Security; Vpn; Qos; Dial-Up - 3Com Router 3012 Release Note

R E L E A S E N O T E S

2.8. Security

Symptom
ACL match counts are not logged.
If you are using automatic matching order with
ACLs, a rule that is similar to an existing rule,
even if they have different qualifiers, is not
added as a separate rule.
IPSec in transport mode will transmit transit
traffic with no security headers. IPSec in
transport mode is designed for direct
communications between two peers running
IPSec.
IPSec nesting is not supported in this release.
The Encryption card status message,
Order: Not consistent with host
can be misleading.
Only one security association is used for each
ACL-incompatible with per-rule implementation.

2.9. VPN

Symptom
The basic version of this release does not
support GRE or L2TP.

2.10. QoS

Symptom
NBX Layer 2 traffic cannot be classified for
QoS.

2.11. Dial-Up

Symptom
The ppp chap user command is not supported
in dialer interfaces.
F O R T H E R O U T E R
V 1 . 1 0
Byte
,
3 0 0 0 A N D R O U T E R
Solution
ACL match counting is only supported with the
firewall feature.
Remove the existing rule before applying the
new rule.
Use Tunnel mode if you are configuring the
router to be an IPSec gateway.
IPSec nesting is not supported in this release.
Disregard this status message.
Create one separate ACL for each permit
statement in the third-party access list.
Solution
Use the extended version of this release for
GRE and L2TP tunneling support.
Solution
Use Layer 3 prioritization.
Solution
When using Resource DCC and using chap
authentication, ppp chap user should be
configured only on the router that is dialing out.
5 0 0 0 S E R I E S
7