background image

Patch 86222-21 For Rapier Switches and AR800 Series Modular Switching Routers

21

Patch 86222-21 for Software Release 2.2.2
C613-10319-00 REV T

A memory loss occurred when certificates were used by ISAKMP. This issue 
has been resolved.

ISAKMP heartbeats are no longer transmitted if the lower layer interface is 
down. This stops ISAKMP heartbeats from bringing up links in dial-up 
environments.

In some conditions it was possible for ISAKMP packets to be lost and not 
retransmitted. Incoming ISAKMP messages are now validated before 
stopping retransmission of the previous message.

The COS_DST bit on ARL for L3 interface should be 0x4 (higher priority) for 
CPU ports. This has been corrected.

The Trigger Facility was generating a trap with variable { 0 0 }, and was not 
documented in the ATI enterprise MIB. This issue has been resolved. The 
MIB object 

triggerLastTriggerActivated

 ({ enterprises(1) alliedTelesyn(207) 

mibObjects(8) brouterMib(4) atrouter(4) modules(4) trigger(53) 1 }) has been 
defined, to record the trigger number of the last trigger activated, and this 
variable is now transmitted in the trigger activation trap 

triggerTrap

.

In a Rapier G6, fitted with a fibre uplink module with all ports active, 
switching traffic between port 1 and the uplink caused the traffic flow to 
cease after a period of time depending on the volume of traffic. This issue 
has been resolved.

The Rapier did not include the message age of the received BDPU message 
in the message age of the BDPU it transmitted. Also, the message age of the 
message transmitted BDPU could be less than that of the received BDPU, 
which contravenes IEEE 802.3d. This issue has been resolved.

Reception of incorrectly tagged packets was causing corruption of the ARL 
table, eventually causing the switch to lock up. This issue has been resolved. 
Tagged packets with invalid VLAN identifiers are now discarded. The 
INFILTERING parameter of the SET SWITCH PORT command now 
defaults to ON.

Flow control performance has been improved.

The IPsec SA ID now wraps correctly at the 16 bit (ID = 65535) boundary. 
The ID is also checked to verify that it is free before it is used.

PCR: 01206

Module: ISAKMP

Network affecting: No

PCR: 01207

Module: ISAKMP

Network affecting: No

PCR: 01209

Module: ISAKMP

Network affecting: No

PCR: 01211

Module: SWI

Network affecting: No

PCR: 01213

Module: TRG, SNMP

Network affecting: No

PCR: 01214

Module: SWI

Network affecting: No

PCR: 01216

Module: STP

Network affecting: No

PCR: 01219

Module: VLAN,SWI

Network affecting: No

PCR: 01221

Module: SWI

Network affecting: No

PCR: 01225

Module: IPSEC

Network affecting: No

Содержание 86222-21

Страница 1: ...www alliedtelesyn co nz documentation documentation html AR800 Series Modular Switching Router Documentation Set for Software Release 2 2 1 available on the Documentation and Tools CD ROM packaged wi...

Страница 2: ...has been resolved An ARP entry for a host has been removed whenever a DHCP DISCOVER or DHCP REQUEST message is received from the host This allows for clients changing ports on a switch The sequence nu...

Страница 3: ...ry sent by the router switch now contains the correct default response time of 1 second Also ifOutOctets in the VLAN interface MIB now increments correctly If a port did not belong to an ethernet inte...

Страница 4: ...not being processed by IP POLICY filters with an identifier greater than 7 This issue has been resolved A feature has been added that makes pings pass from the source IP address of the public interfac...

Страница 5: ...tching multicast and broadcast packets with software filtering This issue has been resolved Some switch chip register values have been changed to improve QoS support on Rapier G6 and Rapier G6f switch...

Страница 6: ...issue has been resolved MAC address lists were not working with Firewall rules This issue has been resolved HTTP requests from a fixed IP address were erroneously reported as a host scan attack in th...

Страница 7: ...ess provided such a VR exists and is in the master state This issue has been resolved The SIZE functionality on the IP filter was not working for IP fragmented packets This issue has been resolved Fea...

Страница 8: ...other routers However these routes should still have been imported into the router s own LSA database but were not These issues have been resolved The IPG module has been enhanced to support gratiuto...

Страница 9: ...ets via internal and or external uplink ports This issue has been resolved If a flash write error occurred when a file was being written the file s directory entry was deleted leaving a partial file i...

Страница 10: ...routing performance of the Rapier 48 and Rapier 48i has been enhanced The layer 3 hardware table was not sorted properly when it contained a very wide range of IP addresses eg 10 0 0 1 205 33 3 1 Thi...

Страница 11: ...e number of DHCP clients This issue has been resolved Features in 86222 15 Patch file details for Patch 86222 15 are listed in Table 6 Patch 86222 15 includes all issues resolved and enhancements rele...

Страница 12: ...VLANs not in the default STP A new command allows the Layer 3 aging timer to be changed SET SWITCH L3AGEINGTIMER seconds where seconds can be 30 43200 After each cycle of the ageing timer all existin...

Страница 13: ...r required Also matches were made to addresses covered by a range in an access list if the matching range was numerically the lowest in the list This issue has been resolved Features in 86222 13 Patch...

Страница 14: ...and TIMEWAIT states have been reduced This only applies to the stateful inspection of firewall sessions and not to the TCP module When a Rapier was under heavy load from software routing e g after a...

Страница 15: ...added the corresponding routes into its own routing table However after some time e g 1 hour the AS external LSAs in the neigbour s database disappeared but the corresponding routes were still in its...

Страница 16: ...IGMP reflooded packets with VLAN tagging were not processed correctly This issue has been resolved Features in 86222 11 Patch file details for Patch 86222 11 are listed in Table 10 Table 10 Patch fil...

Страница 17: ...in 86222 09 Patch file details for Patch 86222 09 are listed in Table 12 Patch 86222 09 includes all issues resolved and enhancements released in previous patches for Software Release 2 2 2 and the f...

Страница 18: ...even if it was configured to a fixed speed This issue has been resolved When the port has been configured for a fixed speed the mode is now set to MDIX not MDI When an M2 version of the AR020 PRI E1 T...

Страница 19: ...86222 07 Patch file details for Patch 86222 07 are listed in Table 14 Table 14 Patch file details for Patch 86222 07 Patch 86222 07 includes all issues resolved and enhancements released in previous p...

Страница 20: ...not correctly handling the ICMPTYPE and ICMPCODE parameters This issue has been resolved The router will now accept DHCP messages that are greater than or equal to 576 bytes in size and reject any mes...

Страница 21: ...all ports active switching traffic between port 1 and the uplink caused the traffic flow to cease after a period of time depending on the volume of traffic This issue has been resolved The Rapier did...

Страница 22: ...solved and enhancements released in previous patches for Software Release 2 2 2 and the following enhancements The power supply voltages of the base board PHYs on a Rapier G6 are controlled by a PHY r...

Страница 23: ...parsed Certificates added from a configuration script are now processed correctly A fatal error occurred if an IPv6 interface was deleted while packets were being transmitted The number of current in...

Страница 24: ...Patch file details for Patch 86222 04 are listed in Table 17 Patch 86222 04 includes all issues resolved and enhancements released in previous patches for Software Release 2 2 2 and the following enha...

Страница 25: ...e on a policy This issue has been resolved RSA encryption is now periodically suspended to ensure other processes get some CPU time during large RSA calculations The CREATE ISAKMP command now checks t...

Страница 26: ...specifies the life of the address and defaults to INFINITE The address is deleted when the lifetime expires The PREF parameter specifies the time that the address is the preferred address of the inter...

Страница 27: ...s 27 Patch 86222 21 for Software Release 2 2 2 C613 10319 00 REV T Availability Patches can be downloaded from the Software Updates area of the Allied Telesyn web site at www alliedtelesyn co nz suppo...

Страница 28: ...28 Patch Release Note Patch 86222 21 for Software Release 2 2 2 C613 10319 00 REV T...

Отзывы: