Wireless Edge Services zl Module Release Notes WT.01.33

32
Known Software Issues and Limitations
Release WT.01.03
permit any any type arp rule-precedence 1
permit any any type 34691 rule-precedence 2
!
interface dnlink
ip access-group 100 in
mac access-group 200 in
L2-L3 (41469) — The error message, "ERROR: There must be at least one peer in established state to execute this command"
is always displayed when doing a reload from within the module CLI redundancy context, even when peers are present.
Workaround: Execute the reload command from either the Web management interface, or the module CLI.
L2-L3 (40107) — DHCP boot file names are limited to 63 characters in both the CLI and the Web management
interface.
L2-L3 (40163) — The DHCP hostname field is unable to accept non-alphanumeric characters.
Redundancy (41949) — A wireless station may show up on multiple modules in a redundancy group after failing
over from a module that was removed from the switch. Connectivity and traffic for the wireless station are not
affected.
Workaround: The genuine current wireless station owner is the one with the shortest amount of time in the "Last Active"
field in the Device Information -> Wireless Stations -> Details button.
Security (36833) — The integrated firewall feature is supported only for packets received on Layer 3 interfaces.
For packets getting switched, no firewall protection is applied. The firewall functionality supports protection against
various network level attacks and inspects each packet for possible corruption that can indicate some kind of attack.
Security (41086) — The ACL logging functionality is not available for Layer 2 or WLAN ACLs.
Security (39537) — FTP control packets are not getting appropriately marked when a standard access list is
configured for marking TOS bits.
Security (1000460306) — MAC filter rules are designed to apply to the association process. If a wireless station is
already associated, a new “deny” MAC filter configured through Security -> MAC Filter in the Web management
interface does not take effect until the station re-associates. If the administrator wants the filter to take effect
immediately, the wireless station should be disconnected via Device Information -> Wireless Stations -> Disconnect.
Rules configured in the latter context take effect immediately.
Security (1000460347) — Adding a MAC Filter via the Web management interface (Device Information -> Wireless
Stations -> Disconnect screen) only associates the rule to WLANs 1-64.
SNMP (39709) — Configuration options that have been initiated but not saved in the CLI context cannot be edited
via the Web management interface. An "SNMP Exception" message will occur with the failure.
Workaround: Save any changes made in the CLI from the CLI prior to attempting to edit them through the Web management
interface.
SNMP (40513) — An SNMP timeout occurs when a DHCP option value containing more than 100 characters is
entered in the DHCP pool configuration.
Workaround: Keep the configuration of option values to 100 characters or less.
SNMP (39823) — An SNMP timeout error may occur while generating a 2048 byte RSA key for use with a certificate.
Workaround: Confirm that the key was not generated; sometimes the key gets generated but a false error message is
produced. If the key was not generated, retrying key generation should resolve the issue.
SNMP (41053)
— The dynamic DHCP bindings viewed in the Web management interface display the expiration time
in GMT rather than accurately reflecting the configured time zone offset.
Workaround: The expiration time is properly displayed in the output for the CLI command, show ip dhcp binding.