Allied Telesis 86241-06 manual PCR 02292 Module IPSECNetwork affecting No

Page 15

Patch 86241-06 For Rapier Switches

15

PCR: 02292 Module: IPSECNetwork affecting: No

IPSec no longer logs packets that match an ACTION=ALLOW policy. The overhead of this logging was affecting non-IPSec traffic.

PCR: 02294 Module: IKMPNetwork affecting: No

The LOCALRSAKEY parameter in the CREATE ISAKMP POLICY and SET ISAKMP POLICY commands was not accepting the value zero. This issue has been resolved.

PCR: 02298

Module: IPSEC

Network affecting: No

The PURGE IPSEC command caused a fatal error. This issue has been

resolved.

 

 

PCR: 02299

Module: VRRP

Network affecting: No

If a packet with a destination IP address equal to a VRRP IP address was received when the router didn’t own the IP address, (because it didn’t have an interface with that IP address) the router incorrectly tried to forward the packet and send an ICMP “redirect” message to the source. Now, if such a packet is received, it will be discarded and an ICMP “host unreachable” message will be sent to the source.

PCR: 02301 Module: IPGNetwork affecting: No

If a DNS relay agent was configured with overlapping subnets, sometimes the DNS server response was returned to the client with a source IP address of an interface on the relay agent that was different from the interface the request was received on. This issue has been resolved.

PCR: 02302 Module: IPv6Network affecting: No

The default router lifetime value has been corrected. Also, the SET IPV6

INTERFACE command now updates valid and preferred lifetimes correctly.

PCR: 02303 Module: INSTALLNetwork affecting: No

When enabling or disabling feature licences, a message will now be generated with a warning that changes to feature licences may not take effect until after a reboot.

PCR: 02304 Module: VRRPNetwork affecting: No

VRRP used the wrong source IP address in ICMP redirects. RFC 2338 states that the source IP address of ICMP redirects should be the IP address that the end host used when making its next hop routing decision. In the case of a packet sent to a VRRP virtual MAC address, this is the primary VRRP IP address associated with the MAC address, provided such a VR exists and is in the master state. This issue has been resolved.

PCR: 02309 Module: STPNetwork affecting: No

On models except Rapier i Series Switches, the ENABLE STP DEBUG PORT command did not work correctly. This issue has been resolved.

PCR: 02311 Module: SWINetwork affecting: No

It was possible to set the trunk speed to 10/100M, even if the port within the trunk was not capable of this speed. This issue has been resolved.

Patch 86241-05 for Software Release 2.4.1 C613-10340-00 REV E

Page 14 Page 16
Image 15
Page 14 Page 16
Contents Patch For Rapier Switches PCR Module BGP Level PCR Module IPG LevelPCR Module SWI PCR Module PIM LevelPCR Module Utility Level PCR Module SSH LevelPCR 03064 Module Snmp Level PCR Module SWI LevelPCR 03113 Module Dvmrp Level PCR 03100 Module Dhcp LevelPCR Module FR, PPP Level PCR 03108 Module Mlds LevelPCR Module Ospf Level PCR 03123 Module Dhcp LevelPCR Module DS3 Level PCR Module IPV6 LevelPCR Module IPG, SWI, Vlan Network affecting No PCR 02315 Module Snmp Network affecting NoPCR Module DS3 Network affecting No PCR Module IPv6, SWI, IPG, Vlan Network affecting NoPCR Module Firewall Network affecting No PCR Module Install Network affecting NoPCR Module User Network affecting No PCR Module Utility Network affecting NoPCR Module Ping Network affecting No PCR Module IPG Network affecting NoPCR Module Network affecting No PCR Module Ospf IPG Network affecting NoPCR 02532 Module FIREWALLNetwork affecting No PCR 02523 Module QOS, Utility Network affecting NoPCR Module TELNET, PING, IPV6, Network affecting No PCR 02529 Module FIREWALLNetwork affecting NoPCR Module SWI Network affecting No PCR 02538 Module Dvmrp Network affecting NoPCR Module Classifier Network affecting No PCR Module IPV6 Network affecting NoPCR 02467 Module Core Network affecting No PCR 02574 Module DVMRPNetwork affecting NoPCR 02579 Module FIREWALLNetwork affecting No PCR 02587 Module OSPFNetwork affecting NoPCR 02498 Module Vlan Network affecting No PCR 02469 Module TMNetwork affecting NoPCR Module IPG, PIM, SWI Network affecting No PCR 02495 Module Vlan Network affecting NoPCR Module Vrrp Network affecting No PCR 02502 Module Ping, IPv6Network affecting NoPCR 02509 Module DVMRPNetwork affecting No PCR Module DNS Relay Network affecting NoPCR Module TELNET, TTY Network affecting No PCR Module BGP Network affecting NoPCR Module Tpad Network affecting No PCR 02277 Module Dvmrp Network affecting NoPCR 02301 Module IPGNetwork affecting No PCR 02303 Module INSTALLNetwork affecting NoPCR 02292 Module IPSECNetwork affecting No PCR 02294 Module IKMPNetwork affecting NoPCR Module Ipsec Network affecting No PCR Module FR Network affecting NoPCR Module IPG/FIREWALL Network affecting No PCR Module IPG, ETH Network affecting NoPCR Module SCC, SYN, PPP Network affecting No PCR Module PPP Network affecting NoPCR Module BGP, IPG Network affecting No PCR 02348 Module Enco Network affecting NoPCR Module FFS, FILE, TTY Network affecting No PCR Module VRRP, TRG Network affecting NoPCR 02397 Module Dvmrp Network affecting No PCR Module IPG Network affecting No Module Vrrp PCR Module Trace Network affecting NoPCR Module SNMP, CORE, SHOW, Network affecting No PCR Module STP Network affecting NoPCR 02463 Module DVMRP, IPG Network affecting No PCR 02450 Module IPV6Network affecting NoPCR 02452 Module IPv6Network affecting No PCR 02457 Module IPV6Network affecting NoPCR Module Switch Network affecting No PCR Module DHCP, IPG Network affecting No DS3 InterfacesBit Parity Mode Loopbacks DS3 Configuration Patch Release Note Disable DS3 Debug Disable DS3 Test Enable DS3 Debug Create Framerelay Show Framerelay Dynamic Port Security Availability
Top Page Image Contents