Technical data

Known limitations and considerations in this release 39
Release Notes for the Passport 8600 Release 3.7.6
• If you have Hide NAT enabled on a network connected to one of the VRRP
interfaces, you must add special manual NAT rules to avoid VRRP packets
being affected by NAT. Please contact technical support for a document
(5100_nat_plus_vrrp.doc) which explains how to do this.
• OSPF does not work in an Active-Standby setup.
• If the Firewall does not restart automatically after installation, reboot the
SDM module.
•The
/boot/delete is not supported when the SmartCenter Server is
installed on the Firewall iSD host. This means you cannot remove the Check
Point SmartCenter Server from the Firewall using the
/boot/delete
command. To uninstall the Check Point SmartCenter Server from the
Firewall, you must re-install the entire Firewall OS software package.
• Deleted interfaces are still being advertised by OSPF. To circumvent this
limitation, issue the following command from the root login:
service zebra restart
• When enabling OSPF authentication, do not use spaces in the authentication
key, even though the CLI allows the operation.
• OSPF can be enabled for interfaces that have already been disabled.
Validation is missing for this invalid configuration.
• Logs are not generated when using Check Point's User Authentication with a
location restriction.
• If the port state is toggled for a port that is part of an MLT/multiple spanning
tree group and blocking for one spanning tree group and forwarding for all
others, then the port routing operational status displays as disabled even if you
have enabled routing on the switch.
Hot-swapping
• Ensure the Firewall iSD processes are halted before a soft reboot of the
Passport 8600 switch, or before removing the 8660 SDM from the chassis.
(Q01011888)