Allied Telesis R800 Series manual

Simply connecting the world Patch Release Note Patch 86222-22 For Rapier Switches and AR800 Series Modular Switching Routers Intr oduction This patch release n ote lists the issues addr essed and enhancements made in patch 8622 2-2 2 for Softwar e Rel ease 2.2 .2 on exis ting m odels of Ra pier L3 managed switches and AR 800 Series L3 mo dular swit[...]

2 Patch Release Note Patch 86222-22 f or Softwar e Release 2.2.2 C613-103 19-00 REV U Features in 86222-22 The fir ewall was blocking outbou nd ICMP packets when the associated private interface had a ‘deny all’ rule. Th e passing of ICMP packets should be controlled by the ICMP_FOR W A RDING and PING parameters. This issue has been r esolved. [...]

Patch 86222 -22 For Rapier Switches and AR800 S eries Modul ar Switching Route rs 3 Patch 86222-22 for Softwar e Release 2.2 .2 C613-103 19-00 REV U The sour ce IP addres s in DVMRP prune an d graft message s was incorrect. This issue has been r esolved. Firewall subnet NA T rules were not workin g correctly from the private to the public side of t[...]

4 Patch Release Note Patch 86222-22 f or Softwar e Release 2.2.2 C613-103 19-00 REV U Whe n the sw itch was u nder heav y learn ing l oad , some M AC add r ess w ere lost. This issu e has been resolved. In the ADD IP ROUTE FIL TER command, when th e optional parameter INTERF ACE was included, the filter was not applied to the flooding of OSPF exter[...]

Patch 86222 -22 For Rapier Switches and AR800 S eries Modul ar Switching Route rs 5 Patch 86222-22 for Softwar e Release 2.2 .2 C613-103 19-00 REV U Sometimes the retransmission o f an F TP packet was not permi tted through the Firewall. This issue has been reso lved. VRRP return ed an incorr ect MAC address for an ARP req uest. This issue has been[...]

6 Patch Release Note Patch 86222-22 f or Softwar e Release 2.2.2 C613-103 19-00 REV U Features in 86222-20 Patch file deta ils for Patch 86 222-20 are listed in T able 3: Patch 86222-20 includes all issues r esolved and enhancements r eleased in previous patches f or Software Re lease 2.2.2, and the following enhancements: The IGMP specific query s[...]

Patch 86222 -22 For Rapier Switches and AR800 S eries Modul ar Switching Route rs 7 Patch 86222-22 for Softwar e Release 2.2 .2 C613-103 19-00 REV U The IP Filter SIZ E parameter was no t being applied correctly . Thi s issue has been r esolved. The SET IP FIL TER command would n ot update the SIZE parameter correctly . This issu e has been resolve[...]

8 Patch Release Note Patch 86222-22 f or Softwar e Release 2.2.2 C613-103 19-00 REV U When the only feature licence in the featur e licence file was disabled, the licence file stored on FLASH memory did not chan ge. This was due to a previous enhancement in PCR 02184 which pr evented existing files being deleted befor e a new version was stored . T[...]

Patch 86222 -22 For Rapier Switches and AR800 S eries Modul ar Switching Route rs 9 Patch 86222-22 for Softwar e Release 2.2 .2 C613-103 19-00 REV U The virtual MAC addr ess was used as the sour ce MAC for all packets forwar ded on a n interface associated w ith a V irtual Router (VR). Thi s was confusing wh en multiple VRs were defined over the sa[...]

10 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U VRRP used the wr ong source IP addr ess in ICMP redir ects. RFC 2338 states that the sour ce IP addre s s of ICMP r edirects should be the IP a ddress tha t the end host used when making its next hop routing decision. In the case of a packet sent to a VRRP virtual[...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 11 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U The built in Self T est Code for all Rapiers, except G6, h as been improved to enhance the detection of faults in switch chip external packet memory . An AS bound ary router ad vertises AS external LSA[...]

12 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U Features in 86222-18 Patch file deta ils for Patch 86 222-18 are listed in T able 5: Ther e is no patch r elease 862 22-17 because this patch was w ithdrawn . Patch 86222-18 i ncludes all issues r esolved and enhancements r eleased in previous patches f or Softwar[...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 13 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U Port mirroring on th e Rapier 48 and 48 i was not operating corr ectly because Destination Lookup Failur e (DLF ) frames wer e sent fr om th e mirro r port. This issue has been r es olved. The software[...]

14 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U A switch sometime s restarted if it was configured with stati c DHCP en tries and wa s handl ing a large numb er of D HCP cli ents. Th is issue ha s been res o l v e d . Features in 86222-15 Patch file deta ils for Patch 86 222-15 are listed in T able 7: Patch 862[...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 15 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U Features in 86222-14 Patch file details are listed in T able 8. Patch 86222-14 i ncludes all issues r esolved and enhancements r eleased in previous patches f or Software Re lease 2.2.2, and the follow[...]

16 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U Firewall IP access lists we re not working correctly . If an IP rang e was specified without spaces betw een the IP address and the separating '-' the range would be ignored. Spaces ar e no longer r equired. Also, matches wer e made to addr ess es cover [...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 17 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U If route filters existed and a RESET IP command was executed, some static and interfac e routes wer e in correctly r emoved if the f ilters matched. This issue has been r e solved. DHCP occasio nally c[...]

18 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U The firewall wa s incorrectly forwarding multi cast pa ckets origi nating from a private addr ess in cases where a matching route was defined. Th is issue has been r esolved. When the speed of one or mor e switch ports was for ced to a half duplex setting and the [...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 19 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U The first periodic after day trigger boundary (i.e. midni ght) did not occur . A range check error occurr ed due to an incorrect comparison. These issues have been r eso lved. Stopping a trace route us[...]

20 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U Features in 86222-10 Patch file deta ils for Patch 86 222-10 are listed in T able 12. T able 12: Pat ch file deta ils for Patch 862 22-10. Patch 86222-10 i ncludes all issues r esolved and enhancements r eleased in previous patches f or Software Re lease 2.2.2, an[...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 21 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U The default setting for th e switch port parameter INFIL TERING is now OFF , as specified in IEEE802.1Q. A VLAN will s till reject these packets if they are not from val id VLAN memb er por ts. The IGM[...]

22 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U When IGMP snooping was enabled, if a member left a g roup on a port, it could not re- j oin the group on that port. Th is issue has been resolved. Substantial changes have been made to PIM in more r ecent code re l eases. These have been retr o fitted to 2-2-2 in [...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 23 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U MD5 Authentica tion now wo rks correctly with RIP packets. The SET IP LOCAL command caus ed a fatal err or if the ro uter was configured with a default r o ute over an L2TP tunnel, because there was no[...]

24 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U In some cond itions it was po ssible fo r ISAKMP packets to be lo st and no t retransmitted. Incoming ISAKMP mess ages are now validated before stopping retransmission of the previous message. The COS_DST bit on ARL for L3 interface should be 0x4 (higher priority)[...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 25 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U The CREA TE CONFIG command did n o t include all r equired L3FIL T ER parameters in the generated script file. The L3 table on the Rapier G6 is now cleared when a s witch port goes down to ensure the L[...]

26 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U Features in 86222-05 Patch file deta ils for Patch 86 222-05 are listed in T able 17. Patch 86222-05 i ncludes all issues r esolved and enhancements r eleased in previous patches f or Software Re lease 2.2.2, and the following enhancements: A39 copper uplink modul[...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 27 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U When a VLAN was cr eated and then destr oyed on the G6 or G6F , the VT ABLE was corrupted. This has been fixed. DHCP failed to send request messages when it was in a rebindin g or renewing state. This [...]

28 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U In a dual policy configura tion, the fi rewall would lock up under load. The firewall would also mistakenly report SYN attacks. These is sues have been res o l v e d . The CREA TE CONFIG command g enerated duplicate PIM i nterface configuration command lines. This[...]

Patch 86222 -22 For Rapier Switch es and AR8 00 Series Modul ar Switching Routers 29 Patch 86222-22 for Software Release 2.2 .2 C613-103 19-00 REV U Features in 86222-01 Patch file deta ils for Patch 86 222-01 are listed in T able 19. Patch 86222-01 i ncludes the following enhanceme nt for Softwar e Release 2.2.2: The DHCP server identified the wr [...]

30 Patch Release Note Patch 86222-22 f or Software Release 2.2.2 C613-103 19-00 REV U A vailability Patches can be downloaded from the Softwar e Updates area of the Allied T elesyn web sit e at w ww . allied teles yn.co .nz/s uppo rt/up date s/pat ches. html . A licence or password is not r equired to use a patch.[...]