Cisco Cisco IOS Software Release 12.0 S
399
Cross-Platform Release Notes for Cisco IOS Release 12.0S
OL-1617-14 Rev. Q0
Caveats
Resolved Caveats—Cisco IOS Release 12.0(33)S3
Conditions: This symptom is observed when no IPv4 address is configured.
Workaround: Perform the following three steps:
1. Disable the SNMP engine by issuing the no snmp-server command.
2. Configure an IP address and an IPv6 address on loopback interfaces.
3. Enable the SNMP engine.
•
CSCsz87312
Symptoms: A Cisco 12000 series Internet router that is running Cisco IOS Release 12.0(33)S3 may
have partial debug outputs of the debug snmp packet command in the log even though no such
debug command is enabled.
have partial debug outputs of the debug snmp packet command in the log even though no such
debug command is enabled.
The edited log would appear as follows:
<snip>
May 27 15:36:52.272 UTC: SNMP: Packet sent via UDP to xxx.xxx.xxx.xxx
<snip>
Conditions: The messages appear because of a reply to an SNMP probe.
Workaround: There is no workaround.
Further Problem Description: This symptom is not observed in Cisco IOS Release 12.0(33)S2.
Resolved Caveats—Cisco IOS Release 12.0(33)S3
All the caveats listed in this section are resolved in Cisco IOS Release 12.0(33)S3. This section
describes only severity 1, severity 2, and select severity 3 caveats.
describes only severity 1, severity 2, and select severity 3 caveats.
•
CSCdw62064
Symptoms: Inbound data packets that are reassembled from multilink fragments may not be
processed properly on Multilink PPP (MLP) interfaces that are receiving encrypted IP Security
(IPSec) traffic that is terminated locally when a hardware accelerator is used for decryption.
processed properly on Multilink PPP (MLP) interfaces that are receiving encrypted IP Security
(IPSec) traffic that is terminated locally when a hardware accelerator is used for decryption.
Conditions: This symptom affects all inbound reassembled data frames that are received by the
bundle and not just those data frames that are carrying encrypted IP datagrams. Most significantly,
inbound Internet Security Association and Key Management Protocol (ISAKMP) keepalives are not
processed, leading to the eventual failures of the associated IPSec sessions.
bundle and not just those data frames that are carrying encrypted IP datagrams. Most significantly,
inbound Internet Security Association and Key Management Protocol (ISAKMP) keepalives are not
processed, leading to the eventual failures of the associated IPSec sessions.
The IPSec sessions are reestablished after each failure, but traffic drops will occur until the session
is renegotiated via the Internet Key Exchange (IKE). Thus, the observable symptoms are an
intermittent failure of IPSec sessions combined with high loss rates in the encrypted data traffic.
is renegotiated via the Internet Key Exchange (IKE). Thus, the observable symptoms are an
intermittent failure of IPSec sessions combined with high loss rates in the encrypted data traffic.
Workaround: Disable hardware crypto acceleration, and use software crypto acceleration instead.
•
CSCed55180
Symptoms: After a Stateful Switchover (SSO) occurs on a Cisco 7500 series, the traffic interruption
may last longer than you would expect.
may last longer than you would expect.
Conditions: This symptom is observed on Cisco 7500 series that runs Cisco IOS Release 12.2(22)S
and that is configured with a Route Switch Processor 4 or 8 (RSP4 or RSP8) when the router is
configured with a large number (100,000) of Border Gateway Protocol (BGP) routes and Ethernet
interfaces that process traffic.
and that is configured with a Route Switch Processor 4 or 8 (RSP4 or RSP8) when the router is
configured with a large number (100,000) of Border Gateway Protocol (BGP) routes and Ethernet
interfaces that process traffic.
Workaround: There is no workaround. One way to help reduce the length of the traffic interruption
is to add static ARP entries.
is to add static ARP entries.