Allied Telesis 86251-08 PCR Module Isakmp Level, PCR Module Ipsec Level, PCR Module SW56 Level

4 Patch Release Note

PCR: 03935 Module: ISAKMP Level: 3

ISAKMP debug messages now correctly output IPv6 addresses when using

IPv6, and IPv4 addresses when using IPv4.

PCR: 03937 Module: IPSEC Level: 2

The IP version of packets was not being checked, so an IPv4 packet could match an IPv6 IPSec policy. This issue has been resolved.

PCR: 03953 Module: SW56 Level: 3

On AT-8800 series switches, strict QoS scheduling is now enforced for ports where egress rate limiting is applied. On Rapier i series switches, the same QoS setup is now applied to all of the appropriate ports when setting up egress rate limiting.

PCR: 03958 Module: FIREWALL Level: 2

The ADD FIREWALL POLICY RULE and SET FIREWALL POLICY RULE commands no longer accept the GBLREMOTEIP parameter with standard NAT, or enhanced NAT for a private interface.

PCR: 03961 Module: PIM, PIM6 Level: 2

The PIM-DM prune expiry time was not reset when a State Refresh message was received. This issue has been resolved.

PCR: 03965 Module: IPSEC Level: 3

IPv6 used the same SA soft expiry timer at both ends of a link, which used memory unnecessarily. This issue has been resolved.

PCR: 03967 Module: IPG Level: 2

RIP did not send the correct next hop address if the route originated from a different subnet to that of the egress interface. This issue has been resolved.

PCR: 03970 Module: IPV6 Level: 3

If an IPv6 filter that blocked traffic on a VLAN interface was removed, the traffic was still blocked. This issue has been resolved.

PCR: 03973 Module: IPG Level: 3

When equal cost multipath routes were used, the IP option field for trace route was not applied correctly. This issue has been resolved.

PCR: 03978 Module: OSPF Level: 3

Occasionally an error occurred with OSPF’s route table calculation, so all routes in the network were not discovered. The error only happened with a network topology that involved connections between routers via both a Point to Point link and a transit network link. This issue has been resolved. A new command has been added that forces a route table recalculation by rerunning the Shortest Path First calculation. The command is:

RESET OSPF SPF [DEBUG]

If DEBUG is specified, debugging information for the route table calculation is output to the port from which the command was executed. SPF debugging can be turned on for every route table calculation using the ENABLE OSPF DEBUG=SPF command, but this will be overridden if DEBUG is specified with the RESET OSPF SPF command.

Patch 86251-08 for Software Release 2.5.1 C613-10356-00 REV I