Enterasys ANG-3000, ANG-7000, RiverMaster Release Notes

Introduction
This document provides up-to-date information on Version 3.5 of the RiverMaster management application. For complete information on RiverMaster, refer to the RiverMaster Administrator’s Guide. If there are discrepancies between the information in that document and these Release Notes, follow the information in these Releas e Notes.
This document covers the following topics:
Release Notes
RiverMaster™ Version 3.5
! Installing the RiverMas t er application ! Starting RiverMaster for the first time ! Removing RiverMaster software ! Known issues with this release ! Resolved issues since the last release ! Where to find more information on RiverMaster software ! Contacting Enterasys Networks
This information is also available as a text-only README file that can be viewed at the end of the installation process or accessed in the RiverMaster program files directory (default location is C:\Program Files\Indus River Networks\RiverMaster).
AVN-RMRN-R312 Page 1 of 18
Release Notes Installing the RiverMaster Application
RiverMaster™ Ve rsion 3.5
Installing the RiverMaster Application
To install the RiverMa ster application on your computer, review the information below and carefully follow the instructions provided. If you wish to un-install RiverMaster software at any time, refer to the instructions under “Removing the Software” on page 8.
System Requirements
Hardware Requirements
RiverMaster runs on a desktop or laptop computer equipped with the following:
! A 233 MHz processor or faster ! 64 MB RAM minimum, 128 MB recommended ! 80 MB free disk space ! CD ROM drive ! Ethernet network interface
NOTE
To best view the RiverMaster in terface, set your monitor to display 65536 colors or better at 1024 x 768 resolution.
Software Requirements
The following applications and protocols must be installed an d configured before you install RiverMaster software:
! Wi ndows NT 4.0 Workstation or Ser ver upgraded with Service Pack 4
(SP4) or later
! TCP/IP protocol ! T o use Aur orean W ebConfig, the Web-based management application
for the ANG: Internet Explorer 5 or Netscape 4
Page 2 of 18 AVN-RMRN-R312
Release Notes Installing the RiverMaster Application
RiverMaster™ Ve rsion 3.5
Installation Steps
Before install i ng RiverMaster, close any applications y ou have running . Once the installation is complete, you must restart the computer before you can use RiverMaster to manage Aurorean Virtual Network systems.
NOTE
You must log into your Windows NT Workstation computer using an account with administrator privileges before installing RiverM aster. Without administrator privileges, some files may not install properly and you may be prevented from using some RiverMaster features.
To install RiverMaster on your computer, perform the following steps:
NOTE
These instructions assume you are installing RiverMaster for the first time. Do not re-install RiverMaster over a previous version. Remove the older version of RiverMaster as described in Removing the Software on page 8 and then install the new version as described below.
1 Put the Aurorean System Software CD into the CD ROM drive. 2 On your desktop, open Windows NT Explorer, go to the RiverMaster
directory on this CD and run the SETUP.EXE program.
3 If a warning message appears indicating that Microsoft ODBC is not
present on your computer, click OK to install Microsoft ODBC. If this message does not appear, continue with the next step.
The Microsoft ODBC text driver must be installed on your computer in order for RiverMaster to generate reports. RiverMaster Setup automatically launches the Microsoft ODBC install program; follow the instructions shown on screen. When asked, choose the Typical ODBC installation . After ODBC is installed, RiverMaster Setup automatically resumes .
Page 3 of 18 AVN-RMRN-R312
Release Notes Installing the RiverMaster Application
RiverMaster™ Ve rsion 3.5
4 When the Welcome window appears, click Next to continue.
To halt the installa tion and exit the Setup program, click Cancel; this option is also available on all Setup windows that follow.
5 When the Software License Agreement window appears, carefully
read the agreement and click Yes to accept the terms.
To install RiverMaster, you must accept the agreement. If you click No to decline the agreement, the Setup program will close.
6 On the Choose Destination Location window, select where you want
the RiverMaster files stored on the computer and click Next.
By default, RiverMaster files are stored in C:\Program Files \Indus River Networks\RiverMaster. To change the folder,
click Browse to select an existing folder or create a new folder.
7 When the Select Program Folder window appears, assign a name to
the RiverMaster program folder and click Next.
As a default, the Setup program creates an Indus River Networks folder that appears in the Programs menu.
8 When the Start Copying Files window appears, click Next to continue
the installation or click Back to review your selections.
9 An Information window appears regarding the installation of Adobe
Acrobat Reader to read RiverMaster documentation. Click OK.
Acrobat Reader can be found in the 3rd Party Support Software directory on this CD or at the Adobe Website (www.adobe.com).
10 When the Setup Complete window appears, do one of the following:
To view the README file immediately, leave the check box
checked and click Finish. The README file contains the same contents as these Release Notes.
To wait until later to view the README file, remove the check
from the check box and click Finish.
11 At the second Setup Complete window, choose Yes to restart your
computer and click Finish.
When the restart completes, you can launch RiverMaster by clicking Start, pointing to Programs, and then clicking Indus River Networks. In the Indus River Networks program group click RiverMaster to launch the application.
Page 4 of 18 AVN-RMRN-R312
Release Notes Starting the Application for the First Time
RiverMaster™ Ve rsion 3.5
Starting the Application for the Fir st Time
When you start the RiverMaster applicatio n f or the first time, you are asked for the following information:
! An IP address assigned to the Aurorean Policy Server(s) (APS). ! The Aurorean Virtual Netw ork name that you entered when you
installed system so ftware on the APS.
! A user name and password to log into RiverMaster (the defaults are
user netadmin and password netadmin).
To start the RiverMaster a pplication perform the following steps:
1 On the main Windows NT desktop, double-click the RiverMaster icon.
Alternatively, you can click the Start button, point to Programs, point to Indus River Networks, and then click RiverMaster. In the RiverMaster program group, click RiverMaster to launch the application. After a few seconds , the Identify Your Aurorean Virtual Network Environment window appears as shown in Figure 1.
Page 5 of 18 AVN-RMRN-R312
Figure 1 First-Time Setup Information
Release Notes Starting the Application for the First Time
RiverMaster™ Ve rsion 3.5
2 In the Aurorean VPN Name field, type a collective name that will be
shared by all Aurorean devices on your corporate network.
This name is set using the Aurorean configuration wizard program; refer to the Aurorean Installation & Service Guide for more informatio n.
3 Do one of the following:
If you are configuring only one Aurorean Policy Server, enter the
IP address assigned to it in the Primary fields and cl ick OK. The RiverMaster Login windo w will appear as shown in Figure 3 with the Aurorean VPN Name, APS name and IP address displayed as you specified earlier. Skip to Step 5.
If, in addition to configuring a Primary APS, you have installed a
backup APS to use with the Auto Link Recovery feature, supply this IP address in the Secondary fields after entering an IP address of the Primary APS in the fields provided. Click OK. The Select APS window will appear as shown in Figure 2.
IP addresses are set using the Aurorean configuration wizard program; refer to the instructions supplied with this program for more information. RiverMaster needs this IP address to locate and synchronize with the Aurorean Policy Server.
4 If you entered both APS IP addresses, select the APS you want to log
into and click OK.
The RiverMaster Login window appears as shown in Figure 3 with the Aurorean VPN name displayed as typed in the Identify your Aurorean Virtual NetworkEnvironment window.
Page 6 of 18 AVN-RMRN-R312
Figure 2 Select APS Window
Release Notes Starting the Application for the First Time
RiverMaster™ Ve rsion 3.5
5 Type the default user name (netadmin) and password (netadmin)
and click OK.
As an example, the primary APS name and its IP address is displayed in the RiverMaster Login window in Figure 3.
Figure 3 RiverMaster Login Window
NOTE
To prevent unauthorized RiverMaster access, Enterasys Networks recommends that you immediately create a new administrator account and delete the default login account. Refer to the RiverMaster Administrators Guide for instructions.
When you start RiverMaster, the application immediately tries to detect and communicate with the Aurorean Policy Server and Network Gateway located within the same corporate network. Refer to the RiverMaster Administrators Guide for complete instructions on m an aging your Aurorean Virtual Network.
Page 7 of 18 AVN-RMRN-R312
Release Notes Removing the Software
RiverMaster™ Ve rsion 3.5
Removing the Software
After RiverMaster files are removed from your computer, you should restart the computer to clean up any files that were in use during the uninstall. To remove RiverMaster files from your computer, perform the following steps:
1 On the desktop, click the Start button, point to Settings, and click
Control Panel.
2 Double-click on Add/Remove Programs to launch the utility. 3 On the Install/Uninstall tab page, select RiverMaster from the list of
programs and click Add/Remove.
4 When the Confirm File Deletion window appears, click Yes to confirm
that you want to remove RiverMaster.
Clicking Yes launches the UnInstallShield program, which manages the process of deleting the RiverMaster files.
5 When Remove Shared File? windows appear for shared .DLL and
.OCX files, click Yes To All and Yes again to confirm your decision.
6 When the Remove Programs From Your Computer window appears
with all items checked, click OK.
7 When a window displays indicating RiverMaster has been removed,
click OK to accept the message but do not restart your computer.
Although the Add/Remove Programs utility removes most Aurorean files, you must manually d e lete the contents of the C:Program Files\Indus River Networks\RiverMaster folder on y our hard drive. Do this bef ore restartin g your computer.
8 Close the Add/Remove Programs control panel. 9 Open the Windows NT Explorer by clicking the Start button, pointing
to Programs, and then clicking Windows NT Explorer.
10 Locate the RiverMaster program folder.
The default location for this folder is C:\Program Files\Indus River Networks.
11 Delete the RiverMaster folder. 12 Restart your computer.
Page 8 of 18 AVN-RMRN-R312
Release Notes Known Issues with this Release
RiverMaster™ Ve rsion 3.5
Known Issues with this Release
The following issues have been observed since the last release:
RiverMaster Log Fails to Note Client Kit Building Error
When lack of disk space on the RiverMaster computer causes a new client kit build to fail, a Packet Creation Failed message displays with an error number but this error condition is not recorded in the log file. You should report the error number to Customer Support. Bug # 2425.
RiverMaster Missing Option to Set Tracing on the ANG
Setting tracing on the ANG Tunnel Management Service is not an option in RiverMaster but you may do so with the CLI command ./irctrace. For more information, refer to the Application Note: ANG Configuration U sing the Command Line Interface. Bug # 3452.
L2TP Tunnels Not Included in Total User Count
RiverMaster does not include L2TP tunnels in its total user count of logged in session on the main p age although other tunnel types such as ezipsec and IRPP are counted. You may run the ircTunnel command on t he ANG s CLI. For more information, refer to the Application Note: ANG Configuration Using the Command Line Interface. Bug # 3598.
Floppy Configuration Tool Does Not Save ANG Configuration
Since IPSec default values were removed from the APS database, Floppy Configuration does not run correctly. To set these defaults, you must run the ipsecDefault script using the CLI on the remote ANG receiving the configuration via a floppy disk.
CAUTION
This script first erases all IPSec configuration settings and then reloads it with the factory default. Any configurations you added earlier are lost. As a precaution against inadvertent use of the command, the script interactively prompts you to confirm that you intend to erase and then restore the initial IPSec configuration.
Page 9 of 18 AVN-RMRN-R312
Release Notes Known Issues with this Release
RiverMaster™ Ve rsion 3.5
To issue the ipsecDefault command, perform the following:
1 Log into the ANG-3000/7000 with the login and password netadmin
(default) and press
ENTER.
2 Load the floppy disk in the ANG-3000/7000’s floppy disk drive. 3 Reboot the ANG-3000/7000.
The ANG copies the configuration file to it s hard drive.
4 At the command prompt, change directory to usr/indus/ipsec. 5 Type ipsecDefault and press
ENTER.
6 Reboot the ANG-3000/7000.
Upon completing the reboot, the ANG will resume norma l tunnel operation.
For more information, refer to the Application Note: ANG Configuration Using the Command Line Interface. Bu g # 3671 :
EAP Authentication for PPTP Controlled in L2TP Window
The EAP authentication protocol is supported by PPTP and L2TP but is controlled from the L2TP configuration tab on RiverMaster. The use of EAP in PPTP is controlled by the EAP radio button under L2TP. Bug # 3675.
RiverMaster Not Supported on Windows 2000 Platforms
Due to an OCX controls issue, RiverMaster Version 3.1 is not supported on computers running t he Windows 2000 operating system.
Page 10 of 18 AVN-RMRN-R312
Release Notes Known Issues with this Release
RiverMaster™ Ve rsion 3.5
Do Not Run Multiple RiverMaster Sessions Concurrently with the Same APS
Multiple RiverMaster sessions should not be run concurrently with the same Aurorean Policy Server. Operating RiverMaster under these conditions could adversely affect the performance of the ap plication and servers as well as produce inaccurate reports. If you want to access an APS through separate RiverMaster sessions, logout of one RiverMaster session before starting another.
Restart RiverMaster after ANG Reboots
Because the Tunnel Statistics window in RiverMaster does not properly display tunnel users f ollowing an ANG reboot, Rive rMaster must be shut down and restarted in order to re-synchronize the program with the ANG. Upon restarting RiverMaster, all new tunnel sessions are visible.
Match Aurorean VPN and Destination Names
The Aurorean VPN Name, which is entered at installation time and displayed under Network devices in the Configuration pullout, must match the Destination name. Do not attempt to change the Destination n ame.
Resynchronizing with the APS After Changing IP Addresses
When you start RiverMaster for the first time, you are asked to enter a name to describe your Aurorean VPN Name and the IP address assigned to the Aurorean Policy Server. This step lets RiverMaster find and synchronize with the APS on your network. If you set an incorrect IP address or change the IP address on the APS, you must perform the fol lowing steps:
1 Close the RiverMaster application if it is currently running. 2 On the RiverMaster PC, use the Windows NT Explorer to access the
directory containing the RiverMaster application (by default this directory is C:\Program Files\Indus River Networks \RiverMaster).
3 Delete the CONFIG.IRX file. 4 Close Windows NT Explorer and restart the RiverMaster application.
Page 11 of 18 AVN-RMRN-R312
Known Issues with this Release Release Notes
RiverMaster™ Version 3.5
5 In the Identify Your Aurorean Environment window, retype the name
you gave your Aurorean Virtual Network, enter the new Aurorean Policy Server IP address, and click OK.
RiverMaster can now locate and synchronize with the Aurorean Policy Server.
DNS/WINS IP Address Required for Windows NT Clients
Windows NT users will not be able to connect unless IP addresses for both primary and secondary DNS and WINS servers are specified. These values are required even though you may not have a WINS/DNS primary or secondary server installed on your network. If, for example, you have only a primary DNS installe d , specify the IP address of that server as the value for other primary and secondary DNS/WINS servers. The IP addresses are entered in the DNS and WINS tabs of the Configuration pullout . Refer to the RiverMaster Adm i nistrators Guide for more detailed information.
File Used by Advanced Reports Must Not Be Deleted
The schema.ini file located in the Indus River Networks/ RiverMaster/Reports/Data directory used by RiverMaster to specify
the format of the report file and must not be deleted. If you want to produce a report on old data files, you must run the conv_old_reports.pl perl script found on the Enterasys System Software CD ROM. Old format text files are saved in the Data/Save_Reports directory. The script must be run on the Aurorean Policy Server, not the RiverMaster computer.
To run this script on the APS, type: perl conv_old_reports.pl Be aware that if the APS was installed an ywhere but in the default directory,
the conversion script command is instead: perl conv_old_reports.pl <your
installation directory>
AVN-RMRN-R312 Page 12 of 18
Release Notes Known Issues with this Release
RiverMaster™ Ve rsion 3.5
IKE Site-to-Site T unnels t o an ANG/APS Must Be Initia ted by a Remote ANG
Internet Key Exchange (IKE) tunnels built between a Local Aurorean Network Gateway and a Remote ANG (site-to-site configuration) must be initiated by the Remote ANG when the Local ANG consists of an ANG/APS pair. An IKE site-to-site tunnel originating from a Remote ANG connectin g another standalone (Local) ANG is permitted , however.
IPSec/IKE Authentication Unavailable on Paired APS/ANGs
Due to a potential security risk in communi c ations between an APS and ANG, an APS/ANG pair can not initiate an IKE security association with another APS/ANG pair. Only IRPP authentication is available in this configuration as set on RiverMaster, not IPSec/IKE.
RIPv2 Works Improperl y if Export Routes Disabled
If you have configured RIP v.2 to import routes only, the protocol will not work correctly on the ANG due to the failure of GATED to join the RIPv2 multicast group (224.0.0.9). This problem can be remedied by taking one of the following actions:
! Create a static route on the ANG Trusted interface ! Use RIPv1 only
Refer to the RiverMaster Administrators Guide for more information.
TeeChart Error after Installation Requires Printer Reinstall
While opening RiverMaster for the first time f ollowing installation, if your RiverMaster computer displays an Error 317 message referencing the TeeChart.ocx file, perform the following steps:
1 Check to see if there is a printer defined on the RiverMaster computer
by double-clicking the My Computer icon on your desktop.
2 Click the Printers icon.
Page 13 of 18 AVN-RMRN-R312
Known Issues with this Release Release Notes
RiverMaster™ Version 3.5
3 If there is an installed printer present, right-click on that printer icon
and click Delete.
4 Open RiverMaster. 5 From the Printers folder on your desktop, reinstall the printer just
deleted by clicking Add Printer and follow the prompts.
Disable IPComp Between Aurorean and Cisco Routers
Aurorean does not interoperate with Cisco routers with IPSec and IKE when IPComp (IP Compression Protocol) is enabled . IP Comp data compression must not be enabled between Aurorean and Cisco routers due to an unresolved incompatibility.
Virtual/Physical IP Address Incor rectly Reported at Logout
The Message Viewer entry (TBUserLoggedOut) displaying a users virtual or physical IP Address at logout reports erroneous values. You can obtain the correct value by performing the following steps:
1 On your desktop, click Start, select Programs and Accessories, and
double-click Cal cu lato r.
The expanded calculator appears.
2 Click View and Scientific. 3 With the Dec(imal) radio button selected, type the numeral displayed
as the physical or virtual IP address in the open calculator field.
For example, type the numeral: 636252625.
4 Select the Hex(adecimal) radio button.
The IP address now appears in hex format. For example, the hex value 25EC71D1 appears.
AVN-RMRN-R312 Page 14 of 18
Release Notes Resolved Issues Since the Last Release
RiverMaster™ Ve rsion 3.5
NOTE
Only seven hexadecimal digits ma y d isplay. In this case, convert the left-most single digit to the decimal format.
5 St arting from the right, convert each pair of hex digits back to decimal
format.
For example, D1 converts to 209, 71 to 113, EC to 236, and 25 to 37.
6 Put the values together in standard IP address format.
For example: 209.113.236.37.
Resolved Issues Since the Last Release
The following issues have been resolved since the release of 3.1:
! Termination message for Firewall Traversal disconnection incorrectly
displays USER_ERROR. Bug #3190.
! Authentication service goes deaf using AC E RADIUS. Bug #3192. ! Authorization service displa ys Dr. Watson message. Bug #3261. ! Accounting records have missing data. Bug #3200.
More Information on RiverMaster Software
Enterasys Networks provides a comprehensive set of documentation for RiverMaster software. For quick access to key inform ation and the greatest degree of portability, this documentation comes in these forms:
! Printed manual ! Adobe® Acrobat® Reader Portable Document Format (PDF) files
Printed Document
The RiverMaster Administrato rs Guide is shipped with RiverMaster software.
Page 15 of 18 AVN-RMRN-R312
More Information on RiverMaster Software Release Notes
RiverMaster™ Version 3.5
Acrobat PDF Files
Each printed document is available as a PDF file on the Aurorean System Software CD ROM. You can use Acrobat Reader, which is included in the
3rd Party Support Software direct ory on the CD ROM or can be installed automatically on your PC as an option of th e Aurorean Virt ual Network installation program, to view this m an ual on your PC. If you chose not to load Acrobat Reader during RiverMaster installati on, you can install it later. Use the table of contents and index as hot links” to quickly locate the information you need (a “Find” utility is also available to search on a keyword).
The RiverMaster Administrato rs Guide is stored in the Manuals directory of the CD ROM. When you install the RiverMaster sof tware, you have the option to copy this file (adminguide.pdf) to the same directory as the RiverMaster application in C:\Program Files\ Indus River Networks\RiverMaster.
All Documentation
NOTE
All Aurorean documentation can be found at the following URL link: http://www.enterasys.com/support/manuals
AVN-RMRN-R312 Page 16 of 18
Release Notes Contacting Enterasys Networks
RiverMaster™ Ve rsion 3.5
Contacting Enterasys Networks
For general information on Enterasys Networks products, access the companys Web site at www.enterasys.com or write/call the co mpany at:
Enterasys Networks 35 Industrial Way Rochester, NH 03866 Phone: (877)-641-7400
To reach an Enterasys Networks Sales representative, call 1 (877) 641-7400, or send E-mail to www.enterasys.com. Please include your name, title, company, and phone number in all E-mail correspondence, and indicate which Enterasys Networks products you wish to be contacted about.
For answers to technical questions about RiverMaster, you can send E-mail to support@enterasys.com. Include your name, title, company, and phone number in all correspondence. Enterasys Networks customer support personnel are also available by calling 1 (800) 872-8440.
Please call from a position wher e you can operate your RiverMaster computer and make sure you have the follo wing information ready:
! A list of the alarm and alert messages appearing in the RiverMaster
message viewer
! Details about any recent configuration cha nges, if applicable
Enterasys Networks also recommends that you have your copy of the RiverMaster Administrators Guide on hand when you call.
Page 17 of 18 AVN-RMRN-R312
Contacting Entera sys Networks Release Notes
RiverMaster™ Version 3.5
RiverMaster Version 3.12 ©2001 Enterasys Networks. All rights reserved. This publication contains information that is the property of Enterasys Networks. Information in this publication is subject to change without notice. Enterasys Networks assumes no responsibility for errors or omissions in this publication or for the use of this material.
RiverMaster software may not be copied, except as otherwise provided in your software license o r as expressly permitted in writing by Enterasys Networks.
The Enterasys Networks logo, Auto Link Recovery, Prescriptive Diagnostics Engine, RiverMaster, Aurorean, and TollSaver are trademarks of En t e rasys Networks.
Microsoft, MS, and MS-D OS are registered trad e ma rks an d Windows, Windows 95, Windows 98, Windows NT, Windows 2000 Professional and Windows Millen n ium are trad emarks of Microsoft Corporation in the USA an d other countries.
Virtual Network Computing is a trademark of AT & T Laborator ies Camb ri dge. Other trademarks, trade names, and copyrights used in this publication belong to their respective
owners. Part No: AVN-RMRN-R312
AVN-RMRN-R312 Page 18 of 18
Loading...