Software Fixes in Release M.08.51 - M.10.72

Release M.10.70

■Dynamic ARP Protection (PR_0000009942) — When a switch using Dynamic ARP Protection is rebooted, it blocks all ARP traffic on untrusted ports, including traffic consid- ered valid according to the binding database. On trusted ports, traffic flows normally. Workarounds: either disable / re-enable ARP protect, or configure ports to be trusted, and then untrusted again.

■802.1X Authentication (PR_0000011718) — When an 802.1X enabled port belongs to a VLAN that is jumbo enabled, the Access-Request will specify a value of Framed-MTU of 9182 bytes. This allows the RADIUS server to reply with a large fragment which the switch does not process, causing the authentication to fail.

■CLI (PR_0000009868) — Execution of a show command in one telnet or console session prevents successful execution of a show command in a concurrent management (CLI) session.

■Crash (PR_0000003523) — Disabling a port with Dynamic IP Lockdown (DIPLD) and 802.1X enabled may cause the switch to reboot unexpectedly with a message similar to the following:

Software exception at idmCommonAcl.c:1547 -- in 'midmCtrl', task ID

=0x85cc1eb0

■802.1X (PR_0000010850) — If an unauth-vidis configured, and the client limit is reached on a switch port, a properly credentialed re-authentication following an improperly creden- tialed authentication attempt (for example, incorrect password) will leave the 802.1x client in the unauthorized VLAN instead of applying the appropriate authorized VLAN.

■

■

SNMP Traps (PR_0000007448/1000469020) — The switch no longer sends warm/cold start SNMP traps on reload/boot.

802.1X (PR_0000009344) — The switch sends an EAP-notification out to the client as a result of the Radius server sending a Reply-Message in the Access-Accept packet after EAP- Success. This fix follows the suggestion in RFC 3579, section 2.6.5 and silently discards attributes sent out after the authentication is complete.

■Crash (PR_0000009411) — A switch with 802.1X and RADIUS accounting configured may experience an unexpected reboot with a message similar to the following.

Software exception at aaa8021x_proto.c:255 -- in 'm8021xCtrl'

■CLI Help (PR_0000010484) — The CLI tab completion for the command parameter [ethernet] PORT-LISTshould list the all option, but it does not.

■Crash (PR_0000012124) — Switches configured for meshing may reboot unexpectedly with a message similar to the following.

Software exception at ldbal_util.c:2525 -- in 'mLdBalCtrl'

■MAC Authentication (PR_0000011949) — MAC authentication may fail to take place unless the switch port status is toggled.

182