Specifications

Features in 291-12 45
Version 291-18
C613-10488-00 REV Q
Level 3
CR Module Level Description
AR44x / AR450 AR7x5 AR750S / AR770S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL AT-8948 / x900-48 AT-9900 AT-9800
CR00018949 Core 3 When a PSU or FOM was hotswapped and replaced with a new unit of the
same type, the switch did not update the serial number of the hotswapped
unit. Output of the commands show system and show log displayed the
serial number of the previous unit.
The same issue occurred with PICs in NSM units. For example, if you hot
swapped out an NSM with a BRI PIC and then replaced that PIC with
another identical PIC, and then hot swapped the NSM back into the bay,
the new PIC’s serial number was not displayed.
This issue has been resolved.
YYYYY–––YY–
CR00019557 IPsec 3 Previously, if the router was trying to establish a VPN and the peer sent a
proposal that had more than 4 transforms in it, the router did not establish
the VPN, and could reboot.
In IPsec, each transform specifies a possible set of security parameters for
the proposed tunnel. You can see the number of transforms in a VPN
proposal by entering the command enable isakmp debug, attempting to
establish the tunnel, and looking for messages with text like:
Proposal#: 1 Protocol: ESP(3) #Trans: 8 SPI: 9624fe10
Transform#: 1
...
This issue has been resolved. The router now accepts and can send
proposals with up to 10 transforms, although it is unusual to need more
than 4. Also, if the router receives a proposal with too many transforms, it
sends an error message in response instead of rebooting.
YYYY–Y–––––