Information on this document

On April 1, 2009, Fujitsu became the sole owner of Fujitsu Siemens Computers. This new subsidiary of Fujitsu has been renamed Fujitsu Technology Solutions.
This document from the document archive refers to a product version which was released a considerable time ago or which is no longer marketed.
Please note that all company references and copyrights in this document have been legally transferred to Fujitsu Technology Solutions.
Contact and support addresses will now be offered by Fujitsu Technology Solutions and have the format …@ts.fujitsu.com.
The Internet pages of Fujitsu Technology Solutions are available at http://ts.fujitsu.com/... and the user documentation at http://manuals.ts.fujitsu.com.

Hinweise zum vorliegenden Dokument

Zum 1. April 2009 ist Fujitsu Siemens Computers in den alleinigen Besitz von Fujitsu übergegangen. Diese neue Tochtergesellschaft von Fujitsu trägt seitdem den Namen Fujitsu Technology Solutions.
Das vorliegende Dokument aus dem Dokumentenarchiv bezieht sich auf eine bereits vor längerer Zeit freigegebene oder nicht mehr im Vertrieb befindliche Produktversion.
Bitte beachten Sie, dass alle Firmenbezüge und Copyrights im vorliegenden Dokument rechtlich auf Fujitsu Technology Solutions übergegangen sind.
Kontakt- und Supportadressen werden nun von Fujitsu Technology Solutions angeboten und haben die Form …@ts.fujitsu.com.
Die Internetseiten von Fujitsu Technology Solutions finden Sie unter http://de.ts.fujitsu.com/..., und unter http://manuals.ts.fujitsu.com finden Sie die Benutzerdokumentation.

Release Notes

NetWorker FireWall eXtension
(Solaris(SPARC) / Linux) V1.1A00

October 2006

© Fujitsu-Siemens Computers GmbH 2008 All rights reserved.

1 General

This file contains important information about the use of NSR-FWX V1.1A00 (Solaris(SPARC)/ Linux x86, Linux x86-64).
The use of this product requires and assumes that the user has accepted the end user license agreement. Please read the full text of this agreement in file enduserlicenseagreement.pdf on the NetWorker DVD.
The use of names or product designations, etc. in this information does not constitute a general authorization to use such names or designations. In many cases they are legally or contractually protected names or designations, even if they are not marked as such.

1.1 Ordering

NSR-FWX V1.1can be ordered from your local distributors. This product is subject to the general terms and conditions of the software product use and service agreement.

A license is required for NSR-FWX. Appropriate licenses must be ordered and installed in order to use the product.

1.2 Delivery

Software packages and documentation are delivered on the NetWorker Suite V7 DVD.
Licensing is based on license strings. License strings are delivered in printed form, but can also be downloaded through the web tool NELI. The customer gets access to NELI after he has purchased the licenses.

1.3 Documentation

Man Pages
The man pages are stored in /opt/nsr/man by default during installation. The nsrfwxd(1m), nsrfwxinfo(1) and nsrfwxd.conf(4) man pages contain an overview and description of the most important commands.
Other Documentation
This Release Note can be found on the NetWorker DVD in /documentation/releasenotes.
Documentation on configuring the NetWorker FireWall eXtension can be found under /opt/nsr/doc after the software is installed.

2 Software Extensions

2.1 New in V1.1

Support of Linux AMD64/Intel 64
NSR-FWX installation packages are available for Linux on AMD64/Intel 64 systems now.

2.2 Extensions in V1.0A10 compared to V1.0A00

The configuration of a tunnel connection in the file /nsr/fwx/vtun_* was simplified. Existing configuration must be changed accordingly after an update.
It is no longer necessary to make manual modifications in system scripts in order to add route entries or to enable IP forwarding. These tasks are now performed automatically.

3 Technical Information

3.1 Resource Requirements

NSR-FWX V1.1A00 requires the following hard disk space:

Operatingsystem	Product name	Package	disk space
Solaris (SPARC 64bit)	NSR-FWX mwvt tun	SMAWnwfwx SMAWmwvt SMAWtun	670 KB 264 KB 27 KB
Linux x86	NSR-FWX vtun	nsr-fwx nsr-vtun	339 KB 175 KB
Linux x86-64 (AMD64/Intel 64)	NSR-FWX vtun	nsr-fwx nsr-vtun	398 KB 183 KB

3.2 Software Configuration

NSR-FWX supports the following platforms:

Solaris(SPARC) 8, 9
Solaris(SPARC) 10
mit Einschränkungen, siehe 3.7.2
Linux x86
SuSE SLES8, SLES9, SLES10
RedHat Enterprise Linux 3
RedHat Enterprise Linux 4
SuSE 9.3, 10
Fedora Core 3, 4, 5
Linux x86-64 (AMD64/Intel 64)
SuSE SLES8, SLES9, SLES10
RedHat Enterprise Linux 3
RedHat Enterprise Linux 4
Fedora Core 3, 4, 5

3.3 Installation

Installation or deinstallation must be performed with root permissions.

3.3.1 Accessing the Software Package

Proceed as follows to access the packages from a local DVD drive:

Insert the NetWorker Suite DVD into the DVD drive.
Login as root.
If the CD is not automatically mounted, mount the DVD with an appropriate command.
Open the file readme_en.html in the root directory of the DVD with a web browser to get an overview of the available software packages and documentation.

Proceed as follows to access the NetWorker packages from the Fujitsu Siemens Computers website:

Select a direcotry or create a temporary directory to extract the software package from the downloaded file.
Open the Fujitsu Siemens Computers website at www.fujitsu-siemens.com/networker. Follow the link NetWorker backup solution and then enter the download section of the desired operating system.
Select the NetWorker package and download the corresponding file to the temporary directory.
Change to the directory which you used as download destination.
Log in as root.
Solaris systems: Uncompress the downloaded file. To uncompress i.e. the SMAWtun package, enter the following command:
gzip -d SMAWtun.V11A00*.sparc.pkg.gz

3.3.2 Initial Installation

3.3.2.1 Solaris(SPARC)

All installed files are stored in /nsr and /opt/nsr.

Install the package with:

If NSR-FWX is installed on the NSR-FWX Server, install the following packages:
# pkgadd -d <Pfad>/SMAWtun.V11A00*.sparc.pkg
# pkgadd -d <Pfad>/SMAWnwvt.V11A00*.sparc.pkg
# pkgadd -d <Pfad>/SMAWnwfwx.V11A00*.sparc.pkg
If NSR-FWX is installed on the NSR-FWX Proxy, install the following packages:
# pkgadd -d <Pfad>/SMAWtun.V11A00*.sparc.pkg
# pkgadd -d <Pfad>/SMAWnwvt.V11A00*.sparc.pkg

If you use the downloaded file to install the software the value of <path> is the temporary directory where you placed the file.
If you use the DVD to install the software the value of <path> is:
/cdrom/<DVD-Name>/products/Solaris_sparc/NSR-FWX_V1.1A00
Installation is also possible with the pkgadd command.To install a package with the pkgadd command, please perform the following steps:

The NSR-FWX licenses must be installed with the command keylic on the FWX Server System after installation.

3.3.2.2 Linux

This section describes the installation on Linux. There are different packages for x86 (32bit) and x86-64 (AMD64/Intel 64). Pay attention to choose the right package for you system architecture!

Install the package with:

If NSR-FWX is installed on the NSR-FWX Server, install the following package:
# rpm -i <path>/ nsrvtun-1.1A00-*rpm
# rpm -i <path>/ nsrvfwx-1.1A00-*rpm
If NSR-FWX is installed on the NSR-FWX Proxy, install the following package:
# rpm -i <path>/ nsrvtun-1.1A00-*rpm

If you use the downloaded file to install the software the value of <path> is the temporary directory where you placed the file.
If you use the DVD to install the software the value of <path> is:
<mount-point>/products/Linux_x86/NSR-FWX_V1.1A00
and onLinux X64-64 systems:
<Mount-Point>/products/Linux_x86-64/NSR-FWX_V1.1A0
The value of <mount-point> is::

SuSE Linux: /media/cdrecorder or /media/cdrom or /media/dvd
RedHat Linux: /mnt/cdrom

Pay attention to the following items:

The installation directory cannot be choosen. All programs will be installed to /opt/nsr.
The manual pages will be installed per default. If they shall not be installed the rpm command must be executed using the option --excludedocs.
The NSR-FWX meta data, i.e. everything stored in /nsr is stored using the directory /home/nsr.

The NSR-FWX licenses must be installed with the command keylic on the FWX Server System after installation.

3.3.3 Product Removal

Solaris
To uninstall a package, please use the command:
# pkgrm <pkgname> (e.g. "pkgrm SMAWnwfwx")
Linux
To uninstall a package, please use the command:
# rpm -e <pkgname> (e.g. "rpm -e nsr-fwx")

3.3.4 Update Installation

An update installation requires that you have uninstalled all NSR-FWX Patches (EKS) and the NSR-FWX Server- resp. Proxy-package. All configuration data is preserved.

Licenses from NSR-FWX version 1.0 are valid for 1.1A00.

3.3.5 License String Installation

License strings are installed using NetWorker command keylic. Keylic reads license strings from an ASCII file which contains one license string per line. License strings retrieved via the web tool NELI are downloaded in ASCII files ready to be processed by keylic. License strings deliverd in printed form have to be written into a file via an ASCII editor.
The command options for keylic are as follows:
keylic -f <license-file>

Licensing is always carried out on the NSR-FWX server side. One license is required for each tunnel connection. NSR-FWX licenses are stored locally on the NetWorker server machine but not in the NetWorker databases. They are not visible in the NetWorker GUI.

3.4 Product Use

After installation, configuration settings must be made on the FWX server and proxy systems. You will find detailed instructions for this on the FWX server system in the following directory /opt/nsr/doc:
- nsr-fwx.de.txt German configuration instructions
- nsr-fwx.en.txt English configuration instructions

3.5 Obsolete and Discontinued Functions

none

3.6 Incompatibilities