Installation guide

35
Cisco MDS 9000 Family Release Notes for Cisco MDS NX-OS Release 5.2(6)
OL-27554-01
Limitations and Restrictions
Using a RSA Version 1 Key for SSH Following an Upgrade
For security reasons, NX-OS Release 4.2(1b) does not support RSA version 1 keys. As a result, if you
upgrade to NX-OS Release 4.2(1b) from an earlier version that did support RSA version 1 keys, and you
had configured an RSA version 1 key for SSH, then you will not be able to log in through SSH following
the upgrade.
If you have an RSA version 1 key configured for SSH, before upgrading to NX-OS Release 4.1(3a),
follow these steps:
Step 1 Disable SSH.
Step 2 Create RSA version 2 DSA keys.
Step 3 Enable SSH.
Step 4 Delete any RSA version 1 keys on any remote SSH clients and replace the version 1 keys with the new
version 2 keys from the switch.
Proceed with the upgrade to NX-OS Release 4.2(1b).
If you upgrade before disabling SSH and creating RSA version 2 keys, follow these steps:
Step 1 Open a Telnet session and log in through the console.
Step 2 Issue the no feature ssh command to disable SSH.
Step 3 Issue the ssh key rsa 1024 command to create RSA version 2 keys.
Step 4 Issue the feature ssh command to enable SSH.
CFS Cannot Distribute All Call Home Information
In MDS NX-OS Release 4.2(1b), CFS cannot distribute the following Call Home commands that can be
configured with the destination-profile command:
• destination-profile profile_name transport-method
• destination-profile profile_name http
The output of the show running-config callhome command shows configured Call Home commands:
switch# show running-config callhome
> version 4.1(3)
> callhome
> email-contact [e-mail] <mailto:[e-mail]>
> phone-contact [phone]
> streetaddress xyxxyx
> distribute
> destination-profile testProfile
> destination-profile testProfile format XML
> no destination-profile testProfile transport-method email
> destination-profile testProfile transport-method http
> destination-profile testProfile http https://xyz.abc.com
> destination-profile testProfile alert-group all
> transport email smtp-server 64.104.140.134 port 25 use-vrf management
> transport email from [e-mail] <mailto:[e-mail]>