Cisco Cisco IOS Software Release 12.4(23)
697
Caveats for Cisco IOS Release 12.4
OL-7656-15 Rev. J0
Resolved Caveats—Cisco IOS Release 12.4(5b)
IP Routing Protocols
•
CSCeg39601
Symptoms: The IPv6 multicast RP encapsulation tunnel remains down.
Conditions: This symptom occurs on the configuration of the ipv6 pim rp-address command. The
resulting encapsulation tunnel is created but remains always in down state.
resulting encapsulation tunnel is created but remains always in down state.
Workaround: There is no workaround.
•
CSCej62500
Symptoms: NAT Stateful forces the router to crash when there is heavy traffic exchanged between
two peer SNAT routers. When active routers come back and a DUMP request process occurs at the
same time, entries time out all together. This generates a large number of ACK packet exchanges
and the actual data structure which stores these ACKs cannot handle this amount.
two peer SNAT routers. When active routers come back and a DUMP request process occurs at the
same time, entries time out all together. This generates a large number of ACK packet exchanges
and the actual data structure which stores these ACKs cannot handle this amount.
Conditions: This symptom has been observed with SNAT Active/Standby configuration using the
SNAT UDP option. When the NAT table has a size larger than 10000 entries, all entries of the table
time out together. This timeout generates high density of packet exchange due to SNAT flow control
mechanism.
SNAT UDP option. When the NAT table has a size larger than 10000 entries, all entries of the table
time out together. This timeout generates high density of packet exchange due to SNAT flow control
mechanism.
Workaround: There is no workaround.
•
CSCek10384
Symptoms: A Cisco 7200 router that is performing NAT could drop IPSec packets.
Conditions: This symptom is observed on a Cisco 7200 router that is performing NAT functionality
for IPSec transit packets. The router will NAT and forward the Inside to Outside IPSec (ESP)
packets, but might drop the return IPSec packets from Outside to Inside.
for IPSec transit packets. The router will NAT and forward the Inside to Outside IPSec (ESP)
packets, but might drop the return IPSec packets from Outside to Inside.
Workaround: Disable NAT for IPSec.
•
CSCsc59089
Symptoms: BGP does not advertise all routes to a peer that sends a route-refresh request.
Conditions: This symptom is observed under the following conditions:
–
The router is in the process of converging all of its peers and has updates ready in the output
queue for the peer.
queue for the peer.
–
The peer sends a route-refresh request to the router. This may occur when the clear ip bgp *
soft in command is entered on the peer or when a VRF is added to the peer.
soft in command is entered on the peer or when a VRF is added to the peer.
–
The router processes the route-refresh request from the peer while the router still has updates in
the output queue for the peer.
the output queue for the peer.
In this situation, all of prefixes that are advertised by the unsent updates in the output queue for the
peer are lost.
peer are lost.
Workaround: There is no workaround. When the symptom has occurred, enter the clear ip bgp *
soft out command on the router to force the router to send all updates to its peers.
soft out command on the router to force the router to send all updates to its peers.
•
CSCsd01824
Symptoms: Extended NAT entries that are created by outside static NAT translation in a VRF SNAT
environment do not age out and remain in the translation table until you enter the clear command.
environment do not age out and remain in the translation table until you enter the clear command.
Conditions: This symptom is observed when the ip nat outside source static command is
configured in a VRF SNAT environment on a Cisco router that runs Cisco IOS Release 12.4.
configured in a VRF SNAT environment on a Cisco router that runs Cisco IOS Release 12.4.
Workaround: If this is an option, use the ip nat inside source static command in the VRF SNAT
environment.
environment.