Allied Telesis AT WA1104G SOHO Wireless Router AT-WA1104G-10... Instruction Manual

Software Maintenance Release Note
Maintenance Version 291-10
for AR415S, AR440S, AR441S, AR442S, AR450S, AR725, AR745, AR750S, AR750S-DP, and AR770S routers and
AT-8600, AT-8700XL, Rapier i, Rapier w, AT-8800, AT-8900, x900-48, AT-9900, and AT-9800 Series switches
This software maintenance release note lists the issues addressed and enhancements made in Maintenance Version 291-10 for Software Version 2.9.1. Version
details are listed in the following table:
Models Series Release File Date Size (bytes) GUI file
AR415S, AR440S, AR441S, AR442S, AR450S AR400 54291-10.rez 24 July 2007 4946220 415s_291-10_en_d.rsc
440s_291-10_en_d.rsc
441s_291-10_en_d.rsc
442s_291-10_en_d.rsc
450s_291-10_en_d.rsc
AR750S, AR750S-DP, AR770S AR7x0S 55291-10.rez 24 July 2007 4074888 750s_291-10_en_d.rsc (AR750S and AR750S-DP)
AR725, AR745 AR7x5 52291-10.rez 24 July 2007 4114292 _725_291-10_en_d.rsc
_745_291-10_en_d.rsc
AT-8624T/2M, AT-8624PoE, AT-8648T/2SP AT-8600 sr291-10.rez 24 July 2007 2468216 8624t_291-10_en_d.rsc
8624poe_291-10_en_d.rsc
8648t_291-10_en_d.rsc
AT-8724XL, AT-8748XL AT-8700XL 87291-10.rez 24 July 2007 2411128 8724_291-10_en_d.rsc
8748_291-10_en_d.rsc
Rapier 24i, Rapier 48i, Rapier 16fi Rapier i 86291-10.rez 24 July 2007 4587048 r24i_291-10_en_d.rsc
r16i_291-10_en_d.rsc
r48i_291-10_en_d.rsc
Rapier 48w Rapier w 86291-10.rez 24 July 2007 4587048 -

Enabling and Installing this Release 2
Version 291-10
C613-10488-00 REV G
Caution: Using a maintenance version on the wrong model may cause unpredictable results, including disruption to the network.
This maintenance release note should be read in conjunction with the following documents:
■the Release Note for Software Version 2.9.1, available from www.alliedtelesis.co.nz/documentation/relnotes/relnotes.html, which describes the new
features since Version 2.8.1
■your router or switch’s Document Set for Software Release 2.9.1. This document set is available on the CD-ROM that shipped with your router or switch, or
from www.alliedtelesis.co.nz/documentation/documentation.html
Caution: Information in this release note is subject to change without notice and does not represent a commitment on the part of Allied Telesis, Inc. While every
effort has been made to ensure that the information contained within this document and the features and changes described are accurate, Allied Telesis, Inc. can
not accept any type of liability for errors in or omissions arising from the use of this information.
Enabling and Installing this Release
To use this maintenance release you must have a base release license for Software Release 2.9.1. Contact your distributor or reseller for more information about
licences. To enable this release and install it as the preferred release, use the commands:
enable rel=xx291-10.rez num=2.9.1
set install=pref rel=xx291-10.rez
where xx is the prefix to the filename, as shown in the table on page 1. For example, to install the release on an x900-48FE switch, use the commands:
enable rel=89291-10.rez num=2.9.1
set install=pref rel=89291-10.rez
AT-8824, AT-8848 AT-8800 86291-10.rez 24 July 2007 4587048 8824_291-10_en_d.rsc
8848_291-10_en_d.rsc
AT-8948, AT8948i, x900-48FE, x900-48FE-N,
x900-48FS
x900-48 89291-10.rez 24 July 2007 4884216 -
AT-9924T, AT-9924SP, AT-9924T/4SP AT-9900 89291-10.rez 24 July 2007 4884216 9924_291-10_en_d.rsc
AT-9812T, AT-9816GB AT-9800 sb291-10.rez 24 July 2007 3988344 9812_291-10_en_d.rsc
9816_291-10_en_d.rsc
Models Series Release File Date Size (bytes) GUI file

Levels 3
Version 291-10
C613-10488-00 REV G
Levels
Some of the issues addressed in this Maintenance Version include a level number. This number reflects the importance of the issue that has been resolved. The
levels are:
Level 1 This issue will cause significant interruption to network services, and there is no work-around.
Level 2 This issue will cause interruption to network service, however there is a work-around.
Level 3 This issue will seldom appear, and will cause minor inconvenience.
Level 4 This issue represents a cosmetic change and does not affect network operation.

Features in 291-10 4
Version 291-10
C613-10488-00 REV G
Features in 291-10
Software Maintenance Version 291-10 includes the resolved issues and enhancements in the following tables. In the tables, for each product series:
■“Y” indicates that the resolution is available in Version 291-10 for that product series.
■“–” indicates that the issue did not apply to that product series.
Level 1
No level 1 issues
Level 2
CR Module Level Description
AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT- 9900 AT-9800
CR00016759 Switching,
DHCP
Snooping
2Enabling DHCP snooping (correctly) adds a hardware filter to all untrusted
ports, to block all IP traffic coming from those ports. Previously, disabling
DHCP snooping did not delete these filters. This meant that the switch
dropped all IP traffic from the previously-untrusted ports until the switch
was restarted.
Also, attempting to manually delete the hardware filters did not actually
remove them.
These issues have been resolved. The switch now removes the filters if you
disable DHCP snooping or manually delete the filters.
--------YY-
CR00018655
CR00018656
IP Gateway 2 If the user did not specify the destination and dmask parameters when
entering the set ip filter command, the destination and dmask of the
filters were reset to any.
Also, it was not possible to delete an IP filter by using the delete ip filter
command, even when all required parameters were present.
These issues have been resolved.
YYYYYYYYYYY

Features in 291-10 5
Version 291-10
C613-10488-00 REV G
CR00018663 Switching 2 The resolution to CR 444 meant that packets processed by the CPU are now
subjected to the same filtering as packets switched in hardware. However,
this filtering did not always return the expected results. Sometimes its IP
address matching was incorrect, and it did not correctly process filters with
an action of nodrop.
These issues have been resolved.
---YYYYY---
CR00018691 OSPF 2 On a router or switch with OSPF redistribution enabled, OSPF did not
redistribute the interface route when an interface came up (for example,
after a reboot).
This issue has been resolved.
YYYYYYYYYYY
CR00018693 QoS 2 QoS policies, traffic classes, and flow groups could not have an ID number
of 0 (zero).
This issue has been resolved.
- - - YYYYYYYY
CR00018778 IP NAT, Firewall 2 When using IP NAT, the router or switch would reboot when processing
TCP SYN packets.
This issue only occurred with IP NAT, which is configured by using the add
ip nat command. It did not occur with firewall NAT.
This issue has been resolved.
YYY--------
CR Module Level Description
AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT- 9900 AT-9800

Features in 291-10 6
Version 291-10
C613-10488-00 REV G
Level 3
Level 4
No level 4 issues
Enhancements
No enhancements
CR Module Level Description
AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT- 9900 AT-9800
CR00018514 Ping 3 Traceroute (the trace command) did not work. It returned the error “The
destination is either unspecified or invalid” even if the destination was
reachable.
This issue has been resolved.
YYYYYYYYYYY

Features in 291-09 7
Version 291-10
C613-10488-00 REV G
Features in 291-09
Software Maintenance Version 291-09 includes the enhancement in the following table, which is available for x900-48FE and x900-48FE-N switches.
Level 1-4
No level 1-4 issues
Enhancements
CR Module Level Description
AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT- 9900 AT-9800
CR00018530 Core - CPU fan monitoring is now disabled by default on x900-48FE and
x900-48FE-N switches. Monitoring the fan is unnecessary unless an
accelerator card is installed on the switch, so disabling monitoring reduces
the number of messages that the switch displays and logs.
To enable monitoring, use the command:
enable cpufanmonitoring
To disable it again, use the command:
disable cpufanmonitoring
When monitoring is enabled, the command show system displays the
CPU fan status in the entry labelled “Main fan”.
Note that this behaviour is already available on AT-8948 switches.
--------Y- -

Features in 291-08 8
Version 291-10
C613-10488-00 REV G
Features in 291-08
Software Maintenance Version 291-08 includes the resolved issues and enhancements in the following tables. In the tables, for each product series:
■“Y” indicates that the resolution is available in Version 291-08 for that product series.
■“–” indicates that the issue did not apply to that product series.
Level 1
No level 1 issues
Level 2
CR Module Level Description
AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT- 9900 AT-9800
CR00000444 Switching,
IGMP,
IP Gateway
2If a packet should have matched a hardware filter with a deny action and
have been discarded, but an IP routing entry had not yet been learnt for the
packet, then the packet was not discarded.
This issue has been resolved and the packet is now discarded.
---YYYYY---
CR00000484 Switching 2 When a nodrop action was specified on a port as part of an L3 filter, it was
observed that the port was still dropping packets. This was observed after
the ARP entry for the destination IP expired from the switch’s L3 table.
This issue has been resolved.
---YYYYY---
CR00001231 Firewall 2 The router or switch sometimes recorded more events in its deny event
queue than was specified by the detail parameter of the set firewall
policy attack command.
This issue has been resolved.
YYYYYY- - - - Y

Features in 291-08 9
Version 291-10
C613-10488-00 REV G
CR00003495 Classifier 2 The following issues existed with classifiers:
■classifiers matching protocol=ipv6 and ipprotocol=icmp could be
created more than once
■classifiers matching protocol=ipv6 and ipprotocol=1 could be created
but were meaningless because 1 represents IPv4 ICMP
■classifiers matching protocol=ip and ipprotocol=58 could be created
but were meaningless because 58 represents IPv6 ICMP.
These issues have been resolved.
Also, classifiers now default to protocol=ip (IPv4) if:
■no value is specified for the protocol parameter, or
■protocol=any and ipprotocol=icmp.
YYYYYY- - YYY
CR00004018 VLAN 2 Removing then re-adding ports to a Nested VLAN, with rapid STP enabled,
caused the port in the Alternate Discarding state to leak a small number of
packets.
This issue has been resolved.
---------Y-
CR00005472 BGP 2 When BGP was in the OpenSent state and it received an out-of-sequence
message (such as a KeepAlive message), BGP would return to the Idle state.
This issue has been resolved. BGP now sends a notification message to the
other BGP peer, as expected.
YYYYYY- - YYY
CR00005812 IP Gateway 2 When the router or switch received an IP packet whose length was greater
than the MTU on the outgoing link, and the packet contained an IP option
that was not designed to be fragmented (such as Timestamp), then the
resulting constituent fragments would have incorrect IP header lengths.
This could lead to data corruption.
On routers, this issue applied to all routed packets. On switches, it applied
to packets processed by the CPU, not to packets switched in hardware.
This issue has been resolved.
YYYYYYYYYYY
CR Module Level Description
AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT- 9900 AT-9800

Features in 291-08 10
Version 291-10
C613-10488-00 REV G
CR00007178 RIPng 2 The following issues occurred with RIPng:
■RIPng dropped requests from peers with non link-local addresses.
■for a solicited response, if the routes did not exist on the device, RIPng
returned a metric of 0 for them instead of returning a metric of 16
■RIPng performed split-horizon checking for solicited responses
■RIPng used the link-local address to respond to all requests, even if the
request used a non link-local address and therefore the reply should
have also used a non link-local address
These issues have been resolved.
YYYYYY- - YYY
CR00008847 Install, MIB 2 Previously, the MIB objects configFile and createConfigFile would return the
current configuration file, and the MIB object currentConfigFile would
return 'no such object'.
This issue has been resolved. The objects configFile and createConfigFile
now return the boot configuration file. The object currentConfigFile now
returns the current configuration file.
YYYYYYYYYYY
CR00009473 Classifier 2 The output of the show classifier=number command did not show the
protocol number.
This issue has been resolved.
YYYYYYYYYYY
CR00010654 Firewall 2 When adding a firewall application rule, it was possible to specify FTP as the
application but not specify the command parameter. This meant that the
rule would allow all FTP commands through, even if action=deny had
been specified.
This issue has been resolved by making the command parameter
mandatory when the application is specified as FTP.
YYYYYY- - - - Y
CR00010951 PPP 2 If the router or switch received an LCP packet with an unrecognised code,
it responded with a CodeReject packet of incorrect length that did not
respect the established MRU of the peer.
This issue has been resolved.
YYYYYY- - YYY
CR Module Level Description
AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT- 9900 AT-9800