Cisco Cisco IOS XE 3.5E
34
Release Notes for Catalyst 3850 Series Switch, Cisco IOS XE Release 3.2.xSE
OL-28114-04
Caveats
•
CSCuc09296
Following a switchover in a four-member stack, full reconciliation of high availability (HA) services
may be delayed by up to 15 seconds. The re-association of wireless clients is similarly delayed.
may be delayed by up to 15 seconds. The re-association of wireless clients is similarly delayed.
There is no workaround.
•
CSCuc12774
When the Ethernet management port receives a frame whose destination MAC address is not FA1,
it does not drop the traffic. Instead, the port uses the vrf mgmtVrf routing table to route the traffic
back.
it does not drop the traffic. Instead, the port uses the vrf mgmtVrf routing table to route the traffic
back.
There is no workaround.
•
CSCuc24608
When the NetFlow collector address for the Flow Exporter is configured in the VRF route table, flow
records are exported to the same IP address in the global route table.
records are exported to the same IP address in the global route table.
The workaround is to connect the NetFlow collector in the global route table instead of the VRF
route table.
route table.
•
CSCuc45552
IPV6 first-hop security does not work with EtherChannel.
•
CSCuc50127
Layer 3 multicast traffic is not transmitted on a statically joined port after using the shutdown and
no shutdown commands on an SVI.
no shutdown commands on an SVI.
The workaround is to unconfigure the static join and configure it again.
•
CSCuc56470
When policy maps are PRE chained in conjunction with concurrent or sequential authentication
sessions, events associated with each authentication method's chained policy are evaluated and
executed instead of only those events associated with the method for which the session was
authorized. For example, a policy specifies that sessions be authenticated using dot1x or mab, and
upon success of either method, chain (attach) a child policy map. If both authentication methods
succeed, the session, based on priority, is authorized with dot1x. Subsequent events are matched
against both the MAB and dot1x chained policy maps instead of the dot1x chained policy map.
sessions, events associated with each authentication method's chained policy are evaluated and
executed instead of only those events associated with the method for which the session was
authorized. For example, a policy specifies that sessions be authenticated using dot1x or mab, and
upon success of either method, chain (attach) a child policy map. If both authentication methods
succeed, the session, based on priority, is authorized with dot1x. Subsequent events are matched
against both the MAB and dot1x chained policy maps instead of the dot1x chained policy map.
The workaround is to avoid using PRE chaining with concurrently authenticated sessions.
•
CSCuc95293
In very rare cases, all traffic to and from the switch ceases; all access points and LAG links
disconnect as the switchfails to transmit the LACP PDUs; however, the management interfaces
function.
disconnect as the switchfails to transmit the LACP PDUs; however, the management interfaces
function.
Run the sh platform punt statistics port-asic 0 cpuq -1 direction tx command to verify whether
the suspend/unsuspend count is stuck for any of the transmission queues. Run the command several
times to make sure that the suspend/unsuspend counters are no longer incrementing, and the TX
suspend count = TX unsuspend count + 1. If you see this problem on any of the transmission queues,
open a case with the TAC, or contact your Cisco technical support representative.
the suspend/unsuspend count is stuck for any of the transmission queues. Run the command several
times to make sure that the suspend/unsuspend counters are no longer incrementing, and the TX
suspend count = TX unsuspend count + 1. If you see this problem on any of the transmission queues,
open a case with the TAC, or contact your Cisco technical support representative.
There is no workaround. Reboot the switch.