Allied Telesis 86222-27 manual

Simply connecting the world Patch Release Note Patch 86222-27 For Rapier Switches Intr oduction This patch rel ease note lists the issues addres sed and enhancements made in patch 86222-27 for Software Release 2.2. 2 on existing models of Rapier L3 managed switches. Patch file details are li sted in T able 1. This release note should be r ead in co[...]

2 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z Some of the issues addresse d in this Re lease Note include a level number . This number reflects the importance of the issue that has been r esolved. The levels are: Featur es in 86222-27 Patch 86222-27 includes all issues reso lved and e nhancem ents released in p[...]

Patch 86222-27 For Rapier Switches 3 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z Featur es in 86222-26 Patch file details are listed in T able 2: Patch 86222-26 includes all issues reso lved and e nhancem ents released in previous patch es for Software Release 2.2.2, an d the following enhancements: The correct pr otocol number [...]

4 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z A warning message will now appear if the DESTR OY DHCP POLICY command is executed for a DHCP policy that h as been used by one or more policies as the source of their configur ation information. A par ent policy can be destroyed with no affect on its child policies.[...]

Patch 86222-27 For Rapier Switches 5 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z The Switch MIB did not s how the correct dot1StpPriority value. This issue has been re solved. After cr eating a trunk g roup, t he activity LE Ds did not fla sh unless the configuration was used at reboot. This is sue has been r esolved so that the[...]

6 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z The GBLIP parameter in the ADD FIREW ALL POLICY RULE ACTION=NONA T command is optional. However , if the command was executed withou t the GBLIP parameter set, the command e rroneou sly failed after a CREA TE CONFIGURA T ION command was executed. This issue has been[...]

Patch 86222-27 For Rapier Switches 7 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z one of these server s did not exist, or the UDP s ession had failed to open. This issue has been r esolved. If all 32 VLAN interfaces had IP a ddresses attached, only 31 VLANs could be multihomed. Now all 32 VLAN int erfaces with IP addresses can be[...]

8 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z A log message is now cr eated when a user is for ced to logout from an asynchronous port when another user (i.e. someone connected via T elnet) resets the asynchr onous connection with the RESET ASYN command. Sometimes the Agent Address field in SNMP traps was not t[...]

Patch 86222-27 For Rapier Switches 9 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z Featur es in 86222-24 Patch file details are listed in T able 4: Patch 86222-23 includes all issues reso lved and e nhancem ents released in previous patch es for Software Release 2.2.2, an d the following enhancements: When a NTP packet was receive[...]

10 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z TCP has been excluded fr om this enhancement because TCP has the MSS (Maximum Segment Size) parameter for segment size contr ol. Also, for PPPoE interfaces with a r educed MTU of 1492, a previous enhancement in PCR 02097 ensures that TCP MSS values in sessions carr[...]

Patch 86222-27 For Rapier Switches 11 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z When replying to a DHCP REQUEST that had passed through a DHCP relay , the br oadcast bit of DHCP NAK messages was not being set. This issue has been r esolved in accor dance with RFC2131. DVMRP was not updating the downstream forwarding state corr[...]

12 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z When OSPF was enabled on startup, an OSPF interface would sometimes stay in the DOWN state. This issue has been r esolved. Logging out fr om a T elnet session caused the s witch to r estart. This issue has been re solved. Featur es in 86222-22 Patch file details ar[...]

Patch 86222-27 For Rapier Switches 13 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z • If the file system was completely full and the deletion of a s ingle file led to a compaction, the file system reported that it was continual ly compacting. This was because it was repeatedly searching through a linked list of file headers. •[...]

14 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z The EPOR T p arameter in the SHOW SWITCH L3 FIL T ER ENTR Y command was displaying incorr ectly after an issue was resolved in PCR02374. The command now displays correctly . DHCP entry reclaim checks are n ow delayed by 10 seconds if the entry is unroutable because[...]

Patch 86222-27 For Rapier Switches 15 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z Featur es in 86222-21 Patch file details are listed in T able 7: Patch 86222-21 includes all issues reso lved and e nhancem ents released in previous patch es for Software Release 2.2.2, an d the following enhancements: Lo c al ly g en er at e d I [...]

16 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z I G M P f a i l e d t o c re a t e a n a u t o m a t i c I G MP mem bership with no joining port when it r eceived multicast data that no ports were interested in , when I P T imeT oLive was set to 1 second. Also, IGM P erroneously sent a quer y on an IGMP enabled [...]

Patch 86222-27 For Rapier Switches 17 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z Proxy Arp can now be used on VLAN interfaces. A fatal error sometimes occurred if a TCP ses sion originating on the publ ic side of the fir ewall sent packets befo re the session wa s established wi th the host on the private side of the firewall. [...]

18 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z • DHCP entry hashes now have memo ry protection to pr event fatal erro rs. • DHCP client now retransmits XID corr ectly . • Lost OFFER messages on the server are no w handled corr ectly . • The DHCP server now corr ectly handles DHCP clients being moved to [...]

Patch 86222-27 For Rapier Switches 19 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z A dual Ethern et rou ter was incorr ectly accepting an IP add ress f rom a DHCP server when the of fered address was on the same networ k as the other Ethernet interface. An err or is now recorded when DHCP offers an address that is in the same sub[...]

20 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z The CREA TE CONFIG command did not save the SOURCEPOR T parameter to the configuration file when the low value of the source port range was set to zer o. This issue has been r esolved. Existing IGMP groups were not deleted when IGMP was disabled gl obally or on the[...]

Patch 86222-27 For Rapier Switches 21 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z STP always transmits untagged packets. If a port does not belong t o a VLAN as an untagged port, then the port must belong to one VLAN as a tagged port. In this case, STP should transmit VLAN tagged packets out of the port. The IP , MASK, and ACTIO[...]

22 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z When a file upload was interrupted, the file being uploaded was not unlocked. The file could not be delete d without r e starting the router . This issue has been r esolved. RIP was incorrectly sending tr iggered request packets over VLANs, ev en on non-demand link[...]

Patch 86222-27 For Rapier Switches 23 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z If the FILE module was r equired to re-w rite a file, the existing file would be deleted befor e the size of the new file was known. This issue has been res ol v ed . OSPF virtual links running acr oss a single network segment would accept 0.0.0.0 [...]

24 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z Featur es in 86222-16 Patch file details for Patch 8622 2-1 6 are listed in T able 1 1: Patch 86222-16 includes all issues reso lved and e nhancem ents released in previous patch es for Software Release 2.2.2, an d the following enhancements: The SET SWITCH L3 FIL [...]

Patch 86222-27 For Rapier Switches 25 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z The T ickT imer ran one percent slower than it should have. This issue has been resolved. Static ARPs can now be added to tagged vlans. When an IP flow table co ntained the IP flow structur e for a spoofed packet, the SHOW IP FLOW command would cra[...]

26 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z The SHOW IP ROUTE FIL TER command output displayed counters for 'passes' and 'i nclude' that were the same. This is sue has been resolved. Counters now incr ement only when a filter is active and do not count interface routes . PCR 02019 permitt[...]

Patch 86222-27 For Rapier Switches 27 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z Featur es in 86222-12 Patch file details for Patch 8622 2-1 2 are listed in T able 15. T able 15: Patch file details for Patch 86222-12 . Patch 86222-12 includes all issues reso lved and e nhancem ents released in previous patch es for Software Rel[...]

28 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z A physical port could not be r e-enabled once disabled when STP was active. This issue has been r esolved. The CREA TE CONFIG command now includes the STPFOR W ARDING parameter in generated scripts. The SHOW SWITCH command now displays the setting of STPFOR W ARDIN[...]

Patch 86222-27 For Rapier Switches 29 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z The timeout value for ICMP session entries in the fi rewall can now be adjusted via the OTHER TI MEOUT pa rameter of the SE T FIRE PO LICY command. Note: if the value for OTHE RTIMEOUT is set to more than 10 minutes the timeout used for ICMP sessio[...]

30 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z When a switch port was for ced to half duplex mode and the link partner was forced to full duplex mode, it was possib le for the switch to enter a state where it was unable to trans mit packets. This issue has been r esolved. Featur es in 86222-10 Patch file detail[...]

Patch 86222-27 For Rapier Switches 31 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z The switch now delays sending link traps immediately after a r estart to give the link to the trap host time to come up. A similar change has been made for the cold start trap. After a 10s dela y , all interfaces which ar e UP have a link trap gene[...]

32 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z T unnel creation failed when attempting to establish a point- to-point tunnel from an A TR router (tunnel originator ) to another vendor ’s router . This issue has been r esolved. When IGMP snooping was e nabled, if a member left a group on a port, it could not r[...]

Patch 86222-27 For Rapier Switches 33 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z A watchdog timout occurred when the r outer receive d an HTTP message with an over -length header . Normal HTTP r equests would also occasionally cause watchdog timeouts. These is sues have been r esolved. The OSPF r oute filter was not filterin g [...]

34 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z A memory loss occurred when certificates were used by ISAKMP . This issue has been re solved. ISAKMP heartbeats are no longer transm itted if the lower layer interface is down. This stop s ISAKMP heartbeats from bringing up links in dial-up environments. In some co[...]

Patch 86222-27 For Rapier Switches 35 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z If PPPoE AC services wer e not deleted in the same order they wer e added, the DELETE command would return an “operation successful” message but the service would still appear in the output of the SHOW PPP PPPOE command. This issue has been r e[...]

36 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z Featur es in 86222-05 Patch file details for Patch 8622 2-0 5 are listed in T able 22. Patch 86222-05 includes all issues reso lved and e nhancem ents released in previous patch es for Software Release 2.2.2, an d the following enhancements: A39 copper uplink modul[...]

Patch 86222-27 For Rapier Switches 37 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z When a VLAN was cr eated and then destr oyed on the G6 or G6F , the VT ABLE was corrupted. This has been fix ed. DHCP failed to send request messages when it was in a rebinding or renewing state. This issue has been r esolved. In some extr eme traf[...]

38 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z In a dual policy configur ation, the firewall would lock up under loa d. The firewal l would also mistakenly r eport SYN attacks. These issues have been res ol v ed . The CREA TE CONFIG command gene rated duplicate PIM interface configuration command lines. Th is i[...]

Patch 86222-27 For Rapier Switches 39 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z Featur es in 86222-01 Patch file details for Patch 8622 2-0 1 are listed in T able 24. Patch 86222-01 includes the following e nhancement for Software Release 2. 2.2: The DHCP server identified the w rong po rt numbers for incoming DHCP r e q u e s[...]

40 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z Enable and Disable ICMP Messages The Internet Control Message Protocol (ICMP) allows routers to send error and control messages to other r outers or hosts. It provides the communi cation between IP software on one system and IP softwar e on another . This enhanceme[...]

Patch 86222-27 For Rapier Switches 41 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z If ALL is specif ied, all confi gurable ICMP message r eplies are di sabled. If NETUNREACH is specif ied, all network unr eachable message repli es ar e disabled (RFC792 T ype 3 Code 0). If HOSTUNREACH is specified, all host unreachable message r e[...]

42 Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z IGMP Snooping All-Gr oup Entry Because IGMP is an IP-based pr otocol, multicast gr oup membership for VLAN aware devices is on a per -VLAN basis. If at least one port in the VLAN is a member of a multicast gr oup, multicast packets will be flood ed onto all ports i[...]

Patch 86222-27 For Rapier Switches SHOW IP IGMP 43 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z Modified Command SHOW IP IGMP Syntax SHOW IP IGMP [COUNTER] [INTERFACE= interface ] Description This command displays information about IGMP , and multicast group membership for each IP interface. This enhancement includes the line “[...]

44 ENABLE IP IGMP A LLG ROUP Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z New Commands This enhancement r equest introduces two new commands fr om enabling/ disabling all- group e ntries on switch ports. ENABLE IP IGMP ALLGROUP Syntax ENABLE IP IGMP ALLGROUP=[{ port-list |ALL}] where: ■ port-list is a port num[...]

Patch 86222-27 For Rapier Switch es DISABLE IP IGMP ALLG ROUP 45 Patch 86222-27 for Software R elease 2.2.2 C613-10319 -00 REV Z A vailability Patches can be downloaded fr om the So ftware Updates ar ea of the Allied T elesyn web site at www .alliedtelesyn.co.nz/su pport/updates/patches.html . A licence or passwor d is not re quir ed to use a patch[...]

46 DISABLE IP IGMP ALLGROUP Patch Release Note Patch 86222-27 for Software R elease 2.2.2 C613-10319-00 REV Z[...]