Allied Telesis 86241-01 Instruction Manual

Simply connecting the world
Patch Release Note
Patch 86241-01
For Rapier Switches and AR800 Series
Modular Switching Routers
Introduction
This patch release note lists the issues addressed and enhancements made in
patch 86241-01 for Software Release 2.4.1 on existing models of Rapier L3
managed switches and AR800 Series L3 modular switching routers. Patch file
details are listed in Table 1.
This release note should be read in conjunction with the following documents:
■Release Note: Software Release 2.4.1 for Rapier Switches, AR300 and
AR700 Series Routers, and AR800 Series Modular Switching Routers
(Document Number C613-10338-00 Rev A) available from
www.alliedtelesyn.co.nz/documentation/documentation.html.
■Rapier Switch Documentation Set for Software Release 2.4.1 available on
the Documentation and Tools CD-ROM packaged with your switch, or
from www.alliedtelesyn.co.nz/documentation/documentation.html.
WARNING: Using a patch for a different model or software release may cause
unpredictable results, including disruption to the network. Information in this
release note is subject to change without notice and does not represent a
commitment on the part of Allied Telesyn International. While every effort has
been made to ensure that the information contained within this document and
the features and changes described are accurate, Allied Telesyn International
can not accept any type of liability for errors in, or omissions arising from the
use of this information.
Table 1: Patch file details for Patch 86241-01.
Base Software Release File 86s-241.rez
Patch Release Date 26-July-2002
Compressed Patch File Name 86241-01.paz
Compressed Patch File Size 27732 bytes

2Patch Release Note
Patch 86231-06 for Software Release 2.3.1
C613-10328-00 REV F
Features in 86241-01
Patch 86241-01 includes the following enhancements:
A new command allows the Layer 3 aging timer to be changed:
SET SWITCH L3AGEINGTIMER=<seconds>
where seconds can be 30 - 43200. After each cycle of the ageing timer, all
existing Layer 3 entries with the hit bit set will have the hit bit reset to zero,
and all existing Layer 3 entries with the hit bit set to zero will be deleted.
The SHOW SWITCH command output now displays the Layer 3 ageing
timer value.
The built in Self Test Code for all Rapiers, except G6, has been improved to
enhance the detection of faults in switch chip external packet memory.
When a TCP RST/ACK was received by a firewall interface, the packet that
was passed to the other side of the firewall lost the ACK flag, and had an
incorrect ACK number. This issue has been resolved.
The SHOW CONFIG DYNAMIC=VRRP command was not showing port
monitoring and step values correctly. This issue has been resolved.
The PURGE IP command now resets the IP route cache counters to zero.
The SENDCOS filter action did not operate correctly across switch
instances. This was because the stacklink port on the Rapier 48 did not
correctly compensate for the stack tag on frames received via the filter. This
issue has been resolved.
Firewall subnet NAT rules were not working correctly from the private to
the public side of the firewall. Traffic from the public to private side
(destined for subnet NAT) was discarded. These issues have been resolved.
ICMP traffic no longer causes a RADIUS lookup for access authentication,
but is now checked by ICMP handlers for attacks and eligibility. If the ICMP
traffic matches a NAT rule, NAT will occur on inbound and outbound
traffic. HTTP 1.0 requests sometimes caused the firewall HTTP proxy to
close prematurely. Cached TCP sessions were sometimes not hit correctly.
These issues have been resolved.
On a Rapier 24, adding an IP interface over a FR interface caused an
ASSERT debug fatal error. This issue has been resolved.
PCR: 02036 Module: SWITCH Network affecting: No
PCR 02138 Module: SWI Network affecting: No
PCR: 02158 Module: FIREWALL Network affecting: No
PCR: 02185 Module: VRRP Network affecting: No
PCR: 02229 Module: IPG Network affecting: No
PCR: 02240 Module: SWI Network affecting: No
PCR: 02241 Module: FIREWALL Network affecting: No
PCR: 02242 Module: IPG Network affecting: No

Patch 86241-01 For Rapier Switches and AR800 Series Modular Switching Routers 3
Patch 86231-06 for Software Release 2.3.1
C613-10328-00 REV F
Sometimes the Firewall erroneously used NAT. This issue has been
resolved.
A dual Ethernet router was incorrectly accepting an IP address from a
DHCP server when the offered address was on the same network as the
other Ethernet interface. An error is now recorded when DHCP offers an
address that is in the same subnet as another interface.
Availability
Patches can be downloaded from the Software Updates area of the Allied
Telesyn web site at www.alliedtelesyn.co.nz/support/updates/patches.html. A
licence or password is not required to use a patch.
PCR: 02250 Module: FIREWALL Network affecting: No
PCR: 02259 Module: DHCP, IPG Network affecting: No

4Patch Release Note
Patch 86231-06 for Software Release 2.3.1
C613-10328-00 REV F