Routing; Traceroute And Interrealm Routing (Irr); Web Interface - Sun Microsystems Secure Application Switch N1216 Release Notes

sessions. Then if the FW service is administratively disabled or deleted, those
persistent flows are closed too. The Cumulative Open/Current Open Session
counters then decrement to 0. (7555/6505413)

Routing

If a static ARP entry is deleted, the switch does not send an ARP request for the
given host. To resolve this issue, ping the host from the switch and the ARP will be
sent. (7124/6427618)
Directed broadcasts are not forwarded across IP interfaces. (2059/6351885)
The on-board traceroute command fails in an on-board IP interface. The ICMP ping
command can be used. (5092/6351887)
The switch does not always respond to ICMP Address Mask requests properly.
(3946/6351890)
OSPF type 2 AS external routes always use a metric of 1 regardless of the configured
metric. (5693/6351891)
The switch will erroneously add a host route to the route table based on a received
RIP update when the switch has already received a RIP update containing a route
with a short mask for the same gateway. This compliance problem should have no
negative network impact. (2457/6351892)

Traceroute and InterRealm Routing (IRR)

There exists two know issues with traceroute and InterRealm Routing:
When traceroute is performed from an external host (PC) and the path uses IRR,
■
ICMP TTL expired or port unreachable messages (when using UDP traceroute)
are not sent back to the external client.
When traceroute is performed from the external host to an IRR interface, the
■
response comes from the destination IP address. This is incorrect since the packet
sent had a TTL of 1 and the destination is 3 hops away. Each incremental router
hop should send a response to the traceroute request. (6989/6505415)

Web Interface

Most browsers exhibit a security issue regarding the way basic authentication is
implemented by continuing to send the old credentials after an error message is
received. To avoid this issue, you must close the browser window used to connect to
the switch to maintain security and prevent unauthorized access. Mozilla is the only
browser that does not exhibit this issue. (1199/6351852)
22
Sun Secure Application Switch – Release Notes for v3.2.1 • August 2007