Technical data

Known limitations and considerations in this release 33
Release Notes for the Passport 8600 Release 3.7.6
SDM limitations
Passport 8660
• NAAP Peer numbers are not automatically reassigned after removing
intermediate NAAP Peers. If you want to reassign NAAP Peer numbers, the
assignment command must be entered manually. (Q00972344)
• Each management VLAN is associated with exactly one cluster ID, and
cannot be shared between multiple clusters. (Q01043094)
• To manage two clusters using the same Check Point management station, use
PP8600 as the route among the two clusters' SSI management vlans and the
vlan that is connected to the Check Point management station. Note that in
this scheme, the Firewall iSDs are managed through the SSI vlan on Port 1,
instead of a firewall vlan on Port 2. (Q01009624)
• When under high stress, the Passport 8600 can miss NAAP pings, causing the
Firewall iSD to unregister from the Passport 8600. When the stress is
removed, the Firewall iSD should automatically re-register without affecting
Firewall functionality. (Q01046009, Q01074704)
If the Firewall iSD returns to a “registering/up” state, enter the following CLI
commands to re-register the Firewall iSD:
config naap disable
config naap enable
• All firewall VLANs must use default STG. (Q01055532)
Firewall iSD
• The Check Point management station can be on either the management vlan
or on a firewall vlan. If it is configured on the management vlan, then Port 1
(eth0) is used. If it is configured on a firewall vlan, then Port 2 (eth1) is used.
Never configure a firewall vlan on Port 1 (eth0). (Q00989600)
• WebUI does not verify firewall licenses, and allows invalid entries to be
saved. (Q00987245)
• Firewall iSDs with OSPF enabled do not relearn routes correctly after the
firewall policy is changed. Reboot the Passport 8600 to fix this issue.
(Q00982922)
• Nortel recommends using Windows 2000 Server FTP/TFTP application when
transferring files to and from the SDM. Other FTP/TFTP applications may
cause a slow or incomplete transfer for files larger than 32 MB. (Q01081009)