Patch 86222-22 For Rapier Switches and AR800 Series Modular Switching Routers
3
Patch 86222-22 for Software Release 2.2.2
C613-10319-00 REV U
The source IP address in DVMRP
prune
and
graft
messages was incorrect.
This issue has been resolved.
Firewall subnet NAT rules were not working correctly from the private to
the public side of the firewall. Traffic from the public to private side
(destined for subnet NAT) was discarded. These issues have been resolved.
ICMP traffic no longer causes a RADIUS lookup for access authentication,
but is now checked by ICMP handlers for attacks and eligibility. If the ICMP
traffic matches a NAT rule, NAT will occur on inbound and outbound
traffic. HTTP 1.0 requests sometimes caused the firewall HTTP proxy to
close prematurely. Cached TCP sessions were sometimes not hit correctly.
These issues have been resolved.
When an IP Multihomed interface was used as an OSPF interface,
neighbour relationships were only established if the IP interface for OSPF
was added first in the configuration. Now, OSPF establishes neighbour
relationships regardless of the IP Multihomed interface configuration order.
The SHOW VRRP command now shows the number of trigger activations
for the Upmaster and Downmaster triggers.
DHCP RENEW request messages are now unicast (as defined in the RFC),
not broadcast.
If a problem occurred with NVS, some critical files were lost. As a result, the
equipment was forced to load only boot ROM software at boot time. This
patch combined with the new version of the boot ROM software (pr1-1.2.0
for the AR700 series) resolves this issue.
The EPORT parameter in the SHOW SWITCH L3FILTER ENTRY command
was displaying incorrectly after an issue was resolved in PCR02374. The
command now displays correctly.
DHCP entry reclaim checks are now delayed by 10 seconds if the entry is
unroutable because the interface is not up.
Support for multi-homed interfaces has been added.
Under some circumstances a fatal error occurred if a large amount of data
was pasted onto the command line. This issue has been resolved.
PCR 02192
Module: IP
Network affecting: No
PCR: 02241
Module: FIREWALL
Network affecting: No
PCR: 02359
Module: IPG
Network affecting: No
PCR: 02395
Module: VRRP, TRG
Network affecting: No
PCR: 02396
Module: DHCP
Network affecting: No
PCR 02400
Module: CORE, FFS, FILE,
INSTALL, SCR
Network affecting: No
PCR 02408
Module: SWI
Network affecting: No
PCR: 02427
Module: DHCP
Network affecting: No
PCR: 02463
Module: DVMRP, IPG
Network affecting: No
PCR 02465
Module: TTY
Network affecting: No
