Allied Telesis 86222-06 Manuel utilisateur

Simply connecting the world

Patch Release Note

Patch 86222-06

For Rapier Switches and AR800 Series

Modular Switching Routers

Introduction

This patch release note lists the issues addressed and enhancements made in

patch 86222-06 for Software Release 2.2.2 on existing models of Rapier L3

managed switches and AR800 Series L3 modular switching routers. Patch file

details are listed in Table 1.

This release note should be read in conjunction with the following documents:

■Release Note: Software Release 2.2.2 for Rapier Switches, AR300 and

AR700 Series Routers, and AR800 Series Modular Switching Routers

(Document Number C613-10313-00 Rev A) available from

www.alliedtelesyn.co.nz/documentation/documentation.html.

■Rapier Switch Documentation Set for Software Release 2.2.1 available on

the Documentation and Tools CD-ROM packaged with your switch, or

from www.alliedtelesyn.co.nz/documentation/documentation.html.

■AR800 Series Modular Switching Router Documentation Set for Software

Release 2.2.1 available on the Documentation and Tools CD-ROM

packaged with your switching router, or from www.alliedtelesyn.co.nz/

documentation/documentation.html.

WARNING: Using a patch for a different model or software release may cause

unpredictable results, including disruption to the network. Information in this

release note is subject to change without notice and does not represent a

commitment on the part of Allied Telesyn International. While every effort has

been made to ensure that the information contained within this document and

the features and changes described are accurate, Allied Telesyn International

can not accept any type of liability for errors in, or omissions arising from the

use of this information.

Table 1: Patch file details for Patch 86222-06.

Base Software Release File 86s-222.rez

Patch Release Date 30-Aug-2001

Compressed Patch File Name 86222-06.paz

Compressed Patch File Size 226776 bytes

2Patch Release Note

Patch 86222-06 for Software Release 2.2.2

C613-10319-00 REV F

Features in 86222-06

Patch 86222-06 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

The power supply voltages of the base board PHYs on a Rapier G6 are

controlled by a PHY register value, which was incorrectly set. This issue has

been resolved.

In PIM Dense Mode, if a data stream started before PIM hello messages

were exchanged, the receiver did not get the data stream. This issue has

been resolved.

The Rapier G6 base ports sometimes experienced spurious link up or link

down events. This issue has been resolved.

Features in 86222-05

Patch file details for Patch 86222-05 are listed in Table 2.

Patch 86222-05 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

A39 copper uplink modules in the Rapier G6 sometimes experienced

spurious link up or link down events. This issue has been resolved.

The enterprise MIB now supports objects for power supply monitoring.

Certificates containing GeneralisedTime with the year in YYYY format are

now parsed correctly. The keyUsage field of certificates is now parsed

correctly when only one byte has been specified. The CRL update time is now

displayed correctly in hours. If the username and password parameters are

present the location parameter must be present and appear before the

username and password parameters. Certificates with signatures of 257 bytes

are now correctly parsed. Certificates added from a configuration script are

now processed correctly.

PCR: 01188 Module: SWI Network affecting: No

PCR: 01190 Module: PIM Network affecting: No

PCR: 01192 Module: SWI Network affecting: No

Table 2: Patch file details for Patch 86222-05.

Base Software Release File 86s-222.rez

Patch Release Date 24-Aug-2001

Compressed Patch File Name 86222-05.paz

Compressed Patch File Size 223728 bytes

PCR: 01148 Module: SWI Network affecting: No

PCR: 01157 Module: CORE Network affecting: No

PCR: 01162 Module: PKI Network affecting: No

Patch 86222-06 For Rapier Switches and AR800 Series Modular Switching Routers 3

Patch 86222-06 for Software Release 2.2.2

C613-10319-00 REV F

A fatal error occurred if an IPv6 interface was deleted while packets were

being transmitted. The number of current interfaces was not being updated

correctly when a new IPv6 interface was added. As a result, after multiple

additions and deletions, no more IPv6 interfaces could be added. These

issues have been resolved.

The CREATE CONFIG command now adds PKI certificates to the script in

the same order that they were originally added to the certificate database.

PKI certificates are now periodically checked (once per hour) to verify that

they are still valid.

IPCOMP SA’s which have the reserved CPI “3” are no longer deleted by

ISAKMP delete messages.

When a VLAN was created and then destroyed on the G6 or G6F, the

VTABLE was corrupted. This has been fixed.

DHCP failed to send request messages when it was in a rebinding or

renewing state. This issue has been resolved.

In some extreme traffic conditions the switch could lock up, preventing

switching of any traffic. This issue has been resolved.

When large numbers of sessions were being handled the firewall would

become overly aggressive in restricting new sessions. The Active TCP Opens

field in the output of the SHOW FIREWALL POLICY would show a very

high number (42 ×108). This issue has been resolved.

If the IGMP table was empty and a timeout was set, a fatal error occurred.

This issue has been resolved.

PCR: 01170 Module: IPv6 Network affecting: No

PCR: 01176 Module: PKI Network affecting: No

PCR: 01177 Module: PKI Network affecting: No

PCR: 01178 Module: IPSEC Network affecting: No

PCR: 01179 Module: SWI Network affecting: No

PCR: 01181 Module: DHCP Network affecting: No

PCR: 01185 Module: SWI Network affecting: No

PCR: 01186 Module: FIREWALL Network affecting: No

PCR: 01187 Module: IPG Network affecting: No

4Patch Release Note

Patch 86222-06 for Software Release 2.2.2

C613-10319-00 REV F

Features in 86222-04

Patch file details for Patch 86222-04 are listed in Table 3.

Patch 86222-04 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

Message protection validation failures would occur intermittently. This

issue has been resolved.

ISAKMP now interoperates with other vendor’s products in aggressive

mode exchanges.

Support has been added for the 8624XL-80 switch with -48VDC power

supply.

In a dual policy configuration, the firewall would lock up under load. The

firewall would also mistakenly report SYN attacks. These issues have been

resolved.

The CREATE CONFIG command generated duplicate PIM interface

configuration command lines. This issue has been resolved.

Certificates containing GeneralisedTime with the year in YYYY format are

now parsed correctly. The keyUsage field of certificates is now parsed

correctly when only one byte has been specified. The CRL update time is now

displayed correctly in hours. If the username and password parameters are

present the location parameter must be present and appear before the

username and password parameters.

The DHCP server now correctly allocates addresses to clients running

Apple Open Transport 2.5.1 or 2.5.2.

Both public and private access could be configured on the same interface on

a policy. This issue has been resolved.

Table 3: Patch file details for Patch 86222-04.

Base Software Release File 86s-222.rez

Patch Release Date 24-Aug-2001

Compressed Patch File Name 86222-04.paz

Compressed Patch File Size 220220 bytes

PCR: 01124 Module: PKI Network affecting: No

PCR: 01136 Module: ISAKMP Network affecting: No

PCR 01138 Module: CORE, SWI Network affecting: No

PCR: 01152 Module: FIREWALL Network affecting: No

PCR: 01159 Module: PIM Network affecting: No

PCR: 01162 Module: PKI Network affecting: No

PCR: 01165 Module: DHCP Network affecting: No

PCR: 01166 Module: FIREWALL Network affecting: No

Patch 86222-06 For Rapier Switches and AR800 Series Modular Switching Routers 5

Patch 86222-06 for Software Release 2.2.2

C613-10319-00 REV F

RSA encryption is now periodically suspended to ensure other processes

get some CPU time during large RSA calculations.

The CREATE ISAKMP command now checks that the key specified by the

LOCALRSAKEY parameter actually exists in the ENCO module.

The INTERFACE parameter of the CREATE TRIGGER and SET TRIGGER

commands now supports Ethernet interfaces. Ethernet interface events can

now generate triggers.

The Telnet server’s listen port can now be configured to a number in the

range 1 to 65535, excluding any ports already assigned as listen ports.

The CREATE CONFIG command sometimes generated scripts for rule

commands with GBLIP=0.0.0.0 when this was not necessary. This issue has

been resolved.

Features in 86222-03

Patch file details for Patch 86222-03 are listed in Table 4.

Patch 86222-03 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

DNS response packets with corrupt length fields were causing a fatal error.

This issue has been resolved.

IP NAT caused a fatal error when an ARP wait timer timed out and tried to

send a host unreachable message. This issue has been resolved.

The router was restarting after a “teardrop” attack on the STT listen port.

This issue has been resolved.

PCR: 01167 Module: ENCO Network affecting: No

PCR: 01169 Module: ISAKMP Network affecting: No

PCR: 01171 Module: ETH, TRIGGER Network affecting: No

PCR: 01173 Module: Telnet Network affecting: No

PCR: 01174 Module: Firewall Network affecting: No

Table 4: Patch file details for Patch 86222-03.

Base Software Release File 86s-222.rez

Patch Release Date 8-Aug-2001

Compressed Patch File Name 86222-03.paz

Compressed Patch File Size 205828 bytes

PCR: 01112 Module: IPG Network affecting: No

PCR: 01139 Module: IPG Network Affecting: No

PCR: 01147 Module: STT Network affecting: No

6Patch Release Note

Patch 86222-06 for Software Release 2.2.2

C613-10319-00 REV F

The entry aging process now works correctly even when there are large

numbers of firewall entries to be aged.

The command SHOW IP DEBUG=nwas entered, where nwas one greater

than the number of items in the IP debug queue resulted in a fatal error. This

issue has been resolved.

Features in 86222-02

Patch file details for Patch 86222-02 are listed in Table 5.

Patch 86222-02 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

When an interface on the firewall was configured with a global IP address

of 0.0.0.0, outgoing packets from the private interface to the public interface

sometimes caused a fatal error. This issue has been resolved.

Re-validation of temporary CA certificates now works correctly.

A fatal error occurred when IGMP received a Join message and attempted

to forward the Join message to other switch ports. This issue has been

resolved.

The SHOW CPU command sometimes displayed incorrect CPU utilisation

figures. Typically a value of about 74% was reported when in fact the CPU

was almost idle. This issue has been resolved.

Port parameters can now be set correctly using the Layer 3 Switch GUI.

Clicking the Apply button on a Layer 3 Switch GUI page caused the switch

to lock up if no configuration file was set, but boot.cfg was present. This

issue has been resolved.

PCR: 01150 Module: FIREWALL Network affecting: No

PCR: 01153 Module: IPG Network affecting: No

Table 5: Patch file details for Patch 86222-06.

Base Software Release File 86s-222.rez

Patch Release Date 26-Jul-2001

Compressed Patch File Name 86222-02.paz

Compressed Patch File Size 202564 bytes

PCR: 01081 Module: FIREWALL Network affecting: No

PCR: 01126 Module: PKI Network affecting: No

PCR: 01128 Module: IPG Network affecting: No

PCR: 01131 Module: CORE Network affecting: No

PCR: 01134 Module: GUI Network affecting: No

PCR: 01135 Module: GUI,INST Network affecting: No

Patch 86222-06 For Rapier Switches and AR800 Series Modular Switching Routers 7

Patch 86222-06 for Software Release 2.2.2

C613-10319-00 REV F

A fatal error occurred when UDP received a packet with very long UDP

packet length. This issue has been resolved.

Features in 86222-01

Patch file details for Patch 86222-01 are listed in Table 6.

Patch 86222-01 includes the following enhancement for Software Release 2.2.2:

The DHCP server identified the wrong port numbers for incoming DHCP

requests causing DHCP replies to be sent to the wrong port. This issued has

been resolved.

The IP flow cache occasionally generated a watchdog fatal error. This issued

has been resolved.

Deleting entries from an L3 table occasionally resulted in a watchdog fatal

error. This issued has been resolved.

PKI enrolment no longer causes message validation to fail.

Repeated addition and deletion of an address with the VALID parameter set

to or from an IPV6 interface caused a fatal error. This issue has been

corrected. The VALID parameter specifies the life of the address, and

defaults to INFINITE. The address is deleted when the lifetime expires. The

PREF parameter specifies the time that the address is the preferred address

of the interface, and defaults to INFINITE. PREF must be less than or equal

to VALID. IPV6 now checks and ensures that if either PREF or VALID is

specified, PREF is less than or equal to VALID. When an address is deleted

the timers are now correctly cleared.

IP sometimes passed the wrong port number to PIM, causing PIM to

process the wrong port number in its routing table. This issued has been

resolved.

PCR: 01137 Module: IPG Network affecting: No

Table 6: Patch file details for Patch 86222-01.

Base Software Release File 86s-222.rez

Patch Release Date 11-Jul-2001

Compressed Patch File Name 86222-01.paz

Compressed Patch File Size 187124 bytes

PCR: 01100 Module: DHCP Network affecting: No

PCR: 01102 Module: IPG Network affecting: No

PCR: 01102 Module: SWI Network affecting: No

PCR: 01106 Module: PKI Network affecting: No

PCR: 01119 Module: IPV6 Network affecting: No

PCR: 01120 Module: IPG Network affecting: No

8Patch Release Note

Patch 86222-06 for Software Release 2.2.2

C613-10319-00 REV F

Availability

Patches can be downloaded from the Software Updates area of the Allied

Telesyn web site at www.alliedtelesyn.co.nz/support/updates/patches.html. A

licence or password is not required to use a patch.

Autres manuels Allied Telesis Routeur réseau

Allied Telesis

Allied Telesis AR400 Series Manuel utilisateur

Allied Telesis

Allied Telesis AT-8000S/24 Manuel utilisateur

Allied Telesis

Allied Telesis TurboStack AT-TS90TR Manuel utilisateur

Allied Telesis

Allied Telesis AT x900-48FS Manuel utilisateur

Allied Telesis

Allied Telesis AT-AR256E Manuel utilisateur

Allied Telesis

Allied Telesis AT-GS950/8 Manuel utilisateur

Allied Telesis

Allied Telesis WebSmart AT-FS750/16 Manuel utilisateur

Allied Telesis

Allied Telesis AR415S Guide d'application

Allied Telesis

Allied Telesis AT-AR221E Manuel utilisateur

Allied Telesis

Allied Telesis SwitchBlade *8106 Manuel utilisateur

Allied Telesis

Allied Telesis AT-GS950/24 Manuel utilisateur

Allied Telesis

Allied Telesis AR725 Manuel d'installation et d'exploitation

Allied Telesis

Allied Telesis WebSmart AT-FS750/16 Manuel utilisateur

Allied Telesis

Allied Telesis AR725 Manuel utilisateur

Allied Telesis

Allied Telesis AT-GS900/8 Manuel utilisateur

Allied Telesis

Allied Telesis AT-x230-10GT Manuel utilisateur

Allied Telesis

Allied Telesis AT-8000GS/24 Manuel utilisateur

Allied Telesis

Allied Telesis AlliedWare Plus GS980M Series Manuel utilisateur

Allied Telesis

Allied Telesis AR415S Manuel d'installation et d'exploitation

Allied Telesis

Allied Telesis AT-10408XP Manuel utilisateur

Allied Telesis

Allied Telesis AT-AR441S Manuel utilisateur

Allied Telesis

Allied Telesis AT-ARW256E Manuel utilisateur

Allied Telesis

Allied Telesis SwitchBlade AT-AR440S Manuel utilisateur

Allied Telesis

Allied Telesis AT-AR3050S Manuel d'installation

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité