Specifications

151
Caveats for Cisco IOS Release 12.0
78-6455-12
Resolved Caveats—Cisco IOS Release 12.0(2)
• CSCdk46577
On VIP interfaces where CEF is required to run encryption, a connection cannot be initiated from
the VIP side. A workaround is to initiate the connection from a peer router (if the peer has a
non-VIP interface). Encryption works properly in this case.
On non-VIP interfaces with CEF enabled, encryption does not work properly, and packets are sent
in the clear. CEF must be disabled for encryption to work.
Note that this caveat affects only self-generated packets. In realworld environments, packets are
usually forwarded to a router for encryption. In this situation, these packets are not affected by this
caveat.
• CSCdk46820
On a Cisco 2500 series router, you might fail to get CA certificates when enrolling a certificate with
Entrust VPN.
• CSCdk46853
In Release 11.2 P and 11.3 when Fast Ethernet subinterfaces are configured for encryption, if the
encryption map is only applied to the main interface and the IP address is configured in the
subinterface, the packets could be switched in the clear. In Release 12.0, enabling CEF could cause
the packets to get dropped.
• CSCdk47147
Cisco AS5200 and Cisco AS5300 access servers with MICA modems that are configured with the
commands async mode dedicated and async mode interactive might fail with a bus error. On the
Cisco AS5300, the failure is preceded with a “%ALIGN-1-FATAL” log message on the console.
The cause seems to be a lot of PPP calls connecting and disconnecting.
• CSCdk47218
If you configure output rate-limiting with distributed CEF enabled, on an interface that does not
exist, you will cause a system restart.
• CSCdk48214
Radius implementation for MS-CHAP does not comply with the latest specification from
Microsoft.
• CSCdk48525
POET output drops at low data rates with two PAs in VIP2. If you use a sub-rate POET interface
together with a full-rate POET on the same VIP, VIP2 or VIP2-50, you will cause the full-rate
POET to drop outbound packets. This occurs with an externally clocked sub-rate POET. There is
no workaround, except to move the sub-rate POET or clock the sub-rate POET at 44.726 Mbps.
Also see CSCdj86266 for a similar problem with HSSI interfaces.
• CSCdk49622
After a Cisco 3600 series or Cisco 2600 series router is powered off and powered on, the ATM25
network module stops transmitting packets. Because a new image is loaded and an old image was
previously on this platform, the problem will not be noted. This caveat appeared in Cisco IOS
Releases 11.3(05.1)T and 12.0(00.2)T and was resolved by Releases11.3(6)T and 12.0(1.1)T.
• CSCdk49638
Generic traffic shaping is not working on the Ethernet interface of a Cisco 2600 series router.