Sun Microsystems N1216V, N1216, N1400, N2040, N2120 Release Notes

...

Sun Microsystems, Inc. www.sun.com

Submit comments about this document at: http://www.sun.com/hwdocs/feedback

Sun™Secure Application Switch—

Release Notes for v3.2.1

Part No. 819-6643-12 August 2007, Revision A

Please

Recycle

Copyright 2007Sun Microsystems, Inc.,4150 NetworkCircle, SantaClara, California95054, U.S.A.All rightsreserved. Sun Microsystems, Inc.has intellectualproperty rightsrelating to technology embodied in the product that is described in this document. In

particular,and withoutlimitation, theseintellectual property rightsmay includeone ormore of the U.S. patents listed at http://www.sun.com/patents andone ormore additionalpatents or pending patentapplications in the U.S. and in other countries.

U.S. GovernmentRights -Commercial software. Government users aresubject tothe SunMicrosystems, Inc.standard license agreementand applicable provisions ofthe FAR and its supplements.

This distributionmay includematerials developedby third parties. Regular expression supportis providedby thePCRE librarypackage, whichis opensource software, written by Philip Hazel, and copyright by

the Universityof Cambridge,England -ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre. Parts ofthe product maybe derivedfrom BerkeleyBSD systems,licensed from theUniversity ofCalifornia. UNIXis aregistered trademark in

the U.S.and inother countries,exclusively licensedthrough X/Open Company, Ltd. Sun, SunMicrosystems and the Sun logo are trademarks or registeredtrademarks ofSun Microsystems, Inc.in theU.S. andother countries. Products covered by and information contained in this service manual arecontrolled byU.S. ExportControl laws and may be subject to the

export orimport lawsin othercountries. Nuclear, missile, chemical biological weapons or nuclearmaritime enduses orend users,whether direct or indirect, are strictlyprohibited. Exportor reexport tocountries subjectto U.S.embargo or to entities identiﬁed onU.S. exportexclusion lists, including,but notlimited to,the deniedpersons andspecially designatednationals listsis strictlyprohibited.

DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANYIMPLIED WARRANTY OF MERCHANTABILITY, FITNESSFOR A PARTICULAR PURPOSEOR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID.

Copyright 2007Sun Microsystems, Inc.,4150 NetworkCircle, SantaClara, Californie95054, Etats-Unis.Tous droits réservés. Sun Microsystems, Inc.détient lesdroits depropriété intellectuels relatifs à la technologie incorporée dans le produit quiest décritdans ce

document. Enparticulier,et cesans limitation,ces droits depropriété intellectuelle peuvent inclure un ou plus des brevetsaméricains listésà l’adresse http://www.sun.com/patentset unou lesbrevets supplémentaires oules applicationsde brevet enattente auxEtats -Unis etdans les autres pays.

Cette distributionpeut comprendre descomposants développéspar destierces parties. Des partiesde ceproduit pourront êtredérivées dessystèmes BerkeleyBSD licenciéspar l'Universitéde Californie.UNIX estune marque

déposée auxEtats-Unis etdans d'autres payset licenciéeexclusivement parX/Open Company,Ltd. Sun, SunMicrosystems et le logo Sun sont des marques de fabrique ou des marquesdéposées deSun Microsystems,Inc. auxEtats-Unis etdans

d'autres pays. Les produits quifont l'objetde cemanuel d'entretienet lesinformations qu'ilcontient sontregis par la legislation americaine en matiere de

controle des exportations et peuvent etre soumis au droitd'autres paysdans ledomaine desexportations etimportations. Lesutilisations ﬁnales, ouutilisateurs ﬁnaux,pour desarmes nucleaires, desmissiles, desarmes biologiqueset chimiquesou dunucleaire maritime, directement ou indirectement, sont strictement interdites. Lesexportations oureexportations versdes payssous embargo desEtats-Unis, ou vers desentites ﬁgurantsur leslistes d'exclusiond'exportation americaines,y compris,mais demaniere non exclusive, la liste de personnes qui font objetd'un ordre dene pasparticiper,d'une facondirecte ou indirecte,aux exportationsdes produitsou desservices quisont regi parla legislation americaineen matiere decontrole desexportations etla listede ressortissants speciﬁquementdesignes, sontrigoureusement interdites.

LA DOCUMENTATION EST FOURNIE "EN L'ETAT"ET TOUTES AUTRESCONDITIONS, DECLARATIONS ET GARANTIES EXPRESSES OU TACITESSONT FORMELLEMENTEXCLUES, DANSLA MESUREAUTORISEE PARLA LOIAPPLICABLE, Y COMPRIS NOTAMMENT TOUTE GARANTIE IMPLICITE RELATIVE A LA QUALITE MARCHANDE, A L'APTITUDE A UNE UTILISATIONPARTICULIERE OUA L'ABSENCE DECONTREFACON.

iii

Contents

Product Web Page 1

Related Documentation 2

How to Obtain Updates From Sun 2

Contacting Sun Technical Support 3

Sun Welcomes Your Comments 3

New Features in This Release 3

Configuration Synchronization 4

Behavior Change: Show runningConfig saveToFile Command 4

Behavior Change: Show switchservices chassis cpuLoad Command 4

Behavior Change: Default vRouter for Virtual Services 4

Long-Lived Sessions 4

SNAT Active Standby Behavior in Redundant Configuration 5

Outgoing DNAT IP Address Is the Same as Virtual Service IP Address 5

Auto Dump 5

Supported Hardware 5

Transceivers 6

Software Information 6

Migrating From Software Version 2.0 to Version 3.2.1 7

Archiving a Version 2.0 Configuration 7

iv Sun Secure Application Switch – Release Notes for v3.2.1 • August 2007

Installing Version 3.2.1 Software 8

Importing a Version 2.0 Configuration 8

Migrating From Software Version 3.0 or 3.1 to Version 3.2.1 13

Configuration Modification 13

Installing Version 3.2.1 Software 14

Importing a Version 3.0 or 3.1 Configuration 15

System Management 16

Command-line Interface (CLI) 17

Web Interface 17

SNMP 17

Supported Operating Systems and Web Browsers 18

Operating Systems and Web Browsers 18

Flash Software 18

Known Issues With This Release 19

ACLs 19

ARP 19

Configuration 20

Firewall Load Balancing 20

FTP 20

Health Checks 20

Load Balancing 21

Ports 21

RealService 21

Routing 22

Traceroute and InterRealm Routing (IRR) 22

Web Interface 22

Configuration Scaling 23

Management 23

Contents v

Virtualization 23

L2 to L3 Scale 23

Load Balance Configuration 24

Documentation Updates 24

Configuration and Implementation Guide and Getting Started Guides (Translated

Versions) 25

vi Sun Secure Application Switch – Release Notes for v3.2.1 • August 2007

vii

Regulatory Compliance Statements

Your Sun product is marked to indicate its compliance class:

• Federal Communications Commission (FCC) — USA

• Industry Canada Equipment Standard for Digital Equipment (ICES-003) — Canada

• Voluntary Control Council for Interference (VCCI) — Japan

• Bureau of Standards Metrology and Inspection (BSMI) — Taiwan

Please read the appropriate section that corresponds to the marking on your Sun product before attempting to install the product.

FCC Class A Notice

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

1. This device may not cause harmful interference.

2. This device must accept any interference received, including interference that may cause undesired operation.

Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case the user will be required to correct the interference at his own expense.

Modifications: Any modiﬁcations made to this device that are not approved by Sun Microsystems, Inc. may void the authority granted to the user by the FCC to operate this equipment.

ICES-003 Class A Notice - Avis NMB-003, Classe A

This Class A digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.

viii Sun Secure Application Switch – Release Notes for v3.2.1 • August 2007

BSMI Class A Notice

The following statement is applicable to products shipped to Taiwan and marked as Class A on the product compliance label.

GOST-R Certiﬁcation Mark

Declaration of Conformity

EMC

USA—FCC Class A

This equipment complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

1. This equipment may not cause harmful interference.

2. This equipment must accept any interference that may cause undesired operation.

European Union

This equipment complies with the following requirements of the EMC Directive 89/336/EEC:

As Telecommunication Network Equipment (TNE) in both Telecom Centers and Other Than Telecom Centers per (as applicable):

As Information Technology Equipment (ITE) Class A per (as applicable):

Compliance Model Number: N1216 and N1400 Product Name: Sun Secure Application Switch

N1216 (N1216, N1216V) N1400 (N1000, N1400V)

EN300-386 V.1.3.2 (2003-2005) Required Limits:

EN55022:1994+A1:1995+A2:1997 Class A EN61000-3-2:2000 Pass EN61000-3-3:1995+A1:2000 Pass IEC61000-4-2 6 kV (Direct), 8 kV (Air) IEC61000-4-3 3 V/m 80-1000 MHz, 10 V/m 800-960 MHz and 1400-

2000 MHz IEC61000-4-4 1 kV AC and DC Power Lines, 0.5 kV Signal Lines, IEC61000-4-5 2 kV AC Line-Gnd, 1 kV AC Line-Line and Outdoor

Signal Lines, 0.5 kV Indoor Signal Lines > 10m. IEC61000-4-6 3 V IEC61000-4-11 Pass

EN55022:1994+A1:1995+A2:1997 ENG6100-3-2:2000

ENG61000-3-3:1995+A1:2000

Class A Pass

Pass

EN55024:1998+A1: 2001+A2:2003

Required Limits

IEC61000-4-2 4 kV (Direct), 8 kV (Air) IEC61000-4-3 3 V/m IEC61000-4-4 1 kV AC Power Lines, 0.5 kV Signal and DC Power

Lines

IEC61000-4-5 1 kV AC Line-Line and Outdoor Signal Lines, 2 kV

AC Line-Gnd, 0.5 kV DC Power Lines

IEC61000-4-6 3 V

x Sun Secure Application Switch – Release Notes for v3.2.1 • August 2007

Safety

This equipment complies with the following requirements of the Low Voltage Directive 73/23/EEC:

Supplementary Information: This product was tested and complies with all the requirements for the CE Mark.

IEC61000-4-8 1 A/m IEC61000-4-11 Pass

EC Type Examination Certificates:

EN60950:2001 1st Edition TÜV Rheinland Certificate No. S72051919 EN60950:2001, 1st Edition CB Scheme Certificate No. US-TÜVR-2479 Evaluated to all CB Countries UL 60950:1st Edition 2001, CSA C22.2 No 60950-01-03 File: CO 72051920 01

/S/ /S/

Dennis P. Symanski DATE Manager, Compliance Engineering Sun Microsystems, Inc. 4150 Network Circle, MPK15-102 Santa Clara, CA 95054 USA Tel: 650-786-3255 Fax: 650-786-3723

Donald Cameron DATE Program Manager/Quality Systems Sun Microsystems Scotland, Limited Blackness Road, Phase I, Main Bldg Springfield, EH49 7LR Scotland, United Kingdom Tel: +44 1 506 672 539 Fax: +44 1 506 670 011