Allied Telesis 86222-10 How to use

Simply connecting the world

Patch Release Note

Patch 86222-10

For Rapier Switches and AR800 Series

Modular Switching Routers

Introduction

This patch release note lists the issues addressed and enhancements made in

patch 86222-10 for Software Release 2.2.2 on existing models of Rapier L3

managed switches and AR800 Series L3 modular switching routers. Patch file

details are listed in Table 1.

This release note should be read in conjunction with the following documents:

■Release Note: Software Release 2.2.2 for Rapier Switches, AR300 and

AR700 Series Routers, and AR800 Series Modular Switching Routers

(Document Number C613-10313-00 Rev A) available from

www.alliedtelesyn.co.nz/documentation/documentation.html.

■Rapier Switch Documentation Set for Software Release 2.2.1 available on

the Documentation and Tools CD-ROM packaged with your switch, or

from www.alliedtelesyn.co.nz/documentation/documentation.html.

■AR800 Series Modular Switching Router Documentation Set for Software

Release 2.2.1 available on the Documentation and Tools CD-ROM

packaged with your switching router, or from www.alliedtelesyn.co.nz/

documentation/documentation.html.

WARNING: Using a patch for a different model or software release may cause

unpredictable results, including disruption to the network. Information in this

release note is subject to change without notice and does not represent a

commitment on the part of Allied Telesyn International. While every effort has

been made to ensure that the information contained within this document and

the features and changes described are accurate, Allied Telesyn International

can not accept any type of liability for errors in, or omissions arising from the

use of this information.

Table 1: Patch file details for Patch 86222-10.

Base Software Release File 86s-222.rez

Patch Release Date 29-Nov-2001

Compressed Patch File Name 86222-10.paz

Compressed Patch File Size 295536 bytes

2Patch Release Note

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

Some switch chip register settings have been optimised to improve the

provision of CoS with the newer revision of switching silicon.

Features in 86222-09

Patch file details for Patch 86222-09 are listed in Table 2.

Patch 86222-09 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

A new feature, STP forwarding, has been added. STP forwarding can be

enabled and disabled using the commands:

ENABLE SWI STPFORWARD

DISABLE SWI STPFORWARD

When STP forwarding is enabled, all STP forwarding is ignored and all

BDPUs received on a port are forwarded on all other ports.

The switch now delays sending link traps immediately after a restart to give

the link to the trap host time to come up. A similar change has been made

for the cold start trap. After a 10s delay, all interfaces which are UP have a

link trap generated for them. After that, link traps are sent as normal.

Processing invalid UDP packets caused a memory leak. This issue has been

resolved. Additional debugging facilities were added.

The default setting for the switch port parameter INFILTERING is now OFF,

as specified in IEEE802.1Q. A VLAN will still reject these packets if they are

not from valid VLAN member ports.

The IGMP snooping forwarding process now correctly selects outgoing

ports when DVMRP is managing the multicast routing information.

PCR: 01264 Module: SWI Network affecting: No

Table 2: Patch file details for Patch 86222-09.

Base Software Release File 86s-222.rez

Patch Release Date 27-Nov-2001

Compressed Patch File Name 86222-09.paz

Compressed Patch File Size 295444 bytes

PCR: 01189 Module: STP, SWI Network affecting: Yes

PCR: 01242 Module: CORE, SNMP Network affecting: No

PCR: 01244 Module: SWI, CORE, IPG Network affecting: No

PCR: 01246 Module: SWI Network affecting: No

PCR: 01247 Module: IPG Network affecting: No

Patch 86222-10 For Rapier Switches and AR800 Series Modular Switching Routers 3

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

A configuration problem prevented trunking of gigabit ports at 100Mbit

speeds. This issue has been resolved. The A39 gigabit copper uplink

reverted to autonegotiation after a restart, even if it was configured to a

fixed speed. This issue has been resolved. When the port has been

configured for a fixed speed, the mode is now set to MDIX, not MDI.

When an M2 version of the AR020 PRI E1/T1 PIC was installed in a AR040

NSM it was not possible to select the T1 mode of operation regardless of the

jumper setting. This issue has been resolved.

A fatal error occurred when the firewall discarded disallowed multicast

packets. This issue has been resolved.

Features in 86222-08

Patch file details for Patch 86222-08 are listed in Table 3.

Patch 86222-08 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

Tunnel creation failed when attempting to establish a point-to-point tunnel

from an ATR router (tunnel originator) to another vendor’s router. This

issue has been resolved.

When IGMP snooping was enabled, if a member left a group on a port, it

could not re-join the group on that port. This issue has been resolved.

Substantial changes have been made to PIM in more recent code releases.

These have been retrofitted to 2-2-2 in the patch. Note: these changes have

incorporated PCRs 01159 and 01190.

The PPPoE access concentrator did not stop RADIUS accounting when a

PADT termination was received without receiving a proper PPP

termination first. This issue has been resolved.

PCR: 01248 Module: SWI Network affecting: No

PCR: 01254 Module: PRI Network affecting: No

PCR: 01256 Module: Firewall Network affecting: No

Table 3: Patch file details for Patch 86222-08.

Base Software Release File 86s-222.rez

Patch Release Date 09-Nov-2001

Compressed Patch File Name 86222-08.paz

Compressed Patch File Size 291012 bytes

PCR: 01201 Module: L2TP Network affecting: Yes

PCR: 01233 Module: PIM Network affecting: No

PCR: 01236 Module: PPP Network affecting: No

4Patch Release Note

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

The dot1dBridge MIB implementation now complies with RFC1493.

Features in 86222-07

Patch file details for Patch 86222-07 are listed in Table 4:

Table 4: Patch file details for Patch 86222-07

Patch 86222-07 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

DHCP now correctly handles request messages containing request list

options not supported by the router.

The router would accept TCP sessions with destination address the same as

the subnet broadcast address for one of the router’s interfaces. Firewall-

generated packets destined for a subnet broadcast address on one of the

routers interfaces would cause a fatal error. These issues have been

resolved.

A watchdog timout occurred when the router received an HTTP message

with an over-length header. Normal HTTP requests would also occasionally

cause watchdog timeouts. These issues have been resolved.

The OSPF route filter was not filtering out external routes. This issue has

been resolved.

MD5 Authentication now works correctly with RIP packets.

The SET IP LOCAL command caused a fatal error if the router was

configured with a default route over an L2TP tunnel, because there was no

valid route to the remote IP address of the tunnel. This issue has been

resolved.

PCR: 01237 Module: SWI Network affecting: No

Base Software Release File 86s-222.rez

Patch Release Date 26-Oct-2001

Compressed Patch File Name 86222-07.paz

Compressed Patch File Size 250468 bytes

PCR: 01018 Module: DHCP Network affecting: No

PCR: 01160 Module: IPG,FIREWALL Network affecting: No

PCR: 01168 Module: HTTP Network affecting: No

PCR: 01182 Module: OSPF Network affecting: No

PCR: 01193 Module: IPG Network affecting: No

PCR: 01194 Module: L2TP, IPG Network affecting: No

Patch 86222-10 For Rapier Switches and AR800 Series Modular Switching Routers 5

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

Debug messages are no longer generated when a Q.931 Advise of Charge

Notification message is received.

TCP sessions would get stuck in the FINWAIT2 state if the remote host did

not send a FIN message when required. The router now starts a timer when

a TCP session enters the FINWAIT2 state and will automatically close the

session if the timer expires.

The SET IP FILTER command was not correctly handling the ICMPTYPE

and ICMPCODE parameters. This issue has been resolved.

The router will now accept DHCP messages that are greater than or equal

to 576 bytes in size, and reject any message smaller than 576 bytes. This

operation conforms to RFC 1541.

ISAKMP quick mode exchanges are now committed if any traffic is received

over the newly generated SA. This improves stability in very lossy networks

where the commit message may get lost.

ISAKMP debugging caused a fatal error when the debugging mode was set

to ALL and PFS was enabled. This issue has been resolved.

PPPoE interfaces with IDLE set to ON would not retry active discovery

when more data was received if active discovery had previously failed. This

issue has been resolved.

A memory loss occurred when certificates were used by ISAKMP. This issue

has been resolved.

ISAKMP heartbeats are no longer transmitted if the lower layer interface is

down. This stops ISAKMP heartbeats from bringing up links in dial-up

environments.

In some conditions it was possible for ISAKMP packets to be lost and not

retransmitted. Incoming ISAKMP messages are now validated before

stopping retransmission of the previous message.

The COS_DST bit on ARL for L3 interface should be 0x4 (higher priority) for

CPU ports. This has been corrected.

PCR: 01197 Module: Q931 Network affecting: No

PCR: 01198 Module: TCP Network affecting: No

PCR: 01199 Module: IPG Network affecting: No

PCR: 01202 Module: DHCP Network affecting: No

PCR: 01203 Module: ISAKMP Network affecting: No

PCR: 01204 Module: ISAKMP Network affecting: No

PCR: 01205 Module: PPP Network affecting: No

PCR: 01206 Module: ISAKMP Network affecting: No

PCR: 01207 Module: ISAKMP Network affecting: No

PCR: 01209 Module: ISAKMP Network affecting: No

PCR: 01211 Module: SWI Network affecting: No

6Patch Release Note

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

The Trigger Facility was generating a trap with variable { 0 0 }, and was not

documented in the ATI enterprise MIB. This issue has been resolved. The

MIB object triggerLastTriggerActivated ({ enterprises(1) alliedTelesyn(207)

mibObjects(8) brouterMib(4) atrouter(4) modules(4) trigger(53) 1 }) has been

defined, to record the trigger number of the last trigger activated, and this

variable is now transmitted in the trigger activation trap triggerTrap.

In a Rapier G6, fitted with a fibre uplink module with all ports active,

switching traffic between port 1 and the uplink caused the traffic flow to

cease after a period of time depending on the volume of traffic. This issue

has been resolved.

The Rapier did not include the message age of the received BDPU message

in the message age of the BDPU it transmitted. Also, the message age of the

message transmitted BDPU could be less than that of the received BDPU,

which contravenes IEEE 802.3d. This issue has been resolved.

Reception of incorrectly tagged packets was causing corruption of the ARL

table, eventually causing the switch to lock up. This issue has been resolved.

Tagged packets with invalid VLAN identifiers are now discarded. The

INFILTERING parameter of the SET SWITCH PORT command now

defaults to ON.

Flow control performance has been improved.

The IPsec SA ID now wraps correctly at the 16 bit (ID = 65535) boundary.

The ID is also checked to verify that it is free before it is used.

If PPPoE AC services were not deleted in the same order they were added,

the DELETE command would return an “ operation successful” message

but the service would still appear in the output of the SHOW PPP PPPOE

command. This issued has been resolved.

The CREATE CONFIG command did not include all required L3FILTER

parameters in the generated script file.

The L3 table on the Rapier G6 is now cleared when a switch port goes down

to ensure the L3 and ARP tables are consistent.

PCR: 01213 Module: TRG, SNMP Network affecting: No

PCR: 01214 Module: SWI Network affecting: No

PCR: 01216 Module: STP Network affecting: No

PCR: 01219 Module: VLAN,SWI Network affecting: No

PCR: 01221 Module: SWI Network affecting: No

PCR: 01225 Module: IPSEC Network affecting: No

PCR: 01227 Module: PPP Network affecting: No

PCR: 01229 Module: SWI Network affecting: No

PCR: 01232 Module: SWI Network affecting: No

Patch 86222-10 For Rapier Switches and AR800 Series Modular Switching Routers 7

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

A switch port that was transmitting STP BPDUs and also mirroring its

transmit traffic to the mirror port caused a fatal error. This issue has been

resolved.

Features in 86222-06

Patch file details for Patch 86222-06 are listed in Table 5.

Patch 86222-06 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

The power supply voltages of the base board PHYs on a Rapier G6 are

controlled by a PHY register value, which was incorrectly set. This issue has

been resolved.

In PIM Dense Mode, if a data stream started before PIM hello messages

were exchanged, the receiver did not get the data stream. This issue has

been resolved.

The Rapier G6 base ports sometimes experienced spurious link up or link

down events. This issue has been resolved.

Features in 86222-05

Patch file details for Patch 86222-05 are listed in Table 6.

Patch 86222-05 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

PCR: 01234 Module: SWI Network affecting: No

Table 5: Patch file details for Patch 86222-06.

Base Software Release File 86s-222.rez

Patch Release Date 30-Aug-2001

Compressed Patch File Name 86222-06.paz

Compressed Patch File Size 226776 bytes

PCR: 01188 Module: SWI Network affecting: No

PCR: 01190 Module: PIM Network affecting: No

PCR: 01192 Module: SWI Network affecting: No

Table 6: Patch file details for Patch 86222-05.

Base Software Release File 86s-222.rez

Patch Release Date 24-Aug-2001

Compressed Patch File Name 86222-05.paz

Compressed Patch File Size 223728 bytes

8Patch Release Note

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

A39 copper uplink modules in the Rapier G6 sometimes experienced

spurious link up or link down events. This issue has been resolved.

The enterprise MIB now supports objects for power supply monitoring.

Certificates containing GeneralisedTime with the year in YYYY format are

now parsed correctly. The keyUsage field of certificates is now parsed

correctly when only one byte has been specified. The CRL update time is now

displayed correctly in hours. If the username and password parameters are

present the location parameter must be present and appear before the

username and password parameters. Certificates with signatures of 257 bytes

are now correctly parsed. Certificates added from a configuration script are

now processed correctly.

A fatal error occurred if an IPv6 interface was deleted while packets were

being transmitted. The number of current interfaces was not being updated

correctly when a new IPv6 interface was added. As a result, after multiple

additions and deletions, no more IPv6 interfaces could be added. These

issues have been resolved.

The CREATE CONFIG command now adds PKI certificates to the script in

the same order that they were originally added to the certificate database.

PKI certificates are now periodically checked (once per hour) to verify that

they are still valid.

IPCOMP SA’s which have the reserved CPI “3” are no longer deleted by

ISAKMP delete messages.

When a VLAN was created and then destroyed on the G6 or G6F, the

VTABLE was corrupted. This has been fixed.

DHCP failed to send request messages when it was in a rebinding or

renewing state. This issue has been resolved.

In some extreme traffic conditions the switch could lock up, preventing

switching of any traffic. This issue has been resolved.

PCR: 01148 Module: SWI Network affecting: No

PCR: 01157 Module: CORE Network affecting: No

PCR: 01162 Module: PKI Network affecting: No

PCR: 01170 Module: IPv6 Network affecting: No

PCR: 01176 Module: PKI Network affecting: No

PCR: 01177 Module: PKI Network affecting: No

PCR: 01178 Module: IPSEC Network affecting: No

PCR: 01179 Module: SWI Network affecting: No

PCR: 01181 Module: DHCP Network affecting: No

PCR: 01185 Module: SWI Network affecting: No

Patch 86222-10 For Rapier Switches and AR800 Series Modular Switching Routers 9

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

When large numbers of sessions were being handled the firewall would

become overly aggressive in restricting new sessions. The Active TCP Opens

field in the output of the SHOW FIREWALL POLICY would show a very

high number (42 ×108). This issue has been resolved.

If the IGMP table was empty and a timeout was set, a fatal error occurred.

This issue has been resolved.

Features in 86222-04

Patch file details for Patch 86222-04 are listed in Table 7.

Patch 86222-04 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

Message protection validation failures would occur intermittently. This

issue has been resolved.

ISAKMP now interoperates with other vendor’s products in aggressive

mode exchanges.

Support has been added for the 8624XL-80 switch with -48VDC power

supply.

In a dual policy configuration, the firewall would lock up under load. The

firewall would also mistakenly report SYN attacks. These issues have been

resolved.

The CREATE CONFIG command generated duplicate PIM interface

configuration command lines. This issue has been resolved.

Certificates containing GeneralisedTime with the year in YYYY format are

now parsed correctly. The keyUsage field of certificates is now parsed

PCR: 01186 Module: FIREWALL Network affecting: No

PCR: 01187 Module: IPG Network affecting: No

Table 7: Patch file details for Patch 86222-04.

Base Software Release File 86s-222.rez

Patch Release Date 24-Aug-2001

Compressed Patch File Name 86222-04.paz

Compressed Patch File Size 220220 bytes

PCR: 01124 Module: PKI Network affecting: No

PCR: 01136 Module: ISAKMP Network affecting: No

PCR 01138 Module: CORE, SWI Network affecting: No

PCR: 01152 Module: FIREWALL Network affecting: No

PCR: 01159 Module: PIM Network affecting: No

PCR: 01162 Module: PKI Network affecting: No

10 Patch Release Note

Patch 86222-10 for Software Release 2.2.2

C613-10319-00 REV J

correctly when only one byte has been specified. The CRL update time is now

displayed correctly in hours. If the username and password parameters are

present the location parameter must be present and appear before the

username and password parameters.

The DHCP server now correctly allocates addresses to clients running

Apple Open Transport 2.5.1 or 2.5.2.

Both public and private access could be configured on the same interface on

a policy. This issue has been resolved.

RSA encryption is now periodically suspended to ensure other processes

get some CPU time during large RSA calculations.

The CREATE ISAKMP command now checks that the key specified by the

LOCALRSAKEY parameter actually exists in the ENCO module.

The INTERFACE parameter of the CREATE TRIGGER and SET TRIGGER

commands now supports Ethernet interfaces. Ethernet interface events can

now generate triggers.

The Telnet server’s listen port can now be configured to a number in the

range 1 to 65535, excluding any ports already assigned as listen ports.

The CREATE CONFIG command sometimes generated scripts for rule

commands with GBLIP=0.0.0.0 when this was not necessary. This issue has

been resolved.

Features in 86222-03

Patch file details for Patch 86222-03 are listed in Table 8.

Patch 86222-03 includes all issues resolved and enhancements released in

previous patches for Software Release 2.2.2, and the following enhancements:

PCR: 01165 Module: DHCP Network affecting: No

PCR: 01166 Module: FIREWALL Network affecting: No

PCR: 01167 Module: ENCO Network affecting: No

PCR: 01169 Module: ISAKMP Network affecting: No

PCR: 01171 Module: ETH, TRIGGER Network affecting: No

PCR: 01173 Module: Telnet Network affecting: No

PCR: 01174 Module: Firewall Network affecting: No

Table 8: Patch file details for Patch 86222-03.

Base Software Release File 86s-222.rez

Patch Release Date 8-Aug-2001

Compressed Patch File Name 86222-03.paz

Compressed Patch File Size 205828 bytes

Other Allied Telesis Software manuals

Allied Telesis

Allied Telesis AlliedWare Plus 5.2.1 User manual

Allied Telesis

Allied Telesis 86253-07 Instruction Manual

Allied Telesis

Allied Telesis AR441S How to use

Allied Telesis

Allied Telesis Broadcom Advanced Control Suite 3 User manual

Allied Telesis

Allied Telesis AR770S Installation guide

Allied Telesis

Allied Telesis AT-8000S Series User manual

Allied Telesis

Allied Telesis AT-8000S Series User manual

Allied Telesis

Allied Telesis AR44xS Instruction Manual

Allied Telesis

Allied Telesis AT-S82 User manual

Allied Telesis

Allied Telesis SNMP Rel. 2.0.0 User manual

Allied Telesis

Allied Telesis AT-x900-12XT/S Mounting instructions

Allied Telesis

Allied Telesis AT-GS950/8 User manual

Allied Telesis

Allied Telesis SB251-08 Instruction Manual

Allied Telesis

Allied Telesis AT-S95 User manual

Allied Telesis

Allied Telesis 86241-02 Instruction Manual

Allied Telesis

Allied Telesis AT-S95 User manual

Allied Telesis

Allied Telesis AT-x900-12XT/S User manual

Allied Telesis

Allied Telesis SB251-10 Instruction Manual

Allied Telesis

Allied Telesis WebSmart AT-FS750/16 How to use

Allied Telesis

Allied Telesis AT-S87 Instruction Manual

Allied Telesis

Allied Telesis AT-S39 User manual

Allied Telesis

Allied Telesis AT-S41 User manual

Allied Telesis

Allied Telesis AT-8948 User manual

Allied Telesis

Allied Telesis SwitchBlade AT-AR440S User manual

Popular Software manuals by other brands

COMPRO

COMPRO COMPROFM manual

Muratec

Muratec OFFICEBRIDGE ONLINE user guide

Oracle

Oracle Contact Center Anywhere 8.1 installation guide

Adobe

Adobe 65007312 - Photoshop Lightroom Programmer's guide

Avaya

Avaya NULL One-X for RIM Blackberry user guide

HP ProLiant BL420c user guide

PS Audio

PS Audio PowerPlay Programming manual

Brady

Brady LOCKOUT PRO 3.0 Administrator's guide

Avaya

Avaya Interaction Center user guide

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Guide book

Novell

Novell GROUPWISE 8 - INTERNET AGENT manual

Oracle

Oracle Application 9i Configuration guide

Acer

Acer RDM user guide

Canon

Canon Vixia HF21 instruction manual

Canon

Canon ZR950 instruction manual

Samsung

Samsung Auto Backup user manual

Polycom

Polycom Vortex EF2201 Application note

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c user manual