Nauticars 5.5R New Features - Bay Networks NauticaRS Release Note

NauticaRS 5.5R Release Notes

NauticaRS 5.5R New Features

1-2
The following is a list of the new features available in
NauticaRS 5.5R. More information on most of these features is
presented in Chapter 2.
Caution: IPsec is only available when purchased specifically
from your supplier. It is not included in the standard software
images or from the internet.
• IPsec has been implemented as a new path type on the
platforms that support it. IPsec tunnels are added in the same
way as new paths to the router using the path ipsec/pathname
BCC command or the Nautica Wizard. Unlike other paths,
the name of an IPsec path is simply to allow the user to
identify this particular tunnel and plays no part in tunnel
negotiation. IPsec tunnels do not show on the show paths list
when up, but appear instead on the show tunnels command.
IPsec paths can be cancelled using the cancel pathname
command.
Compatible with Contivity 2.0 and NauticaRS 13.10,
integrated IPSec provides confidentiality (encryption),
integrity and authentication services to IP traffic at Layer 3.
The major features included are:
• Encryption using tunnel mode ESP with 56-bit
DES-CBC
• Authentication and integrity using tunnel mode ESP
with HMAC MD5 or HMAC SHA1
• ISAKMP/IKE key exchange protocol
• Manual key management for compatibility with BayRS
13.10 (IPsec phase1)
• A new BCC command 'SHOW TUNNELS' has been added
to display the logical tunnels that currently exist, together
with some information about them, e.g. how long they have
been in existance, what encryption is being used, etc.
show tunnels
119781-F Rev.00