Known Problems and Limitations
45
Release 11.0.2
When you change the demultiplexer type on a primary interface that has 1024
demultiplexer table entries, the ICC ping threshold times out due to the
removal of the old entries and the addition of the new ones. [Defect ID
182218]
After an SRP stateful switchover completes on an ERX1410 router configured
with a single VPN routing and forwarding instance (VRF) and Network Address
Translation (NAT), the SRP module that becomes active after the switchover
resets. [Defect ID 180058]
IPSec
In a network where you use the tunnel signalling command to specify that the
security parameters and keys are configured manually for IPSec tunnels
between VRs, the line modules reset when you delete and then re-create the
IPSec tunnels. If you attempt to configure the tunnels again after the modules
come back up, the line modules reset again.
Work-around
: Configure the IPSec tunnels to use ISASKMP/IKE to negotiate SA
and establish keys. [Defect ID 178304]
IPSec tunnels created over Fast Ethernet interfaces fail to come up. [Defect ID
179256]
Work-around:
After you create the tunnel, bounce the tunnel interface by
issuing the
shutdown
/
no shutdown
command sequence. The tunnel comes up
successfully.
IS-IS
On a router configured with IS-IS and BFD, using the
redundancy force srp
command to force an SRP switchover sometimes brings down IS-IS and BFD.
[Defect ID 179287]
IS-IS graceful restart (nonstop forwarding) does not work on the broadcast
interface when the restarting router is the designated intermediate system
(DIS). Graceful restart works properly when the restarting router is not the DIS.
[Defect ID 61496]
L2TP
After a unified ISSU completes on a router functioning as an L2TP access
concentrator (LAC), traffic outages occur on the L2TP network server
(LNS)-facing interface at the LAC in a configuration with 16,000 or 32,000 L2TP
sessions over 500 tunnels. [Defect ID 180147]