Alteon OS 22.0.2 Release Notes

4655 Great America ParkwaySanta Clara, CA 95054Phone 1-800-4NortelAlteon OS 22.0.2Release Notespart number: 315397-J, January 2005Alteon OS 22.0.2 Release Notes2315397-J, January 2005Copyright 2005 Nortel Networks, Inc.,4655 Great America Parkway, Santa Clara, California 95054, USA. All rights reserved. Part Number: 315397-J.This document is protected by copyright and distributed under licenses restricting its use, copying,distribution, and decompilation. No part of this document may be reproduced in any form by any means without prior written authorization of Nortel Networks, Inc. Documentation is provided “as is” without warranty of any kind, either express or implied, including any kind of implied or express warranty of non-infringement or the implied warranties of merchantability or fitness for a particular purpose.U.S. Government End Users: This document is provided with a “commercial item” as defined by FAR2.101 (Oct 1995) and contains “commercial technical data” and “commercial software documentation” as those terms are used in FAR 12.211-12.212 (Oct 1995). Government End Users are authorized to use this documentation only in accordance with those rights and restrictions set forth herein, consistent with FAR 12.211- 12.212 (Oct 1995), DFARS 227.7202 (JUN 1995) and DFARS 252.227-7015 (Nov 1995).Nortel Networks, Inc. reserves the right to change any products described herein at any time, and without notice. Nortel Networks, Inc. assumes no responsibility or liability arising from the use of productsdescribed herein, except as expressly agreed to in writing by Nortel Networks, Inc. The use and purchase of this product does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of Nortel Networks, Inc.Alteon OS , Alteon 2424, Alteon 2424-SSL, Alteon 2224, 2216, 2208, 3408, Alteon 180, Alteon 180e, Alteon 184, Alteon AD3, Alteon AD4, and ACEswitch are trademarks of Nortel Networks, Inc. in the United States and certain other countries. Cisco ® and EtherChannel ® are registered trademarks of Cisco Systems, Inc. in the United States and certain other countries. Check Point ® and FireWall-1® aretrademarks or registered trademarks of Check Point Software Technologies Ltd. Any other trademarks appearing in this manual are owned by their respective companies.Originated in the U.S.A.Release NotesThese Alteon OS 22.0.2 Release Notes provide the latest information on the softwareand documentation for this release.This document is a supplement to the complete documentation suite. Please keepthis document with your product manuals. For additional technical questions regarding theproduct architecture and features, refer to the product documentation.N OTE – Alteon OS 22.0.2 is a Release to Manufacturing (RTM) software release.This software version will include fixes for existing software limitations as well asnew features and enhancements to the existing software base.Related DocumentationAlteon OS 22.0.2 Command Reference (Part Number 315393-J)Alteon OS 22.0.2 Application Guide (Part Number 315394-J)Alteon Application Switch Hardware Installation Guide (Part Number 315396-E)Alteon OS BBI Quick Guide (Part Number 315395-C rev 01)Alteon OS 22.0.1 Release Notes (Part Number 315397-H)Hardware SupportThe Alteon Application Switch is the next generation, high performance, Layer 2-7,fixed network switch. This application switch has increases in switching performance, sessioncapacity, feature capacity, and port density from the Alteon 180 series and AD series Webswitches.3 315397-J, January 2005Alteon OS 22.0.2 Release Notes4315397-J, January 2005Alteon Application Switch 2000 and 3000 Series Alteon OS 22.0.2 is supported on the following Alteon Application Switch platforms: Alteon 2208: supports 8 Fast Ethernet ports and 2 Small Form-Factor Pluggable (SFP)GBIC Ethernet ports. Alteon 2216: supports 16 Fast Ethernet ports and 2 SFP GBIC Ethernet ports. Alteon 2224: supports 24 Fast Ethernet ports and 2 SFP GBIC Ethernet ports. Alteon 2424: supports 24 Fast Ethernet ports and 4 SFP GBIC Ethernet ports. Alteon 2424-SSL: supports 24 Fast Ethernet ports and 4 SFP GBIC Ethernet ports, and an on-board SSL processor that allows SSL acceleration and SSL VPN functionality. Alteon 3408: supports 4 1000 Mbps SFP GBICS, 4 10/100/1000Base-T Copper Autoselecting and Autosensing RJ45 connectors, 4 dual-mode 1000 Mbps SFP GBIC or 10/100/1000Base-T copper ports. Either type of port can be set as a “preferred” or “backup” connection.Alteon Application Switch Model 2208 and 2216Supported Software Future hardware revisions of the Alteon Application Switch Model 2208 and 2216 will require that customers use Alteon OS versions 21.0.7 or higher or 22.0.2 or higher. In these future hardware revisions, any earlier software images will not load or function properly.On these versions of the Alteon Application 2208 and 2216 Switches, the software will block a software downgrade to an unsupported release through TFTP download and display the following error message:If the error message noted above is displayed during a downgrade procedure, only the software versions described in the error message can be used as base line.The switch is unable to prevent a downgrade operation through a serial download. If an unsupported software version is applied to the switch through a serial download, the switch will not boot properly which will result in a switch malfunction.Error: Software version of the downloaded image is NOT supported on this version of the hardware. Please download the supported software version (21.0.7.0 or later, or 22.0.2.0 or later) instead.Alteon OS 22.0.2 Release Notes5315397-J, January 2005If release 21 of Alteon OS is the desired software version, ensure that release 21.0.7 or later is used. This release is available via download from the Nortel Networks customer support web site. If you do not have access to this web site, contact Nortel Networks by e-mail atAlteon_keys@ to obtain the software on a one time basis.To determine if a Model 2208 or 2216 Alteon Application Switch only supports Alteon OS 21.0.7 or later or 22.0.2 or later, check the hardware revision information located on the rear of the chassis and consult any additional documentation that was included with the switch.This revision number can also be obtained through the CLI through the command /info/sys/gen and checking the revision number as illustrated below:The hardware revision number can also be determined via the Alteon OSBrowser-Based Interface where the revision number is displayed as the value Chassis Rev or in Alteon EMS 3.1.1 or later where it is displayed as the value Chassis Revision Number .System Information at 14:33:45 Thu Nov 11, 2004Alteon Application Switch 2208Switch is up 0 days, 0 hours, 0 minutes and 0 seconds.Last boot: 17:38:07 Tue Sep 21, 2004 (power cycle)Last apply:Last save: 11:21:05 Fri Nov 5, 2004MAC address: 00:11:58:91:ae:00 IP (If 1) address: 0.0.0.0Hardware Order No: EB1412010 Serial No: SSCPB80007 Rev: 05(Hardware Revision Number in this example is 05)Mainboard Hardware: Part No: P316677-B Rev: 04Management Processor Board Hardware: Part No: P314080-A Rev: 02Fast Ethernet Board Hardware: Part No: P316676-A Rev: 03Software Version 22.0.2.0 (FLASH image1), factorydefault configuration.Alteon OS 22.0.2 Release Notes6315397-J, January 2005Software Base Alteon OS 22.0.2 is based on Alteon OS 22.0 and Alteon OS 22.0.1 functionality that is currently implemented across the Alteon Application Switch models.Images for Alteon 3408 3408 Image file: AAS-22.0.2.0-3000-AlteonOS.img 3408 Binary Image file: AAS-22.0.2.0-3000-Serial.img Images for Alteon 2000 Series 2000 Series Image file: AAS-22.0.2.0-2000-AlteonOS.img 2000 Series Binary Image file: AAS-22.0.2.0-2000-Serial.img Common Files AAS Boot Image file: AAS-22.0.2.0-Boot.img MIB files: AAS-22.0.2.0_mib.zip N OTE – Nortel Networks recommends that customers upgrade their Alteon OS boot image to 22.0.2.Installing Alteon OS 22.0.2The Alteon OS 22.0.2 image size exceeds the download limit of 3MB for image downloads through TFTP present in Alteon OS previous to version 21.0.4. If the switch is being upgraded from a version earlier than 21.0.4 follow the procedure entitled “Upgrading From A Version Prior To 21.0.4”. Otherwise, follow the procedure entitled “Upgrading From A Ver-sion Newer Than 21.0.4” on page 8.Upgrading From A Version Prior To 21.0.4To download Alteon OS 22.0.2, you will first have to perform an intermediary upgrade to Alteon OS 21.0.4.0 (or higher version of 21.0.x) into the image1 slot and then download Alteon OS 22.0.2 into the image2 slot. After this is completed, the switch can be set to reboot from image2 in order to load Alteon OS 22.0.2.Alteon OS 22.0.2 Release Notes7315397-J, January 2005N OTE – As an alternative, you may perform a serial download of the Alteon OS 22.0.2 binary image file directly into the image1 slot. See Appendix C, “Performing a Serial Download”, of the Alteon OS 22.0.2 Command Reference (Part Number 315393-J) for the necessary steps.1.Download Alteon OS 21.0.4 (or a higher version of the 21.0.x software) into the image1slot.Alteon OS 21.0.4 or higher software permits a software image greater than 3MB tobe downloaded into the image2 slot only.2.Select image1 for the next reboot and reset the switch.The switch should now boot with the Alteon OS version downloaded in step 1.3.In the boot options menu, download the new Alteon OS 22.0.2 image into the image2 slot.4.Select image2 for the next reboot and reset the switch.5.Verify that Alteon OS 22.0.2 has been properly installed into image2.>> Main# /boot/gtimg 1Enter hostname or IP address of TFTP server: <IP or server name>Enter name of file on TFTP server: <21.0.4 or later file name><software download begins>. . . . . . .>> Boot Options# image 1>> Boot Options# reset >> Main# /boot/gtimg 2Enter hostname or IP address of TFTP server: <IP or server name>Enter name of file on TFTP server: <image file name><software download begins>. . . . . . .>> Boot Options# image 2Next boot will use switch software image1 instead of image2>> Boot Options# resetAlteon OS 22.0.2 Release Notes8315397-J, January 20056.Upgrade the image1 slot to Alteon OS 22.0.2.7.Select image1 for the next boot and reset the switch.Upgrading From A Version Newer Than 21.0.4If the version of Alteon OS present on the switch is newer than 21.0.4 then follow these instructions for upgrading Alteon OS.1.Download the new Alteon OS 22.0.2 image into the image2 slot.2.Select image2 for the next reboot and reset the switch.3.Verify that Alteon OS 22.0.2 has been properly installed into image2.>> Main# /boot/gtimg 1Enter hostname or IP address of TFTP server: <IP or server name>Enter name of file on TFTP server: <image file name><software download begins>. . . . . . .AUTION —When you mix Alteon OS 22.0.2 (or later) images with images prior to 22.0 in the later than 22.0 use a different flash location for the crash dump.>> Boot Options# image 1>> Boot Options# reset>> Main# /boot/gtimg 2Enter hostname or IP address of TFTP server: <IP or server name>Enter name of file on TFTP server: <image file name><software download begins>. . . . . . .>> Boot Options# image 2Next boot will use switch software image1 instead of image2>> Boot Options# resetAlteon OS 22.0.2 Release Notes9315397-J, January 20054.Upgrade the image1 slot to Alteon OS 22.0.2.5.Select image1 for the next boot and reset the switch.Software SupportObtaining Software Patches and License KeysIf you have purchased one or more of the Alteon Application Switch models 2208 or 2216 and do not have a support contract, you may send a request to Nortel Networks Technical Support to obtain a one-time exception for a patch release of an older version of software. The e-mail address is Alteon_keys@.>> Main# /boot/gtimg 1Enter hostname or IP address of TFTP server: <IP or server name>Enter name of file on TFTP server: <image file name><software download begins>. . . . . . .AUTION —When you mix Alteon OS 22.0.2 (or later) images with images prior to 22.0 in the later than 22.0 use a different flash location for the crash dump.>> Boot Options# image 1>> Boot Options# resetAlteon OS 22.0.2 Release Notes10315397-J, January 2005Version 22.0.2 Software Feature Limitations The following fixes have been implemented since version 22.0.1 of Alteon OS.Priority 1 - Critical Impact BugsThe switch will no longer malfunction after the configuration of a URL contract for a filter is left uncompleted for more than approximately five minutes. (Q01029739)SFAs will no longer cause switch malfunction when new configurations are applied. (Q00857009-01)A memory leak caused by SNMP health checking has been fixed. (Q01025816)The command /cfg/slb/group <group number>/add now works for real servers above 256. (Q01037782)IDS filter groups now work properly with multiple IDS groups configured. (Q01039584)Non-zero mask 0.0.0.0 routes will no longer be lost after reboot. (Q00957422)Issues surrounding Layer 7 server load balancing for keep alive connections have been resolved. (Q00636110-02)The switch will now send scripted health checks when DSR is enabled. (Q01010670)Configuration of IDSLB will no longer cause two or more switches to become VRRP masters in some VRIDs. (Q00981660) The switch will no longer malfunction when more than 72 characters are used in anadvanced health check formula. (Q01022948)Priority 2 - High Impact BugsDynamic NAT sessions will no longer age out prematurely. (Q00983550) In a basic SLB environment that contains at least one real server, a switch malfunctionwill occur if the user configures an invalid real server number in the group advanced health check formula string. Ensure that only valid real server numbers are used to prevent this issue. (Q01022944)Previously, if a back up real server fails a health check it would still show up inrelated statistics. This behavior has been fixed. (Q00953646-01)Wildcard usage in GSLB network domain string comparisons will now behave properly using either the asterisk (*) or question mark (?) as the wildcard character. (Q00972566)A fast age-out will only be performed on a session entry with a Reset packet only if the sequence number of the packet is within the expected range. If the sequence number is not within the expected range, the packet will be dropped. (Q00867956)Issues with RADIUS Accounting while DAM is enabled have been resolved.(Q01007742)GSLB rules can now be applied via Alteon EMS. (Q01016034)SNMP support has been added to Alteon EMS for the “insert cookie dname” feature.(Q00877957)SLB health check synchronization will now work properly. (Q00964704)“Leastconn” load balancing has been reformulated for better load balancing (Q01015254) Instances where a switch would not reboot after a malfunction have been fixed.(Q00977354)Problems with the addition and removal of static routes have been fixed. (Q00980823) VRRP state will no longer stay in Init mode after making Layer 3 configuration changes.(Q00987237)Response times during HTTP content checking should now be more consistent.(Q00991118)Use of the ping command will now work after a port has been moved from one VLAN to another. (Q00996865)Server load balancing sessions will now be cleared properly. (Q01020059)SSH and HTTPS key generation will no longer cause SLB and GSLB connections to dis-connect. (Q00986128)The switch will no longer continue to allow sessions to be opened by a real server after it has reached the maximum connections threshold. (Q01025472)The value for unlimited connections is now consistent between SLB and GSLB.(Q00965746)Changing the ARP timer will no longer cause continuous traffic loss. (Q00977153)Looping apparent in STP Group 1 in some configurations has been fixed. (Q00613888) Layer 3 traffic will now be properly load balanced over all of the links in a trunk group when a gateway is used to route traffic. (Q01044880)Roundrobin loading balancing will now work properly with Layer 7 WCRs. (Q01048006) SSH will no longer cause switch malfunction under certain circumstances. (Q01048566)Priority 3 - Medium Impact BugsPreviously, the use of a stress tool in certain configurations would result in improper counts. This issue has been resolved. (Q00786947)Under certain configurations, the NTP services in previous versions would not operated as expected. This issue has been resolved. (Q00951700)MIB support has been added for individual SP memory usage. (Q00973926)Improper values referenced in CLI help for GSLB commands have been corrected.(Q00966643)Load balancing using THASH and PHASH in tandem had not performed as expected in previous versions. This issue has been corrected. (Q00986749)A client VIP will now respond with the MAC address of the VIP, not the MAC address ofthe interface. (Q00990433)Statistics for filtered, denied frames will no longer increment unless a frame has actually been denied. (Q01021631)An error message will now be provided when the /cfg/ptcfg command is issued and the management port is inoperable. (Q01027174)The CLI help for the /info/slb/idshash command is now correct. (Q01037844) Issues surrounding the improper incrementing of Layer 7 WCR statistics have been fixed (Q00957228)ARP address list duplication has been resolved. (Q00972988)The default GSLB rule (rule 1) will now be displayed when viewed in the Alteon EMS GSLB Rules page. (Q00967955)The switch only sends the first eight characters of a user name when performing a SIP health check regardless of whether the user name is longer than this length. This does not affect the performance of the health check. Using a maximum length of eight characters for a user name ensures that this does not become an issue. (Q00976755)The switch will no longer malfunction when it encounters a malformed IP packet with FTP enabled. (Q00705008-01)The Contract Groups page in Alteon EMS will now work as expected when adding and removing contracts. (Q00968739)Filter statistics for “goto” filters will now increment properly. (Q00998643)The error message displayed when attempting to download an unsupported software version will now correctly describe the situation encountered. (Q01022002)Octet statistics will now display correctly in the CLI command /stats/port/info.(Q01022413)SSL port 29 is now restricted from being added to an IDS group because there is no SSL server on this port. (Q01038457)The switch will now recognize host names that are not preceded by “www” when the host name is specified and host look-up is disabled. (Q00974783)Operationally disabled real servers will now go into slowstart mode only when they become operationally enabled again. (Q00979146-02)A wildcard MAC address can be used in non-IP filtering and applied to a port withIP filtering enabled. Previously, this condition had caused an error. (Q00986805)An incorrect error message in the Configure > Security > UDP Blast > Insert page of Alteon EMS has been fixed to more properly represent the error that is occurring.(Q00781524)Anomalous characters will no longer be displayed when the administrator of a switch attempts to replace the current image. (Q01007689)Quotation marks may now be used in scripted health checks. (Q00919652-01)NAT session time out values will now be displayed correctly in Alteon EMS.(Q01024711)Adjustment for Daylight Savings Time on the switch will now be performed correctly.(Q01011811-01)ICMP health checking for multiple groups that use the same real servers will no longer fail. (Q01029595)The browser-based interface will now display switch ports above port one in the Layer 4 switching area of the dashboard. (Q01037879)Issues with the WCR filter combined with a cookie insert have been resolved.(Q00964537)Instances where the switch malfunction while the management port was being enabled have been corrected. (Q00976242)The switch will no longer malfunction when a real server name contains special characters. (Q00979664)Previously, under certain conditions, a switch malfunction would occur when it received MSTP BPDU packets. This is no longer the case. (Q00981593)The Alteon EMS SLB Summary page will now display real server back-up information correctly. (Q00957215)The diff command will no longer show the SNMP USM password unencrypted after the apply command is executed. (Q01011552)Maintenance statistics missing from the browser-based interface and Alteon EMS have been added. (Q01032267)Fields have been added to the browser-based interface Layer 4 switch ports configuration table to display hot-standby, filtering, IDSLB, inter-switching, and RTS processing state.(Q01037894)The dump command will now successfully complete when issued in the CLI through Telnet. (Q00932097)The LACP key value range is now consistent between Alteon switches running Alteon OS22.0.2 and Passport 8600 products. (Q01011874)When GSLB and noremote is enabled, a 503 error message will no longer be sent back to the client. (Q00978295-01)URL string values are now displayed based on URL case configuration. (Q01023627)Consecutive HTTP GET requests inside of a single HTTP session will no longer cause the display of a 503 error. (Q00966075)The command oper/slb/dis will now function as expected when dealing with VRRP priority. (Q00969673)Standalone GSLB will now work regardless of whether the local VIR is defined.(Q00982279)Gateways in a trunk group will now respond in a more timely manner when ports in the trunk group become disabled. (Q01041809)Priority 4 and 5 - Low Impact BugsThe CN name offered by the switch certificate during HTTPS management is now valid.(Q00981805)An error message has been added to the PIP filter so that when an EPIP on a filter is configured improperly the administrator will be warned. There was no error message for this condition in previous implementations. (Q00986801)Alteon EMS functionality for enabling pattern matching on a filter will now mirror the same functionality in the CLI. (Q01022618)MIBs will now comply with SMI version 2. (Q00975782)The Alteon EMS page Configure > Layer 7 > URL Parsing > HTTP methods (and equivalent CLI command) will now properly display newly inserted HTTP methods whena diff or diff flash command is issued. (Q00985280)Alteon EMS now allows for the addition of a disabled VR to a VIR group. (Q00867778) Filtering using wildcard MAC addresses will now function properly. (Q00986802)Alteon EMS will no longer allow the entry of a Maximum Stored Link-State Advertisement value that is invalid. (Q00940723)String case discrepancies between the /cfg/slb/layer7/slb/cur and /cfg/sl/ vir commands have been fixed. (Q00972207)During an upgrade or downgrade procedure, multi-r-port configuration information will now be completely saved to the flash memory. (Q00973194)Software Features and EnhancementsAs noted previously, Alteon OS 22.0.2 is a RTM software release and as such will contain the following new features and enhancements to the existing software base:Variable depth pattern matching searches using the greater than (>) and less than (<)operators has been added. (Q00978487)Alteon OS now supports 64 bytes of domain name size and 32 bytes of host name size.(Q00976805)64 r-ports are now supported in multi-r-port configurations. (Q00976802)SSLID pbind will now work as specified in RFC 2246. (Q00981675)New MIBs have been added to support individual SP memory usage. (Q00973926)Reverse session updates have been added to the Intelligent Traffic Management.(Q00914770)The depth of Layer 7 packet inspection can now be specified so that the switch administrator has the option to set how many packets will be inspected during this process. (Q01018817)An archive has been added for user limit statistics captured throughBandwidth Management. (Q01018820)A new god mode CLI has been added to display MP CPLD version information.(Q00999576)。