Allied Telesis AT-WA1104G-10 manual

Software Maintenance Release Note Maintenance V ersion 291-10 for AR415S, AR440S, AR441S, AR442S, AR450S, AR725, AR745, AR750S, AR750S-DP , and AR770S r outers and A T -8600, A T -8700XL, Rapier i, Rapier w , A T -8800, A T - 8900, x900-48, A T -9900, an d A T -9800 Series switches This software maintenance release note lists the issues addresse d [...]

Enabling and Installing this Release 2 V ersion 291- 10 C613-10488 -00 REV G Caution: Using a maintenance version on the wron g model may cause un pr ed ictable results, including d isruption to the network. This maintenance release note should be r ead in conjunction with the following documents: ■ the Release Note for Software V ersion 2.9.1, a[...]

Levels 3 V ersion 291- 10 C613-10488 -00 REV G Levels Some of the issues addressed in this Maintenance V ersion include a level number . This number reflects the importance of the iss ue that has been r esolved. The levels are: Level 1 This issue will cause significant interruption to network services, and ther e is no work-around. Level 2 This iss[...]

Features in 291- 10 4 V ersion 291- 10 C613-10488 -00 REV G Featur es in 291-10 Software Maintenance V ersion 291-10 includes the resolved issues and enhancements in the following tables. In the tables, for e ach product series: ■ “Y” indicates that the resolution is availabl e in V ersion 291-10 for that product series. ■ “ – ” indic[...]

Features in 291- 10 5 V ersion 291- 10 C613-10488 -00 REV G CR00018663 Sw itching 2 The resolution to CR 444 meant that packets pr ocessed by the CPU ar e now subjected to the same filtering as pa ckets sw itched in h ardware. However , this filtering did not always return th e expected results. Sometimes its IP address matching was incorrect, and [...]

Features in 291- 10 6 V ersion 291- 10 C613-10488 -00 REV G Level 3 Level 4 No level 4 issues Enhancements No enhancements CR Module Level Description AR400 AR7x5 AR7x0S Rapier i Rapier w AT - 8800 A T -8600 A T -8700XL x900 - 48 A T- 9900 A T -9800 CR00018514 Ping 3 T racer oute (the trace command) did not work. It returned the error “T he desti[...]

Features in 291- 09 7 V ersion 291- 10 C613-10488 -00 REV G Featur es in 291-09 Software Maintenance V ersion 291-09 includes the enhancement in the following table, which is available for x900-48FE and x900- 48FE-N switches. Level 1-4 No level 1-4 issues Enhancements CR Module Level Description AR400 AR7x5 AR7x0S Rapier i Rapier w AT - 8800 A T -8[...]

Features in 291- 08 8 V ersion 291- 10 C613-10488 -00 REV G Featur es in 291-08 Software Maintenance V ersion 291-08 includes the resolved issues and enhancements in the following tables. In the tables, for e ach product series: ■ “Y” indicates that the resolution is availabl e in V ersion 291-08 for that product series. ■ “ – ” indic[...]

Features in 291- 08 9 V ersion 291- 10 C613-10488 -00 REV G CR00003495 Classifier 2 The following issues ex isted with classifiers: ■ classifiers matching pro tocol=ipv6 and ip protoc ol=icmp could be created mor e than once ■ classifiers matching pro tocol=ipv6 and ip protoc ol=1 could be cr eated but were m eaningless because 1 r epresents IP[...]

Features in 291- 08 10 V ersion 291- 10 C613-10488 -00 REV G CR00007178 RIPn g 2 The following issues occu rred with RIPng: ■ RIPng dropped requests fr om peers with non link-lo cal addresses. ■ for a solicited response, if the routes did not exist on the device, RIPng returned a metric of 0 for them instead of r eturning a metric of 16 ■ RIP[...]

Features in 291- 08 11 V ersion 291- 10 C613-10488 -00 REV G CR00010967 PPP 2 If the router or switch r e ceived an LCP packet with an unrecognised protocol, it responded with a ProtocolReject packet of incorrect length that did not respect the established MR U of the peer . This issue has b een resolved. YYYYYY- - YYY CR00010968 PPP 2 When the est[...]

Features in 291- 08 12 V ersion 291- 10 C613-10488 -00 REV G CR00012871 TTY 2 Unexpected characters could appear on the terminal emulator display when the column size was set gr eater than 80 and the use r edited a command that spanned more than one line of the display . This issue has b een resolved. YYYYYYYYYY Y CR00013597 DVMRP , Frame Relay 2 I[...]

Features in 291- 08 13 V ersion 291- 10 C613-10488 -00 REV G CR00013778 IPv6 2 If a user shortened the prefix length of an IPv6 interf ace address, then lengthened it , it became impos sible to change the prefix length again. This issue has b een resolved. YYYYYY- - YYY CR00013893 MS TP 2 Ex ecuting the commands disable mstp port= number or enable [...]

Features in 291- 08 14 V ersion 291- 10 C613-10488 -00 REV G CR00014827 PIM6 2 If an IPv6 accelerator was used, and the upstream r outer forwarded IPv6 multicast data just before the pr une lim it timer expired, then the downstream router sometimes did not send the prune until signific antly after the timer expired. This issue has b een resolved. -[...]

Features in 291- 08 15 V ersion 291- 10 C613-10488 -00 REV G CR00016587 IPv6 2 The timer that gover ns the interval between repeated neighbour solicitation messages could onl y be configured by using the ndretrans parameter of the set ipv6 nd command, and not through router advertisements that the router or switch received from ot her routers. This[...]

Features in 291- 08 16 V ersion 291- 10 C613-10488 -00 REV G CR00016985 AT M 2 If a PPP instance was destr oyed after an attached A TM channel had been modified usin g the set atm channel command, the router r ebooted. The router could also reboot if an A TM channel was deleted under similar circumstances. This issue has b een resolved. Y ---------[...]

Features in 291- 08 17 V ersion 291- 10 C613-10488 -00 REV G CR00017226 IPsec 2 I f an IPsec tunnel with no encryption (NULL) was neg otiated in AlliedWar e over NA T -T , the ESP packets did no t contain an RFC 3948 compliant checksum. This means that some ven dors may have discarded packets sent by the AlliedW are peer over such a tunnel. This is[...]

Features in 291- 08 18 V ersion 291- 10 C613-10488 -00 REV G CR00017368 QoS, DHCP Snooping 2 Some small memory access violat ions existed in DHCP snooping. These violations have been r esolved. Also, a new console error message is displayed if a user tries to add a duplicate classifier to a QoS policy . For example, if traffic class 101 belon gs to[...]

Features in 291- 08 19 V ersion 291- 10 C613-10488 -00 REV G CR00017518 ISAKMP 2 The router or switch sometimes could not establish a VPN when the remote peer was behind a NA T gateway and the router or switch’ s remote ID was set to default . This issue has b een resolved. YYYYYY- - - - - CR00017634 PPP 2 If a PPPoE AC service had been added, bu[...]

Features in 291- 08 20 V ersion 291- 10 C613-10488 -00 REV G CR00017731 IP Gateway , DHCP 2 When the DHCP server was enabled on a router or switch that also had a local IP interface defined by using the set ip local command, outgoing DHCP server packets would use the set ip local command's IP address as their source addr ess. Furthermor e, if [...]

Features in 291- 08 21 V ersion 291- 10 C613-10488 -00 REV G Level 3 CR Module Level Description AR400 AR7x5 AR7x0S Rapier i Rapier w AT - 8800 A T -8 600 A T -8700XL x900 - 48 A T- 99 00 A T -9 800 CR00000503 PKI 3 Some PKI commands (including ad d pki ldap , create pki enr oll , and create pki keyupdate ) only worked if their parameters wer e ent[...]

Features in 291- 08 22 V ersion 291- 10 C613-10488 -00 REV G CR00004004 File 3 The show file command did not check whethe r the specified file system was valid. If an invalid file system type was entered (such as show file=abc:*.* ), the r outer or switch reported that no files found instead of reporting that the f ile system abc did not exist. Thi[...]

Features in 291- 08 23 V ersion 291- 10 C613-10488 -00 REV G CR00006303 SNMP 3 On AR725 and AR745 routers, which ha ve no VLAN support, an SNMP Get request for dot1qMaxVlanId or dot1qMaxSupported Vlans incorrectly returned a value. This issue has b een resolved. -Y --------- CR00006613 Br idge 3 Predefined bridge protocols XEROX PUP and PUP Addr T [...]

Features in 291- 08 24 V ersion 291- 10 C613-10488 -00 REV G CR00008122 TTY 3 When prompte d to enter a file name while using t he command line file editing utility , no more than 23 characters could be typed, even if the existing characters were de leted using the backspace key . This issue has b een resolved. YYYYYYYYYY Y CR00008378 Firewall 3 Th[...]

Features in 291- 08 25 V ersion 291- 10 C613-10488 -00 REV G CR00010306 Install 3 If a user attempted to enter a filename with an invalid format, the r esulting error message did not correctly describe the format that should have been used. Also, the r outer or switch r etu r ned an incorrect err or message when a user attempted to delete a non-exi[...]

Features in 291- 08 26 V ersion 291- 10 C613-10488 -00 REV G CR00010979 PPP 3 PPP incorrectly ACKed a LCP Config ureRequest containing the Magic- Number opti on with a value of 0. This issue has b een resolved. YYYYYY- - YYY CR00010984 PPP 3 If the rout er or switch received an incor rectly formatted P AP request packet, it used to process the pack[...]

Features in 291- 08 27 V ersion 291- 10 C613-10488 -00 REV G CR00011438 Ping 3 When the router or swit ch pinged a host whose hostname consisted only of the digits 0-9 and the letters A-F , it treated the given hostna me as a hexadecimal IPX address even if the hostname was in the host list. This issue has been resolved. Now , wh en the router or s[...]

Features in 291- 08 28 V ersion 291- 10 C613-10488 -00 REV G CR00013494 IP Gateway 3 Once a default local IP addr ess had been set, it could not be delet ed. This was because the default interface does not have an interface num ber , but to delete a local interface, the user must specify the interface’ s number . This issue has b een resolved, by[...]

Features in 291- 08 29 V ersion 291- 10 C613-10488 -00 REV G CR00013832 E PSR, SNMP 3 When a user destro yed an EPSR domain, SNMP Requests r etur ned information about the domain even though it no long er existed. This issue has b een resolved. --------Y Y - CR00013920 Ping, T raceroute 3 If a user attempted to perform a trac er oute without specif[...]

Features in 291- 08 30 V ersion 291- 10 C613-10488 -00 REV G CR00014304 LLDP 3 The help displayed for the LLDP port parameter (in such commands as show lldp port=?) incorrectly indicated that the port parameter is a “string 1 to 255 characters long”. The port parameter is instead an Ethernet swit ch port number or a range of numbers. This issue[...]

Features in 291- 08 31 V ersion 291- 10 C613-10488 -00 REV G CR00016452 PPP 3 It is valid to use the command create ppp= number to create a PPP interface without specifying the underlying layer 1 inte rface. However , executing this command, or inc luding it in a boot script, resulted in an error . This issue has b een resolved. YYYYYY- - YYY CR000[...]

Features in 291- 08 32 V ersion 291- 10 C613-10488 -00 REV G Level 4 CR00017019 Port Authentication 3 On termination of an 802.1x session, an accounting message is sent to th e Radius server . This enhancement implements the Ac ct-Input-Octets, Acct-Output-Octets, Acct-Input-Packets, and Acct-Output- Packets fields in the message. Note that this en[...]

Features in 291- 08 33 V ersion 291- 10 C613-10488 -00 REV G Enhancements CR Module Level Description AR400 AR7x5 AR7x0S Rapier i Rapier w AT - 8800 A T -8 600 A T -8700XL x900 - 48 A T- 99 00 A T -9 800 CR00012822 BGP - The BGP counter outp ut display has been sign ificantly improved. Also, the command show bgp counter=all now prints out the RIB, [...]

Features in 291- 08 34 V ersion 291- 10 C613-10488 -00 REV G CR00016662 CR00016891 CR00017335 CR00017937 - This software r elease supports the new x900-48FS switch. For an overview of the switch, see “Support for the new x900-4 8FS switch—CR00016662” on page 92 . --------Y -- CR00016913 PPP - This enhancement enables the PPPoE clie nt to esta[...]

Features in 291- 08 35 V ersion 291- 10 C613-10488 -00 REV G CR00017482 IGMP Snooping - The IGMP snooping fast leave option has been enhanced, to make it available when multiple clients are attached to a single port on the snooping switch. For configuration information, see “IGMP snooping fast leave in multiple host mode—CR000 17482” on page [...]

Features in 291- 07 36 V ersion 291- 10 C613-10488 -00 REV G Featur es in 291-07 Software Maintenance V ersion 291-07 includes the resolved issues and enhancements in the following tables. In the tables, for e ach product series: ■ “Y” indicates that the resolution is availabl e in V ersion 291-07 for that product series. ■ “ – ” indi[...]

Features in 291- 06 37 V ersion 291- 10 C613-10488 -00 REV G Level 4 No level 4 issues Enhancements No enhancements Featur es in 291-06 Software Maintenance V ersion 291-06 provided support for the new Rapier 48w switch. For mor e information, see “Support for the new Rapier 48w switch” on page 95 .[...]

Features in 291- 05 38 V ersion 291- 10 C613-10488 -00 REV G Featur es in 291-05 Software Maintenance V ersion 291-05 includes the resolved issues and enhancements in the following tables. In the tables, for e ach product series: ■ “Y” indicates that the resolution is availabl e in V ersion 291-05 for that product series. ■ “ – ” indi[...]

Features in 291- 05 39 V ersion 291- 10 C613-10488 -00 REV G CR00012980 VLAN 2 Previously , it was possible to destroy a VLAN when it wa s configured as an IP interface. This issue has b een resolved. Now , you can only destroy a VLAN if it has no IP configuration. Y- YYYYYYYY CR00013041 IPsec 2 Th e router or switch would establish IPse c Security[...]

Features in 291- 05 40 V ersion 291- 10 C613-10488 -00 REV G CR00015569 Firewall 2 When onl y NA T was enab led on the firewa ll, during som e TCP connections in which either end of the connection sends FIN (finished) messages immediately after sending some data and the other end ACKs (acknowledges) the data and the FIN message consecutively , the [...]

Features in 291- 05 41 V ersion 291- 10 C613-10488 -00 REV G CR00015938 DHCPv6 2 For DHCPv6, the router or switch now supports Prefix Delegation according to RFC 3633. The previous implementation was according to an Inter net draft and did not interoperate with other DHCPv6 implementations. This issue has b een resolved. YYYYY- - YYY CR00015974 DHC[...]

Features in 291- 05 42 V ersion 291- 10 C613-10488 -00 REV G CR00016128 IP sec, IPv6 2 When the icmpt ype parameter was changed to none for an IPv6 IPsec policy , an incorrect ICMP type value was disp layed in output of the co mmand show config dyn and saved in the configuration file produced by the command create config . This issue has b een reso[...]

Features in 291- 05 43 V ersion 291- 10 C613-10488 -00 REV G CR00016364 DHCPv6 2 If an IPv6 DHCP client was for ced to rebi nd to a router or switch acting as a DHCP server , the server returned incorrect timi ng parameters to the client. Some clients were able to cope with this, but othe rs could end up losing their DHCP lease. This issue has b ee[...]

Features in 291- 05 44 V ersion 291- 10 C613-10488 -00 REV G CR00016489 BGP 2 When BGP capability matching was changed to strict , that setting was not displayed in output of the command show config dy n or saved in the configuration file produced by the command create config . When the router or switch ran the configuration file on start-up, the c[...]

Features in 291- 05 45 V ersion 291- 10 C613-10488 -00 REV G CR00016727 TCP , T elnet 2 The speed of the output from the T elnet server has been increased. Y Y Y Y Y Y Y Y Y Y CR00016762 ISDN 2 For AR44xS series routers with system te rritory set to USA, the ISDN Q.931 SPIDs failed to initialize to the ISDN exchange /ISDN USA profile sim ulator (bo[...]

Features in 291- 05 46 V ersion 291- 10 C613-10488 -00 REV G CR00016940 Co re 2 Some versions of the A T -G8T GBIC prevented the switch from detecting and setting up the A T -A47 expansion board correctly . This is sue occurred on start-up when the GBIC was installed and had a link up. This issue has b een resolved. -----Y ---- CR00016941 IP Gatewa[...]

Features in 291- 05 47 V ersion 291- 10 C613-10488 -00 REV G CR00017074 DHCPv6 2 DHCPv6 prefix dele gation cont ained the followed issues: ■ previously , th e command create dhcp6 range accepted ranges with an invalid prefix length. This issue has been resolved. The r outer or switch now disp lays an error unless the prefix length is in the range[...]

Features in 291- 05 48 V ersion 291- 10 C613-10488 -00 REV G CR00017257 WAN Load Balancer 2 If two W AN load balancer healthchec k hosts were defined, and one was unreachable and the other was reacha ble, W AN load balancer resources were (correctly) in the UP state because at l east one healthcheck host was reachable. However , removing the reacha[...]

Features in 291- 05 49 V ersion 291- 10 C613-10488 -00 REV G Level 3 CR Module Level Description AR400 AR7x5 AR7x0S Rapier i AT - 8800 A T -8 600 A T -8700XL x900 - 48 A T- 99 00 A T -9 800 CR00008225 Co re 3 Some early software versions, on some products, supported the command show system temperatur e . This command was deprecated after version 2.[...]

Features in 291- 05 50 V ersion 291- 10 C613-10488 -00 REV G CR00011629 PIM, PIM6, ECMP 3 Previously , the switch ’ s count of PIM4 and PIM6 bad Bootstrap Messages (BSMs) could be high, because the switch forwarded BSMs over interfaces that contained an Equal Cost Multipath (ECM P) route to the receiving interface. This issue has b een resolved. [...]

Features in 291- 05 51 V ersion 291- 10 C613-10488 -00 REV G CR00015558 ASYN 3 Under some circumstances, when a PC terminal emulator was opened to communicate with a router or switch after the router or switch had fully booted up, the login prompt did not immediately display . T o display the login prompt, it was necessary to remove and re-insert t[...]

Features in 291- 05 52 V ersion 291- 10 C613-10488 -00 REV G CR00016228 QoS 3 If a QoS policy uses the same classifier mo r e than once, the ro uter or switch now displays a warni ng message. Y ou should not use a classifier more than once in a policy because the operation of such polici es is unpredictable. YYYYYYYYYY CR00016463 DHCPv6 3 For the c[...]

Features in 291- 05 53 V ersion 291- 10 C613-10488 -00 REV G Level 4 CR Module Level Description AR400 AR7x5 AR7x0S Rapier i AT - 8800 AT - 8 6 0 0 A T -87 00XL x900 - 48 A T- 990 0 AT - 9 8 0 0 CR00000396 IGMP 4 If a static IGMP port went link down, it was not shown in the “Static Ports” list in the output of the show ip igmp command. This was[...]

Features in 291- 05 54 V ersion 291- 10 C613-10488 -00 REV G Enhancements CR Module Level Description AR400 AR7x5 AR7x0S Rapier i AT - 8800 A T -8 600 A T -8700XL x900 - 48 A T- 99 00 A T -9 800 CR00014288 GUI - An ADSL connection opti on has been added to the Wiz ards page of the GUI for AR44xS routers. This option links to the xDSL configuration [...]

Features in 291- 05 55 V ersion 291- 10 C613-10488 -00 REV G CR00016150 IP sec, IPv6 - T o establis h a tunnelled IPsec connection for IPv6, you may need to specify the source IP interface in the IPse c and IS AKMP policies. This enhancement enables you to do so. T o specify the source interface, use the sr cinterface parameter in the commands: cre[...]

Features in 291- 05 56 V ersion 291- 10 C613-10488 -00 REV G CR00016234 DHCP Snooping - This enhancement enables the router or switch to log discarded ARP requests when ARP security is enabled. By default, discarded ARP requests are not logged. T o tur n logging on, use the command: enable dhcpsnooping lo g=arpsecurity T o turn it off, use the comm[...]

Features in 291- 05 57 V ersion 291- 10 C613-10488 -00 REV G CR00016459 Co re - This enhancement disables CPU fan moni toring on A T -8948 switches. Mo nitoring the fan is unnecessary unles s an accelerato r car d is installe d on the switch , so disabling monitoring reduces the number of messages that the switch displays and logs. T o enable mo ni[...]

Features in 291- 05 58 V ersion 291- 10 C613-10488 -00 REV G CR00016758 IP NA T - This enhancement enables you to turn of f TCP state and sequence checking in IP NA T . It also allows all ICMP packets go through IP NA T . T o do this, use the command: enable ip nat bypasstcp When bypasstcp is enabled, IP NA T performs IP address and port translatio[...]

Features in 291- 04 59 V ersion 291- 10 C613-10488 -00 REV G Featur es in 291-04 Software Maintenance V ersion 291-04 includes the resolved issues and enhancements in the following tables. In the tables, for e ach product series: ■ “Y” indicates that the resolution is availabl e in V ersion 291-04 for that product series. ■ “ – ” indi[...]

Features in 291- 04 60 V ersion 291- 10 C613-10488 -00 REV G Level 2 CR00014145 Co re DHCP Snooping 1 DHCP Snooping determines when a client lease will expir e by taking the current time and adding the client's assigned lease period to it. Previously , DHCP Snooping did n ot update this exp iry time if the switch 's clock time chan ged, w[...]

Features in 291- 04 61 V ersion 291- 10 C613-10488 -00 REV G CR00013592 HTTP 2 A badly formed response fr om a particular HTTP server caused the router or switch to reboot when it attempted to lo ad a non-existent file from that server . This issue has b een resolved. YYYYYYYYYY CR00013700 IP Gateway 2 When an IP packet was qu eued by the ENCO modu[...]

Features in 291- 04 62 V ersion 291- 10 C613-10488 -00 REV G CR00014228 Switch 2 When the router generated packets (such as ARP requests) and sent them out multiple LAN ports, it always sent them as untagge d packets. This issue has been resolved, so that LA N traffic will be tagged or untagged as specified in the VLAN port configuration. ––Y ?[...]

Features in 291- 04 63 V ersion 291- 10 C613-10488 -00 REV G CR00014714 PIM 2 If a PIM interface was set as the BSR candidate interface (by using the command add pim bsr candidate interface= in terface ) and that interface went down, PIM would select another interface as th e BS R candidate interface. The route r or switch also set the new interfac[...]

Features in 291- 04 64 V ersion 291- 10 C613-10488 -00 REV G CR00014987 Co re Switch 2 If a terminal emulator started up after the r outer started up, the r outer did not display a login or command prompt. This issue occurred with some terminal emulators (including T era T erm Pro) when connecting to the AR415S router . This issue has b een resolve[...]

Features in 291- 04 65 V ersion 291- 10 C613-10488 -00 REV G CR00015348 GUI 2 The GUI could not be used to access the dual power supply AR750 S-DP router . This issue has been resolved. Th e GUI r esource file to use is 750s_281-06_en _d.rsc. ––Y ––––––– CR00015396 IP Gateway 2 I f you defined an IP filter without specifying the o[...]

Features in 291- 04 66 V ersion 291- 10 C613-10488 -00 REV G CR00015936 Switch 2 It was not possible to set a tri-speed SFP to a fixed speed in the configuration script that the A T -9924SP switc h runs when it starts up. This issue has been resolved, so the SF P can be set to a fixed speed from the configuration script Also, it was possible to use[...]

Features in 291- 04 67 V ersion 291- 10 C613-10488 -00 REV G Level 3 CR Module Level Description AR400 AR7x5 AR7x0S Rapier i AT - 8800 A T -8 600 A T -8700XL x900 - 48 A T- 99 00 A T -9 800 CR00007000 GUI, IGMP 3 The graphical user interface (GUI ) listed an invalid local interface in the Interface drop-down list on the page for adding a static IGM[...]

Features in 291- 04 68 V ersion 291- 10 C613-10488 -00 REV G CR00010136 IP Gateway 3 I f an IP interface was added and deleted many times, an excessive number of memory buffers became full. Also, when an IP interface was deleted, the IGMP query timer ( set ip igmp int= interface query timeout= value ) sometimes conti nued running and l ater caused [...]

Features in 291- 04 69 V ersion 291- 10 C613-10488 -00 REV G CR00012585 Use r 3 When authenticating users via RADIUS, th e number of times that the r outer or switch attempts to contact the RADIUS server is deter mined by the Server Retransmit Count (displ ayed in output of the command show ra dius ). Previously , this count inco rrectly included t[...]

Features in 291- 04 70 V ersion 291- 10 C613-10488 -00 REV G CR00013629 IGMP 3 When IGMP fast leave was enabled and th e switch r eceived a leave message via a trunk port, the switch only r e moved th e port from the multicast gr oup if the port was the master trunk port. This issue has been resolved. When fast leave is enabled, non-master trunk po[...]

Features in 291- 04 71 V ersion 291- 10 C613-10488 -00 REV G CR00014163 Firewall 3 When the firewall was performing NA T on UDP video streams and two streams started up at the same time, sometimes one or both str eams displayed excessive jitter . This issue has b een resolved. YYYYY– – – – – CR00014178 Co re 3 The following issues occurre[...]

Features in 291- 04 72 V ersion 291- 10 C613-10488 -00 REV G CR00014328 IP Gateway , Switch 3 If a port had static ARP entries define d for a VLA N, then adding the port to another VLAN made those static ARP entries inactive. Also, deleting a port from a VLAN would delete all static ARP entries t hat were defined on that port, including en tries fo[...]

Features in 291- 04 73 V ersion 291- 10 C613-10488 -00 REV G CR00014755 BOOTP IP Gateway 3 It was possible to add a BOOTP relay dest ination us ing an inte rface that was not running IP . It was also poss ible to delete an IP interface even th ough BOOTP relay destinations were defined for the interfac e. Both of these situations could allow the ro[...]

Features in 291- 04 74 V ersion 291- 10 C613-10488 -00 REV G CR00015148 IP Gateway DHCP 3 When a router or switch was configured to use DHCP to assi gn an addr ess on an interface, and then set to have a static addr ess on that interface, the DHCP client in the router or switch would continue to negotiate with the DHCP server . This tied up a DHCP [...]

Features in 291- 04 75 V ersion 291- 10 C613-10488 -00 REV G CR00015666 IP Gateway 3 Subnet broadcast packets would not be ro uted correctly when the interface to which the subnet broadcast was destinated was an interface on the devic e, but its link status was down. Even though an alter nate route to the destination existed, the device would send [...]

Features in 291- 04 76 V ersion 291- 10 C613-10488 -00 REV G Level 4 CR Module Level Description AR400 AR7x5 AR7x0S Rapier i AT - 8800 A T -8 600 A T -8700XL x900 - 48 A T- 99 00 A T -9 800 CR00004677 Co re 4 When the r outer or switch rebooted, its inter nal clock lost approximately 1 second. This issue has b een resolved. The time loss o n reboot[...]

Features in 291- 04 77 V ersion 291- 10 C613-10488 -00 REV G CR00012602 MS TP 4 If the command set mstp cist port= value was entered with no other parameters, the r esulting err or message (“One or more parameters may be missing”) was displayed as an INFO messa ge. This issue has been resolved. The messa ge now displays as an ERROR message. –[...]

Features in 291- 04 78 V ersion 291- 10 C613-10488 -00 REV G CR00013463 Ping 4 Previously , if you used the ? or T ab keys to obtain help about the timeout parameter for the ping command, the resulting help said that the maximum timeout was 65535. However , the correct maximum is 60 seconds. This issue has been resolved. The “?” he lp now displ[...]

Features in 291- 04 79 V ersion 291- 10 C613-10488 -00 REV G CR00014151 VLAN 4 The following erro r message: “Error (3089399): Operation not allowed on a .NESTED port.” contained an extraneous “.” befor e the word “NESTED ”. This issue has been r esolved. The “.” has been removed. –––––––Y Y – CR00014170 Co re 4 The [...]

Features in 291- 04 80 V ersion 291- 10 C613-10488 -00 REV G CR00014750 DHCP 4 Previously , when a user entered the command delete dhcp ran ge= range ip= ipadd , the r outer or switch would display an “Operation successful” message, even when the client entry in question was unused. This issue has been resolved . For unused clients, this comman[...]

Features in 291- 04 81 V ersion 291- 10 C613-10488 -00 REV G Enhancements CR Module Level Description AR400 AR7x5 AR7x0S Rapier i AT - 8800 A T -8 600 A T -8700XL x900 - 48 A T- 99 00 A T -9 800 CR00003036 Co re - It is now poss ible to hotswap NSM s on NEBS-compli ant Rapier i switch es. T o hotswap the NSM, press the Hot Swap button beside the NS[...]

Features in 291- 04 82 V ersion 291- 10 C613-10488 -00 REV G CR00013992 Co re - AR770S routers have a CPU fan that the softwar e now monitors in the same manner as the main fan. The state of the CPU fan is displayed alon g with that of the main (chassis) fan in the output of the show system command. If a problem develops with the CPU fan, the r o u[...]

Features in 291- 04 83 V ersion 291- 10 C613-10488 -00 REV G CR00014172 BOOTP - This enhancement enables you to associ ate a BOOTP relay destination with a given inter face. T o do th is, use the new optional interface parameter in the command: ADD BOOTp RELA y= ipadd INT erface= interface BOOTP packets received on this interfac e are r elayed to t[...]

Features in 291- 04 84 V ersion 291- 10 C613-10488 -00 REV G CR00014241 BGP IP Gateway - This enhancement enables you to force BGP to select the best route on the ba sis of network prefix alone, instead of on th e basis of prefer ence, then metric, then network prefix. T o do this: 1. Give the desired dynamic routing pr otocol a prefer ence of 0, w[...]

Features in 291- 04 85 V ersion 291- 10 C613-10488 -00 REV G CR00014300 DHCP Snooping, MACFF - The following enhancements have been made to DHCP snooping, to support MAC-forced forwa rding: ■ MAC-forced forwarding checks the DHCP snooping database to find out which router has been assigned to each DHCP client. DHCP snooping determines this from t[...]

Features in 291- 04 86 V ersion 291- 10 C613-10488 -00 REV G CR00014715 DNS - A new l og message has been added to p rovide mor e information about rejected DNS requests. The message has a log type of 052 / IPDNS and subtype 002 / UNRES, and reads: DNS request for < domain-n ame > rejected by server . Code < number >, < explanation &[...]

Features in 291- 04 87 V ersion 291- 10 C613-10488 -00 REV G CR00014845 IP Gateway OSPF - When OSPF is runn ing over an on-demand PPP link and the link goes down, IP notifies OSPF that the link is down and OSPF stops sending Hello packets over th e link. In a network in which r o utes over the PPP link ar e all dynamically learnt through OSPF , the[...]

Features in 291- 03 88 V ersion 291- 10 C613-10488 -00 REV G Featur es in 291-03 Software Maintenance V ersion 291-03 includes the resolved issues and enhancements in the following tables. In the tables, for e ach product series: ■ “Y” in a white column indicates that the resolution is available in V ersion 291-03 for that product series. ■[...]

Features in 291- 03 89 V ersion 291- 10 C613-10488 -00 REV G Level 3 CR00015678 IPv6 2 When a switch was heavily load ed with IPv6 traffic, it could reboot because a large quantity of traffic was queued while waiting for a neighbour's MAC address to r esolve. This issue has been resolved by limiting the number of packets that can be queued whi[...]

Features in 291- 03 90 V ersion 291- 10 C613-10488 -00 REV G Level 4 No level 4 issues CR00014959 QoS 3 Destroying a traf fic class or flow group also destroyed all classifiers that wer e associated with that traffic class or flow group. This issue has b een resolved. User -created classi fiers are no longer destroyed. Automatically-created classif[...]

Features in 291- 02 91 V ersion 291- 10 C613-10488 -00 REV G Enhancements Featur es in 291-02 V ersion 291-02 was not released. Featur es in 291-01 V ersion 291-01 was not released. CR Module Level Description AR400 AR7x5 AR7x0S Rapier i A T -8 800 A T -8 600 A T -8700XL x900-48 A T -9 900 A T -9 800 CR00014222 IGMP snooping, Switch, VLAN - IGMP sn[...]

Support for the new x900-48FS switch—CR0001666 2 92 V ersion 291- 10 C613-10488 -00 REV G Support for the new x900-48FS switch—CR00016662 The x900-48FS is a new model in the x900 Series of layer 3 gigabit and fast Ethernet switches. Its key featur es ar e: ■ Multi-layer Fast Ethernet sw itch ■ 48-port 100BASE-X SFP sockets, 100 Mbps, full o[...]

IGMP snooping fast leave in multipl e host mode—CR00017482 93 V ersion 291- 10 C613-10488 -00 REV G IGMP snooping fast leave in multiple host mode—CR00017482 The IGMP snooping fast leave option has been enhanced, to make it available when multiple clients are attached to a single port on the snooping switch. Fast leave now has two modes availab[...]

IGMP snooping fast leave in multipl e host mode—CR00017482 94 V ersion 291- 10 C613-10488 -00 REV G The detail parameter displays mor e detailed information, including expiry times for each port, an d in the case of multiple host fast leav e mode, the list of hosts on a port. The following example shows this. IGMP Snooping -----------------------[...]

Support for the new Rapier 48w switch 95 V ersion 291- 10 C613-10488 -00 REV G Support for the new Rapier 48w switch The Rapier 48w is a new model in the Rapier Series of laye r 3 gigabit and fast Ethernet switches. Its k ey featur es are: ■ 48-port 10BASE-T/100BASE-TX (RJ-45 connectors) ■ T wo 1000BAS E SFP ports ■ T wo asynchronous serial c[...]

Backing up th e configuration with SNMP—CR 00016221 96 V ersion 291- 10 C613-10488 -00 REV G Backing up the configuration with SNMP—CR00016221 W ith this enhancement, you can use SNMP to: ■ set parameters fo r uploading files fr om the router or switch, and ■ upload files to a TF TP server SNMP already lets you save the curr ent configurati[...]

Backing up th e configuration with SNMP—CR 00016221 97 V ersion 291- 10 C613-10488 -00 REV G 2. Set the load parameters T o specify the server IP address , use SNMP SET loadServer . T o set the filename, use SNMP SET loadFilename. The following scr een shot shows setting the filename to tst.cfg.[...]

Backing up th e configuration with SNMP—CR 00016221 98 V ersion 291- 10 C613-10488 -00 REV G 3. Upload the file T o upload the file, use SNMP SET loa dStatus and s et it to a value of 8. The following screenshot shows this.[...]

SNMP ASN.01 BER Padding—CR000 16523 99 V ersion 291- 10 C613-10488 -00 REV G SNMP ASN.01 BER Padding—CR00016523 This enhancement enables yo u to specify whet her SNMP adds 0x00 padding when the most significant 9 bits of a n object’s value ar e all 1, or wh ether t he encoding follows the ASN.01 B ER rule, which cuts off the most significant [...]