Allied Telesis 86222-25 PCR Module Vrrp Network affecting No, PCR Module PPP Network affecting No

Patch 86222-25 For Rapier Switches and AR800 Series Modular Switching Routers 11

Features in 86222-21

Patch file details are listed in Table 5:

Table 5: Patch file details for Patch 86222-21.

Base Software Release File	86s-222.rez
Patch Release Date	03-Oct-2002
Compressed Patch File Name	86222-21.paz
Compressed Patch File Size	408864 bytes

Patch 86222-21 includes all issues resolved and enhancements released in previous patches for Software Release 2.2.2, and the following enhancements:

PCR: 02167 Module: FIREWALL Network affecting: No

Locally generated ICMP messages, that were passed out through a firewall interface because they were associated with another packet flow, had their source address changed to that of the associated packet flow and were also forwarded with incorrect IP checksums. This only occurred when there was no NAT associated with the packet flow. This issue has been resolved.

PCR: 02236 Module: FIREWALL Network affecting: No

Sometimes the retransmission of an FTP packet was not permitted through the Firewall. This issue has been resolved.

PCR: 02245 Module: VRRP Network affecting: No

VRRP returned an incorrect MAC address for an ARP request. This issue has been resolved.

PCR: 02327 Module: IPG/FIREWALL Network affecting: No

In some situations, multihomed interfaces caused the Firewall to apply NAT and rules incorrectly when packets were received from a subnet that was not attached to the receiving interface. This issue has been resolved.

PCR: 02329 Module: DHCP Network affecting: No

An ARP entry for a host has been removed whenever a DHCP DISCOVER or DHCP REQUEST message is received from the host. This allows for clients changing ports on a switch.

PCR: 02332 Module: IPSEC Network affecting: No

The sequence number extracted from the AH and ESP header was in the wrong endian mode, which caused an FTP error with IPSEC anti-replay. This issue has been resolved.

PCR: 02343 Module: PPP Network affecting: No

When acting as a PPPoE Access Concentrator (AC), if a PPPoE client sent discovery packets without the "host-unique" tag, the discovery packets sent by the AC were corrupted. This issue has been resolved.

Patch 86222-25 for Software Release 2.2.2 C613-10319-00 REV X