Allied Telesis 86241-06 manual

Simply connecting the world Patch Release Note Patch 86241-06 For Rapier Switches Intr oduction This patch rel ea se note li sts the issues ad dressed and enhancements made in patch 86241-06 for Software Release 2.4. 1 on existing models of Rapier L3 managed switches. Patch file details are li sted in T able 1. This release note should be r ead in [...]

2 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E Featur es in 86241-06 Patch 86241-06 includes all issues reso lved and e nhancem ents released in previous patch es for Software Release 2.4.1, an d the following enhancements: Wh en m o re t ha n tw o f ire w a ll p ol ic i es were configur ed, an unexpecte d switc[...]

Patch 86241-06 For Rapier Switches 3 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E During an SSH session between the sw itch and the Secur e CR T client, the client did not receive a r eply to it s MAX-packet-size CMSG. The switch does not support this message, but will now send a negative r esponse to satisfy the secure CR T clie[...]

4 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E DHCP was assigni ng incorre ct IP addr esses to clients when they moved from a r elayed to a non-r elayed range. Gateway checks have been ad ded to remove this issue. Deriving the originating VLAN f rom incoming packets could, in some circumstances, cause a software[...]

Patch 86241-06 For Rapier Switches 5 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E After sending a DHCP NAK in response to a client’s DHCP REQUEST with a bad lease ti me, the switch would fail to ag e out its corr esponding DHCP OFFER entry . This issue has been r esolved. The switch would disasse rt the AIS, IDLE, LOF and LOS a[...]

6 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E Featur es in 86241-05 Patch file details are listed in T able 2: Patch 86241-05 includes all issues reso lved and e nhancem ents released in previous patch es for Software Release 2.4.1, an d the following enhancements: Support has been added for SNMPv2c. SNMP respo[...]

Patch 86241-06 For Rapier Switches 7 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E Debugging commands are now available for the RADIUS and T ACACS control pr otocols. Raw packets, deco ded packets, and errors can now be displayed. Access control packet debugging allows the contents of the packets to be viewed. The debugging comman[...]

8 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E PIM was disabled permanentl y if the RESET IP command, or the DISABLE IP command followed by the ENABLE IP commands wer e executed. PIM is now automatically restarted if these commands ar e used. Previousl y the SET FIREW ALL POLICY RULE command permi t ted the use [...]

Patch 86241-06 For Rapier Switches 9 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E The DELETE IPV6 6T04 command sometimes caused an err or . This issue has been re sol v ed. The DECREMENT parameter of the ADD IPV6 INTERF ACE command was not recognised in the command line. This issue has been resolve d. The SET QOS TRAFFICCLASS com[...]

10 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E PPP interface speed. This issue has been r esolved so that the LNS side of the PPP interface shows the corr ect speed. Th e s ou rc e m as k i s n ow al wa ys 0x ffffffff in t he DV MR P f or wa rdi ng ta bl e. The temporary r oute in the DVMRP route table was not [...]

Patch 86241-06 For Rapier Switches 11 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E Some change actions, and the resending of pr u ne messages were not operating correctly . This issue has been resolved. The ADD FIREW ALL POLICY and SET FIREW ALL POLICY commands did not generate a valid port list whe n the optional POR T parameter[...]

12 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E After an ASYN port test, the port is now r eset to its pr e-test state if the test was started by a user connected to the same ASYN port. The following issues have been resolved: • When equal paths exist to a source, a PIM DM downstr e am switch/ router could not[...]

Patch 86241-06 For Rapier Switches 13 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E If multiple IPv6 interfaces shar ed the same link-local addr ess, pings to the link-local addr ess some times failed. This i ssu e has been reso lved. The source net mask has been r emoved from DVMRP prune , graft and graft-ack messages. Featur es [...]

14 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E The virtual MAC addr ess was used as the source MAC for all packets forwarded on an interface associated with a V irtual Router (VR). This was confusing when multiple VRs wer e defined over the same interface because only one virtual MAC address was ever used. The [...]

Patch 86241-06 For Rapier Switches 15 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E IPSec no longer logs packets that match an ACTION=ALLOW policy . The overhead of this logging was affecting non- IPSec traffic. The LOCALRSAKEY parameter in the CREA TE ISAKMP POLICY and SET ISAKMP POLICY commands was not acce pting the value zero.[...]

16 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E The SHOW IPV6 INTERF ACE command now shows the addr ess lifetime aging status that is determined by the DECREMENT pa rameter in the ADD IPV6 INTERF ACE command. The default valid and pr eferred addr ess lifetimes have been changed to 30 days and 7 days r espectivel[...]

Patch 86241-06 For Rapier Switches 17 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E The SHOW CLASSIFIE R command was not d isplaying Layer 3 in formation if the classifier had been cr eated with the parameters ETHFORMA T=SN AP and PROTOCOL={IP|0000000800}. This issue has been resolved. When acting as a PPPoE Access Concen trator ([...]

18 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E When an IP Multihomed interface was used as an OSP F interface, neighbour r elationships wer e only established i f the IP interface for OS PF was added first in the configuration. Now , OSPF establis hes neig hbour relationships r egardless of the IP Multihomed in[...]

Patch 86241-06 For Rapier Switches 19 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E The following issues have been resolved: • It was possible to assign the same network on dif ferent IPV6 interfaces • The loopback address was being added to other interfaces • The tunnel configuration was not showing corr ectly in IPV6 confi[...]

20 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E An ISDN call was acti vated by IPv6 Router Advertisements over IPv6 tunnel interfaces. This issue has been r esolved. Packets with a RIP source addr ess and next hop addr ess that are not on the same subnet as the interface will now be processed. If the r eceived n[...]

Patch 86241-06 For Rapier Switches 21 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E Featur es in 86241-01 Patch file details are listed in T able 6: Patch 86241-01 includes the following enhancements: A new command allow s the Layer 3 aging timer to be changed: SET SWITCH L3AGEINGTIMER=<seconds> where seconds can be 30 - 432[...]

22 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E but is now checked by ICMP handlers fo r attacks and eligibility . If the ICMP traffic matches a NA T rule, NA T will occur on inbound and outbound traffic. HTTP 1.0 r equests sometimes caused the fir ewall HTTP proxy to close prematur ely . Cached TCP sessions wer[...]

Patch 86241-06 For Rapier Switches 23 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E into 8 blocks of 8 5 bits with 84 bits available for payload, and one bit for framing overhead. The frame structure is shown in Figur e 1 on page 23. Figure 1: DS3 Framing Structur e. The switch with the DS3 interface is called the near end . The e[...]

24 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E The three C-bits in M-s ubf rame 4 ar e designated as FEBE bits. The FEBE bits are r eturned to the far end to indicate the occurrence of a framing err or or CP- bit parity err or . If none occur , the FEBE bits are set to all ones. One or all of the FEBE bits are [...]

Patch 86241-06 For Rapier Switches 25 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E Diagnostic loopback is shown in Figur e 3 on page 25. In this loopback mode the transmit signal is connected straight to the receive signal. Figure 3: Diagnostic Loopback. In C-bit parity mode it is also possible for the switch to request a loopbac[...]

26 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E maintenance link allows a nu mber of identification messages to be inserted in to the path over head of the DS3 signal. These messages ar e in the form of text characters and allow the users a t either end of the DS3 path to ensure that the correct DS3 signal has r[...]

Patch 86241-06 For Rapier Switches 27 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E The P ARAM24 parameter specifies the 24-hour counter thr eshold for all performance monitoring parameters (P ES, PSES, SEF , UAS, LES, CES, CSES) between 1 and 65535 seconds inclusive. If a trigger has been cr eated, it will assert if the 24-hour c[...]

28 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E ■ ENABLE DS3 TEST ■ RESET DS3 ■ RESET DS3 COUNTERS ■ SET DS3 ■ SHOW DS3 CMTCE ■ SHOW DS3 CONFIGURA TION ■ SHOW DS3 COUNTERS ■ SHOW DS3 DEBUG ■ SHOW DS3 ST A TE ■ SHOW DS3 TEST Once the interface is set up and configur ed, it can be used in conju[...]

Patch 86241-06 For Rapier Switches 29 Patch 86241-05 for Software R elease 2.4.1 C613-10340 -00 REV E Dynamic Port Security Dynamic Port Security allows for dynamic MAC addr ess learning on a switch port. If a MAC addr ess is unused for a peri od of time, it will be aged from the database of currently acce pted MAC address es. This allows the learn[...]

30 Patch Release Note Patch 86241-05 for Software R elease 2.4.1 C613-10340-00 REV E Figure 1-7: Example output from the SHOW SWITCH PORT command showing the RELEARN parameter . A vailability Patches can be downloaded fr om the So ftware Updates ar ea of the Allied T elesyn web site at www .alliedtelesyn.co.nz/su pport/updates/patches.html . A lice[...]