Patch 86222-21 For Rapier Switches and AR800 Series Modular Switching Routers
25
Patch 86222-21 for Software Release 2.2.2
C613-10319-00 REV T
In a dual policy configuration, the firewall would lock up under load. The
firewall would also mistakenly report SYN attacks. These issues have been
resolved.
The CREATE CONFIG command generated duplicate PIM interface
configuration command lines. This issue has been resolved.
Certificates containing
GeneralisedTime
with the year in YYYY format are
now parsed correctly. The
keyUsage
field of certificates is now parsed
correctly when only one byte has been specified. The
CRL update time
is now
displayed correctly in hours. If the
username
and
password
parameters are
present the
location
parameter must be present and appear before the
username
and
password
parameters.
The DHCP server now correctly allocates addresses to clients running
Apple Open Transport 2.5.1 or 2.5.2.
Both public and private access could be configured on the same interface on
a policy. This issue has been resolved.
RSA encryption is now periodically suspended to ensure other processes
get some CPU time during large RSA calculations.
The CREATE ISAKMP command now checks that the key specified by the
LOCALRSAKEY parameter actually exists in the ENCO module.
The INTERFACE parameter of the CREATE TRIGGER and SET TRIGGER
commands now supports Ethernet interfaces. Ethernet interface events can
now generate triggers.
The Telnet server’s listen port can now be configured to a number in the
range 1 to 65535, excluding any ports already assigned as listen ports.
The CREATE CONFIG command sometimes generated scripts for rule
commands with GBLIP=0.0.0.0 when this was not necessary. This issue has
been resolved.
PCR: 01152
Module: FIREWALL
Network affecting: No
PCR: 01159
Module: PIM
Network affecting: No
PCR: 01162
Module: PKI
Network affecting: No
PCR: 01165
Module: DHCP
Network affecting: No
PCR: 01166
Module: FIREWALL
Network affecting: No
PCR: 01167
Module: ENCO
Network affecting: No
PCR: 01169
Module: ISAKMP
Network affecting: No
PCR: 01171
Module: ETH, TRIGGER
Network affecting: No
PCR: 01173
Module: Telnet
Network affecting: No
PCR: 01174
Module: Firewall
Network affecting: No