These release notes are for OpenROUTE 3.1.2 software. They cover the following topics:
New Software Functionality
Corrected Problems
Known Deficiencies, Limitations, and/or Clarifications
1.0 New Software Functionality
This section covers the new software features in OpenROUTE 3.1.x.
1.1 Virtual Private Networks
OpenROUTE 3.1 adds Virtual Private Network (VPN) functionality to the OpenROUTE software.
VPNs securely connect sites over a public network, such as the Internet. VPNs provide data encryption to guarantee the privacy of information while it passes over the public network. They also provide authentication to make sure traffic is not forged or tampered with.
With VPNs, remote offices, telecommuters, and travelling employees can connect to corporate networks over the public Internet at a greatly reduced cost over private, point-to-point leased lines, long-distance dialup connections, or Frame Relay connections.
The OpenROUTE Networks VPN implementation uses IP Tunnels to transport data and SKIP (Simple Key-Management for Internet Protocols) to secure the data.
1.1.1 Dial on Demand for VPNs
Prior to OpenROUTE 3.1.2, dial on demand for VPNs was implemented in the SKIP configuration using the set idle command. The set idle command caused the router to close a session if a session was inactive for a specified amount of time. However, the router applied the idle time only to SKIP sessions where the router did not know the IP address of the remote tunnel endpoint.
In OpenROUTE 3.1.2, this feature is moved to the Circuit configuration. Also, the idle time now applies to IP Tunnels regardless of whether SKIP is enabled or whether the router knows the IP address of the remote tunnel endpoint.
By default, IP Tunnel interfaces dial on demand and disconnect if there is no traffic for 120 seconds. To adjust the time after which the tunnel connection idles out or to set up the tunnel to always remain connected, use the set idle command. Zero (0) causes the connection to remain established indefinitely.
Circuit Config <NET-5> set idle
Idle timer (seconds, 0 means always active) [120]?
SKIP NET-6>list receive parameters Received Packet Parameters
Destination Master Bulk Auth Comp Drop
Algorithm Algorithm Algorithm Algorithm Unsigned
misty DES-CBC DES-CBC MD5 STAC-LZS NO
Config>network 1
Circuit Configuration
Circuit Config <NET-1> bri
Basic Rate ISDN user configuration
BRI Config <NET-1> set dn0
Enter DN0 (Directory-Number-0) []? :54
Note: Directory number 0 (DN0) only has a subaddress component which, in this example, is 54.