: 3CR856-95 This document provides the following information: 1. Legal rights 2. New features in this release 3. Recommendations when using this release 4. Known problems with this release 5. Upgrading to this release 6. 3Com's World Wide Web site ________________________________________________________________________________ 1. Legal rights IMPORTANT: READ THIS BEFORE INSTALLING OR USING THIS SOFTWARE You should carefully read the terms and conditions of the Software License Agreement. This text is contained in a file called license.txt. Your legal rights are defined therein. USE OF THIS SOFTWARE INDICATES THAT YOU ACCEPT SUCH TERMS AND CONDITIONS. IF YOU DO NOT AGREE WITH SUCH TERMS AND CONDITIONS, DO NOT USE THIS SOFTWARE. ________________________________________________________________________________ 2. New features in this release 1. Performance and functionality issues of PPPoE connections have been fixed. 2. Message Transfer Unit (MTU) sizing problems have been addressed. 3. DES and 3DES encryption/decryption is now performed in hardware which has increased the throughput of IPSec VPN tunnels. 4. Can now interoperate between the IPsec server and a WAN-side IPSec client that has had its address changed by a NAT device (i.e. a device that changes the IP addresses of packets). See also "Known problems with this release" below. 5. "Blacklisted" IP addresses are now logged. ________________________________________________________________________________ 3. Recommendations when using this release Follow the Installation Guide for the OfficeConnect Secure Cable/DSL Gateway. For ease of use and installation, it is recommended that the OfficeConnect Cable/DSL Secure Gateway is used as a DHCP Server. This is the default configuration for the Gateway. In the interests of security, the administration password should be changed from the default setting. If you have modified your PC installation to change the Message Transfer Unit (MTU) size and continue to have MTU related problems with this release of firmware, then please return your PC to its default MTU configuration. If you have not done so already, you can download a strong encryption version of the software from the 3Com support Web site (see section 6). The strong encryption version can be identified by its filename; OSG0126-168.bin. The standard firmware is contained in the file called OSG0126.bin. For help in configuring IPSec, please download the document entitled "Creating IPSec VPNs with the OfficeConnect Secure Gateway", from the 3Com support Web site. In the unlikely event that the unitÂ’s configuration becomes corrupt you can reset it using either of the following methods: - From the System Tools menu, select the Configuration tab then select Restore to Factory Defaults. - The cable loopback method, described under "Forgotten Password" in the "Troubleshooting" section of the User Guide. ____________________________________________________________________________ 4. Known problems with this release If the remote end of an IPSec VPN tunnel goes down, the link will not be re-negotiated automatically until the lifetime of the tunnel expires. The link can be brought back up manually by first disabling then re-enabling the tunnel. If two WAN-side IPSec clients that are both behind a NAT device (i.e. a device that changes IP addresses contained within packets that pass through it) AND both have the same private IP address - i.e. before address translation is performed - then only one of the clients will be able to communicate with the Gateway's IPSec server at any one time. Reception of LCP echo packets from a PPPoE server will prevent the PPPoE idle timeout. If the DHCP Server ever allocates a new IP address to a device that should have a fixed IP address, you can resolve this by restarting the Gateway then restarting the device. ________________________________________________________________________________ 5. Upgrading to this release Although the upgrade process has been designed to preserve your configuration settings, 3Com recommends that you make a backup of the configuration beforehand, in case the upgrade process fails for any reason (for example, the connection between the computer and the Gateway is lost while the new software is being copied to the Gateway). Instructions for upgrading the OfficeConnect Secure Cable/DSL Gateway: 1. Ensure the Gateway is powered and a link is established with the host PC. 2. Ensure that the latest version of the Gateway code is located on the host PC. The latest version of the OfficeConnect Secure Cable/DSL Gateway software can be obtained from the 3Com support Web site (see section 6). 3. Launch a web browser to the IP address of the Gateway and login. 4. Select 'System Tools' from menu bar on the left hand side of the screen. 5. Select the 'Upgrade' tab. 6. Browse to the location of the Gateway code, select the file and press the Apply button. You may need to change the file type in the dialog box displayed by your web browser to *.* to be able to see the file. 7. Wait for the upgrade process to complete. This may take several minutes and is complete when the Alert LED has stopped flashing and is permanently off. ________________________________________________________________________________ 6. 3Com's World Wide Web site Access the latest networking information on the 3Com Corporation World Wide Web site by entering our URL into your Internet browser: http://www.3com.com/ You will find software upgrades, troubleshooting guides and other support information at the 3Com support site: http://support.3Com.com/ ________________________________________________________________________________ (R) means registered trademark. 3Com and OfficeConnect are registered trademarks of 3Com Corporation. Other trademarks are the property of their respective owners. Document Number: DRA08569-5AAA03 Issued: August 2002 Copyright 2002 3Com Technologies.