[INFO] Firmware 5.01 BETA (!) für IX68 verfügbar

Tibor @ Intertex schrieb:

...And here it is: the long awaited new pre-release for the IX68!

As usual there are two "flavours" of it:
http://www.intertex.se/eval/68A501_pre6.tar for Annex A
http://www.intertex.se/eval/68B501_pre6.tar for Annex B

There are major changes in most areas of the firmware compared to 4.02
Therefore we do not list all changes here below, just the "big ones".

New major features in 5.01 pre 6 (compared to 4.02):
o Half-bridge (WAN IP addresses on LAN)
o Multiple VC support
o TeliaSonera "Triple play" support
o IGMP/Multicast support
o SIP FENT (Far End Nat Traversal) support
o SIP TLS support

This is a hidden link, the release is not public yet. In fact, as the name tells, it is only a pre-release. This is only for you guys reading IX Central!
NOTE: This pre-release is provided "as-is". Intertex does not support it officially. You cannot contact neither our resellers' nor Intertex's support with questions about it.
But of course will we try to help you through this site!





Some of the new features explained in detail:

Half-bridge
===========
If you have multiple global IP addresses available (more than the one used as WAN IP address of your IX68) you can bridge those through your IX68, to local PC-s on your LAN:

I n t e r n e t
|
50.11.69.17
IX68
|
----------------------------
| | | |
A | C |
192.168.0.31 | 192.168.0.32 |
B D
50.11.69.18 50.11.69.19

PC-s A and C in the above example get their IP address from the IX68 as usual, and they are NAT-ed to the IX68's own global IP address 50.11.69.17, just as IX68-s has done all the time since the beginnings.
But PC-s B and D are set to global IP addresses and they are NOT NAT-ed! They experience the IX68 as it would be bridged to the Internet. Packets to and from them do actually pass through the firewall, but by default everything is allowed through without change, without NAT. You can however add firewall rules manually to change this and can implement firewall protection even for those PC-s.

Please do notice that to be able to use this feature you MUST have obtained MORE THAN ONE global IP address from your ISP!

To activate this feature open the Network Configuration - Advanced page of your IX68, enter the Additional WAN IP address(es - one per line) you intend to use, and select bridged -> interface.
Even though it is possible to mix units having global IP addresses with units having local IP addresses on the same interface we recommend against doing so. For increased security you are recommended to have local and global IP address units separated (eg local units on ET1, units with global IP on ET4).



Multiple VC support
===================
If your ISP provides multiple virtual channels (VC-s) you can now use them with your IX68. Previously it had only one VC.
To activate select "Extra WAN Interfaces" on your Network Configuration - Advanced page, and enable Extra WAN Interfaces.
Your ISP will provide you with the necessary VC parameters needed to activate their service.


TeliaSonera "Triple play" support
=================================
The "Triple play" service of provider TeliaSonera is a multiple-VC-service.
The VC parameters necessary for that service are pre-configured, and can be activated by selecting "Settings as for operator: Telia" on the Administration page, General settings.
TeliaSonera Triple Play provides Internet, TV and telephony on three different VC channels.
IX68 allows you to freely mix PC-s, IP phones and IPTV settop-boxes on your local LAN, each of them will get the appropriate VC traffic.
IX68 has advanced QoS features protecting the IPTV and VoIP data streams during high Internet usage.
You can also mix TeliaSonera and other provider's SIP traffic - TeliaSonera SIP traffic goes through the TeliaSonera VoIP VC, other provider's SIP traffic goes through the regular Internet VC.



Multicast support
=================
The IX68 has got an IGMP/multicast proxy in this release. It allows IGMP packets through, and opens up the firewall for the appropriate multicast data streams. It also has a link layer unicast feature - ensuring the multicast packets are only sent to your multicast clients on your LAN, not blogging down your entire LAN.

To activate this feature open your active Security Profile page, and:
* enable "IGMP/Multicast" under "Applications from inside"
* enable "IGMP/Multicast Proxy" under "General settings" and make sure the interface your multicast clients are at is enabled next to it

Please notice that your ISP must also support multicast for you to be able to receive them! An alarming range of Internet providers block multicasts.



SIP FENT support
================
FENT, Far End Nat Traversal, solves the problems encountered when the SIP device you try to contact is behind a non-SIP-capable NAT device.

FENT sends keep-alive packets to those clients keeping their NAT ports open.

To be able to use FENT you need to have a SIP switch licence. Then you enable FENT using the checkbox on the SIP Advanced page.



SIP TLS support
===============
IX68 now supports TLS, Transport Layer Security.

To be able to use TLS you need to have a SIP switch licence. Then you enable TLS by importing your TLS certificates using the SIP Certificate Manager page.
All imported/created certificates there will automatically be configured for SIP TLS use.
You can override the automatic configuration on the SIP Advanced page.

Zum Vergrößern anklicken....