HP 3020 Скачать руководство пользователя страница 16 | Manualshive

Страница: 16 / 34

background image

16

Release Notes for the Cisco Catalyst Blade Switch 3020 for HP, Cisco IOS Release 12.2(55)SE and Later

OL-22861-04

Resolved Caveats

•

CSCtr28857

A vulnerability in the Multicast Source Discovery Protocol (MSDP) implementation of Cisco IOS
Software and Cisco IOS XE Software could allow a remote, unauthenticated attacker to cause a
reload of an affected device. Repeated attempts to exploit this vulnerability could result in a
sustained denial of service (DoS) condition.

Cisco has released free software updates that address this vulnerability. Workarounds that mitigate
this vulnerability are available. This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdp

•

CSCtr91106

A vulnerability exists in the Cisco IOS Software that may allow a remote application or device to
exceed its authorization level when authentication, authorization, and accounting (AAA)
authorization is used. This vulnerability requires that the HTTP or HTTPS server is enabled on the
Cisco IOS device.

Products that are not running Cisco IOS Software are not vulnerable.

Cisco has released free software updates that address these vulnerabilities.

The HTTP server may be disabled as a workaround for the vulnerability described in this advisory.

This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai

•

CSCts34688

The switch crashes due to the "HACL Acl Manager" memory fragmentation when a large access
control list (ACL) is modified.

The workaround is add or remove ACE entries in sequential order when the ACL is modified.

•

CSCts75641

Routing Information Protocol (RIP) Version 2 packets egressing an 801.1Q tunnel interface are
triplicated.

There is no workaround.

•

CSCtt16051

Cisco IOS Software contains a vulnerability in the Smart Install feature that could allow an
unauthenticated, remote attacker to cause a reload of an affected device if the Smart Install feature
is enabled. The vulnerability is triggered when an affected device processes a malformed Smart
Install message on TCP port 4786.

Cisco has released free software updates that address this vulnerability. There are no workarounds
to mitigate this vulnerability.

This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-20120328-smartinstall

«
...
14
15
16
17
18
...
»

Содержание 3020

Страница 1: ... that apply to them Verify that these release notes are correct for your switch If you are installing a new switch see the Cisco IOS release label on the switch packaging If your switch is on use the show version privileged EXEC command See the Finding the Software Version and Feature Set section on page 3 If you are upgrading to a new release see the software upgrade filename for the software ver...

Страница 2: ... System Requirements Hardware Requirements section on page 2 Software Requirements section on page 2 Hardware Requirements Software Requirements These are the supported operating systems and browsers for the device manager Windows 2000 XP Vista and Windows Server 2003 Internet Explorer 5 5 6 0 7 0 Firefox 1 5 2 0 or later Switch Description Supported by Minimum Cisco IOS Release Cisco Catalyst Bla...

Страница 3: ... flash device flash You can use the show version privileged EXEC command to see the software version that is running on your switch The second line of the display shows the version You can also use the dir filesystem privileged EXEC command to see the directory names of other software images that you might have stored in flash memory Deciding Which Files to Use The upgrade procedures in these rele...

Страница 4: ... HTML files in the tar file We recommend that you download the tar file from Cisco com and archive it on an internal host in your network You can also configure the switch as a TFTP server to copy files from one switch to another without using an external TFTP server by using the tftp server global configuration command For more information about the tftp server command see the Basic File Transfer...

Страница 5: ...Optional Ensure that you have IP connectivity to the TFTP server by entering this privileged EXEC command Switch ping tftp server address For more information about assigning an IP address and default gateway to the switch see the software configuration guide for this release Step 6 Download the image file from the TFTP server to the switch If you are installing the same version of software that i...

Страница 6: ...gured Support for VLAN assignment on a port configured for multi auth mode The RADIUS server assigns a VLAN to the first host to authenticate on the port and subsequent hosts use the same VLAN Voice VLAN assignment is supported for one IP phone Memory consistency check routines to detect and correct invalid ternary content addressable memory TCAM table entries Support for the Security Group Tag SC...

Страница 7: ...plicant controlled transient global configuration command to control access to the supplicant port during authentication Use the no form of this command to provide access to the supplicant port during the authentication period Limitations and Restrictions You should review this section before you begin working with the switch These are known limitations that will not be fixed and there is not alwa...

Страница 8: ...y timeout global configuration command to specify the amount of time that the client should keep trying to download the configuration and you do not enter a timeout value the default value is zero which should mean that the client keeps trying indefinitely However the client does not keep trying to download the configuration The workaround is to always enter a non zero value for the timeout value ...

Страница 9: ...through software Hence with multicast routing enabled the first few packets are sent from a port even when IGMP filtering is set to deny those groups on that port There is no workaround CSCdy82818 If an IGMP report packet has two multicast group records the switch removes or adds interfaces depending on the order of the records in the packet If the ALLOW_NEW_SOURCE record is before the BLOCK_OLD_S...

Страница 10: ...ear 01 01 32 BIT 4 OUTOFRANGE bit 1321 is not in the expected range of 0 to 1024 There is no impact to switch functionality There is no workaround CSCtg32101 SPAN and RSPAN Egress SPAN routed packets both unicast and multicast show the incorrect source MAC address For remote SPAN packets the source MAC address should be the MAC address of the egress VLAN but instead the packet shows the MAC addres...

Страница 11: ...nters privileged EXEC command output Valid IEEE 802 1Q frames of 64 to 66 bytes are correctly forwarded even though the port LED blinks amber and the frames are not counted on the interface statistics There is no workaround CSCec35100 VLAN If the number of VLANs times the number of trunk ports exceeds the recommended limit of 13 000 the switch can fail The workaround is to reduce the number of VLA...

Страница 12: ...ke sure that the switch has been properly configured as an AAA client on the ACS Cisco IOS Release 12 2 40 SE and later If the switch has interfaces with automatic QoS for voice over IP VoIP configured and you upgrade the switch software to Cisco IOS Release 12 2 40 SE or later when you enter the auto qos voip cisco phone interface configuration command on another interface you might see this mess...

Страница 13: ... the switch IP information If you use Internet Explorer Version 5 5 and select a URL with a nonstandard port at the end of the address for example www cisco com 84 you must enter http as the URL prefix Otherwise you cannot start the device manager Open Caveats Device Manager CSCtf57222 The chassis ID for the CBS3020 does not appear in the Device Manager window There is no workaround Cisco IOS CSCt...

Страница 14: ...953 A port that is programatically configured with auth default ACL does not allow any traffic on the switch except DHCP traffic If the configurations on the interface are cleared and the interface is restarted the auth default ACL configuration remains and the problem persists There is no workaround Resolved Caveats Caveats Resolved in Cisco IOS Release 12 2 55 SE5 page 14 Caveats Resolved in Cis...

Страница 15: ...es MA are received The workaround is to disable the sending of LLDP MA TLVs on peer hosts CSCtj88307 When you enter the default interface switchport or no switchport interface configuration command on the switch this message appears EMAC phy access error port 0 retrying There is no workaround CSCtj89743 CPU usage is high when a device connected to the switch is accessed using the https IP_address ...

Страница 16: ... are not vulnerable Cisco has released free software updates that address these vulnerabilities The HTTP server may be disabled as a workaround for the vulnerability described in this advisory This advisory is available at the following link http tools cisco com security center content CiscoSecurityAdvisory cisco sa 20120328 pai CSCts34688 The switch crashes due to the HACL Acl Manager memory frag...

Страница 17: ...iguration command Caveats Resolved in Cisco IOS Release 12 2 55 SE4 CSCta85026 The Dynamic Host Configuration Protocol DHCP CLI does not accept white spaces in raw ASCII option in the DHCP pool configuration submode This issue is seen in Cisco IOS Release 12 4 24 T1 and later There is no workaround CSCtg11547 In a VPN Routing and Forwarding VRF aware setup messages are not sent to the syslog serve...

Страница 18: ...o manually configure the access point port CSCtl51859 Neighbor discovery fails for IPv6 hosts connected to the switch when the IPv6 MLD snooping feature is enabled globally on the switch The workaround is to disable IPv6 MLD snooping on the switch CSCtl60151 The switch sometimes reloads after a CPU overload regardless of the process that is overloading the CPU This problem has been corrected CSCtn...

Страница 19: ...message about the redundant power supply RPS No RPS is actually present and the switch is instead powered by the blade chassis There is no workaround CSCth57488 The switch LEDs freeze or behave erratically The problem occurs with bootloader version 12 2 44 SE5 There is no workaround CSCtl05835 For changes in temperature the command line interface shows the updated temperature but the Simple Networ...

Страница 20: ...pace becomes available after the TCP session the closed There is no workaround CSCsx29696 On switches running Cisco IOS Release 12 2 35 SE or later connectivity issues might occur with these messages SUPQ 4 CPUHB_RECV_STARVE Still seeing receive queue stuck after throttling There is no workaround CSCsz18634 On a switch running Cisco IOS Release 12 2 46 SE the output of the show interfaces privileg...

Страница 21: ...co IOS Software and Cisco IOS XE Software allows a remote unauthenticated attacker to cause a reload of an affected device Repeated attempts to exploit this vulnerability could result in a sustained denial of service DoS condition Cisco has released free software updates that address this vulnerability This advisory is posted at http www cisco com warp public 707 cisco sa 20100922 igmp shtml Note ...

Страница 22: ...f the system messages Dec 25 19 03 57 463 AEST PLATFORM_ENV 1 TEMP Abnormal temperature detected Jan 2 04 04 46 600 AEST PLATFORM_ENV 1 TEMP Abnormal temperature detected Jan 7 06 33 36 067 AEST PLATFORM_ENV 1 TEMP Abnormal temperature detected This is an example of the output of the show environment all command switch show environment all TEMPERATURE is OK Temperature Value 39 Degree Celsius Temp...

Страница 23: ...ing configuration file The workaround is to reload the switch CSCti04980 After you upgrade the switch software to Cisco IOS Release 12 2 55 SE enhanced auto QoS commands are generated when auto QoS is enabled on an interface and mls qos command is not enabled on the switch If the mls qos command was already enabled on the switch enhanced auto QoS commands are generated only when you configure one ...

Страница 24: ...nfigure an IPv6 RIP routing process and enter router configuration mode for the process Step 3 maximum paths number paths Optional Define the maximum number of equal cost routes that IPv6 RIP can support The range is from 1 to 32 and the default is 16 routes Step 4 exit Return to global configuration mode Step 5 interface interface id Enter interface configuration mode and specify the Layer 3 inte...

Страница 25: ...figuration command followed by no shutdown interface configuration command to restart the interface Error Message AUTHMGR 5 VLANASSIGN VLAN dec assigned to Interface chars AuditSessionID chars Explanation A VLAN was assigned dec is the VLAN ID the first chars is the interface and the second chars is the session ID Recommended Action No action is required Error Message AUTHMGR 7 FAILOVER Failing ov...

Страница 26: ...the status of the authentication the second chars is the authentication method the third chars is the client ID the fourth chars is the interface and the fifth chars is the session ID Recommended Action No action is required Error Message DOT1X 4 MEM_UNAVAIL Memory was not available to perform the 802 1X action AuditSessionID chars Explanation The system memory is not sufficient to perform the IEE...

Страница 27: ...esolve the error by using the Output Interpreter Use the Bug Toolkit to look for similar reported problems If you still require assistance open a case with the TAC or contact your Cisco technical support representative and provide the representative with the gathered information Error Message HARDWARE 3 PORTNUM_ERROR traceback port number dec is invalid Explanation The port number is out of range ...

Страница 28: ...ror Message PILET 1 AUTHENTICATION_FAIL This Switch may not have been manufactured by Cisco or with Cisco s authorization This product may contain software that was copied in violation of Cisco s license terms If your use of this product is the cause of a support issue Cisco may deny operation of the product support under your warranty or under a Cisco technical support program such as Smartnet Pl...

Страница 29: ... on Interface chars AuditSessionID chars Explanation The authentication result was overridden The first chars is the client ID the second chars is the interface and the third chars is the session ID Recommended Action No action is required Error Message DOT1X_SWITCH 5 ERR_INVALID_PRIMARY_VLAN Attempt to assign primary VLAN dec to 802 1x port chars AuditSessionID chars Explanation An attempt was ma...

Страница 30: ... is the port and the second chars is the session ID Recommended Action Change the port mode so that it is configured as a private VLAN host port or use a different VLAN that is not configured as a secondary VLAN Error Message DOT1X_SWITCH 5 ERR_SPAN_DST_PORT Attempt to assign VLAN dec to 802 1x port chars which is configured as a SPAN destination AuditSessionID chars Explanation An attempt was mad...

Страница 31: ...ERR_VLAN_INVALID Attempt to assign invalid VLAN dec to 802 1x port chars AuditSessionID chars Explanation An attempt was made to assign an invalid VLAN to an 802 1x port The VLAN specified is out of range dec is the VLAN the first chars is the port and the second chars is the session ID Recommended Action Update the configuration to use a valid VLAN Error Message DOT1X_SWITCH 5 ERR_VLAN_NOT_FOUND ...

Страница 32: ...patible with RSPAN AuditSessionID chars Explanation Remote SPAN should not be enabled on a VLAN with IEEE 802 1x enabled dec is the VLAN the first chars is the port and the second chars is the session ID Recommended Action Either disable remote SPAN configuration on the VLAN or disable IEEE 802 1x on all the ports in this VLAN Error Message SPANTREE 2 BLOCK_BPDUGUARD_VP Received BPDU on port chars...

Страница 33: ...ification chars Explanation This message means that the VTP code encountered an unusual diagnostic situation chars is a description of the situation Recommended Action Find out more about the error by using the show tech support privileged EXEC command Copy the message exactly as it appears on the console or in the system log Research and attempt to resolve the error by using the Output Interprete...

Страница 34: ...stem Message Guide Obtaining Documentation Obtaining Support and Security Guidelines For information on obtaining documentation obtaining support providing documentation feedback security guidelines and also recommended aliases and general Cisco documents see the monthly What s New in Cisco Product Documentation which also lists all new and revised Cisco technical documentation at http www cisco c...

Отзывы:

Нет отзывов

Похожие инструкции для 3020

BladeCenter HS23

Бренд: IBM Страницы: 30

System x3950 X6

Бренд: IBM Страницы: 53

Бренд: IBM Страницы: 214

System x3100 M4

Бренд: IBM Страницы: 332

StorTrends 1312-P

Бренд: American Megatrends Страницы: 2

Бренд: Buffalo Страницы: 80

SAT-IP EXIP 418

Бренд: Kathrein Страницы: 16

UniServer R4300 G6

Бренд: H3C Страницы: 542

Бренд: Opengear Страницы: 4

TeraStation TS-RXL/R5

Бренд: Buffalo Страницы: 91

DIGI CONNECT ES

Бренд: Digi Страницы: 23

Бренд: Sonnet Страницы: 16

Бренд: Kontron Страницы: 42

Бренд: IBM Страницы: 58

System x3500 M4

Бренд: IBM Страницы: 170

Picturall MST02-R1

Бренд: Analog way Страницы: 4

Бренд: BITMAIN Страницы: 10

ANTMAINER S19j Server

Бренд: BITMAIN Страницы: 21

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды