Datasheet

185
Release Notes for Cisco IOS Release 12.1E on the Catalyst 6500 and Cisco 7600 Supervisor Engine and MSFC
OL-2310-11
Caveats
• TCP FIN and RST packets might be dropped, which causes a 3 to 4 second delay in retrieving web
content, if a hardware-switched TCP connection carrying more than 1,000 packets per second is load
balanced through IOS Firewall Load Balancing or Cisco IOS server load balancing. This problem is
resolved in Release 12.1(22)E. (CSCed38956)
• With a PFC2 and with EtherChannels configured to include interfaces on different DFC-equipped
switching modules, ARP traffic from a WS-X6066-SLB-APC Content Switching Module (CSM)
that is running software version 3.2(2) and earlier might not be forwarded correctly. This problem
is resolved in Release 12.1(22)E. (CSCed35745)
• A new vulnerability in the OpenSSL implementation for SSL has been announced on March 17,
2004.
An affected network device running an SSL server based on an affected OpenSSL implementation
may be vulnerable to a Denial of Service (DoS) attack. There are workarounds available to mitigate
the effects of this vulnerability on Cisco products in the workaround section of this advisory. Cisco
is providing fixed software, and recommends that customers upgrade to it when it is available.
This advisory will be posted at:
http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml
This problem is resolved in Release 12.1(22)E. (CSCee00041)
• Following “cmd failed” messages for ATM configuration commands, an ATM interface might
remain administratively down. This problem is resolved in Release 12.1(22)E. (CSCin40163)
• If the ACL specified in the ip multicast boundary acl_name filter-autorp command has
non-wildcard entries, the filter-autorp functionality does not work. This problem is resolved in
Release 12.1(22)E. (CSCed02952)
• When a real server is in a backup server farm, and static NAT is configured for that real server,
IOS-SLB does not provide NAT for packets sourced by the real server. This problem is resolved in
Release 12.1(22)E. (CSCec62611)
• The dynamic NAT pool allocation can reach 100% utilization if you configure a static NAT entry
with an IP address that is part of a dynamic pool. This problem is resolved in Release 12.1(22)E.
(CSCec54341)
• SSH packets are not marked with IP precedence 6. This problem is resolved in Release 12.1(22)E.
(CSCeb73981)
• A reload might occur if you enter the show frame-relay command while another user is removing
the encapsulation frame-relay interface configuration command while the show command is in the
process of being displayed. This problem is resolved in Release 12.1(22)E. (CSCeb44256)
• With ISIS routing configured, an E3 or T3 port adapter might have its neighbors flap after a reload.
This problem is resolved in Release 12.1(22)E. (CSCeb01905)
• Routing Information Protocol version 2 (RIPv2) routes get stuck in the routing table, even if the next
hop interface is down. This problem is resolved in Release 12.1(22)E. (CSCea47597)
• Occasionally, characters that you enter over a virtual terminal connection are not echoed. This
problem is resolved in Release 12.1(22)E. (CSCdz36877)
• Ping to the IP address of a local GRE tunnel interface fails. This problem is resolved in
Release 12.1(22)E. (CSCdx74855)
• Occasionally when an IP EIGRP route changes disposition from internal to external and also
increases in metric, a router receiving the updates might not update the routing table and leave the
topology table entry with zero successors. This problem is resolved in Release 12.1(22)E.
(CSCdw33164)