Сравнение версий

Старая версия 6

changes.mady.by.user Сервисный центр Ethernet

Сохранено

по сравнению с

Новая версия 7

changes.mady.by.user Шарипова Людмила Дамировна

Сохранено

Ключ

  • Эта строка добавлена.
  • Эта строка удалена.
  • Изменено форматирование.

...

МодельHW-версия

ПО
<firmware-file>

Вторичный загрузчик 
<uboot-file>

Первичный загрузчик 
<xload-file>

ESR-101v0 - 1vXesr1x-1.34.2-build36.firmware

esr1x-1.34.2-build36.uboot

esr1x-1.34.2-build36.sbi
2v0 - 2vXesr1x-1.34.2-build36.spi_uboot
ESR-12V1v0 - 2v0esr1x-1.34.2-build36.firmwareesr1x-1.34.2-build36.ubootesr1x-1.34.2-build36.sbi
2v1 - 5vXesr1x-1.34.2-build36.spi_uboot
ESR-12VF1v0 - 2v0esr1x-1.34.2-build36.firmwareesr1x-1.34.2-build36.ubootesr1x-1.34.2-build36.sbi
2v1 - 5vXesr1x-1.34.2-build36.spi_uboot
ESR-15всеesr15-1.34.2-build37.firmwareesr15-1.34.2-build37.ubootотсутствует
ESR-15Rвсеesr15-1.34.2-build37.firmwareesr15-1.34.2-build37.ubootотсутствует
ESR-15VFвсеesr15-1.34.2-build37.firmwareesr15-1.34.2-build37.ubootотсутствует
ESR-20всеesr2x-1.34.2-build35.firmwareesr2x-1.34.2-build35.ubootesr2x-1.34.2-build35.bl1
ESR-21всеesr2x-1.34.2-build35.firmwareesr2x-1.34.2-build35.ubootesr2x-1.34.2-build35.bl1
ESR-30всеesr3x-1.34.2-build35.firmwareesr3x-1.34.2-build35.ubootотсутствует
ESR-31всеesr3x-1.34.2-build35.firmwareesr3x-1.34.2-build35.ubootотсутствует
ESR-100все

esr200-1.34.2-build13.firmware

esr200-1.34.2-build13.ubootesr200-1.34.2-build13.xload
ESR-200всеesr200-1.34.2-build13.firmwareesr200-1.34.2-build13.ubootesr200-1.34.2-build13.xload
ESR-10001v0 - 1v6esr1000-1.34.2-build13.firmwareesr1000-1.34.2-build13.ubootesr1000-1.34.2-build13.xload
1v7 - 2vXesr1000-1.34.2-build13.1v7.xload
ESR-1200всеesr1200-1.34.2-build13.firmwareesr1200-1.34.2-build13.ubootesr1200-1.34.2-build13.xload
ESR-1500всеesr15xx-1.34.2-build13.firmwareesr15xx-1.34.2-build13.ubootesr15xx-1.34.2-build13.xload
ESR-1511всеesr15xx-1.34.2-build13.firmwareesr15xx-1.34.2-build13.ubootesr15xx-1.34.2-build13.xload
ESR-1511 (Revrev.B)всеesr15xx-1.34.2-build13.firmwareesr15xx-1.34.2-build13.ubootesr15xx-1.34.2-build13.xload
ESR-1700всеesr1700-1.34.2-build13.firmwareesr1700-1.34.2-build13.bootотсутствует
ESR-3100всеesr3100-1.34.2-build36.firmwareesr3100-1.34.2-build36.ubootesr3100-1.34.2-build7.bdk

ESR-3200

всеesr3200-1.34.2-build36.firmwareesr3200-1.34.2-build36.ubootesr3200-1.34.2-build7.bdk

ESR-3200L

всеesr3200-1.34.2-build36.firmwareesr3200-1.34.2-build36.ubootesr3200-1.34.2-build7.bdk

ESR-3300

всеesr3300-1.34.2-build13.firmwareesr3300-1.34.2-build13.ubootesr3300-1.34.2-build13.bdk

...

Пример обновления конфигурации приведен ниже, прочие настройки IPsec VPN пропущены:

Конфигурация на ПО версий  1.17.2 - 1.24.9

Конфигурация на ПО версиях ПО 1.34.2

tunnel vti 1
  local address 203.0.113.2
  remote address 203.0.113.1
  enable
exit

security ike gateway ike_gateway
  bind-interface vti 1
exit

security ipsec vpn ipsec_vpn
  ike gateway ike_gateway
  enable
exit		tunnel vti 1
  local address 203.0.113.2
  remote address 203.0.113.1
  enable
exit

security ike gateway ike_gateway
  bind-interface vti 1
exit

security ipsec vpn ipsec_vpn
  ike gateway ike_gateway
exit
tunnel vti 1
  local address 203.0.113.2
  remote address 203.0.113.1
  ip address 192.0.2.1/30
  enable
exit

security ike gateway ike_gateway
  bind-interface vti 1
exit

security ipsec vpn ipsec_vpn
  ike gateway ike_gateway
  enable
exit		tunnel vti 1
  local address 203.0.113.2
  remote address 203.0.113.1
  ip address 192.0.2.1/30
  enable
exit

security ike gateway ike_gateway
  bind-interface vti 1
exit

security ipsec vpn ipsec_vpn
  ike gateway ike_gateway
  enable
exit

...

Соответственно при обновлении ПО в объекты конфигурации "security ipsec vpn", указанные в конфигурациях туннелей GRE в режиме multipoint, будет добавлена команда tape transport, изменяющая режим работы IPsec-туннеля. В случае если команда уже присутствовала в конфигурации IPsec VPN, изменений не будет. Пример обновления конфигурации приведен ниже, прочие настройки туннелей GRE и IPsec VPN пропущены:

Конфигурация на ПО версий 1.17.2 - 1.20.x

Конфигурация на ПО версий 1.34.2

tunnel gre 1
  ip nhrp ipsec IPSEC_VPN_SPOKES dynamic
  ip nhrp ipsec IPSEC_VPN_HUB_1 static
  ip nhrp ipsec IPSEC_VPN_HUB_2 static
exit

security ipsec vpn IPSEC_VPN_HUB_1
  enable
exit
security ipsec vpn IPSEC_VPN_HUB_2
  enable
exit
security ipsec vpn IPSEC_VPN_SPOKES
  enable
exit

tunnel gre 1
  ip nhrp ipsec IPSEC_VPN_SPOKES dynamic
  ip nhrp ipsec IPSEC_VPN_HUB_1 static
  ip nhrp ipsec IPSEC_VPN_HUB_2 static
exit

security ipsec vpn IPSEC_VPN_HUB_1
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_HUB_2
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_SPOKES
  type transport
  enable
exit

tunnel gre 1
  ip nhrp ipsec IPSEC_VPN_SPOKES dynamic
  ip nhrp ipsec IPSEC_VPN_HUB_1 static
  ip nhrp ipsec IPSEC_VPN_HUB_2 static
exit

security ipsec vpn IPSEC_VPN_HUB_1
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_HUB_2
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_SPOKES
  type transport
  enable
exit

tunnel gre 1
  ip nhrp ipsec IPSEC_VPN_SPOKES dynamic
  ip nhrp ipsec IPSEC_VPN_HUB_1 static
  ip nhrp ipsec IPSEC_VPN_HUB_2 static
exit

security ipsec vpn IPSEC_VPN_HUB_1
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_HUB_2
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_SPOKES
  type transport
  enable
exit

...

Пример обновления конфигурации приведен ниже, прочие настройки IPsec VPN пропущены:

Конфигурация на ПО версий  1.0.1 - 1.17.1

Конфигурация на ПО версий ПО 1.17.2 - 1.34.2

tunnel vti 1
  local address 203.0.113.2
  remote address 203.0.113.1
  enable
exit

security ike gateway ike_gateway
  bind-interface vti 1
exit

security ipsec vpn ipsec_vpn
  ike gateway ike_gateway
  enable
exit		tunnel vti 1
  local address 203.0.113.2
  remote address 203.0.113.1
  enable
exit

security ike gateway ike_gateway
  bind-interface vti 1
exit

security ipsec vpn ipsec_vpn
  ike gateway ike_gateway
exit
tunnel vti 1
  local address 203.0.113.2
  remote address 203.0.113.1
  ip address 192.0.2.1/30
  enable
exit

security ike gateway ike_gateway
  bind-interface vti 1
exit

security ipsec vpn ipsec_vpn
  ike gateway ike_gateway
  enable
exit		tunnel vti 1
  local address 203.0.113.2
  remote address 203.0.113.1
  ip address 192.0.2.1/30
  enable
exit

security ike gateway ike_gateway
  bind-interface vti 1
exit

security ipsec vpn ipsec_vpn
  ike gateway ike_gateway
  enable
exit

...

Соответственно при обновлении ПО в объекты конфигурации "security ipsec vpn", указанные в конфигурациях туннелей GRE в режиме multipoint, будет добавлена команда tape transport, изменяющая режим работы IPsec-туннеля. В случае если команда уже присутствовала в конфигурации IPsec VPN, изменений не будет. Пример обновления конфигурации приведен ниже, прочие настройки туннелей GRE и IPsec VPN пропущены:

Конфигурация на ПО версий 1.13.x - 1.17.1

Конфигурация на ПО версий 1.17.2 - 1.34.2

tunnel gre 1
  ip nhrp ipsec IPSEC_VPN_SPOKES dynamic
  ip nhrp ipsec IPSEC_VPN_HUB_1 static
  ip nhrp ipsec IPSEC_VPN_HUB_2 static
exit

security ipsec vpn IPSEC_VPN_HUB_1
  enable
exit
security ipsec vpn IPSEC_VPN_HUB_2
  enable
exit
security ipsec vpn IPSEC_VPN_SPOKES
  enable
exit

tunnel gre 1
  ip nhrp ipsec IPSEC_VPN_SPOKES dynamic
  ip nhrp ipsec IPSEC_VPN_HUB_1 static
  ip nhrp ipsec IPSEC_VPN_HUB_2 static
exit

security ipsec vpn IPSEC_VPN_HUB_1
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_HUB_2
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_SPOKES
  type transport
  enable
exit

tunnel gre 1
  ip nhrp ipsec IPSEC_VPN_SPOKES dynamic
  ip nhrp ipsec IPSEC_VPN_HUB_1 static
  ip nhrp ipsec IPSEC_VPN_HUB_2 static
exit

security ipsec vpn IPSEC_VPN_HUB_1
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_HUB_2
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_SPOKES
  type transport
  enable
exit

tunnel gre 1
  ip nhrp ipsec IPSEC_VPN_SPOKES dynamic
  ip nhrp ipsec IPSEC_VPN_HUB_1 static
  ip nhrp ipsec IPSEC_VPN_HUB_2 static
exit

security ipsec vpn IPSEC_VPN_HUB_1
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_HUB_2
  type transport
  enable
exit
security ipsec vpn IPSEC_VPN_SPOKES
  type transport
  enable
exit

...