User`s guide

Page 4 of 30 Rel. 3.5 Release Notes
Upgrading to Aurorean Release 3.5 Release Notes
Release 3.5 Enhanced Support for VPN Clients
! If EAP and MS-Chap are both enabled then the ANG unconditionally will
prefer EAP over MS-Chap. It will request EAP authentication and then allow
the client to alternately select MS-Chap if it so chooses.
Upgrading to Aurorean Release 3.5
Upgrading your Aurorean software involves installing new certificates and
upgrading to IE version 5.5 to ensure smooth and secure communications with a
Microsoft XP VPN client. Invoking the ipsecDefault command on the ANG-
3000/7000’s Command Line Interface will prepare that device for the proper
IKE/IPSec (PKI), L2TP configuration. Lastly, setting up L2TP, EAP, and RADIUS
authentication is easy via the RiverMaster management application.
As with any major upgrade, Release 3.5 requires that you first install new software on
the APS-3000/7000, a new LINUX kernel and new software on the ANG-3000/7000,
and new software on your RiverMaster computer. Step-by-step upgrade instructions
are provided in the Installation & Service Guide which is included in a PDF-formatted
document on the Aurorean 3.5 CD ROM in the Aurorean 3.5 System
Software/Manuals directory or on the Web at the following URL:
http://www.enterasys.com/support/manuals
NOTE
Upgrade requirements for IE v5.5, LINUX kernel, ANG, APS and RiverMaster
software apply only if you have Aurorean system software lower than Rel. 3.5. If
you have new Aurorean Rel. 3.5 equipment, these upgrades are unnecessary.
To implement the application enhancements of Aurorean Release 3.5 you must
perform the following steps in order:
! Install new APS, LINUX kernel and ANG software: see the Installation &
Service Guide
! Install new RiverMaster software: see the RiverMaster Administrator’s Guide
! Install and update to Internet Explorer version 5.5 on the APS-3000/7000
! Delete all existing trusted root certificates on the Internet Explorer browser of
the APS-3000/7000
! Issue the ipsecDefault command on the ANG-3000/7000
! Enroll a digital certificate on the APS-3000/7000
! Configure L2TP and EAP protocols with RiverMaster: see the RiverMaster
Administrator’s Guide
! Configure the Microsoft RADIUS Plugin on your APS-3000/7000
The filepaths for software module upgrades are located on the CD ROM as follows:
! 3rd Party Support Software/Linux/Kernel/
Linux-2.2.16-2.i386.rpm