Enterasys Aurorean ANG-3000 How to use

AVN-RMRN-R312 Page 1 of 18
Release Notes
RiverMaster™ Version 3.5
Introduction
This document provides up-to-date information on Version 3.5 of the
RiverMaster management application. For complete information on
RiverMaster, refer to the RiverMaster Administrator’s Guide. If there are
discrepancies between the information in that document and these Release
Notes, follow the information in these Release Notes.
This document covers the following topics:
!Installing the RiverMaster application
!Starting RiverMaster for the first time
!Removing RiverMaster software
!Known issues with this release
!Resolved issues since the last release
!Where to find more information on RiverMaster software
!Contacting Enterasys Networks
This information is also available as a text-only README file that can be
viewed at the end of the installation process or accessed in the RiverMaster
program files directory (default location is C:\Program Files\Indus
River Networks\RiverMaster).

Release Notes Installing the RiverMaster Application
RiverMaster™ Version 3.5
Page 2 of 18 AVN-RMRN-R312
Installing the RiverMaster Application
To install the RiverMaster application on your computer, review the
information below and carefully follow the instructions provided. If you wish
to un-install RiverMaster software at any time, refer to the instructions under
“Removing the Software” on page 8.
System Requirements
Hardware Requirements
RiverMaster runs on a desktop or laptop computer equipped with the
following:
!A 233 MHz processor or faster
!64 MB RAM minimum, 128 MB recommended
!80 MB free disk space
!CD ROM drive
!Ethernet network interface
NOTE
To best view the RiverMaster interface, set your monitor to display
65536 colors or better at 1024 x 768 resolution.
Software Requirements
The following applications and protocols must be installed and configured
before you install RiverMaster software:
!Windows NT 4.0 Workstation or Server upgraded with Service Pack 4
(SP4) or later
!TCP/IP protocol
!To use Aurorean WebConfig, the Web-based management application
for the ANG: Internet Explorer 5 or Netscape 4

Release Notes Installing the RiverMaster Application
RiverMaster™ Version 3.5
Page 3 of 18 AVN-RMRN-R312
Installation Steps
Before installing RiverMaster, close any applications you have running. Once
the installation is complete, you must restart the computer before you can use
RiverMaster to manage Aurorean Virtual Network systems.
NOTE
You must log into your Windows NT Workstation computer using an
account with administrator privileges before installing RiverMaster.
Without administrator privileges, some files may not install properly and
you may be prevented from using some RiverMaster features.
To install RiverMaster on your computer, perform the following steps:
NOTE
These instructions assume you are installing RiverMaster for the first
time. Do not re-install RiverMaster over a previous version. Remove the
older version of RiverMaster as described in “Removing the Software”on
page 8 and then install the new version as described below.
1Put the Aurorean System Software CD into the CD ROM drive.
2On your desktop, open Windows NT Explorer, go to the RiverMaster
directory on this CD and run the SETUP.EXE program.
3If a warning message appears indicating that Microsoft ODBC is not
present on your computer, click OK to install Microsoft ODBC. If this
message does not appear, continue with the next step.
The Microsoft ODBC text driver must be installed on your computer
in order for RiverMaster to generate reports. RiverMaster Setup
automatically launches the Microsoft ODBC install program; follow
the instructions shown on screen. When asked, choose the Typical
ODBC installation. After ODBC is installed, RiverMaster Setup
automatically resumes.

Release Notes Installing the RiverMaster Application
RiverMaster™ Version 3.5
Page 4 of 18 AVN-RMRN-R312
4When the Welcome window appears, click Next to continue.
To halt the installation and exit the Setup program, click Cancel; this
option is also available on all Setup windows that follow.
5When the Software License Agreement window appears, carefully
read the agreement and click Yes to accept the terms.
To install RiverMaster, you must accept the agreement. If you click
No to decline the agreement, the Setup program will close.
6On the Choose Destination Location window, select where you want
the RiverMaster files stored on the computer and click Next.
By default, RiverMaster files are stored in C:\Program Files
\Indus River Networks\RiverMaster. To change the folder,
click Browse to select an existing folder or create a new folder.
7When the Select Program Folder window appears, assign a name to
the RiverMaster program folder and click Next.
As a default, the Setup program creates an Indus River Networks
folder that appears in the Programs menu.
8When the Start Copying Files window appears, click Next to continue
the installation or click Back to review your selections.
9An Information window appears regarding the installation of Adobe
Acrobat Reader to read RiverMaster documentation. Click OK.
Acrobat Reader can be found in the 3rd Party Support Software
directory on this CD or at the Adobe Website (www.adobe.com).
10 When the Setup Complete window appears, do one of the following:
–To view the README file immediately, leave the check box
checked and click Finish. The README file contains the same
contents as these Release Notes.
–To wait until later to view the README file, remove the check
from the check box and click Finish.
11 At the second Setup Complete window, choose Yes to restart your
computer and click Finish.
When the restart completes, you can launch RiverMaster by clicking Start,
pointing to Programs, and then clicking Indus River Networks. In the Indus
River Networks program group click RiverMaster to launch the application.

Release Notes Starting the Application for the First Time
RiverMaster™ Version 3.5
Page 5 of 18 AVN-RMRN-R312
Starting the Application for the First Time
When you start the RiverMaster application for the first time, you are asked
for the following information:
!An IP address assigned to the Aurorean Policy Server(s) (APS).
!The Aurorean Virtual Network name that you entered when you
installed system software on the APS.
!A user name and password to log into RiverMaster (the defaults are
user netadmin and password netadmin).
To start the RiverMaster application perform the following steps:
1On the main Windows NT desktop, double-click the RiverMaster icon.
Alternatively, you can click the Start button, point to Programs, point
to Indus River Networks, and then click RiverMaster. In the
RiverMaster program group, click RiverMaster to launch the
application. After a few seconds, the Identify Your Aurorean Virtual
Network Environment window appears as shown in Figure 1.
Figure 1 First-Time Setup Information

Release Notes Starting the Application for the First Time
RiverMaster™ Version 3.5
Page 6 of 18 AVN-RMRN-R312
2In the Aurorean VPN Name field, type a collective name that will be
shared by all Aurorean devices on your corporate network.
This name is set using the Aurorean configuration wizard program;
refer to the Aurorean Installation & Service Guide for more information.
3Do one of the following:
–If you are configuring only one Aurorean Policy Server, enter the
IP address assigned to it in the Primary fields and click OK. The
RiverMaster Login window will appear as shown in Figure 3
with the Aurorean VPN Name, APS name and IP address
displayed as you specified earlier. Skip to Step 5.
–If, in addition to configuring a Primary APS, you have installed a
backup APS to use with the Auto Link Recovery feature, supply
this IP address in the Secondary fields after entering an IP
address of the Primary APS in the fields provided. Click OK. The
Select APS window will appear as shown in Figure 2.
IP addresses are set using the Aurorean configuration wizard
program; refer to the instructions supplied with this program for
more information. RiverMaster needs this IP address to locate and
synchronize with the Aurorean Policy Server.
4If you entered both APS IP addresses, select the APS you want to log
into and click OK.
The RiverMaster Login window appears as shown in Figure 3 with
the Aurorean VPN name displayed as typed in the Identify your
Aurorean Virtual NetworkEnvironment window.
Figure 2 Select APS Window

Release Notes Starting the Application for the First Time
RiverMaster™ Version 3.5
Page 7 of 18 AVN-RMRN-R312
5Type the default user name (netadmin) and password (netadmin)
and click OK.
As an example, the primary APS name and its IP address is displayed
in the RiverMaster Login window in Figure 3.
Figure 3 RiverMaster Login Window
NOTE
To prevent unauthorized RiverMaster access, Enterasys Networks
recommends that you immediately create a new administrator account
and delete the default login account. Refer to the RiverMaster
Administrator’s Guide for instructions.
When you start RiverMaster, the application immediately tries to detect and
communicate with the Aurorean Policy Server and Network Gateway located
within the same corporate network. Refer to the RiverMaster Administrator’s
Guide for complete instructions on managing your Aurorean Virtual
Network.

Release Notes Removing the Software
RiverMaster™ Version 3.5
Page 8 of 18 AVN-RMRN-R312
Removing the Software
After RiverMaster files are removed from your computer, you should restart
the computer to clean up any files that were in use during the uninstall. To
remove RiverMaster files from your computer, perform the following steps:
1On the desktop, click the Start button, point to Settings, and click
Control Panel.
2Double-click on Add/Remove Programs to launch the utility.
3On the Install/Uninstall tab page, select RiverMaster from the list of
programs and click Add/Remove.
4When the Confirm File Deletion window appears, click Yes to confirm
that you want to remove RiverMaster.
Clicking Yes launches the UnInstallShield program, which manages
the process of deleting the RiverMaster files.
5When Remove Shared File? windows appear for shared .DLL and
.OCX files, click Yes To All and Yes again to confirm your decision.
6When the Remove Programs From Your Computer window appears
with all items checked, click OK.
7When a window displays indicating RiverMaster has been removed,
click OK to accept the message but do not restart your computer.
Although the Add/Remove Programs utility removes most Aurorean
files, you must manually delete the contents of the C:Program
Files\Indus River Networks\RiverMaster folder on your
hard drive. Do this before restarting your computer.
8Close the Add/Remove Programs control panel.
9Open the Windows NT Explorer by clicking the Start button, pointing
to Programs, and then clicking Windows NT Explorer.
10 Locate the RiverMaster program folder.
The default location for this folder is C:\Program Files\Indus
River Networks.
11 Delete the RiverMaster folder.
12 Restart your computer.

Release Notes Known Issues with this Release
RiverMaster™ Version 3.5
Page 9 of 18 AVN-RMRN-R312
Known Issues with this Release
The following issues have been observed since the last release:
RiverMaster Log Fails to Note Client Kit Building Error
When lack of disk space on the RiverMaster computer causes a new client kit
build to fail, a Packet Creation Failed message displays with an error number
but this error condition is not recorded in the log file. You should report the
error number to Customer Support. Bug # 2425.
RiverMaster Missing Option to Set Tracing on the ANG
Setting tracing on the ANG Tunnel Management Service is not an option in
RiverMaster but you may do so with the CLI command ./irctrace. For more
information, refer to the Application Note: ANG Configuration Using the
Command Line Interface. Bug # 3452.
L2TP Tunnels Not Included in Total User Count
RiverMaster does not include L2TP tunnels in its total user count of logged in
session on the main page although other tunnel types such as ezipsec and
IRPP are counted. You may run the ircTunnel command on the ANG’s CLI.
For more information, refer to the Application Note: ANG Configuration Using
the Command Line Interface. Bug # 3598.
Floppy Configuration Tool Does Not Save ANG Configuration
Since IPSec default values were removed from the APS database, Floppy
Configuration does not run correctly. To set these defaults, you must run the
ipsecDefault script using the CLI on the remote ANG receiving the
configuration via a floppy disk.
CAUTION
This script first erases all IPSec configuration settings and then reloads it
with the factory default. Any configurations you added earlier are lost.
As a precaution against inadvertent use of the command, the script
interactively prompts you to confirm that you intend to erase and then
restore the initial IPSec configuration.

Release Notes Known Issues with this Release
RiverMaster™ Version 3.5
Page 10 of 18 AVN-RMRN-R312
To issue the ipsecDefault command, perform the following:
1Log into the ANG-3000/7000 with the login and password netadmin
(default) and press ENTER.
2Load the floppy disk in the ANG-3000/7000’s floppy disk drive.
3Reboot the ANG-3000/7000.
The ANG copies the configuration file to its hard drive.
4At the command prompt, change directory to usr/indus/ipsec.
5Type ipsecDefault and press ENTER.
6Reboot the ANG-3000/7000.
Upon completing the reboot, the ANG will resume normal tunnel
operation.
For more information, refer to the Application Note: ANG Configuration
Using the Command Line Interface. Bug # 3671:
EAP Authentication for PPTP Controlled in L2TP Window
The EAP authentication protocol is supported by PPTP and L2TP but is
controlled from the L2TP configuration tab on RiverMaster. The use of EAP in
PPTP is controlled by the EAP radio button under L2TP. Bug # 3675.
RiverMaster Not Supported on Windows 2000 Platforms
Due to an OCX controls issue, RiverMaster Version 3.1 is not supported on
computers running the Windows 2000 operating system.

Release Notes Known Issues with this Release
RiverMaster™ Version 3.5
Page 11 of 18 AVN-RMRN-R312
Do Not Run Multiple RiverMaster Sessions Concurrently
with the Same APS
Multiple RiverMaster sessions should not be run concurrently with the same
Aurorean Policy Server. Operating RiverMaster under these conditions could
adversely affect the performance of the application and servers as well as
produce inaccurate reports. If you want to access an APS through separate
RiverMaster sessions, logout of one RiverMaster session before starting
another.
Restart RiverMaster after ANG Reboots
Because the Tunnel Statistics window in RiverMaster does not properly
display tunnel users following an ANG reboot, RiverMaster must be shut
down and restarted in order to re-synchronize the program with the ANG.
Upon restarting RiverMaster, all new tunnel sessions are visible.
Match Aurorean VPN and Destination Names
The Aurorean VPN Name, which is entered at installation time and displayed
under Network devices in the Configuration pullout, must match the
Destination name. Do not attempt to change the Destination name.
Resynchronizing with the APS After Changing IP Addresses
When you start RiverMaster for the first time, you are asked to enter a name
to describe your Aurorean VPN Name and the IP address assigned to the
Aurorean Policy Server. This step lets RiverMaster find and synchronize with
the APS on your network. If you set an incorrect IP address or change the IP
address on the APS, you must perform the following steps:
1Close the RiverMaster application if it is currently running.
2On the RiverMaster PC, use the Windows NT Explorer to access the
directory containing the RiverMaster application (by default this
directory is C:\Program Files\Indus River Networks
\RiverMaster).
3Delete the CONFIG.IRX file.
4Close Windows NT Explorer and restart the RiverMaster application.

Known Issues with this Release Release Notes
RiverMaster™ Version 3.5
AVN-RMRN-R312 Page 12 of 18
5In the Identify Your Aurorean Environment window, retype the name
you gave your Aurorean Virtual Network, enter the new Aurorean
Policy Server IP address, and click OK.
RiverMaster can now locate and synchronize with the Aurorean
Policy Server.
DNS/WINS IP Address Required for Windows NT Clients
Windows NT users will not be able to connect unless IP addresses for both
primary and secondary DNS and WINS servers are specified. These values
are required even though you may not have a WINS/DNS primary or
secondary server installed on your network. If, for example, you have only a
primary DNS installed, specify the IP address of that server as the value for
other primary and secondary DNS/WINS servers. The IP addresses are
entered in the DNS and WINS tabs of the Configuration pullout. Refer to the
RiverMaster Administrator’s Guide for more detailed information.
File Used by Advanced Reports Must Not Be Deleted
The schema.ini file located in the Indus River Networks/
RiverMaster/Reports/Data directory used by RiverMaster to specify
the format of the report file and must not be deleted. If you want to produce a
report on old data files, you must run the conv_old_reports.pl perl
script found on the Enterasys System Software CD ROM. Old format text files
are saved in the Data/Save_Reports directory. The script must be run on
the Aurorean Policy Server, not the RiverMaster computer.
To run this script on the APS, type: perl conv_old_reports.pl
Be aware that if the APS was installed anywhere but in the default directory,
the conversion script command is instead: perl conv_old_reports.pl <your
installation directory>

Release Notes Known Issues with this Release
RiverMaster™ Version 3.5
Page 13 of 18 AVN-RMRN-R312
IKE Site-to-Site Tunnels to an ANG/APS Must Be Initiated by
a Remote ANG
Internet Key Exchange (IKE) tunnels built between a Local Aurorean
Network Gateway and a Remote ANG (site-to-site configuration) must be
initiated by the Remote ANG when the Local ANG consists of an ANG/APS
pair. An IKE site-to-site tunnel originating from a Remote ANG connecting
another standalone (Local) ANG is permitted, however.
IPSec/IKE Authentication Unavailable on Paired APS/ANGs
Due to a potential security risk in communications between an APS and
ANG, an APS/ANG pair can not initiate an IKE security association with
another APS/ANG pair. Only IRPP authentication is available in this
configuration as set on RiverMaster, not IPSec/IKE.
RIPv2 Works Improperly if Export Routes Disabled
If you have configured RIP v.2 to import routes only, the protocol will not
work correctly on the ANG due to the failure of GATED to join the RIPv2
multicast group (224.0.0.9). This problem can be remedied by taking one of
the following actions:
!Create a static route on the ANG Trusted interface
!Use RIPv1 only
Refer to the RiverMaster Administrator’s Guide for more information.
TeeChart Error after Installation Requires Printer Reinstall
While opening RiverMaster for the first time following installation, if your
RiverMaster computer displays an Error 317 message referencing the
TeeChart.ocx file, perform the following steps:
1Check to see if there is a printer defined on the RiverMaster computer
by double-clicking the My Computer icon on your desktop.
2Click the Printers icon.

Known Issues with this Release Release Notes
RiverMaster™ Version 3.5
AVN-RMRN-R312 Page 14 of 18
3If there is an installed printer present, right-click on that printer icon
and click Delete.
4Open RiverMaster.
5From the Printers folder on your desktop, reinstall the printer just
deleted by clicking Add Printer and follow the prompts.
Disable IPComp Between Aurorean and Cisco Routers
Aurorean does not interoperate with Cisco routers with IPSec and IKE when
IPComp (IP Compression Protocol) is enabled. IPComp data compression
must not be enabled between Aurorean and Cisco routers due to an
unresolved incompatibility.
Virtual/Physical IP Address Incorrectly Reported at Logout
The Message Viewer entry (TBUserLoggedOut) displaying a user’s virtual or
physical IP Address at logout reports erroneous values. You can obtain the
correct value by performing the following steps:
1On your desktop, click Start, select Programs and Accessories, and
double-click Calculator.
The expanded calculator appears.
2Click View and Scientific.
3With the Dec(imal) radio button selected, type the numeral displayed
as the physical or virtual IP address in the open calculator field.
For example, type the numeral: 636252625.
4Select the Hex(adecimal) radio button.
The IP address now appears in hex format. For example, the hex
value 25EC71D1 appears.

Release Notes Resolved Issues Since the Last Release
RiverMaster™ Version 3.5
Page 15 of 18 AVN-RMRN-R312
NOTE
Only seven hexadecimal digits may display. In this case, convert the
left-most single digit to the decimal format.
5Starting from the right, convert each pair of hex digits back to decimal
format.
For example, D1 converts to 209, 71 to 113, EC to 236, and 25 to 37.
6Put the values together in standard IP address format.
For example: 209.113.236.37.
Resolved Issues Since the Last Release
The following issues have been resolved since the release of 3.1:
!Termination message for Firewall Traversal disconnection incorrectly
displays USER_ERROR. Bug #3190.
!Authentication service goes deaf using ACE RADIUS. Bug #3192.
!Authorization service displays Dr. Watson message. Bug #3261.
!Accounting records have missing data. Bug #3200.
More Information on RiverMaster Software
Enterasys Networks provides a comprehensive set of documentation for
RiverMaster software. For quick access to key information and the greatest
degree of portability, this documentation comes in these forms:
!Printed manual
!Adobe® Acrobat®Reader Portable Document Format (PDF) files
Printed Document
The RiverMaster Administrator’s Guide is shipped with RiverMaster software.

More Information on RiverMaster Software Release Notes
RiverMaster™ Version 3.5
AVN-RMRN-R312 Page 16 of 18
Acrobat PDF Files
Each printed document is available as a PDF file on the Aurorean System
Software CD ROM. You can use Acrobat Reader, which is included in the
3rd Party Support Software directory on the CD ROM or can be
installed automatically on your PC as an option of the Aurorean Virtual
Network installation program, to view this manual on your PC. If you chose
not to load Acrobat Reader during RiverMaster installation, you can install it
later. Use the table of contents and index as “hot links”to quickly locate the
information you need (a “Find”utility is also available to search on a
keyword).
The RiverMaster Administrator’s Guide is stored in the Manuals directory of
the CD ROM. When you install the RiverMaster software, you have the
option to copy this file (adminguide.pdf) to the same directory as the
RiverMaster application in C:\Program Files\
Indus River Networks\RiverMaster.
All Documentation
NOTE
All Aurorean documentation can be found at the following URL link:
http://www.enterasys.com/support/manuals

Release Notes Contacting Enterasys Networks
RiverMaster™ Version 3.5
Page 17 of 18 AVN-RMRN-R312
Contacting Enterasys Networks
For general information on Enterasys Networks products, access the
company’s Web site at www.enterasys.com or write/call the company at:
Enterasys Networks
35 Industrial Way
Rochester, NH 03866
Phone: [phone]
To reach an Enterasys Networks Sales representative, call 1 [phone], or
send E-mail to www.enterasys.com. Please include your name, title,
company, and phone number in all E-mail correspondence, and indicate
which Enterasys Networks products you wish to be contacted about.
For answers to technical questions about RiverMaster, you can send E-mail to
[email protected]. Include your name, title, company, and phone
number in all correspondence. Enterasys Networks customer support
personnel are also available by calling 1 [phone].
Please call from a position where you can operate your RiverMaster computer
and make sure you have the following information ready:
!A list of the alarm and alert messages appearing in the RiverMaster
message viewer
!Details about any recent configuration changes, if applicable
Enterasys Networks also recommends that you have your copy of the
RiverMaster Administrator’s Guide on hand when you call.

Contacting Enterasys Networks Release Notes
RiverMaster™ Version 3.5
AVN-RMRN-R312 Page 18 of 18
RiverMaster Version 3.12 ©2001 Enterasys Networks. All rights reserved. This publication contains
information that is the property of Enterasys Networks. Information in this publication is subject to
change without notice. Enterasys Networks assumes no responsibility for errors or omissions in this
publication or for the use of this material.
RiverMaster software may not be copied, except as otherwise provided in your software license or as
expressly permitted in writing by Enterasys Networks.
The Enterasys Networks logo, Auto Link Recovery, Prescriptive Diagnostics Engine, RiverMaster,
Aurorean, and TollSaver are trademarks of Enterasys Networks.
Microsoft, MS, and MS-DOS are registered trademarks and Windows, Windows 95, Windows 98,
Windows NT, Windows 2000 Professional and Windows Millennium are trademarks of Microsoft
Corporation in the USA and other countries.
Virtual Network Computing is a trademark of AT&T Laboratories Cambridge.
Other trademarks, trade names, and copyrights used in this publication belong to their respective
owners.
Part No: AVN-RMRN-R312