1.  Feature Enhancements / Functional Changes

This release provides the following additional DSL Router key features:
• PPPoE client
• Wholesale model support:
– Telnet access from the service domain
– Firmware upgrade support from the service domain using a TFTP client
– Syslog support to the service domain
1.1 Security
1.1.1 Telnet
The factory default configuration is for Telnet service domain access, and Telnet login/password validation to be
disabled. Enabling service domain Telnet access must be done from a local console, or a management domain
Telnet CLI session.
The output of the list command does not include the Telnet login IDs and passwords. However, it does include
entries for telnet {disable | enable}, and telnet login {disable | enable}. The action of these commands or the
commands used to change the Telnet login/passwords will not terminate a current service domain Telnet session,
if any. The changes are applied in future service domain Telnet connection and/or login attempts.
It’s not recommend that Telnet in the service domain remain enabled after initial remote configuration, unless
firewalling or other mechanisms are used at the Subscriber Management System to ensure that Telnet access to
the endpoint is limited to the service provider.
1.1.2 Local Console
The factory default configuration is for the local console to be enabled with a default login ID (paradyne), operator
password (abc123), and administrator password (abc123). It is recommended that the user change the login ID
and passwords, and/or disable the local console access during initial setup of the DSL Router. Disabling the local
console will not end an active CLI session for the console, if any, but will refuse future connection attempts. Reenabling
the console must be done via SNMP or a Telnet CLI session.
The output of the list command does not include the local console login ID and password. However, it does include
an entry for console {disable | enable}.
1.1.3 PAP/CHAP
The factory default configuration is for the DSL Router not to negotiate the use of any authentication protocols
nor accept the proposed use of one. When an authentication protocol is used for the PPP session, the DSL Router
is the authenticated party only (i.e., never the authenticator). The output of the list command includes ppp
authentication and ppp username, but not ppp password. Changes to the DSL Router configuration using these
commands does not take affect until the next PPP link establishment (i.e., the PPP session, if any, is not terminated
as a result of the changes).
1.1.4 SNMP
SNMP support is available in the management domain only, therefore the MCP is responsible for the trivial
authentication (community strings) and security checks (source IP address authentication) of the SNMP PDUs
destined for the DSL Router. The MCP serves as the DSL Router’s only trap manager and the MCP is reponsible
for forwarding the DSL Router’s traps to the appropriate actual trap managers configured for the MCP.
1.1.5 Path MTU Discovery
The maximum transmission unit (MTU) of the DSL interface is set to 1492 when PPPoE is enabled to account for
the overhead of the PPPoE/PPP protocol.To eliminate fragmentation or minimize it, it is desirable to know what
is the path MTU along the path from the source to destination. The Path MTU is the minimum of the MTUs of
each hop in the path. RFC 1191 describes a technique for dynamically discovering the maximum transmission unit
(MTU) of an arbitrary internet path.
The “Black Hole” problem described in RFC 2923 occurs because routers don’t always do this correctly. Many
fail to send the necessary ICMP unreachable error (fragmentation required) messages and firewalls are often
misconfigured to suppress all ICMP messages. Path MTU Discovery fails when the appropriate ICMP messages
are not received by the originating host. The upper-layer protocol continues to try to send large packets and,
without the ICMP messages, never discovers that it needs to reduce the size of those packets. These packets
basically disappear into a “black hole”. For example the problem manifests itself as a requested Web page that
doesn’t load. The server continues to send the oversized packet resulting in a partially loaded page and a “waiting
for reply” message in the browser’s status bar.
The real solution to the problem is for the offending routers and firewalls to be corrected. Realistically, this won’t
happen. A workaround is to adjust the MTU value on the local machines. The following sites describe the
procedure as to how this can be done:
• http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/ppp.html#MACOS-WIN98-PPPOEFREEZE
• http://www.cisco.com/warp/public/794/router_mtu.html

1.2 Functional Changes
This release contains the following functional changes:
1.2.1. It is important to note that when the PPP negotiated IP address is assigned, the DSL Router’s configuration
database will automatically be converted to a new configuration determined by this IP address and the interface
to which it is assigned. This new configuration will overwrite the current configuration and be retained
during a power reset.
1.2.2. New user interface commands supported (see user’s guide and online help command for details and command
syntax):
– pppoe {disable | enable}
– ppp ip {dsl1 | eth1} [ip-mask]
– ppp authentication {chap | pap | both | none}
– ppp username [username]
– ppp password [password]
– show pppoe
– telnet {disable | enable}
– telnet login {disable | enable}
– telnet name create {admin | operator} login-id password
– telnet name delete {admin | operator} login-id
– telnet timeout [time]
– telnet keep-alive {disable | enable}
– telnet keep-alive timeout [time]
– telnet keep-alive interval [time]
– show telnet
– download {dsl1[:ifn] | eth1[:ifn]} server-ip filename
– apply download
NOTE: username and password entered for the ppp username and ppp password commands is case sensitive.
1.2.3 Changes to existing user interface commands (see user’s guide and online help command for details and
command syntax):
– syslog ip ip-addr [mgt | srvc]
– show syslog
– show interface {dsl1 | eth1}
NOTE: The display now includes:
• availability of physical link to transport user data
• maximum transmission unit for the physical interface’s link layer
• DSL link encapsulation last detected
– show statistiscs [eth1 | dsl1 | ip | bridge | pppoe | tftp]
NOTE: If no statistic set is specifed, all statistics (except TFTP statistics) for the DSL router are shown.
However, in this case PPPoE/PPP statistics are only displayed when the PPPoE client is enabled, and bridge
statistics are only displayed when bridging is enabled.
– clear statistiscs [eth1 | dsl1 | ip | bridge | pppoe | tftp]
1.2.4 A power reset is no longer required to have interface IP address, subnet mask, and unnumbered interface
designation configuration changes become active. (NOTE: A power reset is still required when resetting the
configuration to factory defaults.)
1.2.5  NAPT can now be enabled without specifying a public IP address. If or when the DSL interface is configured,
an unspecified NAPT public IP address will be assigned the DSL interface IP address.
1.2.6 Upgraded to MVL DSP code version 04.10.20

2.1 Traffic Stops Passing When Upgrading to 4.2.5
NOTE: This release includes the correction for the above issue, but release M04.02.05 does not. Therefore, the
problem will continue to be visible when downgrading to M04.02.05 and then upgrading again to M04.03.04. The
problem occurs if any configuration changes are made to enable or disable features (including configuring factory
defaults) when M04.02.05 is active. Any new enable/disable features for M04.03.04 will appear as “disabled”
when the release becomes active again.
2.2 6341 MAC Address Transposed / Telnet Session Drops Intermittently

For proper operation with an 88xx/86xx DSLAM, this release requires an 8000 IP Conservative MCC, MCC Plus, or MCP with appropriate firmware:

 

Card Type	CCA #	DSLAM
6351 ReachDSL Router	868-4964-8000	N/A
8312 ReachDSL 12 Port Card	868-3426-8000	8610, 8810, 8820
8314 ReachDSL 12 Port Card	868-4427-8000	8620, 8820
8000 IP Conservative MCC	868-3362-80xx (xx = 00, 01, 02, …)	8600, 8800, 8810
8000 IP Conservative MCC Plus	868-3882-80xx (xx = 00, 01, 02, …)	8600, 8800, 8810
8000 IP Conservative MCP	868-3883-80xx (xx = 00, 01, 02, …)	8610, 8620 and 8820

 

Card Type	CCA #	Firmware
8312 ReachDSL 12 Port Card	868-3426-8000	04.02.27 or greater
8314 ReachDSL 12 Port Card	868-4427-8000	04.02.29 or greater
8000 IP Conservative MCC	868-3362-80xx (xx = 00, 01, 02, …)	M04.02.27
8000 IP Conservative MCC Plus	868-3882-80xx (xx = 00, 01, 02, …)	M04.02.27
8000 IP Conservative MCP	868-3883-80xx (xx = 00, 01, 02, …)	M04.02.27

The following are known problems and limitations with this release:

1. NAT Doesn’t Support Out Of Order Fragments) Out of order fragment packets is not support by
    the DSL Router R3 implementation of NAT. This means that it expects the first packet of a fragmented
    stream to be received first prior to the receipt of any other packets of that stream.

2. Hotwire PC Download Program Not working with Windows 2000 (Windows 9x and Windoes NT 4.0 supported)

3. Passive Mode Required for FTP Client Behind DSL Router w/ NAPT or NAT enabled.

4. DSL Router PPPoE Client Support and DSL Link Encapsulation
The PPPoE client feature in the DSL Router is supported only when the DSL link encapsulation is configured for
VNET mode (i.e., EtherHDLC). There are two scenarios where an attempt is made to report a misconfiguration:

4.1. The DSL Router has the PPPoE client enabled, but detects FUNI/MPOA encapsulation on the DSL link
during an attempted link up. In this case, the DSL link will not train up and the port card logs an appropriate
error message to indicate to the user that they must either change the DSL link encapsulation at
the port card or disable the PPPoE client at the DSL Router.

4.2. The DSL Router has already detected FUNI/MPOA encapsulation on the DSL link (i.e., the DSL link is
trained up) and the user attempts to enable the PPPoE client via the CLI. In this case, the pppoe enable
command is rejected with the message "PPPoE client is allowed in VNET mode only."

5. Ability to Configure 2+ DNS IP Entries - The DSL Router R4 implementation of the DHCP
Server support allows the user to configure only one domain name server IP address.