Download Print this page

Nortel 6000 Series Manual page 13

Switched firewall

Advertisement

Q01778659 When NSF is configured with a static default route and it also learns a duplicate default
route via OSPF through an external LSA, the preference will be given the statically
configured default route. Now if static default gateway is disabled, the dynamically learned
default route is not applied to the kernel routing table and the traffic is affected. This issue
is fixed in 4.2.2 by reapplying the OSPF default route in the kernel routing table after the
static default route is disabled
Q01820927 In a HA setup with 2 6400 SFA's acting as master & backup, the backup SFA sends
outgoing network traffic with multicast source mac. This behavior can become a problem
when the accelerators are connected via an intermediate 8600 or core switch may not
forward the packets/frames because the source mac is a multicast mac. When the packet is
sent out from SFD, the source mac of the packet is mangled with port mask of outgoing
interface. When the outgoing interface has port 25 associated with it, then the source mac
becomes multicast mac. This issue is fixed in 4.2.2 release by modifying the source mac
calculation for outgoing traffic.
Q01832620 Under stress conditions with heavy traffic load, any link flap of the sync port will cause the
sync port to go down and it requires a reboot to recover the port. Heavy traffic would
mean lot of sync traffic flowing between the cluster members. And when the sync link
goes down, all the sync traffic is queued in the transmit buffer of the particular port. The
underlying network driver's watchdog continuously monitors the queue and if it detects
the queue being full, it'll reset the queue which means reinitializing all the port registers.
This issue is fixed in 4.2.2 release by adding a check to see when the transmit buffer is full.
If the link status during that time, transmit buffer queue is reset.
Q01809464 While sending responses to SNMP GET requests, the source address of the replies would
be chosen based on the outgoing interface IP address even if the request was initially sent
to
/cfg/sys/adm/snmp/adv/getsrcip are added in 4.2.2 release. Users can now configure
which IP address to be used while sending the responses to SNMP GET requests
Q01300144 A new BBI enhancement is added in release 4.2.2 to display link speed of SFA ports
8. New Outstanding Issues
Q01863867 Release 4.1.4.1 and above includes new drivers to support RoHS compliant BCM5823
VPN accelerator cards. However, the new drivers are not fully compatible with the older
BCM5822 cards. If you're using a version above 4.1.4.0 and has BCM5823 card and are
experiencing any traffic interruptions, consider changing the encryption settings to DES-
SHA1 or 3DES-MD5.
Q01871072 When a static ARP entry is added and a same ARP entry is also learned dynamically from a
duplicate host, the traffic may still be redirected to the learned static ARP there by
affecting the traffic. As a work around, make sure no duplicate ARP entries are added via
CLI and there're no duplicate hosts in the network
Q01880948 When multiple gateways are configured in NSF, the following issues occur.
1. When more than 1 def gateways are configured, and when metric is changed,
2. Default gateways is getting duplicated in the isd routing table
©2007-2008 Nortel Networks Limited
the
MIP.
To
address
duplicate gateways are getting added in the Accelerator's routing table.
this
issue,
a
new
set
of
CLI
commands
13

Advertisement

loading