Allied Telesis AT-9900 Series manual

Soft war e Mainte nance Rel eas e Note V er sion 27 6- 03 for A T -89 00 an d A T - 99 00 s eri es sw it ch es This so ftware mai ntenance re lease note lis ts the issues address ed and enhancements made in Mainten ance V er sion 276-0 3 for Sof tw are Relea se 2.7.6. Rel ease deta ils a re listed in the follo wing t ab le: Caution: Using a m ainte[...]

Enabl ing and Ins talli ng this Relea se 2 V ersion 276 -03 C613-10 474-00 REV B Enablin g and Installin g this Re lease T o use this mainte nance r elease you must have a base r eleas e lic ense for Softwar e Relea se 2.7.6. Contact y our distri butor or re sel l er f or m ore i nf orm at io n. T o enable this r elease and install it as the prefer[...]

Feat ure s in 276-03 3 V ersion 276 -03 C613-10 474-00 REV B Feat ur es in 276-03 Softwar e Maintenance V er sion 276 -03 includes all reso lved issues and en hancements in earlier versions, and the res olved issues and enhancements in the following tables. In the t ables, for each product series: ■ “Y” ind icates th at the r es olution is av[...]

Feat ure s in 276-02 4 V ersion 276 -03 C613-10 474-00 REV B Feat ur es in 276-02 Softwar e Maintenance V er sion 276 -02 includes all reso lved issues and en hancements in earlier versions, and the res olved issues and enhancements in the following tables. In the t ables, for each product series: ■ “Y” ind icates th at the r es olution is av[...]

Feat ure s in 276-02 5 V ersion 276 -03 C613-10 474-00 REV B Level 2 CR Module L evel Descr iptio n AR44x / AR450 AR7x5 AR750S Rapier i A T -8800 A T -8600 A T -8700 XL A T -8948 A T -9900 A T -9800 CR00000529 IP v6 , PIM6 2 When a bet ter r oute for mul tic ast tra ffi c became ava ilab le , PIM for I Pv6 did not reca lc u late t h e rout e a nd s[...]

Feat ure s in 276-02 6 V ersion 276 -03 C613-10 474-00 REV B CR00008699 Sw itc h 2 Pre viously , when 300 M AC addr ess fil ters wer e added to a port and t he port wa s res et, the CPU became 100 % utilis ed. This i ssue has be en reso lv ed. ---Y YYY- - - CR00008992 I Pv6 2 The r out er or switc h some times unexp ectedly st opped fo rward in g I[...]

Feat ure s in 276-02 7 V ersion 276 -03 C613-10 474-00 REV B CR00010886 IP v6 , IP G at ew a y , PPP 2 When a use r enable d a Dial-o n-De mand PPP inte rf ace, so meti mes th e rout er or switc h did not appl y the ass ociat ed IP ro ute change . This m eant tha t rout es via th e Dial- on-Dem and PPP int erf ace we re not avai labl e for use. Whe[...]

Feat ure s in 276-02 8 V ersion 276 -03 C613-10 474-00 REV B CR 0 00 113 4 9 SYN 2 At l ow baud rates , a synchr onous connecti on was unabl e to rea ch 100% util isati on o f the avai lable bandwi dth. The q ueuei ng mec hani sm has been impr ove d to al low 100% link ut ili sation. Flag shar ing betwee n back -to-back HDLC frames is now suppor te[...]

Feat ure s in 276-02 9 V ersion 276 -03 C613-10 474-00 REV B CR 0 00 116 6 5 PRI 2 When using an unstruct ur ed T DM gr oup o ver a n E 1 mod e PRI int erfac e, occasi on ally a hi gh leve l of er ror s was experi enced. This may have ca used the li nk to be un stabl e, or may h ave re sulte d in r educed da ta t hrough put. This i ssue has be en r[...]

Feat ure s in 276-02 10 V ersion 276 -03 C613-10 474-00 REV B CR 0 00 118 5 5 TCP , UPnP 2 TCP se ss ions would s omet imes “ hang” in the Cl ose W a it s tate. Thi s beha viour occurr ed when a UPnP notifi cati on sessi on was clos ed by the cont rol p oint (usua lly Windows XP , SP2), vi a a “200 OK” me ssage tha t contai ned a “Connect[...]

Feat ure s in 276-02 11 V ersion 276 -03 C613-10 474-00 REV B CR00012013 VLAN 2 When MLD snoopi ng was enabl ed and the swit ch rec eived I Pv6 multi cast pack ets (such as M LD Que ry , Re port or Done mes sages; IPv 6 NS packe ts; and I Pv6 RA packet s) on a non-mas te r port of a trunk gr oup, it incor r ectly f orwar ded th em out t he master p[...]

Feat ure s in 276-02 12 V ersion 276 -03 C613-10 474-00 REV B CR00012140 PI M 2 I f the link be twee n two PIM Spar se Mode neig hbours w as r emove d, sometim es one of the nei ghbour s reboo ted . This i ssue has be en reso lv ed. YYYYY- - YYY CR00012167 Sw itc h 2 When MAC a ddres s entries ti me ou t in t he sw itc h’ s ARP ta ble, the sw itc[...]

Feat ure s in 276-02 13 V ersion 276 -03 C613-10 474-00 REV B CR00012304 TP A D 2 TP AD pr evi ously had iss ues when the LRC ( Longit udinal Redun danc y Check ) at the en d of a tr ansact ion was 0x00 and the tr ans actio n was via the TCP por t. T he trans acti on would sta ll in the box and ev ent ually ti me out the X.25 ca ll. This i ssue has[...]

Feat ure s in 276-02 14 V ersion 276 -03 C613-10 474-00 REV B CR00012482 Core, Ut ili ty , Stacki ng 2 A fe w c o mm an ds on the s w itch a re lo c al c om ma nds —t h ey rela te onl y to t he switc h on whic h the us er types them, and not to any other sw itc h in the st ack. The edi t co mmand i s on e s uch c ommand. Pr evi ously , loc al c o[...]

Feat ure s in 276-02 15 V ersion 276 -03 C613-10 474-00 REV B CR00012613 Firew a ll 2 When t he W AN l oad ba lancer was us ed w ith IP NA T (ins tead of fi rewal l NA T), a nd an F TP s essi on was esta blis hed to a ser ver on th e publi c network , the r outer did not c orr ect ly e stabli sh a r eturn s ession. Th is mea nt dat a w as una ble t[...]

Feat ure s in 276-02 16 V ersion 276 -03 C613-10 474-00 REV B Level 3 CR Module L evel Descr iptio n AR44x / AR450 AR7x5 AR750S Rapier i A T -8800 A T -8600 A T -8700 XL A T -8948 A T -9900 A T -9800 CR00006900 BGP , IP G ate w ay 3 If the metri c on a blac khole r oute was ch ange d usi ng the comma nd s et ip rout e and this caus ed another rout [...]

Feat ure s in 276-02 17 V ersion 276 -03 C613-10 474-00 REV B CR00010508 BGP 3 When the ro uter or s witch r ecei ved a BGP update mes sage and cr eated new pre fix ent ries for t he rout es in the upd ate, it r evers ed the or der of the AS segm ents. This i ssue has be en reso lv ed. YYYYY- - YYY CR00010952 I Pv6 3 If ei ther of the fol lowin g w[...]

Feat ure s in 276-02 18 V ersion 276 -03 C613-10 474-00 REV B CR 0 00 115 1 0 IPs ec 3 The maximum SPI value has been incr e ased in the commands : crea te ips ec sa sp ecif ic atio n= spec -i d in sp i= sp i outs pi = spi [ ot he r pa ra me ter s ] set i ps ec sa sp ec if icat ion = spec -id i nsp i= sp i outspi= spi [ othe r par am et er s ] The [...]

Feat ure s in 276-02 19 V ersion 276 -03 C613-10 474-00 REV B CR 0 00 119 3 1 VLAN 3 Af ter u sers adde d m ult iple port s to one pri vate VLAN as tagge d ports, tho se ports could not be added to anot her pri vate VLAN as tagge d ports by us ing a singl e command (they coul d be added one por t at a time) . This i ssue has be en reso lv ed. ---Y [...]

Feat ure s in 276-02 20 V ersion 276 -03 C613-10 474-00 REV B CR00012040 IP Gat ew a y , W AN load balance r 3 If polic y-bas ed r outin g and the W AN lo ad bal ancer wer e b oth co nfigur ed, the load bal ancer balanced traf fic eve n if it matche d the rout ing fi lter . Because t he purpos e of pol icy- based r outing i s to co ntr ol the r out[...]

Feat ure s in 276-02 21 V ersion 276 -03 C613-10 474-00 REV B CR00012307 VLAN 3 Pre vi ously , when MSTP was conf igur ed i t was not poss ible to del ete po rts fro m VLANs in th e MSTP CIST , unless MSTP w as first disabled. This i ssue has be en reso lved. Deleti ng such port s is now permitt ed. ---Y YYYYY- CR00012314 T ACACS+, Te l n e t 3 If [...]

Feat ure s in 276-02 22 V ersion 276 -03 C613-10 474-00 REV B CR00012413 Loggi ng 3 Wh en a u ser c rea te s perm an e n t log fil te rs , the ex is ti ng d ef aul t fi lte r is mo v ed to the b ottom of t he l ist of f ilt ers, i nstead of being dele ted. This beha viour i s cor r ect. However , output of the comma nd show config dyn= log pr evi o[...]

Feat ure s in 276-02 23 V ersion 276 -03 C613-10 474-00 REV B Level 4 CR00012594 ST T 3 With unidi rec tiona l tra ffi c or s mall f rames, a n STT connect ion w ould so metimes stop pas sing dat a. This i ssue has be en reso lv ed. YYYY ------ CR Module L evel Descr iptio n AR44x / AR4 50 AR7x5 AR750S Rapier i AT - 8 8 0 0 AT - 8 6 0 0 A T - 8700X[...]

Feat ure s in 276-02 24 V ersion 276 -03 C613-10 474-00 REV B CR 0 00 119 9 5 BGP 4 T o s impli fy disp layi ng BGP memory usage , the com mand show bgp memli mit bgp has been r emov ed. Use the command show b gp meml imit scan i nstead . Also, you ca n no w displ ay onl y the BGP backof f l og mes sages by using either of the f oll owing comma nds[...]

Feat ure s in 276-02 25 V ersion 276 -03 C613-10 474-00 REV B Enha nce ments CR Module L evel Descr iptio n AR44x / AR450 AR7x5 AR750S Rapier i A T -8800 A T -8600 A T -8700 XL A T -8948 A T -9900 A T -9800 CR00007105 M STP - T wo new c ommands have bee n added t o simpl ify M STP ma nageme nt: ena bl e ms tp port ={ po rt -l ist | all } disa bl e [...]

Feat ure s in 276-02 26 V ersion 276 -03 C613-10 474-00 REV B CR 0 00 112 0 4 IP G a tew ay - This Sof twar e V er sion al lows you to add ARP entr ies wit h multi cast M AC addr ess es and allow s the r outer or swit ch to acce pt packet s with conf lic ting I P and MAC addr esse s. It intr oduces the ena ble ip mac dis p ari ty and disable ip mac[...]

Feat ure s in 276-02 27 V ersion 276 -03 C613-10 474-00 REV B CR00012620 Bri dging - By def ault, when the r outer rec eives a tagged p acke t on an Eth or VLAN i nter face and brid ges it, the br idge st rips out the packe t’ s VLAN t ag. Th is enhanc ement enable s you to set t he bridge to ins tead r etain the ta g, by using off , no or fa ls [...]

Feat ure s in 276-01 28 V ersion 276 -03 C613-10 474-00 REV B Feat ur es in 276-01 Softwar e Maintenance V ersion 276-01 includes t he res olved is sues and enhancements in the fol lowing tables. In the t ables, f or e ach pro duct series: ■ “Y” i n a white column i ndicates t hat th e r esolut ion i s av ailable i n V er sion 276-01 fo r tha[...]

Feat ure s in 276-01 29 V ersion 276 -03 C613-10 474-00 REV B CR0000874 2 Swi tch 2 Pre viousl y , if a swi tch port ’ s learn limit was chan ged to a number tha t was less than the curr entl y-l earned nu mber of MAC addre sse s, y ou w er e unable to d elete the l earned MAC ad dr esses . The s witch also did not lock the port. This i ssue h as[...]

Feat ure s in 276-01 30 V ersion 276 -03 C613-10 474-00 REV B CR0001053 9 IP 2 Somet imes the for war ding of pac kets occ urr ed unneces sari ly slo wly . This hap pened if t he forwar ding i nte rface was asso ciat ed with an IP f ilte r with a vari able fi eld pat tern, such as TCP se ssion or ICMP code and typ e. For sw itch es, note that this [...]

Feat ure s in 276-01 31 V ersion 276 -03 C613-10 474-00 REV B CR0001099 6 Por t Auth enticat io n 2 When por t authent icatio n was usi ng a RADIUS server , it somet imes stop ped work ing a fter sever al hours. Th is was beca use port authe ntica tion gene rated RADIUS Acco unting Request (S TOP) messa ges with an i ncorr ect Acc t-Ses sion- Ti m [...]

Feat ure s in 276-01 32 V ersion 276 -03 C613-10 474-00 REV B CR0001124 3 ISAK MP 2 Pr evi ously , if an IPsec/ ISAKMP tunn el was under heav y load, an ISAKMP pe er may have r etran smit ted mess ages . When the las t message i n an ISAKMP excha nge was ret ransmi tted, the r emot e peer did not expect t o rec eive t he sec ond mes sage after the [...]

Feat ure s in 276-01 33 V ersion 276 -03 C613-10 474-00 REV B CR0001138 7 PPP 2 Using an onl ine l imit for a PPP inter face over P PPoE over a V LAN caus ed the r outer or swit ch to re boot whe n the onl ine lim it was r eached . This i ssue has been r esolv ed. YY YYY - - YYY CR0001140 2 SSL 2 Pre viousl y , if an SS L client cl osed the TCP con[...]

Feat ure s in 276-01 34 V ersion 276 -03 C613-10 474-00 REV B Level 3 CR Module Le v el Descriptio n AR 400 AR 7x5 AR 750S Rapier i AT - 8 8 0 0 AT - 8 6 0 0 A T -8700XL AT - 8 9 4 8 AT - 9 9 0 0 AT - 9 8 0 0 CR00006439 GUI 3 When a user logged ont o the rou ter or swi tch thr ough the GUI, the r outer or switc h’ s log reco rded sev eral HTTP 40[...]

Feat ure s in 276-01 35 V ersion 276 -03 C613-10 474-00 REV B Level 4 CR00011664 PERM 3 The IAC (int erp ret as cont rol ) char act ers (0x FF) ar e escap ed when se nt acr oss the perm anent ass ignment connec tion. If TCP coul d not send th e enti re buf fer , the tw o IAC cha ra c ters w ere p rev iou s ly sp l it u p, w h i ch re s ulte d in ex[...]

Feat ure s in 276-01 36 V ersion 276 -03 C613-10 474-00 REV B Enha nce ments CR Module Le v el Descriptio n AR 400 AR 7x5 AR 750S Rapier i AT - 8 8 0 0 AT - 8 6 0 0 A T -8700XL AT - 8 9 4 8 AT - 9 9 0 0 AT - 9 8 0 0 CR00010196 BGP , IP gat ewa y , Swit ch - A new feat ure enabl es y ou to set the maximum le ngth of the har dware r oute update que u[...]

Adding Sta tic ARP Entri es wit h Multi cast MAC Addres se s (CR0001120 4) 37 V ersion 276 -03 C613-10 474-00 REV B Addin g Static ARP Ent rie s with Mu lticast MAC Addr e sse s (CR000 11204) This So ftware V ersion al lows yo u to ad d ARP e ntr ies with mu lticast M AC add resses and a llows t he router or swi tch t o a ccep t pa ck et s w ith co[...]

Adding Sta tic ARP Entri es wit h Multi cast MAC Addres se s (CR0001120 4) 38 V ersion 276 -03 C613-10 474-00 REV B T o se e whether macdisparity is enabled or di sabled, use the command: show i p For an example of how to us e ARP entries with multic ast MAC addr esses, s ee Guideli ne to Windows 2003 Network Load Bala ncing Clus tering with All ie[...]

Securi ng a Singl e VLAN thr ough Switc h Filter s (CR0 0011271) 39 V ersion 276 -03 C613-10 474-00 REV B Secu ring a Single VL AN th rough Swi tch Filters (CR000 11271) On A T -8824, Rapier 24i, A T -8 724XL and A T -8624 switc hes, this enhancem en t enables you to use switch fil ters to secur e only the c ur ren t VLAN, in stead of securing al l[...]

Securi ng a Singl e VLAN thr ough Switc h Filter s (CR0 0011271) 40 V ersion 276 -03 C613-10 474-00 REV B Conf igu ring vlanse cur e T o turn off the default behaviour , so th at the filter prev ents access to only t he current VLAN when you mo ve the host, use the new c omma nd: disa bl e swi tc h filt er vla n secu re T o r eturn to the standar d[...]

Mak ing Async hrono us Ports Respo nd Mor e Quickl y (CR0001156 5) 41 V ersion 276 -03 C613-10 474-00 REV B Making Asyn chr onou s Ports Respond Mor e Quickly (CR00011 565 ) W he n an asy nch rono u s p o rt i s i n ten mode , it bundles together the charact ers t hat it r eceives within a certai n t ime period , in stead of passing them one at a t[...]

Mak ing Async hrono us Ports Respo nd Mor e Quickl y (CR0001156 5) 42 V ersion 276 -03 C613-10 474-00 REV B Figur e 1: New par amete rs in the outpu t of the show a syn=0 command ASY N 0 : 00 0000 14 70 se co nds Last ch ange at: 000 00 014 65 sec on ds ASY N in form at ion Nam e .. .... .. .... . .... .. ... As yn 0 Stat us . .. .. .. .. ... .... [...]

Displ aying Route s Learned fr om a Speci fic BGP Pee r (CR0001172 4) 43 V ersion 276 -03 C613-10 474-00 REV B Disp laying R outes L earned fr om a Spe cific B GP Pe er (CR0 001172 4) This enhancement enables yo u to d isplay: ■ the number of routes learned fr om a s pecific peer ■ informatio n about each r oute learned from a specific peer Dis[...]

Route Updat e Queue Lengt h (CR0001019 6) 44 V ersion 276 -03 C613-10 474-00 REV B Rou te Update Qu eue Le ngth (CR 000 10196) When hardware l earning delay is enabled (the default), the switch lea rns new routes in software, then places them into a queue fo r a d di ng th e m to it s ha rdw a re ro u ti n g table. Defaults hav e been set for t he [...]

Route Updat e Queue Lengt h (CR0001019 6) 45 V ersion 276 -03 C613-10 474-00 REV B Figur e 4: Outp ut of the show sw itch co m ma nd w h en ha rd w a re le ar n i ng d el ay i s en a bl e d Switc h Co nf ig ur ati on ---- -- -- -- -- -- -- --- ---- -- -- -- -- -- --- ---- -- -- -- -- -- --- -- ---- Switc h Ad dr es s ... .. .. .. .... 00- 00- cd -1[...]

Permane nt Ass ignment s (CR0001135 5) 46 V ersion 276 -03 C613-10 474-00 REV B Perm anent Assig nmen ts (CR000 11355) Permanent assignments provid e a method for creat ing permanent links between terminal ports on r outers. Any t wo terminal ports o n a single ro uter or on routers that can comm unicate with each other via T CP/IP can be set up to[...]

Permane nt Ass ignment s (CR0001135 5) 47 V ersion 276 -03 C613-10 474-00 REV B Figur e 5: Exa mple outpu t fro m the show p erm command If the two ports of the permanent assignment are on d if fere nt r outers, the add perm comm and must be enter ed on each router . If both ports are on the same ro u ter , the command only needs to be entered once[...]

Permane nt Ass ignment s (CR0001135 5) 48 V ersion 276 -03 C613-10 474-00 REV B Figur e 6: Exa mple outpu t fro m the show p erm command fo r router 172.26.4. 1 The co mm ands to be execut ed on the r o uter with address 172.2 0.34.9 ar e: add pe rm =m ai n of fic e lp or t=3 rp or t=3 ip= 17 2. 26 .4.1 sho w pe rm which pr oduces the output shown [...]

Permane nt Ass ignment s (CR0001135 5) 49 V ersion 276 -03 C613-10 474-00 REV B Comma nd R efer ence This section describes commands availabl e on the ro u ter to configur e and manage permanent assignments. add p erm Syntax ADD PERM= perm-name LPORT= lport RPORT= rport IP= ipadd where: ■ perm -nam e is the name of the permanent ass ignment. The [...]

Permane nt Ass ignment s (CR0001135 5) 50 V ersion 276 -03 C613-10 474-00 REV B Re lat ed Co mm and s delete perm res et perm se t p erm sho w pe rm de let e pe rm Syntax DELete PERM= perm-name where perm -nam e is t he name of t he permanent assignment. The name is case sensit ive an d must be identica l on each r outer i n the per manent assi gnm[...]

Permane nt Ass ignment s (CR0001135 5) 51 V ersion 276 -03 C613-10 474-00 REV B reset pe rm Syntax RESET PERM= perm-name where perm -nam e is t he name of t he permanent assignment. The name is case sensit ive an d must be identica l on each r outer i n the per manent assi gnment . If the name cont ain s space s, i t must be in dou ble qu otes . De[...]

Permane nt Ass ignment s (CR0001135 5) 52 V ersion 276 -03 C613-10 474-00 REV B set p erm Syntax SET PERM= perm-name [LPORT= lport ] [RPORT= rpo rt ] [IP= ipadd ] where: ■ perm -nam e is the name o f the per manent assignment. The name is case sensitive and must be identical o n each ro uter in t he permanent ass i gn men t . If th e name cont ai[...]

Permane nt Ass ignment s (CR0001135 5) 53 V ersion 276 -03 C613-10 474-00 REV B sh ow perm Syntax SHOW PERM[= perm-name ] where perm-nam e is the name of a perma nent assignm ent Description This command displays the name, local and rem ote po rts and remote IP addres s for all permanent assignments current ly defined on the router . If a permanent[...]

Permane nt Ass ignment s (CR0001135 5) 54 V ersion 276 -03 C613-10 474-00 REV B Re lat ed Co mm and s ad d pe rm delete perm res et perm se t p erm[...]