R E L E A S E N O T E S F O R T H E R O U T E R 3 0 0 0 A N D R O U T E R 5 0 0 0 S E R I E SV 1 . 1 02.8. SecuritySymptom SolutionACL match counts are not logged. ACL match counting is only supported with thefirewall feature.If you are using automatic matching order withACLs, a rule that is similar to an existing rule,even if they have different qualifiers, is notadded as a separate rule.Remove the existing rule before applying thenew rule.IPSec in transport mode will transmit transittraffic with no security headers. IPSec intransport mode is designed for directcommunications between two peers runningIPSec.Use Tunnel mode if you are configuring therouter to be an IPSec gateway.IPSec nesting is not supported in this release. IPSec nesting is not supported in this release.The Encryption card status message, ByteOrder: Not consistent with host,can be misleading.Disregard this status message.Only one security association is used for eachACL-incompatible with per-rule implementation.Create one separate ACL for each permitstatement in the third-party access list.2.9. VPNSymptom SolutionThe basic version of this release does notsupport GRE or L2TP.Use the extended version of this release forGRE and L2TP tunneling support.2.10. QoSSymptom SolutionNBX Layer 2 traffic cannot be classified forQoS.Use Layer 3 prioritization.2.11. Dial-UpSymptom SolutionThe ppp chap user command is not supportedin dialer interfaces.When using Resource DCC and using chapauthentication, ppp chap user should beconfigured only on the router that is dialing out.7