Changed Features in Version 31.0.0.0
Extracting Client Certificate SAN Extension
The X509::extensions AppShape++ command now also retrieves the Subject Alternative Name (SAN) extension, letting you extract the User Principal Name (UPN) value that might be included in that extension.
NFR ID: Prod00241468
OpenSSL Upgrade to 1.0.1u
OpenSSL on both the data and management paths was updated to OpenSSL1.0.1u. Default Cipher Changes
The default SSL policy cipher (Main) was updated according to the latest security recommendations. Ciphers that used the 3DES symmetric algorithm (DES-CBC3) were removed.
Syslogs for LACP link UP and DOWN
A trap is set upon LACP status change
5224 vADCs Limit
Starting with version 31.0, the Alteon 5224 VX platform with 24GB RAM only supports 16 vADCs (as compared to 20 vADCs in earlier versions).
Long Object ID Support
This feature was first introduced version 30.5.2.0.
The ID field length for real servers, server groups and virtual servers has been extended to 255 characters to support the FQDN naming convention with dot.
Limitations:
The Quick Application Setup does not work with this extended ID length and currently works only with a maximum ID length of 32 characters.APM supports virtual service IDs with up to 245 characters without a period (.). SNMP supports OIDs up to a maximum of 128 digits, including the parameter OID and the key. Alteon implements a special mechanism that lets you browse the table (GetNext), Get a specific object, or change (Set) a specific parameter. However, you cannot create a new object with a long ID via SNMP.When configured long IDs, some audit log messages might be displayed distorted.A virtual server ID longer than 50 characters does not display in DPM. The FQDN server cannot be created when the ID of the template real server ID is more than 32 characters.NFR ID: prod00236421
GSLB − Prevent Negative DNS Response Caching
This feature was first introduced version 30.5.2.0.
In previous versions, when there was no site available for the requested domain, Alteon would answer DNS queries with No Such Name. Many DNS clients would cache this answer and would not retry resolution. As of this version, to prevent this, Alteon no longer answers if there is no site available. This results in the client continuing retrying to resolve the DNS record until the site becomes available.
NFR ID: prod00240111
Support for RFC6223 and/or RFC5626
This feature was first introduced in version 30.5.2.0.
The Alteon SIP parser now allows keep alive messages to pass from the client to the server, and vice versa, without blocking or discarding the messages.
NFR ID: prod00244065
Troubleshooting and Debugging
Technical Support Data (tsdmp) Formatting
The Technical Support Data File (tsdmp), which is part of the techdata file, is one of the main debugging tools in Alteon. It contains all the required information on the device (such as configuration, statistics, run-time information, events and so on) to help with problem investigation. Starting with Alteon 31.0.0.0, in order to ease the use of this file, the following improvements were made:
Table of contentsSummary Section – Section that includes highlights Command Headlines – These headlines display the CLI command name before the command output. CLI Command Conditional Output – Rarely needed outputs are now conditional techdata <hostname> <filename> <-tftp|username password> [-mgmt|-data] [-scp] [-key <passphrase>] [-dnssec] -[persist] [-ucb]
Added Historical Event and Error Counters – Displays the last 15 seconds, 30 seconds, 45 seconds, 60 seconds, 75 seconds counters Configuration Adaptation on Upload
This feature was first introduced version 30.5.2.0.
Configuration adaptation as part of an upgrade process is now also available as part of configuration file upload. For example: when uploading a configuration file from version 30.0 to a device running version 30.5.2.0, the required configuration adaptation is performed as part of the configuration upload and will be available in the diff.
Command Line History Improvement
The following improvements were made to the history command:
The history size increased from the last 10 to the last 100 commands The history command itself is no longer added to the list of commands in the historyDuplicate commands are no longer recorded!<string> − This syntax is used to execute the last command in the history that starts with specified string (for example: !/info )history <string> − This syntax prints only history commands that contain the specified string.