Summary of the content on the page No. 1
Patch Release Note
Patch 86251-08
For Rapier Series Switches
Introduction
This patch release note lists the issues addressed and enhancements made in
patch 86251-08 for Software Release 2.5.1 on existing models of Rapier L3
managed switches. Patch file details are listed in Table 1.
Table 1: Patch file details for Patch 86251-08.
86s-251.rez
Base Software Release File
9-Dec-2003
Patch Release Date
86251-08.paz
Compressed Patch File Name
545820 bytes
Compressed Patch File Size
This release note
Summary of the content on the page No. 2
2 Patch Release Note Some of the issues addressed in this Release Note include a level number. This number reflects the importance of the issue that has been resolved. The levels are: Level 1 This issue will cause significant interruption to network services, and there is no work-around. Level 2 This issue will cause interruption to network service, however there is a work-around. Level 3 This issue will seldom appear, and will cause minor inconvenience. Level 4 This issue represents a cosme
Summary of the content on the page No. 3
Patch 86251-08 For Rapier Series Switches 3 PCR: 03684 Module: CORE Level: 4 A fanAndPsRedundantFanTrap message was sent from a Rapier when the RPS (Redundant Power Supply) was turned on or off, even though Rapiers do not monitor the redundant fan status. This issue has been resolved. PCR: 03726 Module: TTY, USER Level: 3 The time recorded when a user logged in was overwritten when the same user logged in a second time while th
Summary of the content on the page No. 4
4 Patch Release Note PCR: 03935 Module: ISAKMP Level: 3 ISAKMP debug messages now correctly output IPv6 addresses when using IPv6, and IPv4 addresses when using IPv4. PCR: 03937 Module: IPSEC Level: 2 The IP version of packets was not being checked, so an IPv4 packet could match an IPv6 IPSec policy. This issue has been resolved. PCR: 03953 Module: SW56 Level: 3 On AT-8800 series switches, strict
Summary of the content on the page No. 5
Patch 86251-08 For Rapier Series Switches 5 PCR: 03982 Module: FIREWALL Level: 3 The SMTP proxy did not correctly filter sessions where messages were fragmented. This had the potential to prevent the detection of third-party relay attacks. This issue has been resolved. PCR: 03985 Module: SWI Level: 2 Sometimes on Rapier series switches, a severe multicast or broadcast storm depleted packet buffers, so the switch received packet
Summary of the content on the page No. 6
6 Patch Release Note PCR: 31028 Module: BGP Level: 2 BGP did not always send Withdrawn advertisements when a route went down. This issue has been resolved. PCR: 31040 Module: PIM Level: 2 When two devices are BSR candidates, and have the same preference set with the SET PIM BSRCANDIDATE PREFERENCE command, the device with the higher IP address was not elected as the candidate. This issue has been resolved. PCR: 31041 Module: P
Summary of the content on the page No. 7
Patch 86251-08 For Rapier Series Switches 7 PCR: 31071 Module: SWI Level: 4 The warning given when a QoS policy is active on a port operating at reduced speed has been changed to reflect the problem more accurately. The old message was: Warning (2087343): Port is currently used in QoS policy , this policy may become incorrect due to the port bandwidth. The new message is: Warning (2087350): Port is operating at less than
Summary of the content on the page No. 8
8 Patch Release Note PCR: 31106 Module: MLD Level: 2 When the device received a version 1 Query packet, it become a non-querier on that interface, even if it should have remained as the querier. This issue has been resolved. PCR: 31118 Module: SWI Level: 2 When the TYPE parameter was specified for the ADD SWITCH L3FILTER command, the type was sometimes a different value in the device’s hardware table. This issue has been resol
Summary of the content on the page No. 9
Patch 86251-08 For Rapier Series Switches 9 PCR: 03524 Module: OSPF, IPG Level: 2 OSPF disabled RIP unless RIP was activated using the SET OSPF RIP command. This issue has been resolved. PCR: 03530 Module: IPG Level: 2 Running the PURGE IP command with a multicast address and multiple sources was causing a fatal error. This issue has been resolved. PCR: 03542 Module: HTTP Level: 2 The value specified for the IP parameter in the
Summary of the content on the page No. 10
10 Patch Release Note PCR: 03778 Module: FILE, INSTALL, SCR Level: 2 Files used during start up were backed up from NVS to FLASH even if they were already present in FLASH. This used up FLASH memory unnecessarily. This issue has been resolved so that files are only backed up when a copy does not already exist in FLASH. PCR: 03780 Module: INSTALL Level: 3 If a configuration file had a long file name, the SHOW CONFIG command dis
Summary of the content on the page No. 11
Patch 86251-08 For Rapier Series Switches 11 PCR: 03809 Module: SWI Level: 2 An additional check has been added for unknown GBIC models to determine if they are copper or fibre. PCR: 03817 Module: IPV6 Level: 2 A fatal error occurred when IPv6 fragmented a packet. Also, when a large fragmented ICMP echo request packet was received, the reply may not have been fragmented and so may have exceeded the MTU for the interface it was
Summary of the content on the page No. 12
12 Patch Release Note PCR: 03852 Module: IPG, IPV6 Level: 2 PIM SM did not establish a BSR candidate between two AR720 routers with PPP over SYN. This issue has been resolved. PCR: 03854 Module: SWI Level: 2 When INGRESSLIMIT parameter in the SET SWITCH PORT command was set to 64kbps, the switch received packets intermittently rather than continuously. This issue has been resolved. PCR: 03855 Module: IPG
Summary of the content on the page No. 13
Patch 86251-08 For Rapier Series Switches 13 PCR: 03898 Module: ETH Level: 3 An ETH interface was sometimes shown as Up in the output of the SHOW INTERFACE command when it was actually Down. This issue has been resolved. PCR: 03902 Module: FIREWALL Level: 3 Under some circumstances traffic did not have NAT applied if a standard subnet NAT rule was added to a public interface. Such rules did not correctly match incoming traffic
Summary of the content on the page No. 14
14 Patch Release Note PCR: 03938 Module: IKMP Level: 3 DHEXPONENTLENGTH parameter in the CREATE ISAKMP POLICY command was not accepted when creating ISAKMP policies that used IPv6. This issue has been resolved. PCR: 03939 Module: IPV6 Level: 2 When a NeighbourAdvert message containing an anycast target address was received, the device incorrectly performed Duplicate Address Detection. This issue has been resolved. PCR: 03946 M
Summary of the content on the page No. 15
Patch 86251-08 For Rapier Series Switches 15 DISABLE SWITCH PORT=port-list FLOW=PAUSE DISABLE SWITCH PORT=ALL FLOW={JAMMING|PAUSE}[,...] ENABLE SWITCH PORT={port-list|ALL} ENABLE SWITCH PORT=port-list FLOW=PAUSE ENABLE SWITCH PORT=ALL FLOW={JAMMING|PAUSE}[,...] SHOW SWITCH PORT[={port-list|ALL}] PCR: 03011 Module: OSPF Network affecting: No When the router priority was changed on a dynamic OSPF interface, the new priority did not appear in the output of the SHOW OSPF NEIGHBOUR command on neigh
Summary of the content on the page No. 16
16 Patch Release Note PCR: 03355 Module: IPV6 Level: 2 IPv6 tunnelling over IPv4 failed if an IPv4 interface was not configured, even though an IPv4 interface is not needed for IPv6 tunnelling. This issue has been resolved. PCR: 03374 Module: IPV6 Level: 1 Multilink Listener Discovery (MLD) packets received on the switch caused fatal errors. This issue has been resolved. PCR: 03425 Module: PRI L
Summary of the content on the page No. 17
Patch 86251-08 For Rapier Series Switches 17 PCR: 03524 Module: OSPF, IPG Level: 2 OSPF disabled RIP unless RIP was activated using the SET OSPF RIP command. This issue has been resolved. PCR: 03532 Module: FIREWALL Level: 3 Occasionally the TCP connection was terminated early during an IDENT proxy TCP session. This issue has been resolved. PCR: 03536 Module: BGP, TCP Level: 3 Outgoing BGP packe
Summary of the content on the page No. 18
18 Patch Release Note PCR: 03551 Module: IPV6 Level: 2 The command ADD IPV6 6TO4 IP did not allow more than one tunnel. This issue has been resolved. This command can now be used repeatedly to create multiple tunnels. PCR: 03554 Module: FIREWALL Level: 3 When a dynamic public firewall interface was UP it was not possible to delete any (non-dynamic) public interface rules. Also, under the same circumstances it was possible to c
Summary of the content on the page No. 19
Patch 86251-08 For Rapier Series Switches 19 PCR: 03569 Module: FIREWALL Level: 3 A problem existed in a configuration with a single policy involving one private interface and two On Demand PPP public interfaces with NAT acting on traffic from the private to each of the public interfaces. Traffic generated on the device (e.g. pings) that was routed out one of the public interfaces sometimes caused both PPP interfaces to activate. This occurred if the NAT rel
Summary of the content on the page No. 20
20 Patch Release Note PCR: 03609 Module: OSPF Level: 1 The IP route filter did not always work correctly for OSPF. This issue has been resolved. PCR: 03615 Module: LOAD Level: 3 Zmodem uploads to some terminal emulators did not succeed because the 16-bit checksum was incorrect. This issue has been resolved. PCR: 03616 Module: IPG Level: 4 Three new commands have been added to enable and disable t
