Allied Telesis AR44xS Instruction Manual

Software Maintenance Release Note
Version 281-02
for AR750S, AR750S-DP, AR770S, AR415S, AR450S and AR44xS series routers, and AT-8600 series switches
This software maintenance release note lists the issues addressed and enhancements made in Maintenance Version 281-02 for Software Version 2.8.1. Version
details are listed in the following table:
Caution: Using a maintenance version on the wrong model may cause unpredictable results, including disruption to the network.
This maintenance release note should be read in conjunction with the following documents:
■the Release Note for Software Version 2.8.1, available from www.alliedtelesyn.co.nz/documentation/relnotes/relnotes.html
■your router or switch’s Document Set for Software Release 2.8.1. This document set is available on the CD-ROM that shipped with your router or switch, or
from www.alliedtelesyn.co.nz/documentation/documentation.html
Caution: Information in this release note is subject to change without notice and does not represent a commitment on the part of Allied Telesis Inc. While every
effort has been made to ensure that the information contained within this document and the features and changes described are accurate, Allied Telesis Inc. can
not accept any type of liability for errors in, or omissions arising from the use of this information.
Models Series Release File Date Size (bytes) GUI file
AR415S, AR440S, AR441S, AR442S, AR450S AR400 54281-02.rez 5 September 06 4673896 415s_281-02_en_d.rsc
440s_281-02_en_d.rsc
441s_281-02_en_d.rsc
442s_281-02_en_d.rsc
450s_281-02_en_d.rsc
AR750S, AR750S-DP, AR770S 55281-02.rez 5 September 06 3936164 750s_281-02_en_d.rsc (AR750S and AR750S-DP)
AT-8624T/2M, AT-8624PoE, AT-8648T/2SP AT-8600 sr281-02.rez 5 September 06 2251144 sr24_281-02_en_d.rsc

Enabling and Installing this Release 2
Version 281-02
C613-10482-00 REV B
Enabling and Installing this Release
To use this maintenance release you must have a base release license for Software Release 2.8.1. Contact your distributor or reseller for more information. To
enable this release and install it as the preferred release, use the commands:
enable rel=xx281-02.rez num=2.8.1
set install=pref rel=xx281-02.rez
where xx is the prefix to the filename, as shown in the table on page 1. For example, to install the release on an AR440S router, use the commands:
enable rel=54281-02.rez num=2.8.1
set install=pref rel=54281-02.rez
Levels
Some of the issues addressed in this Maintenance Version include a level number. This number reflects the importance of the issue that has been resolved. The
levels are:
Level 1 This issue will cause significant interruption to network services, and there is no work-around.
Level 2 This issue will cause interruption to network service, however there is a work-around.
Level 3 This issue will seldom appear, and will cause minor inconvenience.
Level 4 This issue represents a cosmetic change and does not affect network operation.

Features in 281-02 3
Version 281-02
C613-10482-00 REV B
Features in 281-02
Software Maintenance Version 281-02 includes the resolved issues and enhancements in the following tables. In the tables, for each product series:
■“Y” in a white column indicates that the resolution is available in Version 281-02 for that product series.
■“-” in a white column indicates that the issue did not apply to that product series.
■a grey-shaded column indicates that Version 281-02 was not released on that product series.
Level 1
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT-8800 AT-8600 AT-8700XL AT-8948 / x900-48 AT-9900 AT-9800
CR00006040 PIM 6 1 For PIM on IPv6, if the interface that was being used as the BSR candidate address
went down, the network occasionally did not re-elect a BSR and the RPs in a
timely manner. This could cause the router or switch to reboot.
This issue has been resolved.
Y-Y-------
CR00007273 Switch 1 If a user created a configuration file that contained port trunk settings before
VLAN port settings, then a loop occurred when the switch rebooted with this
configuration.
This issue has been resolved.
-----Y----
CR00013457 VLAN 1 When ports were added to a currently-disabled RSTP domain, the ports could
start to discard packets (because their STP state was set to Discarding).
This issue has been resolved. When ports are added to a disabled RSTP domain,
they remain in a Forwarding state.
-----Y----
CR00013492 OSPF 1 When route filters (made with the command add ip route filter) were used to
filter OSPF routes, it was possible for OSPF to constantly remove and re-create an
AS-External LSA. This could prevent OSPF sessions from establishing.
This issue has been resolved.
Y-Y--Y----

Features in 281-02 4
Version 281-02
C613-10482-00 REV B
Level 2
CR00013736 Core 1 When a BRI or PRI PIC was installed on the router, an issue with internal memory
handling occasionally caused the router to reboot.
This issue has been resolved.
Y-Y-------
CR00013743 Switch 1 If a user created a configuration file that contained LACP settings and VLAN port
settings, then a loop occurred when the switch rebooted with this configuration.
This issue has been resolved.
-----Y----
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800
CR00010452 PIM 6 2 For PIM on IPv6, RPSet information did not expire correctly when all RP
candidates had expired.
This issue has been resolved.
Y-Y-------
CR00010593 IPv6 2 The router or switch sometimes forwarded packets to directly connected hosts
whose corresponding IPv6 ND cache entry was still in INCOMPLETE state. This
caused it to send the packets to incorrect MAC addresses and egress ports.
This issue has been resolved.
Y-Y-------
CR00012407 STAR 2 When the STAR protocol was used for link-layer encryption, the channel setup
failed continuously on heavy traffic.
This issue has been resolved.
Y-Y-------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-02 5
Version 281-02
C613-10482-00 REV B
CR00012476 IGMP 2 If IGMP snooping was enabled but IGMP was not enabled, the snooper behaved
as if IGMP snooping fast leave had been enabled even when it had not been. This
meant that as soon as the snooper received a Leave message, the port left the
group.
This issue has been resolved. Note that fast leave is disabled by default.
Y-Y--Y----
CR00012657 STP 2 When STP was operating with a large number of VLANs in the same STP region,
the switch sometimes rebooted while processing topology change notifications
(TCNs).
This issue has been resolved.
-----Y----
CR00012741 Core, File,
Stack
2The command create config=filename set did not copy the configuration file
to all switches in the stack, but only saved the file onto the current switch.
This issue has been resolved.
-----Y----
CR00013081 Switch, STP 2 When STP was enabled on ports in a trunk group, the non-master ports did not
have the same state as the master port in the switch’s hardware STG table. This
could, on rare occasions, create a broadcast storm.
This issue has been resolved. All ports in a trunk group follow the master port in
the hardware STG table.
-----Y----
CR00013128 ATM 2 When connected to some types of DSLAMs, the router could reboot due to a
reception error on the SHDSL EOC channel.
This issue has been resolved.
Y---------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-02 6
Version 281-02
C613-10482-00 REV B
Level 3
CR00013359 OSPF 2 It was possible in unusual circumstances for the OSPF link state retransmission list
to grow to a large number. This caused the router or switch to reboot.
This issue has been resolved.
Y-Y--Y----
CR00013390 WAN Load
Balancer
2It was possible in unusual circumstances for the router to run out of memory after
a WAN load balancer session was added. This could cause the router to reboot
or to stop processing packets.
This issue has been resolved.
Y-Y-------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800
CR00003657 Core 3 When a user entered the command show file=switch.ini, the switch previously
could have displayed invalid content or an error message.
This issue has been resolved.
----------
CR00010345 Firewall 3 When the HTTP proxy URL filter had entries that allowed certain domains and
also had entries that denied certain keywords, the supposedly-allowed domains
were denied if they contained the denied keywords. The proxy allowed the page
/index.html from such domains, but no other pages.
This issue has been resolved. The proxy no longer checks allowed domains
against the keyword list.
Y-Y-------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-02 7
Version 281-02
C613-10482-00 REV B
CR00011710 Core 3 When the router or switch sent a RADIUS accounting STOP packet, the packet’s
Acct-Session-Time was always zero, no matter how long the session had been
active for.
This issue has been resolved.
Y-Y-------
CR00013060 IPv6 3 Previously, if IPv6 had a dynamic Neighbour Discovery cache entry for a particular
IPv6 address, it prevented users from adding a static entry for the same IPv6
address.
This issue has been resolved. Users can now overwrite dynamic Neighbour
Discovery cache entries with static entries.
Y-Y-------
CR00013117 IPv6, PIM,
PIMv6
3A router or switch running PIM6 occasionally rebooted in certain network
topologies when links were very busy. The circumstances that caused this crash
are very unusual, but the code has been made more robust to cope with them.
Y-Y-------
CR00013162 ISAKMP 3 When heartbeats fail for an ISAKMP SA, the router or switch (correctly) removes
the ISAKMP SA and any IPsec SAs that were created by the ISAKMP SA. It then
sends delete messages to notify the peer, so that the peer can also remove the
relevant IPsec SAs.
However, if heartbeats failed just after a re-negotiation, and only failed for the
new ISAKMP SA, then the router or switch did not send delete messages for any
IPsec SAs that were also removed. This could mean that encrypted traffic sent
from the peer was lost.
This issue has been resolved. If heartbeats fail, the router or switch now correctly
sends the peer device a delete message for any removed IPsec SAs.
Y-Y-------
CR00013220 ISAKMP 3 Previously, if an ISAKMP policy was configured with set isakmp policy=name
prenegotiate=true and the peer was unresponsive, then at start-up the router
or switch sent fewer ISAKMP message retransmissions than the configured
msgretrylimit value.
This issue has been resolved.
Y-Y-------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-02 8
Version 281-02
C613-10482-00 REV B
CR00013415 Firewall 3 When an RTSP media stream, using TCP as the transport protocol, was passing
through the firewall, then the session could stall if some packets were
retransmitted with different sequence numbers to the original transmission.
This issue has been resolved.
Y-Y-------
CR00013473
CR00013516
DVMRP 3 Values for some DVMRP settings (including ttlthreshold and metric) were not
saved in the configuration file or output resulting from the commands create
config and show config dynamic. If the router or switch rebooted, the values
were not applied.
This issue has been resolved.
Y-Y-------
CR00013525 Stack 3 Different versions of the management stacking feature are not compatible with
each other, which means that AT-9924Ts or x900-24XT series switches can only
be stacked with other AT-9924Ts or x900-24XT switches.
This software version includes checks to prevent incompatible software from
being stacked.
-----Y----
CR00013547 VLAN 3 When DHCP snooping was enabled on the router or switch, performing a walk
of the MIB variables in that router or switch could result in incorrect termination
of the walk. This was because certain SNMP packets were incorrectly interpreted
as DHCP packets.
This issue has been resolved.
-----Y----
CR00013588 ATM 3 At low SHDSL bitrates, the EOC channel exhibited many spurious CRC errors.
This issue has been resolved.
Y---------
CR00013672 ATM 3 An SNMP Walk of the ATM MIB would fail to complete properly, as it would not
advance through the channel list.
This issue has been resolved.
Y---------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-02 9
Version 281-02
C613-10482-00 REV B
Level 4
CR00013714 SSH 3 The router or switch’s SSH server occasionally disconnected an SSH client because
of a checksum error. This occurred because the server did not decrypt the SSH
session key correctly.
This issue has been resolved.
Y-Y--Y----
CR00013757 Core 3 For AR750S-DP routers, the values of the fanAndPsPSUPresent MIB fields
displayed incorrectly. They indicated that a PSU was present when one was not
installed, and that it was not present when it was.
This issue has been resolved.
--Y-------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800
CR00001359 Eth, Bridge,
Switch, LLDP,
IP Gateway
4For all Ethernet-like interfaces, the router or switch now uses an ifType value of
ethernetCsmacd, instead of the deprecated value of iso88023Csmacd.
Y-Y--Y----
CR00013174 Asyn, Core,
Log, Scripting,
Show
4The console port’s autobaud mode was determined incorrectly during start-up.
This caused the router to unnecessarily reconfigure the console port for 9600
8N1 before printing any bootup messages.
This issue has been resolved.
--Y-------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-02 10
Version 281-02
C613-10482-00 REV B
CR00013569 OSPF 4 After OSPF deleted an AS-External LSA, it sometimes sent an unnecessary LSA
with no changes.
This issue has been resolved.
Y-Y--Y----
CR00013683 File 4 Japanese users can now delete the router or switch’s preferred software release
and the current boot configuration file. For routers or switches that are
manufactured for non-Japanese markets, users must first stop the files from
being preferred, by setting new preferred files or by using the commands delete
install=pref or set config=none.
Y-Y--Y----
CR00013767 Core 4 In Japan, AT-8624PoE switches are named 8624PS. Previously, 8624PS switches
displayed AT-8624PoE as their board name in the output of the command show
system.
This issue has been resolved. For Japanese switches only, the board name is now
8624PS.
-----Y----
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-02 11
Version 281-02
C613-10482-00 REV B
Enhancements
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT-8800 AT-8600 AT-8700XL AT-8948 / x900-48 AT-9900 AT-9800
CR00013126 ATM - Previously, it was not possible to set the MTU for an ATM interface.
This enhancement makes it possible to now do so. The MTU can be set to values
between 256 bytes and 1600 bytes, inclusive.
Y---------
CR00013130 N AT- T, I P s e c - This software version supports more versions of IPsec NAT-T. As well as the
existing support for versions 2 and 8 of the NAT-T draft, the router now:
■supports NAT-T draft version 3, as defined by draft-ietf-ipsec-nat-t-ike-03.txt.
This version has also been implemented by SonicWALL in its EnhancedOS.
■supports RFC 3947. This RFC has also been implemented in Linux’s Openswan,
for example (www.openswan.org).
■accepts and sends the IPsec draft version 2 Vendor ID string when the hash
does not include a carrage return. Therefore it accepts and sends a hash of
“draft-ietf-ipsec-nat-t-ike-02” as well as a hash of “draft-ietf-ipsec-nat-t-
ike-02\n”
■displays some other Vendor IDs in debugging information even though the
router does not support these versions. Such Vendor IDs are followed by the
phrase “info only”.
Y-Y-------
CR00013444 IP Gateway - RIPv2 can now use authentication passwords that contain almost any printable
character, including characters such as $, % and &. The ? character is interpreted
as asking for parameter help, so this is not usable anywhere inside a password.
Also, a password cannot contain double quotes (") as the first character of the
string.
The RIP password length is now strictly enforced at 16 characters. The command
handler no longer accepts a password with more characters than this.
Y-Y--Y----

Features in 281-02 12
Version 281-02
C613-10482-00 REV B
CR00013447 SHDSL - The 4-wire support of SHDSL interfaces has been enhanced to provide support
for a standards-based train-up mode as well as the existing enhanced train-up
mode.
This issue has been resolved.
Y---------
CR00013535 File - Previously, a user could rename the current boot configuration file (by using the
command rename). This stopped the router or switch from running that
configuration on boot-up, so if the router or switch restarted after the user had
renamed the current boot configuration file, it started up with no configuration.
This issue has been resolved. Users can no longer rename the current boot
configuration file.
Y-Y--Y----
CR00013677 PoE - This enhancement added support for the latest version of the PoE firmware
(version 5.0.1), so that AT-8624PoE switches can be shipped from the factory
with this firmware version.
-----Y----
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-01 13
Version 281-02
C613-10482-00 REV B
Features in 281-01
Software Maintenance Version 281-01 includes the resolved issues and enhancements in the following tables. In the tables, for each product series:
■“Y” indicates that the resolution is available in Version 281-01 for that product series.
■“-” indicates that the issue did not apply to that product series.
Level 1
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT-8800 AT-8600 AT-8700XL AT-8948 / x900-48 AT-9900 AT-9800
CR00012654 Switch 1 If an AT-9924SP had a large number of SFPs installed and had a very high level of
traffic passing through the network, sometimes newly inserted SFPs were not
detected.
This issue has been resolved.
--------Y-
CR00012715 DHCP 1 In some configurations in which the DHCP server was enabled, the router or
switch compacted its flash memory frequently. This occurred because the DHCP
server unnecessarily updated record files in flash memory even if the record had
not changed.
This issue has been resolved, so that DHCP records are only updated when
necessary. Note that if the router or switch has NVS memory, it stores DHCP
records in NVS by preference, instead of in flash memory.
YYYYYYYYYY
CR00012760 Log 1 Entering the command show debug caused the router or switch to reboot if one
or more long messages existed in the log.
This issue has been resolved.
YYYYYYYYYY

Features in 281-01 14
Version 281-02
C613-10482-00 REV B
CR00012933 Switch 1 When STP is enabled on the switch but is disabled for a trunk (by using the
command disable stp port), the trunk should pass traffic. Previously, some trunk
members sometimes stayed in the “discarding” state instead.
This issue has been resolved.
-------YY-
CR00013025 DVMRP 1 Receiving a DVMRP Graft or Prune message occasionally caused the router or
switch to reboot.
This issue has been resolved.
YYYYY- - YYY
CR00013413 IP Gateway,
Load Balancer
1If the router or switch was configured with a local interface IP address and the
interface to which this address belonged did not have a logical interface with
index 0, a number of connectivity issues from this router or switch occurred, in
which the router or switch was not able to communicate with UDP, TCP or PING.
This issue has been resolved.
YYYYYYYYYY
CR00013666 SSL 1 When the router or switch used SSL to process HTTPS traffic, it rebooted.
This issue occurred, for example, when browsing securely to the GUI, or when
the load balancer was configured to support HTTPS traffic.
This issue has been resolved.
YYYYYYYYYY
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-01 15
Version 281-02
C613-10482-00 REV B
Level 2
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT-8800 AT-8600 AT-8700XL AT-8948 / x900-48 AT-9900 AT-9800
CR00009212 Bridge 2 The Bridge cannot be configured to bridge PPPoE packets from an Ethernet
interface that has also been configured as a PPPoE interface. Previously, such a
Bridge configuration would appear to succeed. However the Bridge would not
bridge PPPoE packets and the router would restart when the command reset
bridge was entered.
This issue has been resolved. Note: if you want to bridge PPPoE packets, do not
also configure the router as a PPPoE endpoint (by using the command create
ppp=number over=ethx-any).
YYY- ------
CR00009213 MSTP 2 Because of an MSTP issue, the switch did not always send a BPDU with an
agreement flag to its designated bridge, even if the switch was synchronised with
the latest spanning tree information from the designated bridge. This prevented
the designated port on the designated bridge from making a fast transition to
the forwarding state. The result was that the network could take up to two times
the “forward delay” time to fully converge.
This issue has been resolved.
---YYYYYY-
CR00009826 IP Gateway 2 When a static ARP is deleted, the router or switch sends out an ARP request to
attempt to create a dynamic ARP for that IP address. Previously, the router or
switch did not process the ARP response correctly and therefore did not add the
ARP to its ARP table.
This issue has been resolved. When a static ARP is deleted, the router or switch
attempts to create a dynamic ARP for that IP address, and will successfully add it
to the ARP table if a device responds.
YYYYYYYYYY
CR00010513 BGP,
IP Gateway
2BGP did not update its route table when a blackhole route changed in IP.
This issue has been resolved.
YYYYY- - YYY

Features in 281-01 16
Version 281-02
C613-10482-00 REV B
CR00011434 File 2 The router or switch sometimes rebooted when copying a very large file (several
Mbytes). This issue has been resolved by improving the copy process so that it
uses fewer memory buffers.
YYYYYYYYYY
CR00011670 Switch 2 On x900-48 Series switches, when the switch used a DSCP map to remark
packets, it did not mark the packets correctly.
This issue has been resolved.
-------Y--
CR00012364 IPv6 2 For IPv6, if there were multiple equal cost multipath (ECMP) static routes to a
destination, and one or more links for the routes became inactive, the inactive
route was sometimes still chosen for forwarding. This caused brief data delivery
failure to the destination.
This issue has been resolved.
YYYYY- - YYY
CR00012534 IP Gateway 2 If the router or switch received an IP packet that had been sent as an Ethernet
broadcast, the router or switch responded as if the packet had been sent to its IP
address, even when the packet was destined for a different IP address. In
particular, the router or switch processed and responded to ICMP and TCP
packets that were sent as Ethernet broadcasts to different IP addresses. These
caused the router or switch to send ICMP echo responses or TCP reset packets.
This issue has been resolved. Such Ethernet broadcast packets are generally not
valid packets, so the router or switch now discards them.
YYYYYYYYYY
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-01 17
Version 281-02
C613-10482-00 REV B
CR00012613 Firewall 2 When the WAN load balancer was used with IP NAT (instead of firewall NAT), and
an FTP session was established to a server on the public network, the router did
not correctly establish a return session. This meant data was unable to flow
correctly back from the server, and the router rebooted.
This issue has been resolved.
Note that the WAN load balancer is not designed for use with IP NAT, because IP
NATs are not associated with interfaces. Configurations that use an IP NAT cannot
vary the global IP address (the gblip parameter) based on the outgoing interface,
so the WAN load balancer sends all traffic out with the same source address.
Therefore, the return traffic probably comes back via the WAN load balancer
resource that is associated with the global IP. The impact is that the WAN load
balancer balances the outgoing traffic but not the return traffic.
We recommend using firewall NAT instead of IP NAT with the WAN load balancer.
Y-Y-------
CR00012624 VRRP,
IP Gateway
2Under certain network conditions in which VRRP entities become temporarily
unsynchronised, the router or switch could receive a gratuitous ARP from a self-
elected VRRP master when the router or switch was still the master. This caused
the existing master to create an ARP entry that incorrectly redirected packets
towards the other VRRP entity even after the other entity had become a slave
again.
This issue has been resolved. The router or switch no longer accepts gratuitous
ARPs from other VRRP entities while it is still the Master.
YYYYYYYYYY
CR00012683 Switch 2 After the AR770S rebooted, the Port Link/Activity and Duplex/Collision LEDs
sometimes did not blink in response to activity and collisions, respectively.
This issue has been resolved. The router detects the problem and recovers from
it, if possible. If it cannot recover from the problem, it generates a log message
of severity 6, module SWK, type REST, and subtype FAIL. The log message says
“An LED error has been detected, please power-cycle the device. If this message
appears again, contact your technical support representative for help.”
--Y-------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-01 18
Version 281-02
C613-10482-00 REV B
CR00012697 IPsec, ENCO 2 Decrypting a large IPsec ESP packet sometimes caused the router or switch to
reboot.
This issue has been resolved.
YYYYY-----
CR00012710 Core 2 Soft errors can generate exceptions that would cause the router or switch to
reboot. Soft errors are spontaneous changes in the information stored in a digital
circuit, caused by physical effects. The router or switch’s handling of such errors
has been improved, so that it recovers without rebooting when possible.
--Y-------
CR00012741 Core, File,
Stack
2The command create config=filename set did not copy the configuration file
to all switches in the stack, but only saved the file onto the current switch.
This issue has been resolved.
---YYYYYY-
CR00012757 OSPF 2 The router or switch correctly accepted the command add ospf redistribution
protocol=static followed by the command set ospf asexternal=on or nssa.
However, the command create config did not create a valid configuration file
from these commands. If the router or switch used that configuration after a
reboot, it gave the error “Redistribution for specified routing protocol - already
exists” and did not use the user-defined redistribution definition.
This issue has been resolved. The router or switch now correctly saves and uses
the user-defined redistribution definition.
YYYYYYYYYY
CR00012820 DHCP
Snooping,
Switch
2When the switch had two DHCP snooping classifiers applied across all 48 ports,
and maxleases was set to 10 or more on each port, the switch rebooted.
This issue has been resolved.
-------Y--
CR00012821 IP Gateway 2 When adding, deleting or updating subnet routes of a more general route, the
software and hardware IP route tables sometimes became unsynchronised. The
same issue sometimes also occurred when updating ECMP routes. This could
cause the router or switch to forward packets to unexpected next hops.
This issue has been resolved.
---YYYYYYY
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-01 19
Version 281-02
C613-10482-00 REV B
CR00012846 ASYN, Log 2 The following issues occurred with sending log messages to an asynchronous
port:
■The log messages output on an asynchronous port were corrupt.
■When log messages were output to an asynchronous port, that port was
(correctly) locked. However, the port remained locked after the asynchronous
log output definition was destroyed, and after the log output's destination
was changed from asynchronous to something else.
■It was possible for a user to change the log output destination to an
asynchronous port while the user was logged into the asynchronous port. This
resulted in the user losing access to the command line interface.
■It was possible to create a log output definition with an asynchronous port as
the destination even when another user was logged into that asynchronous
port. This resulted in the other user losing access to the command line
interface.
■If a user changed the log output destination to an asynchronous port and
specified invalid parameters in the command, an error message was displayed
but the new output destination was saved anyway.
■The set command allowed a user to specify an asynchronous port as the
destination without specifying the asynchronous port number. The number
defaulted to asyn0, which may not have been the desired port.
These issues have been resolved.
YYYYYYYYYY
CR00012855 Core 2 If the switch was rebooted at a time when there was a high level of packet traffic
between the switch ports and the switch CPU, then during the reboot process it
was possible for RAM test errors to occur.
This issue has been resolved.
-------YY-
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800

Features in 281-01 20
Version 281-02
C613-10482-00 REV B
CR00012868 ENCO 2 Entering the command create enco key=number ip=? caused the router or
switch to reboot.
This issue has been resolved.
YYYYYYYYYY
CR00012900 IPv6, Switch 2 When an IPv6 accelerator card was installed, IPv6 multicast traffic was flooded to
all ports in a downstream VLAN, whether or not they had joined the multicast
group.
This issue has been resolved.
-------YY-
CR00012911 Switch, VLAN,
User
2Under very rare circumstances, memory corruption could occur when packets
were transmitted by the CPU out a switch port.
This issue has been resolved.
Y-Y-------
CR00012951 IPv6 2 RIPng (for IPv6) sometimes sent sub-optimal routes to its neighbours. When
RIPng was configured in a network with loop topology, this could cause unstable
routing table entries on the neighbours (the metric kept being updated, as a
result of updates from neighbours).
This issue has been resolved. RIPng no longer sends sub-optimal routes.
YYYYY- - YYY
CR00012952 Bridge 2 If a tagged packet was bridged out of a VLAN interface, the interface always
added a VLAN tag into the packet, even though the packet was already tagged.
This issue has been resolved.
YYY- ------
CR00012991 ATM 2 The maximum allowed value of the vpi parameter in the commands add and set
atm channel has been increased from 8 to 15.
Y---------
CR Module Level Description
AR400 AR7x5 AR750S / AR770S Rapier i AT- 8800 AT- 8600 AT-8700XL AT-8948 / x900-48 AT- 9900 AT- 9800