Allied Telesis 86241-02 manual PCR Module Switch Network affecting No

Page 10

10

Patch Release Note

PCR: 02036

Module: SWITCH

Network affecting: No

A new command allows the Layer 3 aging timer to be changed:

SET SWITCH L3AGEINGTIMER=<seconds>

where seconds can be 30 - 43200. After each cycle of the ageing timer, all existing Layer 3 entries with the hit bit set will have the hit bit reset to zero, and all existing Layer 3 entries with the hit bit set to zero will be deleted.

The SHOW SWITCH command output now displays the Layer 3 ageing timer value.

PCR 02138

Module: SWI

Network affecting: No

The built in Self Test Code for all Rapiers, except G6, has been improved to enhance the detection of faults in switch chip external packet memory.

PCR: 02158

Module: FIREWALL

Network affecting: No

When a TCP RST/ACK was received by a firewall interface, the packet that was passed to the other side of the firewall lost the ACK flag, and had an incorrect ACK number. This issue has been resolved.

PCR: 02185

Module: VRRP

Network affecting: No

The SHOW CONFIG DYNAMIC=VRRP command was not showing port monitoring and step values correctly. This issue has been resolved.

PCR: 02229

Module: IPG

Network affecting: No

The PURGE IP command now resets the IP route cache counters to zero.

PCR: 02240

Module: SWI

Network affecting: No

The SENDCOS filter action did not operate correctly across switch instances. This was because the stacklink port on the Rapier 48 did not correctly compensate for the stack tag on frames received via the filter. This issue has been resolved.

PCR: 02241

Module: FIREWALL

Network affecting: No

Firewall subnet NAT rules were not working correctly from the private to the public side of the firewall. Traffic from the public to private side (destined for subnet NAT) was discarded. These issues have been resolved. ICMP traffic no longer causes a RADIUS lookup for access authentication, but is now checked by ICMP handlers for attacks and eligibility. If the ICMP traffic matches a NAT rule, NAT will occur on inbound and outbound traffic. HTTP 1.0 requests sometimes caused the firewall HTTP proxy to close prematurely. Cached TCP sessions were sometimes not hit correctly. These issues have been resolved.

PCR: 02242

Module: IPG

Network affecting: No

On a Rapier 24, adding an IP interface over a FR interface caused an

ASSERT debug fatal error. This issue has been resolved.

PCR: 02250

Module: FIREWALL

Network affecting: No

Sometimes the Firewall erroneously used NAT. This issue has been resolved.

Patch 86241-02 for Software Release 2.4.1 C613-10340-00 REV B

Page 9 Page 11
Image 10
Page 9 Page 11
Contents Introduction Features PCR 02277 Module Dvmrp Network affecting No PCR Module IPG, PIM, SWI Network affecting NoPCR Module Tpad Network affecting No PCR Module TELNET, TTY Network affecting NoPCR Module IPv6 Network affecting No PCR Module Install Network affecting NoPCR Module STP Network affecting No PCR Module IPG, ETH Network affecting No PCR Module FR Network affecting NoPCR Module IPG/FIREWALL Network affecting No PCR Module Classifier Network affecting NoPCR Module SCC, SYN, PPP Network affecting No PCR 02346 Module BGP, IPGNetwork affecting NoPCR 02348 Module Enco Network affecting No PCR Module FFS, FILE, TTY Network affecting NoPCR 02376 Module PPPNetwork affecting No PCR 02369 Module IPGNetwork affecting NoPCR 02371 Module FIREWALLNetwork affecting No PCR 02378 Module SWINetwork affecting NoPCR Module SNMP, CORE, SHOW, Network affecting No PCR Module Trace Network affecting NoPCR Module IPG Network affecting No Module Vrrp PCR 02457 Module IPV6Network affecting No PCR 02450 Module IPV6Network affecting NoPCR 02452 Module IPv6Network affecting No PCR 02463 Module DVMRP, IPG Network affecting NoPCR Module Switch Network affecting No Availability PCR Module DHCP, IPG Network affecting NoPatch Release Note
Top Page Image Contents