Cisco Catalyst 3110 & 3012 Switch IOS Crypto code v12.2-55.SE - IBM BladeCenter

Download Description

• New IBM xSeries firmware and device driver file naming convention

Change history

Severity: Non-Criticalr

10 August 2010 cbs31x0-universal-tar.122-55.SE.tar

Resolved Caveats

• CSCsg28558 Cisco X2-10GB-CX4 transceiver modules with a version identification number lower than V03 might be difficult to install because of a size discrepancy. The workaround is to use modules with a version identification number of V03 or later.
• CSCsg91027 When the logging event-spanning-tree interface configuration command is configured and logging to the console is enabled, a topology change might generate a large number of logging messages, causing high CPU usage. CPU usage can increase with the number of spanning-tree instances and the
  number of interfaces configured with the logging event-spanning-tree interface configuration command. This condition adversely affects how the switch module operates and could cause problems such as STP convergence delay.High CPU usage can also occur with other conditions, such as when debug messages are
  logged at a high rate to the console. Use one of these workarounds:
  • Disable logging to the console.
  • Rate-limit logging messages to the console.
  • Remove the logging event spanning-tree interface configuration command from the interfaces.
• CSCsz18634 On a switch running Cisco IOS release 12.2(46)SE, the output of the show interfaces privileged EXEC command shows 0 packets for port channel input and output rates. The workaround is to reload the switch by entering the reload privileged EXEC command.
• CSCtb58779 When a switch is low on memory (less than 256 MB), it can reload and display a SYS-2-WATCHDOG error. There is no workaround. Enter the show memory debug leak privileged EXEC command to check for signs of a
  memory leak and address these symptoms.
• CSCtc02635 On switches running Cisco IOS release 12.2(50)SE3 running MAC authentication bypass with multidomain authentication (MDA, IP phones connected to a port might not be able to regain network connectivity in the VOICE domain if the session times out and all RADIUS servers are unreachable.
  There is no workaround.
• CSCtc38519 (Catalyst 3110G and 3012 switches) Attempts to restore factory default settings from the advanced Management Module (aMM) web interface fail. After the switch restarts, the configurations are not erased and restored to their factory default settings. Switches that run Cisco IOS Release 12.2(50)SE or Release 12.2(52)SE are affected.
  • Workaround: Enter the write erase privileged EXEC command from the switch console, do not save the configuration from the switch console, and then restart the switch.
• CSCtc57809 Switches running Cisco IOS Release 12.2(52)SE might reload after you enter the no mac address-table static mac-address vlan vlan-id interface interface-id global configuration command if the interface is up and the MAC address was dynamically learned before it was changed to static. Use one of these workarounds:
  • Clear the dynamic MAC address table when configuring static MAC addresses as in this example:
    • Switch(config)# no mac address-table learning vlan vlan_id
    • Switch(config)# clear mac-address-table dynamic address mac_address
    • Switch(config)# mac address-table static mac_address vlan vlan_id interface interface_id
    • Switch(config)# mac address-table learning vlan vlan_id
  • Downgrade to Cisco IOS Release 12.2(50)SE.
  • Upgrade to Cisco IOS Release 12.2(53)SE if available.
• CSCtc77969 When PAgP or LACP EtherChannels are configured on a switch and the stack reloads, entering a show interface or show etherchannel summary privileged EXEC command when the stack comes up can cause the console to lock up. There is no workaround.
• CSCte72365 After a software upgrade from Cisco IOS Release 12.2(52)SE to Cisco IOS Release 12.2(53)SE, EIGRP hello packets are flooded on access ports belonging to another subnet. The same result occurs when you initiate ping requests to the broadcast address of other subnets. This results in Not on common subnet errors on the other side of the link.The workaround is to downgrade to 12.2(52)SE
• CSCtc02635 On switches running Cisco IOS release 12.2(50)SE3 running MAC authentication bypass with multidomain authentication (MDA, IP phones connected to a port might not be able to regain network connectivity in the VOICE domain if the session times out and all RADIUS servers are unreachable.
  There is no workaround.
• CSCtc38519 (Catalyst 3110G and 3012 switches) Attempts to restore factory default settings from the advanced Management Module (aMM) web interface fail. After the switch restarts, the configurations are not erased and restored to their factory default settings. Switches that run Cisco IOS Release 12.2(50)SE or Release 12.2(52)SE are affected. The workaround is to enter the write erase privileged EXEC command from the switch console, do not save the configuration from the switch console, and then restart the switch.
• CSCtd29049 A switch that has at least one trunk port configured might fail when you configure more than 950 VLANS by using the vlan vlan-id global configuration command. There is no workaround.
• CSCte99016 When two blade switches in a blade server are running Cisco IOS release 12.2(53)SE, with no stack cable connection between them, if you enter the no shutdown interface command on gigabitethernet ports 1/0/17 and 1/0/18, the output of the show running-config or show interface privileged EXEC command shows the ports to be down. The workaround is to downgrade the software to Cisco IOS Release 12.2(52)SE.
• CSCtf17223 If you try to access the Web-based device manager from the IBM AMM, the switch incorrectly reports to the IBM blade center chassis that it supports only https and does not support http.When you access device manager from the AMM, the URL link is always https://.The workaround is to manually change it to http:// in the browser.
• CSCtg88183 The switch internally uses the mac-address-table static mac-address deprecated global configuration command to configure the MAC address on the Ethernet management port (Fa0). The workaround is to use the correct version of the command: mac address-table static mac-address.

24 March 2010 cbs31x0-universal-tar.122-53.SE1.tar

Resolved Caveats

• CSCsx97605 The CISCO-RTTMON-MIB is not correctly implemented in this release.
• CSCtb08823 SNMP requests on the stpxRSTPPortRoleTable object only return information for the stack master. There is no workaround.
• CSCtb10158 A switch can fail when an SNMP process attempts to configure dot1x authentication when it is already configured. There is no workaround.
• CSCtb25230 When a switch stack is configured with DHCP snooping enabled on the host VLAN, hosts connected to the stack master receive bootp packets, but the a packet might not be forwarded to the end hosts connected to stack member switches. The behavior depends on which interface in the stack received the packet. The workaround is to disable DHCP snooping for the affected VLAN.
• CSCtc43231 A switch does not receive SNMP trap and inform messages from the correct interface after you have entered the snmp-server trap-source loopback0 and snmp-server source-interface informs loopback0 global configuration commands. There is no workaround.
• CSCtc59162 Modifying a prefix list that is configured as an inbound or outbound distribute-list causes the EIGRP peer to resynchronize.
• CSCtc71798 Traffic received on a member interface of a cross-stack EtherChannel is dropped from a switch stack. In previous releases, this intermittently occurred after a reload of the stack.
• CSCte46127 You cannot enable EtherChannel on port 14 of the IBM blade. There is no workaround.
• CSCte52821 When you enter the no ip ftp passive global configuration command to allow all types of FTP connections on a switch running Cisco IOS Release 12.2(52)SE or 12.2(53)SE, FTP sessions could disable Telnet or console connections. Then you can no longer use the vty. Workaround: When you cannot use the vty, restart the switch. To prevent FTP sessions from disabling Telnet or console connections, enter the ip ftp passive global configuration command.
• CSCte67201 On a switch that is configured for IP routing and that is running Cisco IOS Release 12.2(50)SE or later, Cisco Express Forwarding (CEF) can use a large amount of memory. The IP RIB Update process uses about 2000 bytes for each prefix that CEF uses. There is no workaround. You can reduce the memory use by reducing the number of routes the switch processes.
• CSCte72365 After upgrading from Cisco IOS Release 12.2(52)SE to Cisco IOS 12.2(53)SE, EIGRP hello packets are flooded on access ports belonging to other subnets. This also occurs when pings are sent to the broadcast address of other subnets

21 December 2009 cbs31x0-universal-tar.122-53.SE.tar

Resolved Caveats

• CSCsj68446 / All platforms The Network Time Protocol (NTP) might not synchronize when the switch is configured as an NTP client. These are the two possible workarounds:
  • Enter the no ntp global configuration command twice.
  • Reconfigure NTP on the port. For more information, see the “Configuring NTP”section of the “Administering the Switch”chapter in the software configuration guide.
• CSCsy14568 When a switch port rejoins a cross-stack EtherChannel after the switch restarts, packets might be dropped for a longer than expected time.
  There is no workaround.
• CSCsv92937 When a blade server starts, the switch internal interface might flap due to the network interface card (NIC) driver. In Cisco IOS Release 12.2(46)SE and earlier, the port might enter the error-disabled state. The workaround is to enter the errdisable max flap 10 time 10 global configuration command in Cisco IOS Release 12.2(46)SE and earlier. In Cisco IOS Release 12.2(50)SE and later, the switch no longer detects link flapping on the internal interfaces.
• CSCsz18634 On a switch running Cisco IOS release 12.2(46)SE, the output of the show interfaces privileged EXEC command shows 0 packets for port channel input and output rates. The workaround is to reload the switch by entering the reload privileged EXEC command.
• CSCsx29696 On a switch running Cisco IOS Release 12.2(35)SE or later, connectivity issues might occur with these messages:
  
  %SUPQ-4-CPUHB_RECV_STARVE: Still seeing receive queue stuck after throttling
  
  
• CSCtc20603 If IEEE 802.1Q native VLAN tagging is enabled on a switch, PDUs sent from an EtherChannel in LACP mode are tagged. There is no workaround.
• CSCtc30872 When a BPDU guard is globally enabled on a switch and the access VLAN is a VLAN other than VLAN 1, BPDU guard does not run on a multiple VLAN access port. The workaround is to enable BPDU guard on the port.
• CSCtc38519 (3012 blade switches only) This message appears when the switch boots up:
  " %Error clearing SWITCH_NUMBER".
  
  
  There is no workaround. This does not affect the switch functionality.
• CSCtc57809 When the no mac address-table static mac-addr vlan vlan-id interface interface-id global configuration command is used to remove a dynamically learned MAC address, the switch fails under these conditions:
  • The physical interface is in a no shut state.
  • The MAC address is first dynamically learned and then changed to static.

  There is no workaround.

• CSCtc16848 The output of the show inventory user EXEC command sometimes does not display all of the connected SFP modules. The EntitityMIB does not report these SFP modules. There is no workaround.
• CSCtc02635 On switches running Cisco IOS Release 12.2(50)SE3 running MAC authentication bypass with multidomain authentication (MDA), IP phones connected to a port might not be able to regain network connectivity in the VOICE domain if the session times out and all RADIUS servers are
  unreachable. There is no workaround.
• CSCtd72456 After you have entered the snmp-server host informs global configuration command to enable SNMP informs on a switch, the switch might fail if you enter the show snmp pending user EXEC command. There is no workaround. Do not enter the show command when SNMP informs are enabled.
• CSCtd31242 An IP phone loses network connectivity under these conditions:
  • The IP phone is authenticated by MAB (in Open1x mode) on a supplicant switch.
  • The supplicant switch is connected to an authenticator switch through the NEAT protocol.
  A call is placed using the IP phone. After approximately 5 minutes, network connectivity to the
  phone is lost. The workaround is to statically configure the MAC address of the IP phone on the authenticator
  switch.
• CSCsv92937 When a blade server starts, the switch internal interface might flap due to the network interface card (NIC) driver. In Cisco IOS Release 12.2(46)SE and earlier, the port might enter the error-disabled state. The workaround is to enter the errdisable max flap 10 time 10 global configuration command in Cisco IOS Release 12.2(46)SE and earlier. In Cisco IOS Release 12.2(50)SE and later, the switch no longer detects link flapping on the internal interfaces.
• CSCsz18634 On a switch running Cisco IOS release 12.2(46)SE, the output of the show interfaces privileged EXEC command shows 0 packets for port channel input and output rates. The workaround is to reload the switch by entering the reload privileged EXEC command.
• CSCsx29696 / MG / 3750/3560/2960 and 31x0 blade switches On a switch running Cisco IOS Release 12.2(35)SE or later, connectivity issues might occur with these messages:
  
  %SUPQ-4-CPUHB_RECV_STARVE: Still seeing receive queue stuck after throttling
  

14 April 2009 cbs31x0-universal-tar.122-50.SE1

New Features

• Default Password If you have not configured a switch password, when you launch Express Setup or a Console connection, will are prompted for a switch password. Enter the default password 'cisco'.The switch ignores text in the username field in the Express Setup. Before you complete and exit Express Setup, you must change the password from the default password, 'cisco'.

Resolved Caveats

• CSCsx18270 EIGRP: tags from version 2 peers are not displayed in topology table
• CSCej42445 MS-CHAP and PAP authentication does not work with Tac+
• CSCsb46724 AAA server group doesnt failover with mismatched keys for login
• CSCsr92741 TCP packets with zero fields misbehavior - Double committing to v122_50_se_throttle
• CSCsw97222 Snmp create of vlan does not update ccmHistoryRunningLastChanged double commiting to throttle
• CSCsy24510 IOS no longer accepts encrypted password / secret

09 March 2009 Version cbs31x0-universal-tar.122-50.SE

Resolved Caveats

• CSCso53157 When STP is disabled on the stack, the Hot Standby Router Protocol (HSRP) hello packets now pass through the switch stack when the stack is connected to two routers through cross-stack EtherChannels.
• CSCsq2687 The server no longer attempts re-authentication every ten minutes when a switch is configured with the dot1x timeout reauth-period server interface configuration command.
• CSCsq67398 Traffic is now forwarded to the interfaces that are configured with static multicast MAC addresses after the switch is reloaded.
• CSCsq89564 If the switch uses 802.1x authentication with VLAN assignment, it no longer uses the VLAN assignment with different authorization attempts, such as user authentication or re-authentication.
• CSCsr50766 When keepalive is disabled on an interface, the interface is no longer put in an error-disabled state when it receives keepalive packets.
• CSCsr64007 The Switched Port Analyzer (SPAN) destination port no longer detects IPv6 multicast packets from a VLAN that is not being monitored by SPAN.
• CSCsr65689 This message no longer appears in the log during the system bootup on a switch that is running Cisco IOS 12.2(50)SE:
  
  %COMMON_FIB-3-FIBIDBINCONS2
  
• CSCsu10065 When SFP ports are configured as status multicast router ports, IPv6 Multicast Listener Discovery (MLD) snooping now works after the switch reloads.
• CSCsu59214 The Set TxPortFifo SRR Failed message no longer appears when you enter both the srr-queue bandwidth shape 200 0 2 200 and the priority-queue out interface configuration commands on the same interface.
• CSCsu88168 The switch no longer reloads when the Forwarding Information Base (FIB) adjacency table is added.
• CSCsv30429 A Cisco IP Phone connected to a Catalyst switch no longer becomes unauthorized when it transitions from the data authorization domain to the voice authorization domain.
• CSCsv64023 A switch port configured for IGMP snooping no longer lose its group membership when the port receives a query comes from an upstream device that is not configured for IGMP snooping.
• CSCsv89005 A switch configured with class-based policies that are applied and active on at least one interface no longer might reload or display CPU hog messages during SNMP polling for the ciscoCBQosMIB.
• CSCsv91358 When you have entered the vlan dot1q tag native global configuration command to configure a switch to tag native VLAN frames on 802.1Q trunk ports, and you configure a new voice VLAN on an access port, the MAC address of a connected PC is now correctly relearned.
• CSCsw30249 When a switch virtual interface (SVI) is configured as unnumbered and is pointing to a loopback interface, the switch no longer fails when the SVI receives a packet.
• CSCsw45337 When LLDP is enabled and a voice VLAN is configured, the L2 Priority and DSCP Value fields in the LLDP type, length, and value descriptions (TLVs) are now correctly marked to give the voice traffic the correct DSCP and Layer 2 priority.
• CSCsw65548 Switch ports no longer attempt authentication at the interval configured for the port security timer instead of the configured IEEE 802.1x timer.

04 September 2008 Version cbs31x0-universal-tar.122-46.SE

Resolved Caveats

• CSCso84726 - CBS3110: Private primary vlan tag was not removed at hostport.
• CSCso78837 - CBS31x0: clear counter resets receive broadcast count incorrectly.
• CSCso43123 - CBS3110X: GiX/0/14 output traffic may be lost for BCM mactable outsynced
• CSCso78837 - CBS31x0: clear counter resets receive broadcast count incorrectly.
• CSCso84726 - CBS3110: Private primary vlan tag was not removed at hostport.
• CSCsm83067 - The server-facing Gigabit Ethernet interfaces x/0/1 to x/0/14 show counts for sent packets and bytes even though the interfaces are not connected to a server.
• CSCso35380 - If there is large-volume bidirectional traffic on the switch module Fa0 management interface, some packets might be dropped because of CPU limitations.

16 May 2008 Version 122-40.EX2

• Initial release