Software Maintenance Release Note Maintenance Version 291-10 for AR415S, AR440S, AR441S, AR442S, AR450S, AR725, AR745, AR750S, AR750S-DP, and AR770S routers and AT-8600, AT-8700XL, Rapier i, Rapier w, AT-8800, AT-8900, x900-48, AT-9900, and AT-9800 Series switches This software maintenance release note lists the issues addressed and enhancements made in Maintenance Version 291-10 for Software Version 2.9.1.
Enabling and Installing this Release Models Series Release File Date Size (bytes) GUI file AT-8824, AT-8848 AT-8800 86291-10.rez 24 July 2007 4587048 8824_291-10_en_d.rsc 2 8848_291-10_en_d.rsc AT-8948, AT8948i, x900-48FE, x900-48FE-N, x900-48FS x900-48 89291-10.rez 24 July 2007 4884216 - AT-9924T, AT-9924SP, AT-9924T/4SP AT-9900 89291-10.rez 24 July 2007 4884216 9924_291-10_en_d.rsc AT-9812T, AT-9816GB AT-9800 sb291-10.rez 24 July 2007 3988344 9812_291-10_en_d.
Levels 3 Levels Some of the issues addressed in this Maintenance Version include a level number. This number reflects the importance of the issue that has been resolved. The levels are: Level 1 This issue will cause significant interruption to network services, and there is no work-around. Level 2 This issue will cause interruption to network service, however there is a work-around. Level 3 This issue will seldom appear, and will cause minor inconvenience.
Features in 291-10 4 Features in 291-10 Software Maintenance Version 291-10 includes the resolved issues and enhancements in the following tables. In the tables, for each product series: ■ “Y” indicates that the resolution is available in Version 291-10 for that product series. ■ “–” indicates that the issue did not apply to that product series.
x900-48 AT-9900 AT-9800 The resolution to CR 444 meant that packets processed by the CPU are now subjected to the same filtering as packets switched in hardware. However, this filtering did not always return the expected results. Sometimes its IP address matching was incorrect, and it did not correctly process filters with an action of nodrop.
Features in 291-10 6 This issue has been resolved. Level 4 No level 4 issues Enhancements No enhancements Version 291-10 C613-10488-00 REV G x900-48 AT-9900 AT-9800 Traceroute (the trace command) did not work. It returned the error “The destination is either unspecified or invalid” even if the destination was reachable.
Features in 291-09 7 Features in 291-09 Software Maintenance Version 291-09 includes the enhancement in the following table, which is available for x900-48FE and x900-48FE-N switches. Level 1-4 No level 1-4 issues To enable monitoring, use the command: enable cpufanmonitoring To disable it again, use the command: disable cpufanmonitoring When monitoring is enabled, the command show system displays the CPU fan status in the entry labelled “Main fan”.
Features in 291-08 8 Features in 291-08 Software Maintenance Version 291-08 includes the resolved issues and enhancements in the following tables. In the tables, for each product series: ■ “Y” indicates that the resolution is available in Version 291-08 for that product series. ■ “–” indicates that the issue did not apply to that product series.
AT-8700XL x900-48 AT-9900 AT-9800 The following issues existed with classifiers: AT-8600 2 AT-8800 Classifier Rapier w CR00003495 Description Rapier i Level AR7x0S Module AR7x5 CR 9 AR400 Features in 291-08 Y Y Y Y Y Y - - Y Y Y - - - - - - - - - Y - Y Y Y Y Y Y - - Y Y Y Y Y Y Y Y Y Y Y Y Y Y ■ classifiers matching protocol=ipv6 and ipprotocol=icmp could be created more than once ■ classifiers matching protocol=ipv6 and ipprotocol=1 could be
AT-8700XL x900-48 AT-9900 AT-9800 The following issues occurred with RIPng: AT-8600 2 AT-8800 RIPng Rapier w CR00007178 Description Rapier i Level AR7x0S Module AR7x5 CR 10 AR400 Features in 291-08 Y Y Y Y Y Y - - Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y - - - - Y Y Y Y Y Y Y - - Y Y Y ■ RIPng dropped requests from peers with non link-local addresses.
x900-48 AT-9900 AT-9800 If the router or switch received an LCP packet with an unrecognised protocol, it responded with a ProtocolReject packet of incorrect length that did not respect the established MRU of the peer.
AT-8700XL x900-48 AT-9900 AT-9800 Unexpected characters could appear on the terminal emulator display when the column size was set greater than 80 and the user edited a command that spanned more than one line of the display.
AT-8700XL x900-48 AT-9900 AT-9800 If a user shortened the prefix length of an IPv6 interface address, then lengthened it, it became impossible to change the prefix length again.
AT-8700XL x900-48 AT-9900 AT-9800 If an IPv6 accelerator was used, and the upstream router forwarded IPv6 multicast data just before the prune limit timer expired, then the downstream router sometimes did not send the prune until significantly after the timer expired.
AT-8700XL x900-48 AT-9900 AT-9800 The timer that governs the interval between repeated neighbour solicitation messages could only be configured by using the ndretrans parameter of the set ipv6 nd command, and not through router advertisements that the router or switch received from other routers.
x900-48 AT-9900 AT-9800 If a PPP instance was destroyed after an attached ATM channel had been modified using the set atm channel command, the router rebooted. The router could also reboot if an ATM channel was deleted under similar circumstances.
x900-48 AT-9900 AT-9800 If an IPsec tunnel with no encryption (NULL) was negotiated in AlliedWare over NAT-T, the ESP packets did not contain an RFC 3948 compliant checksum. This means that some vendors may have discarded packets sent by the AlliedWare peer over such a tunnel.
AT-8700XL x900-48 AT-9900 AT-9800 DHCP Snooping Some small memory access violations existed in DHCP snooping. AT-8600 2 AT-8800 QoS, Rapier w CR00017368 Description Rapier i Level AR7x0S Module AR7x5 CR 18 AR400 Features in 291-08 - - - Y Y Y Y Y Y Y - Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y - - - - Y These violations have been resolved. Also, a new console error message is displayed if a user tries to add a duplicate classifier to a QoS policy.
x900-48 AT-9900 AT-9800 The router or switch sometimes could not establish a VPN when the remote peer was behind a NAT gateway and the router or switch’s remote ID was set to default.
x900-48 AT-9900 AT-9800 When the DHCP server was enabled on a router or switch that also had a local IP interface defined by using the set ip local command, outgoing DHCP server packets would use the set ip local command's IP address as their source address. Furthermore, if the broadcast flag was set to TRUE in the DHCP Discover message that the server was replying to, then the server would send the DHCP Offer packet out the wrong IP interface with the wrong source IP address.
Features in 291-08 21 x900-48 AT-9900 AT-9800 Some PKI commands (including add pki ldap, create pki enroll, and create pki keyupdate) only worked if their parameters were entered in a particular order.
x900-48 AT-9900 AT-9800 The show file command did not check whether the specified file system was valid. If an invalid file system type was entered (such as show file=abc:*.*), the router or switch reported that no files found instead of reporting that the file system abc did not exist.
x900-48 AT-9900 AT-9800 On AR725 and AR745 routers, which have no VLAN support, an SNMP Get request for dot1qMaxVlanId or dot1qMaxSupportedVlans incorrectly returned a value.
AT-8700XL x900-48 AT-9900 AT-9800 When prompted to enter a file name while using the command line file editing utility, no more than 23 characters could be typed, even if the existing characters were deleted using the backspace key.
x900-48 AT-9900 AT-9800 If a user attempted to enter a filename with an invalid format, the resulting error message did not correctly describe the format that should have been used. Also, the router or switch returned an incorrect error message when a user attempted to delete a non-existent release licence file.
AT-8700XL x900-48 AT-9900 AT-9800 PPP incorrectly ACKed a LCP ConfigureRequest containing the MagicNumber option with a value of 0. AT-8600 3 AT-8800 PPP Rapier w CR00010979 Description Rapier i Level AR7x0S Module AR7x5 CR 26 AR400 Features in 291-08 Y Y Y Y Y Y - - Y Y Y Y Y Y Y Y Y - - Y Y Y - - - - - - - - Y Y - Y Y Y Y - Y Y Y - Y Y Y Y Y Y Y Y Y Y Y Y Y This issue has been resolved.
x900-48 AT-9900 AT-9800 When the router or switch pinged a host whose hostname consisted only of the digits 0-9 and the letters A-F, it treated the given hostname as a hexadecimal IPX address even if the hostname was in the host list.
x900-48 AT-9900 AT-9800 Once a default local IP address had been set, it could not be deleted. This was because the default interface does not have an interface number, but to delete a local interface, the user must specify the interface’s number.
AT-8700XL x900-48 AT-9900 AT-9800 When a user destroyed an EPSR domain, SNMP Requests returned information about the domain even though it no longer existed.
AT-8700XL x900-48 AT-9900 AT-9800 The help displayed for the LLDP port parameter (in such commands as show lldp port=?) incorrectly indicated that the port parameter is a “string 1 to 255 characters long”. The port parameter is instead an Ethernet switch port number or a range of numbers.
x900-48 AT-9900 AT-9800 It is valid to use the command create ppp=number to create a PPP interface without specifying the underlying layer 1 interface. However, executing this command, or including it in a boot script, resulted in an error.
x900-48 AT-9900 AT-9800 On termination of an 802.1x session, an accounting message is sent to the Radius server. This enhancement implements the Acct-Input-Octets, Acct-Output-Octets, Acct-Input-Packets, and Acct-Output-Packets fields in the message.
Features in 291-08 33 CR Module Level Description AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT-9900 AT-9800 Enhancements CR00012822 BGP - The BGP counter output display has been significantly improved. Also, the command show bgp counter=all now prints out the RIB, UPDATE, DB and PROCESS counters. Y Y Y Y Y Y - - Y Y Y CR00016099 MACFF, - MAC-forced forwarding has been enhanced for use in a hospitality situation, such as a hotel.
Description Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT-9900 AT-9800 CR00016662 CR00016891 CR00017335 CR00017937 Level AR7x0S Module AR7x5 CR 34 AR400 Features in 291-08 - This software release supports the new x900-48FS switch. For an overview of the switch, see “Support for the new x900-48FS switch—CR00016662” on page 92.
CR Module Level Description AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT-9900 AT-9800 35 AR400 Features in 291-08 CR00017482 IGMP Snooping - The IGMP snooping fast leave option has been enhanced, to make it available when multiple clients are attached to a single port on the snooping switch. For configuration information, see “IGMP snooping fast leave in multiple host mode—CR00017482” on page 93.
Features in 291-07 36 Features in 291-07 Software Maintenance Version 291-07 includes the resolved issues and enhancements in the following tables. In the tables, for each product series: ■ “Y” indicates that the resolution is available in Version 291-07 for that product series. ■ “–” indicates that the issue did not apply to that product series.
Features in 291-06 37 Level 4 No level 4 issues Enhancements No enhancements Features in 291-06 Software Maintenance Version 291-06 provided support for the new Rapier 48w switch. For more information, see “Support for the new Rapier 48w switch” on page 95.
Features in 291-05 38 Features in 291-05 Software Maintenance Version 291-05 includes the resolved issues and enhancements in the following tables. In the tables, for each product series: ■ “Y” indicates that the resolution is available in Version 291-05 for that product series. ■ “–” indicates that the issue did not apply to that product series. Level 1 No level 1 issues AT-9900 AT-9800 When a port left a multicast group, the router or switch assigned the All Groups port to that multicast group.
x900-48 AT-9900 AT-9800 Previously, it was possible to destroy a VLAN when it was configured as an IP interface. AT-8700XL 2 AT-8600 VLAN AT-8800 CR00012980 Description Rapier i Level AR7x0S Module AR7x5 CR 39 AR400 Features in 291-05 Y - Y Y Y Y Y Y Y Y Y Y Y Y Y - - - - - Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y - - - - - Y - - - - Y - - - - - - - - - Y Y Y Y Y Y Y Y Y Y This issue has been resolved.
AT-9900 AT-9800 When only NAT was enabled on the firewall, during some TCP connections in which either end of the connection sends FIN (finished) messages immediately after sending some data and the other end ACKs (acknowledges) the data and the FIN message consecutively, the firewall sometimes incorrectly interpreted the first ACK message (intended for the data) as belonging to the FIN message and prematurely shut the connection down.
AT-9900 AT-9800 For DHCPv6, the router or switch now supports Prefix Delegation according to RFC 3633. The previous implementation was according to an Internet draft and did not interoperate with other DHCPv6 implementations.
AT-9900 AT-9800 When the icmptype parameter was changed to none for an IPv6 IPsec policy, an incorrect ICMP type value was displayed in output of the command show config dyn and saved in the configuration file produced by the command create config. x900-48 2 AT-8700XL IPsec, IPv6 AT-8600 CR00016128 AT-8800 Description Rapier i Level AR7x0S Module AR7x5 CR 42 AR400 Features in 291-05 Y Y Y Y Y - - - - - Y - - - - - - - - - This issue has been resolved.
AT-9900 AT-9800 If an IPv6 DHCP client was forced to rebind to a router or switch acting as a DHCP server, the server returned incorrect timing parameters to the client. Some clients were able to cope with this, but others could end up losing their DHCP lease.
AT-9900 AT-9800 When BGP capability matching was changed to strict, that setting was not displayed in output of the command show config dyn or saved in the configuration file produced by the command create config. When the router or switch ran the configuration file on start-up, the capability matching setting reverted to the default of loose.
CR Module Level AR7x5 AR7x0S Rapier i AT-8800 AT-8600 AT-8700XL x900-48 AT-9900 AT-9800 45 AR400 Features in 291-05 CR00016727 TCP, Telnet 2 The speed of the output from the Telnet server has been increased. Y Y Y Y Y Y Y Y Y Y CR00016762 ISDN 2 For AR44xS series routers with system territory set to USA, the ISDN Q.931 SPIDs failed to initialize to the ISDN exchange/ISDN USA profile simulator (both manual and auto SPIDs) after a reboot.
AT-9900 AT-9800 Some versions of the AT-G8T GBIC prevented the switch from detecting and setting up the AT-A47 expansion board correctly. This issue occurred on start-up when the GBIC was installed and had a link up.
x900-48 AT-9900 AT-9800 DHCPv6 prefix delegation contained the followed issues: AT-8700XL 2 AT-8600 DHCPv6 AT-8800 CR00017074 Description Rapier i Level AR7x0S Module AR7x5 CR 47 AR400 Features in 291-05 Y Y Y Y Y - - Y Y Y Y Y Y Y Y - - - - - ■ previously, the command create dhcp6 range accepted ranges with an invalid prefix length. This issue has been resolved. The router or switch now displays an error unless the prefix length is in the range 48-64.
This issue has been resolved. If the only healthcheck host available is unreachable and the resource is currently in the UP state, the next unreachable healthcheck received from that host now forces the resource to the DOWN state. Version 291-10 C613-10488-00 REV G AT-9900 AT-9800 If two WAN load balancer healthcheck hosts were defined, and one was unreachable and the other was reachable, WAN load balancer resources were (correctly) in the UP state because at least one healthcheck host was reachable.
Features in 291-05 49 AT-9900 AT-9800 Some early software versions, on some products, supported the command show system temperature. This command was deprecated after version 2.6.4.
AT-9900 AT-9800 Previously, the switch’s count of PIM4 and PIM6 bad Bootstrap Messages (BSMs) could be high, because the switch forwarded BSMs over interfaces that contained an Equal Cost Multipath (ECMP) route to the receiving interface.
AT-9900 AT-9800 Under some circumstances, when a PC terminal emulator was opened to communicate with a router or switch after the router or switch had fully booted up, the login prompt did not immediately display. To display the login prompt, it was necessary to remove and re-insert the cable. This issue applied to all models’ ASYN ports except ports on the AR024 PIC.
CR Module Level Description AR7x5 AR7x0S Rapier i AT-8800 AT-8600 AT-8700XL x900-48 AT-9900 AT-9800 52 AR400 Features in 291-05 CR00016228 QoS 3 If a QoS policy uses the same classifier more than once, the router or switch now displays a warning message. You should not use a classifier more than once in a policy because the operation of such policies is unpredictable.
Features in 291-05 53 AT-9900 AT-9800 If a static IGMP port went link down, it was not shown in the “Static Ports” list in the output of the show ip igmp command. This was only a display issue.
Features in 291-05 54 AT-9900 AT-9800 An ADSL connection option has been added to the Wizards page of the GUI for AR44xS routers. This option links to the xDSL configuration section, which lets you configure all basic ADSL or SHDSL settings on one convenient page.
AT-9900 AT-9800 To establish a tunnelled IPsec connection for IPv6, you may need to specify the source IP interface in the IPsec and ISAKMP policies. This enhancement enables you to do so.
AT-9900 AT-9800 This enhancement enables the router or switch to log discarded ARP requests when ARP security is enabled. By default, discarded ARP requests are not logged.
AT-9900 AT-9800 This enhancement disables CPU fan monitoring on AT-8948 switches. Monitoring the fan is unnecessary unless an accelerator card is installed on the switch, so disabling monitoring reduces the number of messages that the switch displays and logs.
AT-9900 AT-9800 This enhancement enables you to turn off TCP state and sequence checking in IP NAT. It also allows all ICMP packets go through IP NAT.
Features in 291-04 59 Features in 291-04 Software Maintenance Version 291-04 includes the resolved issues and enhancements in the following tables. In the tables, for each product series: ■ “Y” indicates that the resolution is available in Version 291-04 for that product series. ■ “–” indicates that the issue did not apply to that product series. AT-9900 AT-9800 It was possible for invalid log messages to overwrite the log message buffer and cause the router or switch to reboot.
AT-9800 DHCP Snooping AT-9900 DHCP Snooping determines when a client lease will expire by taking the current time and adding the client's assigned lease period to it. Previously, DHCP Snooping did not update this expiry time if the switch's clock time changed, which can happen because of NTP, summertime, or a user manually re-setting the time. Therefore, if the switch's clock time changed, DHCP clients could expire and lose connectivity.
AT-9900 AT-9800 A badly formed response from a particular HTTP server caused the router or switch to reboot when it attempted to load a non-existent file from that server. x900-48 2 AT-8700XL HTTP AT-8600 CR00013592 AT-8800 Description Rapier i Level AR7x0S Module AR7x5 CR 61 AR400 Features in 291-04 Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y – – – Y Y Y Y – – – – – – – – – – – – Y Y – – – – – – – – – This issue has been resolved.
x900-48 AT-9900 AT-9800 When the router generated packets (such as ARP requests) and sent them out multiple LAN ports, it always sent them as untagged packets.
AT-9900 AT-9800 If a PIM interface was set as the BSR candidate interface (by using the command add pim bsrcandidate interface=interface) and that interface went down, PIM would select another interface as the BSR candidate interface. The router or switch also set the new interface as the BSR candidate interface in the dynamic configuration.
AT-9800 Switch AT-9900 If a terminal emulator started up after the router started up, the router did not display a login or command prompt. This issue occurred with some terminal emulators (including Tera Term Pro) when connecting to the AR415S router.
AT-9900 AT-9800 The GUI could not be used to access the dual power supply AR750S-DP router. x900-48 2 AT-8700XL GUI AT-8600 CR00015348 AT-8800 Description Rapier i Level AR7x0S Module AR7x5 CR 65 AR400 Features in 291-04 – – Y – – – – – – – Y Y Y Y Y Y Y Y Y Y Y – – – – – – – – – – – Y – – – – – – – This issue has been resolved. The GUI resource file to use is 750s_281-06_en_d.rsc.
x900-48 AT-9900 AT-9800 It was not possible to set a tri-speed SFP to a fixed speed in the configuration script that the AT-9924SP switch runs when it starts up.
Features in 291-04 67 AT-9900 AT-9800 The graphical user interface (GUI) listed an invalid local interface in the Interface drop-down list on the page for adding a static IGMP association. x900-48 3 AT-8700XL GUI, IGMP AT-8600 CR00007000 AT-8800 Description Rapier i Level AR7x0S Module AR7x5 CR AR400 Level 3 Y Y Y Y Y Y Y – Y Y – – – – – – – Y Y – – – – – Y – – – – – Y Y Y Y Y – – Y Y Y This issue has been resolved.
x900-48 AT-9900 AT-9800 If an IP interface was added and deleted many times, an excessive number of memory buffers became full.
AT-9900 AT-9800 When authenticating users via RADIUS, the number of times that the router or switch attempts to contact the RADIUS server is determined by the Server Retransmit Count (displayed in output of the command show radius). Previously, this count incorrectly included the initial request. For example, a Retransmit Count of 3 meant that up to 3 attempts were made to contact the server.
AT-9900 AT-9800 When IGMP fast leave was enabled and the switch received a leave message via a trunk port, the switch only removed the port from the multicast group if the port was the master trunk port. x900-48 3 AT-8700XL IGMP AT-8600 CR00013629 AT-8800 Description Rapier i Level AR7x0S Module AR7x5 CR 70 AR400 Features in 291-04 – – – Y Y Y Y Y Y – This issue has been resolved.
AT-9900 AT-9800 When the firewall was performing NAT on UDP video streams and two streams started up at the same time, sometimes one or both streams displayed excessive jitter. x900-48 3 AT-8700XL Firewall AT-8600 CR00014163 AT-8800 Description Rapier i Level AR7x0S Module AR7x5 CR 71 AR400 Features in 291-04 Y Y Y Y Y – – – – – – – Y – – – – – – – Y Y Y This issue has been resolved.
x900-48 AT-9900 AT-9800 Switch If a port had static ARP entries defined for a VLAN, then adding the port to another VLAN made those static ARP entries inactive.
AT-9800 IP Gateway AT-9900 It was possible to add a BOOTP relay destination using an interface that was not running IP. It was also possible to delete an IP interface even though BOOTP relay destinations were defined for the interface. Both of these situations could allow the router or switch to be mis-configured.
AT-9800 DHCP AT-9900 When a router or switch was configured to use DHCP to assign an address on an interface, and then set to have a static address on that interface, the DHCP client in the router or switch would continue to negotiate with the DHCP server. This tied up a DHCP lease.
AT-9900 AT-9800 Subnet broadcast packets would not be routed correctly when the interface to which the subnet broadcast was destinated was an interface on the device, but its link status was down. Even though an alternate route to the destination existed, the device would send the packets incorrectly.
Features in 291-04 76 x900-48 AT-9900 AT-9800 When the router or switch rebooted, its internal clock lost approximately 1 second. AT-8700XL 4 AT-8600 Core AT-8800 CR00004677 Description Rapier i Level AR7x0S Module AR7x5 CR AR400 Level 4 Y Y Y Y Y – Y Y Y Y Y Y Y Y Y Y Y Y Y Y – – – Y Y Y Y Y Y Y This issue has been resolved. The time loss on reboot has been reduced.
x900-48 AT-9900 AT-9800 If the command set mstp cist port=value was entered with no other parameters, the resulting error message (“One or more parameters may be missing”) was displayed as an INFO message.
x900-48 AT-9900 AT-9800 Previously, if you used the ? or Tab keys to obtain help about the timeout parameter for the ping command, the resulting help said that the maximum timeout was 65535. However, the correct maximum is 60 seconds.
x900-48 AT-9900 AT-9800 The following error message: AT-8700XL 4 AT-8600 VLAN AT-8800 CR00014151 Description Rapier i Level AR7x0S Module AR7x5 CR 79 AR400 Features in 291-04 – – – – – – – Y Y – – – Y – – – – – – – Y Y Y Y Y Y Y Y Y Y Y – Y – – – – – – – – – – – – – – – – Y Y Y Y Y Y – – – – Y “Error (3089399): Operation not allowed on a .NESTED port.” contained an extraneous “.” before the word “NESTED”.
x900-48 AT-9900 AT-9800 Previously, when a user entered the command delete dhcp range=range ip=ipadd, the router or switch would display an “Operation successful” message, even when the client entry in question was unused.
Features in 291-04 81 x900-48 AT-9900 AT-9800 It is now possible to hotswap NSMs on NEBS-compliant Rapier i switches. AT-8700XL - AT-8600 Core AT-8800 CR00003036 Description Rapier i Level AR7x0S Module AR7x5 CR AR400 Enhancements – – – Y – – – – – – To hotswap the NSM, press the Hot Swap button beside the NSM, check that the Swap LED turns on and the In Use LED turns off, then remove the NSM.
AT-9900 AT-9800 AR770S routers have a CPU fan that the software now monitors in the same manner as the main fan. The state of the CPU fan is displayed along with that of the main (chassis) fan in the output of the show system command.
x900-48 AT-9900 AT-9800 This enhancement enables you to associate a BOOTP relay destination with a given interface.
IP Gateway To do this: 1. Give the desired dynamic routing protocol a preference of 0, which is the preference of interface routes, by using the command: SET IP ROUte PREFerence=0 PROTocol={BGP-ext|BGP-int|OSPF-EXT1| OSPF-EXT2|OSPF-INTEr|OSPF-INTRa|OSPF-Other|RIP|ALL} 2. Create a route map to give matching routes the same metric as your interface routes. To change the metric, use the command: ADD IP ROUTEMap=routemap ENTry=1..4294967295 SET METric=1 3.
x900-48 AT-9900 AT-9800 The following enhancements have been made to DHCP snooping, to support MAC-forced forwarding: AT-8700XL - AT-8600 DHCP Snooping, MACFF AT-8800 CR00014300 Description Rapier i Level AR7x0S Module AR7x5 CR 85 AR400 Features in 291-04 – – – Y Y Y Y Y Y – – – Y – – – – – – – ■ MAC-forced forwarding checks the DHCP snooping database to find out which router has been assigned to each DHCP client.
AT-9900 AT-9800 A new log message has been added to provide more information about rejected DNS requests. The message has a log type of 052 / IPDNS and subtype 002 / UNRES, and reads: x900-48 - AT-8700XL DNS AT-8600 CR00014715 AT-8800 Description Rapier i Level AR7x0S Module AR7x5 CR 86 AR400 Features in 291-04 Y Y Y Y Y Y Y Y Y Y Y – Y – – – – – – – DNS request for rejected by server. Code , .
OSPF AT-9900 AT-9800 When OSPF is running over an on-demand PPP link and the link goes down, IP notifies OSPF that the link is down and OSPF stops sending Hello packets over the link. In a network in which routes over the PPP link are all dynamically learnt through OSPF, the PPP link will not come back up because without OSPF there are no routes to direct traffic at that link.
Features in 291-03 88 Features in 291-03 Software Maintenance Version 291-03 includes the resolved issues and enhancements in the following tables. In the tables, for each product series: ■ “Y” in a white column indicates that the resolution is available in Version 291-03 for that product series. ■ “-” in a white column indicates that the issue did not apply to that product series. ■ a grey-shaded column indicates that Version 291-03 has not been released on that product series.
x900-48 AT-9900 AT-9800 When a switch was heavily loaded with IPv6 traffic, it could reboot because a large quantity of traffic was queued while waiting for a neighbour's MAC address to resolve. AT-8700XL 2 AT-8600 IPv6 AT-8800 CR00015678 Description Rapier i Level AR7x0S Module AR7x5 CR 89 AR400 Features in 291-03 Y Y Y Y Y – – Y Y Y This issue has been resolved by limiting the number of packets that can be queued while waiting for a neighbour's MAC address to resolve.
x900-48 AT-9900 AT-9800 Destroying a traffic class or flow group also destroyed all classifiers that were associated with that traffic class or flow group. AT-8700XL 3 AT-8600 QoS AT-8800 CR00014959 Description Rapier i Level AR7x0S Module AR7x5 CR 90 AR400 Features in 291-03 – – – Y Y Y Y Y Y – – – – Y Y Y Y – – – Y Y Y Y Y Y Y Y Y – This issue has been resolved. User-created classifiers are no longer destroyed.
Features in 291-02 91 Switch, VLAN In some network configurations, this learning process cannot identify all router ports. For such networks, this enhancement enables you to statically configure particular ports as multicast router ports. To specify the static router ports, use the new command: add igmpsnooping vlan={vlan-name|1..4094} routerport=port-list To stop ports from being static router ports, use the new command: delete igmpsnooping vlan={vlan-name|1..
Support for the new x900-48FS switch—CR00016662 Support for the new x900-48FS switch—CR00016662 The x900-48FS is a new model in the x900 Series of layer 3 gigabit and fast Ethernet switches.
IGMP snooping fast leave in multiple host mode—CR00017482 93 IGMP snooping fast leave in multiple host mode—CR00017482 The IGMP snooping fast leave option has been enhanced, to make it available when multiple clients are attached to a single port on the snooping switch. Fast leave now has two modes available: ■ multiple host mode—the new feature. In multiple host mode, the snooper tracks which clients are joined to a given IP multicast group on a given port.
IGMP snooping fast leave in multiple host mode—CR00017482 94 The detail parameter displays more detailed information, including expiry times for each port, and in the case of multiple host fast leave mode, the list of hosts on a port. The following example shows this. IGMP Snooping -------------------------------------------------------------------------Status ........................... Enabled Disabled All-groups ports ........ None Vlan Name (vlan id) ..... Fast Leave ..............
Support for the new Rapier 48w switch Support for the new Rapier 48w switch The Rapier 48w is a new model in the Rapier Series of layer 3 gigabit and fast Ethernet switches.
Backing up the configuration with SNMP—CR00016221 96 Backing up the configuration with SNMP—CR00016221 With this enhancement, you can use SNMP to: ■ set parameters for uploading files from the router or switch, and ■ upload files to a TFTP server SNMP already lets you save the current configuration to a file on the router or switch. You can use this with the new options to back up the configuration to a TFTP server. To do this, perform the following steps. 1.
Backing up the configuration with SNMP—CR00016221 2. Set the load parameters To specify the server IP address, use SNMP SET loadServer. To set the filename, use SNMP SET loadFilename. The following screenshot shows setting the filename to tst.cfg.
Backing up the configuration with SNMP—CR00016221 3. Upload the file To upload the file, use SNMP SET loadStatus and set it to a value of 8. The following screenshot shows this.
SNMP ASN.01 BER Padding—CR00016523 99 SNMP ASN.01 BER Padding—CR00016523 This enhancement enables you to specify whether SNMP adds 0x00 padding when the most significant 9 bits of an object’s value are all 1, or whether the encoding follows the ASN.01 BER rule, which cuts off the most significant byte of 0xff. This setting has an impact on all integer type MIB objects, including 32 bit and 64 bit counter objects. To add the padding, use the command: set snmp asnberpadding={on|yes|true} To use the ASN.
