Allied Telesis 86222-21 Release Note Download Page 8

8

Patch Release Note

Patch 86222-21 for Software Release 2.2.2

C613-10319-00 REV T

STP always transmits untagged packets. If a port does not belong to a 
VLAN as an untagged port, then the port must belong to one VLAN as a 
tagged port. In this case, STP should transmit VLAN tagged packets out of 
the port.

The IP, MASK, and ACTION parameters could not be set with the SET IP 
ROUTE FILTER command.  This issue is resolved when the filter number is 
specified at the start of the command, for example:

   SET IP ROUTE FILTER=filter-id IP=ipadd MASK=ipadd 

ACTION={INCLUDE|EXCLUDE}

where: 

filter-id

 is the filter number.  Filter numbers are displayed in the 

output of the SHOW IP ROUTE FILTER command.

The built in Self Test Code for all Rapiers, except G6, has been improved to 
enhance the detection of faults in switch chip external packet memory.

An AS boundary router advertises AS external LSAs to other routers. 
However, when the router’s configuration changed, either by adding an IP 
route filter, or by setting its ASEXTERNAL parameter to OFF using the SET 
OSPF ASEXTERNAL command followed by a restart, its neighbour state 
could not reach full state. Also, when the router had IP route filters 
configured, matched routes were not being flooded into other routers. 
However, these routes should still have been imported into the router’s 
own LSA database, but were not. These issues have been resolved.

The IPG module has been enhanced to support gratiutous ARP request and 
ARP reply packets.

The Rapier was not detecting invalid checksums in ICMP echo request 
packets.  This issue has been resolved.  ICMP echo request packets with 
invalid checksums are now dropped and the ICMP 

inErrors

 and 

inDiscards

 

counters are incremented.

A simple DHCP range MIB and a trap have been added. The trap is 
triggered when a DHCP request cannot be satisfied. The gateway address 
and the interface address are sent as trap variables. The range table shows 
which range was exhausted. A debug variable, 

swiDebugBroadcomParityErrors

 has been added to the SWI module MIB to 

count the SDRAM parity errors in the packet memory of the Broadcom 
switch chip.

Packets traversing in and out of the same public firewall interface were 
sometimes blocked. The firewall should only control packets passing 
between a public and a private interface. This issue has been resolved. 

PCR:

 

02098

Module: STP

Network affecting: No

PCR:  02123

Module: IPG

Network affecting: No

PCR 02138

Module: SWI

Network affecting: No

PCR 02140

Module: OSPF

Network affecting: No

PCR 02144

Module: IPG

Network affecting:No 

PCR 02151

Module: IPG

Network affecting: No

PCR 02164

Module: DHCP

Network affecting: No

PCR 02176

Module: FIREWALL

Network affecting: No

Summary of Contents for 86222-21

Page 1: ...www alliedtelesyn co nz documentation documentation html AR800 Series Modular Switching Router Documentation Set for Software Release 2 2 1 available on the Documentation and Tools CD ROM packaged wi...

Page 2: ...has been resolved An ARP entry for a host has been removed whenever a DHCP DISCOVER or DHCP REQUEST message is received from the host This allows for clients changing ports on a switch The sequence nu...

Page 3: ...ry sent by the router switch now contains the correct default response time of 1 second Also ifOutOctets in the VLAN interface MIB now increments correctly If a port did not belong to an ethernet inte...

Page 4: ...not being processed by IP POLICY filters with an identifier greater than 7 This issue has been resolved A feature has been added that makes pings pass from the source IP address of the public interfac...

Page 5: ...tching multicast and broadcast packets with software filtering This issue has been resolved Some switch chip register values have been changed to improve QoS support on Rapier G6 and Rapier G6f switch...

Page 6: ...issue has been resolved MAC address lists were not working with Firewall rules This issue has been resolved HTTP requests from a fixed IP address were erroneously reported as a host scan attack in th...

Page 7: ...ess provided such a VR exists and is in the master state This issue has been resolved The SIZE functionality on the IP filter was not working for IP fragmented packets This issue has been resolved Fea...

Page 8: ...other routers However these routes should still have been imported into the router s own LSA database but were not These issues have been resolved The IPG module has been enhanced to support gratiuto...

Page 9: ...ets via internal and or external uplink ports This issue has been resolved If a flash write error occurred when a file was being written the file s directory entry was deleted leaving a partial file i...

Page 10: ...routing performance of the Rapier 48 and Rapier 48i has been enhanced The layer 3 hardware table was not sorted properly when it contained a very wide range of IP addresses eg 10 0 0 1 205 33 3 1 Thi...

Page 11: ...e number of DHCP clients This issue has been resolved Features in 86222 15 Patch file details for Patch 86222 15 are listed in Table 6 Patch 86222 15 includes all issues resolved and enhancements rele...

Page 12: ...VLANs not in the default STP A new command allows the Layer 3 aging timer to be changed SET SWITCH L3AGEINGTIMER seconds where seconds can be 30 43200 After each cycle of the ageing timer all existin...

Page 13: ...r required Also matches were made to addresses covered by a range in an access list if the matching range was numerically the lowest in the list This issue has been resolved Features in 86222 13 Patch...

Page 14: ...and TIMEWAIT states have been reduced This only applies to the stateful inspection of firewall sessions and not to the TCP module When a Rapier was under heavy load from software routing e g after a...

Page 15: ...added the corresponding routes into its own routing table However after some time e g 1 hour the AS external LSAs in the neigbour s database disappeared but the corresponding routes were still in its...

Page 16: ...IGMP reflooded packets with VLAN tagging were not processed correctly This issue has been resolved Features in 86222 11 Patch file details for Patch 86222 11 are listed in Table 10 Table 10 Patch fil...

Page 17: ...in 86222 09 Patch file details for Patch 86222 09 are listed in Table 12 Patch 86222 09 includes all issues resolved and enhancements released in previous patches for Software Release 2 2 2 and the f...

Page 18: ...even if it was configured to a fixed speed This issue has been resolved When the port has been configured for a fixed speed the mode is now set to MDIX not MDI When an M2 version of the AR020 PRI E1 T...

Page 19: ...86222 07 Patch file details for Patch 86222 07 are listed in Table 14 Table 14 Patch file details for Patch 86222 07 Patch 86222 07 includes all issues resolved and enhancements released in previous p...

Page 20: ...not correctly handling the ICMPTYPE and ICMPCODE parameters This issue has been resolved The router will now accept DHCP messages that are greater than or equal to 576 bytes in size and reject any mes...

Page 21: ...all ports active switching traffic between port 1 and the uplink caused the traffic flow to cease after a period of time depending on the volume of traffic This issue has been resolved The Rapier did...

Page 22: ...solved and enhancements released in previous patches for Software Release 2 2 2 and the following enhancements The power supply voltages of the base board PHYs on a Rapier G6 are controlled by a PHY r...

Page 23: ...parsed Certificates added from a configuration script are now processed correctly A fatal error occurred if an IPv6 interface was deleted while packets were being transmitted The number of current in...

Page 24: ...Patch file details for Patch 86222 04 are listed in Table 17 Patch 86222 04 includes all issues resolved and enhancements released in previous patches for Software Release 2 2 2 and the following enha...

Page 25: ...e on a policy This issue has been resolved RSA encryption is now periodically suspended to ensure other processes get some CPU time during large RSA calculations The CREATE ISAKMP command now checks t...

Page 26: ...specifies the life of the address and defaults to INFINITE The address is deleted when the lifetime expires The PREF parameter specifies the time that the address is the preferred address of the inter...

Page 27: ...s 27 Patch 86222 21 for Software Release 2 2 2 C613 10319 00 REV T Availability Patches can be downloaded from the Software Updates area of the Allied Telesyn web site at www alliedtelesyn co nz suppo...

Page 28: ...28 Patch Release Note Patch 86222 21 for Software Release 2 2 2 C613 10319 00 REV T...

Reviews: