Cisco Cisco IOS Software Release 12.2(1)XD 릴리즈 노트
13
Release Notes for the Cisco 820 Series Routers for Cisco IOS Release 12.2(1)XD
78-13221-02
Caveats
Unresolved Caveats for Release 12.2(1)XD1
This section describes possibly unexpected behavior by software Release 12.2(1)XD1.
CSCdt92752
If you remove the current access-list from the encryption map, change the definition of the access-list,
and then reassign the access-list to the encryption map, the access-list does not become active. Use the
following solutions to work around this problem:
and then reassign the access-list to the encryption map, the access-list does not become active. Use the
following solutions to work around this problem:
•
To change a definition in the current access-list, directly change the access-list definition instead of
removing the access-list from the encryption map.
removing the access-list from the encryption map.
•
To assign a different access-list to the encryption map, remove the old access-list from the
encryption map, assign the new access-list to the encryption map, and then define the new
access-list. For example:
encryption map, assign the new access-list to the encryption map, and then define the new
access-list. For example:
crypto map map1 10 ipsec-isa
no match address 100
crypto map map1 10 ipsec-isa
match address 110
no access-list 110
access-list 110 permit ip host 2.0.1.26 host 4.0.1.25
CSCdt94260
While using the Dialer interface with Cisco Express Forwarding (CEF) enabled, when you connect a
Cisco 820 series router to an access aggregator (such as a Cisco 6400 or Cisco 7200), Unicast Reverse
Path Forwarding (URPF) incorrectly drops incoming ping packets from the access aggregator. This
problem is caused by the Dialer CEF feature, which is on by default when CEF is enabled. To work
around this problem, use the dialer interface command no ip route-cache cef to disable the Dialer
CEF feature.
Cisco 820 series router to an access aggregator (such as a Cisco 6400 or Cisco 7200), Unicast Reverse
Path Forwarding (URPF) incorrectly drops incoming ping packets from the access aggregator. This
problem is caused by the Dialer CEF feature, which is on by default when CEF is enabled. To work
around this problem, use the dialer interface command no ip route-cache cef to disable the Dialer
CEF feature.
CSCdt95764
If you use the DHCP client feature to assign an encryption map to a Bridge Group Virtual Interface (BVI)
before the BVI is up or active, the encryption map does not become active and an IPSec tunnel is not
built. To work around this problem, assign the encryption map to the BVI again, after the BVI comes up.
Note that rebooting the router alone does not fix the problem because the BVI is down before the reboot.
before the BVI is up or active, the encryption map does not become active and an IPSec tunnel is not
built. To work around this problem, assign the encryption map to the BVI again, after the BVI comes up.
Note that rebooting the router alone does not fix the problem because the BVI is down before the reboot.
CSCdt98274
The command ip add dhcp client-id ethernet 0 is available under the BVI but cannot be applied after
the DHCP client receives an IP address from the DHCP server. For example, if you enter the command
ip address dhcp for BVI 1, then enter the command ip address dhcp client-id e0 on BVI 1 after the
Cisco 827 router (the DHCP client) receives an IP address from the DHCP server, and follow up with
the command show run, the following output is displayed:
the DHCP client receives an IP address from the DHCP server. For example, if you enter the command
ip address dhcp for BVI 1, then enter the command ip address dhcp client-id e0 on BVI 1 after the
Cisco 827 router (the DHCP client) receives an IP address from the DHCP server, and follow up with
the command show run, the following output is displayed:
... ... ... ... ...
!
interface BVI1
ip address dhcp
crypto map map1
... ... ... ... ...
To work around this caveat, delete the existing IP address DHCP by entering the command no ip address
dhcp. Enter the command ip address dhcp client-id ethernet 0, followed by the command ip address
dhcp client-id ethernet 0.
dhcp. Enter the command ip address dhcp client-id ethernet 0, followed by the command ip address
dhcp client-id ethernet 0.