Page 1
Release Notes for Nortel Switched Firewall 5100 Series Release 2.3.3 *213456-S* Part No. 213456-S October 2005 4655 Great America Parkway Santa Clara, CA 95054...
Page 2
FAR 12.211- 12.212 (Oct 1995), DFARS 227.7202 (JUN 1995) and DFARS 252.227-7015 (Nov 1995). Nortel Networks, Inc. reserves the right to change any products described herein at any time, and without notice. Nortel Networks, Inc. assumes no responsibility or liability arising from the use of products described herein, except as expressly agreed to in writing by Nortel Networks, Inc.
Page 3
Regulatory Compliance International regulatory statements of conformity This is to certify that the Nortel Networks 5100 Series is evaluated to the international regulatory standards for electromagnetic compliance (EMC) and safety and were found to have met the requirements for the following international standards: EMC - Electromagnetic Emissions –...
Page 4
EN 55 024 statement This is to certify that the Nortel Networks equipment is shielded against the susceptibility to radio interference in accordance with the application of Council Directive 89/336/EEC. Conformity is declared by the application of EN 55 024 (CISPR 24).
Page 5
CE marking statement (Europe only) EN 60 950 statement This is to certify that the Nortel Networks equipment are in compliance with the requirements of EN 60 950 in accordance with the Low Voltage Directive. Additional national differences for all European Union countries have been evaluated for compliance.
Page 6
Norma Oficial Méxicana (NOM): Exportador: Nortel Networks, Inc. 4655 Great America Parkway Santa Clara, CA 95054 USA Importador: Nortel Networks de México, S.A. de C.V. Avenida Insurgentes Sur #1605 Piso 30, Oficina Col. San Jose Insurgentes Deleg-Benito Juarez México D.F.
Introduction These Release Notes provide the latest information regarding the Nortel Switched Firewall 5100 Series for Release 2.3.3, and modify information found in the complete documentation. Keep these Release Notes with your Nortel product manuals. The following topics are addressed in these Release Notes: “Late-breaking news and support’’...
Late-breaking news and support Before you put your system into commission, check the Nortel Technical Support web site www.nortel.com 5100 Series. Review the Readme file for this release. NOTE: You must authenticate at the Check Point web site to obtain the Firewall software.
New features The following features have been added to the Nortel Switched Firewall 5100 Series release 2.3.3 since the last major release: Software support Nortel Switched Firewall 5100 Series Release 2.3.3 supports Check Point® Firewall-1® NGX with the following Application Intelligence software:...
For more information about monitoring support available from the CLI, see Nortel Switched Firewall Series 5100 Release 2.3.3 User’s Guide and Command Reference (213455-L). NSF Ticker is available in the Browser-Based Interface (BBI) to provide the...
Page 11
For more information about NSF Ticker, see Nortel Switched Firewall 5100 Series Release 2.3.3 Browser-Based Interface User’s Guide (216383-D). Simplified upgrade procedure NSF 2.3.3 supports a simplified upgrade process and you do not have to stop the traffic in the Firewall. For step-by-step instructions, see...
5100 Series hardware systems, you must configure NSF 2.3.3 and Check Point software. Upgrading to NSF 2.3.3 software To upgrade the software on your Nortel Switched Firewall 5100 Series, you must perform the following tasks: Backup of the Nortel Switched Firewall 5100 Series configuration.
Loading the new software To install a minor or major release upgrade on your Nortel Switched Firewall 5100 Series, you require the following: Access to the CLI through the local console terminal or through a remote Telnet or SSH connection (using the Firewall host IP address).
Page 14
FTP or TFTP download: If you downloaded the upgrade image to the FTP/TFTP/SCP/SFTP server, perform the following step. TIP: Only anonymous FTP is supported. >> Main# /boot/software/download Select tftp/ftp/scp/sftp [tftp]: ftp Enter hostname or IP address of server: 172.17.124.46 Enter filename on server: NSF5100_2.3.3.0_R60.pkg Received 53212760 bytes in 27.2 seconds Unpacking...
When the upgrade is loaded, activate the software as described in the following section. Activating the software The Nortel Switched Firewall 5100 Series can hold up to two versions of the same major software release simultaneously—for example, version 2.3.1 and version 2.3.3.
Standalone upgrade Use the following procedure to perform a standalone upgrade. After you download the software upgrade package, inspect its status and activate it using the following commands: Inspect the status of the software package: >> Main# /boot/software/cur Activate the new (unpacked) software package: >>...
Page 17
SSI network using the following command. TIP: The 2.3.3.0 upgrade process must have entries for the SSI network. >> Main# /cfg/sys/accesslist/add <network address_for_SSI network> Release Notes for Nortel Switched Firewall 5100 Series Release 2.3.3 MIP Local cpu(%) mem(%)
Page 18
Check the current version of the software using the following command. >> Main# /boot/software/cur Version ------- 2.3.3.0_R60 2.3.1.0_R55 Verify that the status of the version you downloaded is unpacked. Activate the new (unpacked) version of the software, using the following command, and do not disturb the system until it reboots: >>...
Page 19
(sync) is working properly by entering the /maint/fw/sync command. Review the command results to ensure that the status of both Firewalls is active. If the status for both Firewalls is not active, reboot both Firewalls. Release Notes for Nortel Switched Firewall 5100 Series Release 2.3.3...
Using the .iso image of the software Log in as root user to perform this type of reinstall. Nortel recommends this method, which copies the .iso version of the software onto a CD-ROM and boots from it. This reinstall method removes the current configuration and reimages the Firewall.
Getting help over the telephone from a Nortel Solutions Center If you do not find the information you require on the Nortel Technical Support web site, you can get help over the telephone from a Nortel Solutions Center. You must have a Nortel support contract to use the Nortel Solutions Center.
Using an Express Routing Code to get help from a specialist You can find Express Routing Codes (ERC) for many Nortel products and services on the Nortel Technical Support web site. ERCs allow you to connect directly to service and support organizations based on specific products or services.