Datasheet

166
Release Notes for Cisco IOS Release 12.1E on the Catalyst 6500 and Cisco 7600 Supervisor Engine and MSFC
OL-2310-11
Caveats
• There is no response to SNMP requests and memory use increases until tracebacks occur. This
problem is resolved in Release 12.1(23)E. (CSCed52841)
• With certain configurations, a reload might occur when you enter the show cdp entry * protocol
command. This problem is resolved in Release 12.1(23)E. (CSCed40563)
• Cisco products running IOS contain vulnerabilities in the processing of H.323 messages, which are
typically used in packetized voice or multimedia applications. Features such as NAT and IOS
Firewall must inspect H.323 messages and may be vulnerable as well. A test suite has been
developed by the University of Oulu to target this protocol and identify vulnerabilities. Support for
the H.323 protocol was introduced in Cisco IOS Software Release 11.3T, and all later Cisco IOS
releases are affected if configured for various types of Voice/Multimedia Application support. The
vulnerabilities can be exploited repeatedly to produce a denial of service (DoS). There are
workarounds available that may mitigate the impact, but these techniques may not be appropriate
for use in all customer networks. This advisory is available at:
http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml
This problem is resolved in Release 12.1(23)E. (CSCed21717)
• Traffic loss might occur on fabric-enabled modules when there are frequent online insertion and
removals (OIRs). This problem is resolved in Release 12.1(23)E. (CSCee44496, CSCee48403,
CSCee78766)
• In a release where caveat CSCec55429 is resolved, after a number of Web Cache Communication
Protocol (WCCP) “cache lost” and “cache found” events have occurred for all the caches in a service
group, spurious memory accesses might occur, the addition and deletion of WCCP services might
fail, and the show ip wccp command displays the WCCP service, but the output of the show ip wccp
service_number command does not show the WCCP service. This problem is resolved in
Release 12.1(23)E. (CSCuk50878)
• A reload might occur when traffic enters a port configured with the switchport protocol ip auto
command. This problem is resolved in Release 12.1(23)E. (CSCin77984)
• If there are more than 50 files on the flash card, access from CiscoView Device Manager (CVDM)
might cause a reload. This problem is resolved in Release 12.1(23)E. (CSCef07965)
• Occasionally, CEF incorrectly perceives the state of an active interface and does not forward traffic
to what it perceives as an inactive interface. This problem is resolved in Release 12.1(23)E.
(CSCdt38401)
• With a PFC2 and GRE tunnel traffic, the “do not fragment” (DF) bit might not be copied correctly
and the time-to-live (TTL) count might not be decremented correctly. This problem is resolved in
Release 12.1(23)E. (CSCuk49481)
• In a topology where MAC addresses move frequently (for example, as the result of wireless access
through various access points) and where there are STP topology change notices (TCNs),
EtherChannels with interfaces on different distributed forwarding card (DFC)-equipped switching
modules might drop traffic. This problem is resolved in Release 12.1(23)E. (CSCee83733)
• SNMP returns a null value for the server load balancing (SLB) real server name. This problem is
resolved in Release 12.1(23)E. (CSCee60121)
• After a reload, the no diagnostic cns publish and logging event link-status commands revert to
their defaults in the running-config file, and some switchport mode access commands might be
missing from the running-config file. This problem is resolved in Release 12.1(23)E. (CSCee53998)
• 802.1X port-based authentication does not support receipt of a VLAN ID in the tunnel attribute from
a RADIUS server. The tunnel attribute from a RADIUS server is seen as a VLAN name. This
problem is resolved in Release 12.1(23)E. (CSCee51684)