Release Notes for the Cisco 800 Series Routers with Cisco IOS Release 12.4(11)XJ
Available Languages
Table Of Contents
Release Notes for the Cisco 800 Series Routers with Cisco IOS Release 12.4(11)XJ
Determining the Software Version
Upgrading to a New Software Release
New Hardware Features in Release 12.4(11)XJ4
New Software Features in Release 12.4(11)XJ4
New Hardware Features in Release 12.4(11)XJ3
New Software Features in Release 12.4(11)XJ3
New Hardware Features in Release 12.4(11)XJ2
New Software Features in Release 12.4(11)XJ2
New Hardware Features in Release 12.4(11)XJ
HWIC and VLAN Feature Enhancements
New Software Features in Release 12.4(11)XJ
New Software Features in Release 12.4T
Open Caveats - Cisco IOS Release 12.4(11)XJ6
Resolved Caveats - Cisco IOS Release 12.4(11)XJ6
Open Caveats - Cisco IOS Release 12.4(11)XJ4
Resolved Caveats - Cisco IOS Release 12.4(11)XJ4
Open Caveats - Cisco IOS Release 12.4(11)XJ3
Resolved Caveats - Cisco IOS Release 12.4(11)XJ3
Open Caveats - Cisco IOS Release 12.4(11)XJ2
Resolved Caveats - Cisco IOS Release 12.4(11)XJ2
Open Caveats - Cisco IOS Release 12.4(11)XJ
Resolved Caveats - Cisco IOS Release 12.4(11)XJ
Cisco IOS Software Documentation Set
Open Source License Acknowledgements
Obtaining Documentation, Obtaining Support, and Security Guidelines
Release Notes for the Cisco 800 Series Routers with Cisco IOS Release 12.4(11)XJ
March 26, 2008Cisco IOS Release 12.4(11)XJ6OL-12251-03 Fifth ReleaseLast Updated: September 24, 2008These release notes describe new features and significant software components for the Cisco 800 series routers that support Cisco IOS Release 12.4(11)XJ. These release notes are updated as needed to describe new memory requirements, new features, new hardware support, software platform deferrals, microcode or modem code changes, related document changes, and any other important changes. Use these release notes with the Cross-Platform Release Notes for Cisco IOS Release 12.4T.
For a list of the software caveats that apply to Release 12.4(11)XJ, see the "Caveats" section, and see the online Caveats for Cisco IOS Release 12.4T document. The caveats document is updated for every 12.4T maintenance release and is located on Cisco.com.
We recommend that you view the field notices for this release to see if your software or hardware platforms are affected. If you have an account on Cisco.com, you can find field notices at http://www.cisco.com/warp/customer/tech_tips/index/cfn.html. If you do not have a Cisco.com login account, you can find field notices at http://www.cisco.com/warp/public/tech_tips/index/cfn.html.
Contents
•
Open Source License Acknowledgements
•
System Requirements
This section describes the system requirements for Release12.4(11)XJ2 and includes the following sections:
•
•
Memory Requirements
Table 1 lists the memory requirements for the Cisco IOS feature sets that are supported by Cisco IOS Cisco IOS Release 12.4(11)XJ on the Cisco 800 series routers.
Table 1 Memory Requirements for the Cisco 870 Series Routers
Cisco 815
Cisco 800 Series IOS Advanced IP Services
c815-advipservicesk9-mz
32
128
Cisco 800 Series IOS IP Base w/o Crypto
c815-ipbase-mz
32
64
Cisco 831
Cisco 831 Series IOS IP/FW/Plus 3DES
c831-k9o3sy6-mz
16
64
Cisco 831 Series IOS IP/FW 3DES
c831-k9o3y6-mz
12
64
Cisco 836
Cisco 836 Series IOS IP/FW/PLUS ISDN DIAL BKUP 3DES VPN
Cisco 836 Series IOS IP/FW/PLUS 3DES
Cisco 836 Series IOS IP/FW 3DES
c836-k9o3s8y6-mz
16
64
Cisco 837
Cisco 837 Series IOS IP/FW/PLUS 3DES
Cisco 837 Series IOS IP/FW 3DES
c837-k9o3sy6-mz
16
64
Cisco 851, Cisco 857
Cisco 850 Series IOS Advanced Security
c850-advsecurityk9-mz
20
64
Cisco 871, Cisco 871, Cisco 876, Cisco 877, Cisco 878
Cisco 870 Series IOS Advanced Security
c870-advsecurityk9-mz
24
128
1 Recommended memory is the memory required considering future expansions.
Hardware Supported
Cisco IOS Release12.4(11)XJ supports the following routers:
•
•
•
•
•
•
•
•
•
•
For detailed descriptions of new hardware features and which features are supported on each router, see the "New and Changed Information" section. For descriptions of existing hardware features and supported modules, see the hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 800 series routers, which are available on Cisco.com at the following location:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_fix/85x87x/index.htm
Determining the Software Version
To determine which version of the Cisco IOS software is currently running on your Cisco 870 series router, log in to the router, and enter the show version EXEC command. The following sample output from the show version command indicates the version number on the second output line.
Router>show version Cisco IOS Software, C800 Software (C800-ADVENTERPRISEK9-M), Version 12.4(11)XJ, EARLY DEPLOYMENT RELEASE SOFTWARE Copyright (c) 1986-2006 by Cisco Systems, IncUpgrading to a New Software Release
For general information about upgrading to a new software release, see the Software Installation and Upgrade Procedures, which are located on Cisco.com.
Feature Set Tables
The Cisco IOS software is packaged in feature sets consisting of software images, depending on the platform. Each feature set contains a specific set of Cisco IOS features. Cisco IOS Release 12.4(11)XJ supports the same feature sets as Releases 12.4T and 12.4(4)T. Cisco IOS Release 12.4(11)XJ is a rebuild of Release 12.4(11)XJ and includes only bug fixes, it does not include any new features.
Caution
Table 2 lists the features and feature sets that are supported in Cisco IOS Release 12.4(11)XJ.
The table uses the following conventions:
•
•
Note
Table 2 Feature List for Feature Set for Cisco 870 Series Routers
12.4(11)XJ
See Table 1 for images
New and Changed Information
This section contains the following information:
•
•
•
•
•
•
•
•
•
New Hardware Features in Release 12.4(11)XJ4
There are no new hardware features in this release.
New Software Features in Release 12.4(11)XJ4
There are no new software features in this release.
New Hardware Features in Release 12.4(11)XJ3
There are no new hardware features in this release.
New Software Features in Release 12.4(11)XJ3
There are no new software features in this release.
New Hardware Features in Release 12.4(11)XJ2
There are no new hardware features in this release.
New Software Features in Release 12.4(11)XJ2
There are no new software features in this release.
New Hardware Features in Release 12.4(11)XJ
The following new hardware feature is supported in this release:
•
HWIC and VLAN Feature Enhancements
The Cisco Fast Ethernet HWICs are single-wide interface cards, available as a 1-port HWIC (HWIC-1FE) and as a 2-port HWIC (HWIC-2FE), that provide Cisco modular and integrated services routers with additional line-rate Layer 3 routed ports. The following enhancements have been made in Cisco IOS Release 12.4(11)XJ:
•
•
For more information about these features, see the following documentation on Cisco.com:
•
•
New Software Features in Release 12.4(11)XJ
The following new software features are supported in this release:
ADSL2/2+ Annex M Support
The asymmetric digital subscriber line (ADSL) 2/2+ Annex M feature supports routed bridge encapsulation over VC bundles on specific platforms in Cisco IOS Release 12.4(11)XJ. (ADSL) 2/2+ Annex M supports an upstream data rate of up to 3 Mbps and a downstream data rate of up to 24 Mbps. The increase of the Annex M (upstream) data rate is achieved by using some of the tones that were previously used in the downstream data rate in Annex A. As a result, downstream data rates are decreased in Annex M.
The ADSL training log generation command, dsl-enable-training-log, has been enhanced to specify the time when to capture a log file. This enables the training log to record firmware debug messages.
Note
Wireless LAN Features
The following features are supported on the wireless LAN (WLAN).
Access Point Link Role Flexibility
Access Point Link Role Flexibility allows access point radios to operate in a combination of radio roles, such as access point root, bridge root (with or without clients), bridge nonroot (with or without clients). This provides a more flexible deployment scheme to support the various applications requirement. Note that the ISR AP does not support access point repeater and WGB.
Advanced Encryption Standard (AES) - CCMP
This feature supports Wi-Fi Protected Access (WPA2) which is the Wi-Fi Alliance specification for interoperable wireless LAN security that supports IEEE 802.11i authentication and AES-CCMP encryption.
Extensible Authentication Protocol
Extensible Authentication Protocol (EAP) is an authentication protocol for the 802.1X framework for mutual authentication between the client and a RADIUS server. New EAP authentication types supported in this IOS release include EAP-TTLS, EAP-MD5, and EAP-SIM.
IEEE 802.1X Local Authentication Service for EAP-FAST
This feature allows an IEEE 802.1X enabled RADIUS Server supporting EAP-FAST authentication types to run on Cisco IOS Software, thereby allowing the access point to authenticate wireless clients when the WAN link is down or the RADIUS Server at the central site is not available.
Microsoft WPS IE SSIDL
SSIDL Information Element support.
Multiple Basic Service Set ID (BSSID)
This feature permits a single AP to appear to the WLAN as multiple virtual APs. It does this by assigning an AP with multiple Basic Service Set IDs (BSSIDs) or MAC address. The AP is able to use a different BSSID to advertise each SSID and is therefore able to appear to WLAN clients as if there are multiple physical APs. Each BSSID/SSID combination advertised by the AP is able to be configured to support encrypted or unencrypted traffic.
NAC - L2 IEEE 802.1x
Network Admission Control (NAC) L2 IEEE 802.1x extends NAC support to layer 2 switches and wireless access points. Combining it with 802.1x provides a unified authentication and posture validation mechanism at the layer 2 network edge. This helps protect the network from attack by machines with insufficient antivirus posture. Performing posture validation at the edge maximizes the portion of the network which is protected and allows posture validation to be performed within a VLAN.
Universal Client Mode
This feature allows the access point radio to act as a client to another Cisco or Third-party access point. See caveats for known issues.
VLAN Assignment By Name
This feature provides the ability for the RADIUS server to assign an 802.11 client to a VLAN identified by NAME. Prior to the introduction of this feature, VLANs had to be identified by "VLAN_ID".
Wi-Fi Multimedia (WMM) Required Elements
This feature supports WMM which is the Wi-Fi Alliance specification for QOS.
Wireless Non-Root Bridge
The wireless non-root bridge allows the access point radio to operate as the remote node in a point to point or point to multi-point network. See caveats for information on antenna support.
Wireless Root Bridge
The wireless root bridge role provides support for both point-to-point or point to multi-point bridging. See caveats for information on antenna support.
For more information about this feature, see the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12225sed/scg/sw8021x.htm#wp1025060
New Software Features in Release 12.4T
For information regarding the features supported in Cisco IOS Release 12.4T, see the Cross-Platform Release Notes and New Feature Documentation links at the following location on Cisco.com:
http://www.cisco.com/en/US/products/ps6441/prod_release_notes_list.html
Limitations and Restrictions
There are no known limitations or restrictions in this release.
Caveats
Caveats describe unexpected behavior or defects in Cisco IOS software releases. Severity 1 caveats are the most serious caveats, severity 2 caveats are less serious, and severity 3 caveats are the least serious of these three severity levels.
Caveats in Cisco IOS Release 12.4T are also in the Cisco IOS Release 12.4(11)XJ releases. For information on caveats in Cisco IOS Release 12.4T, see the Caveats for Cisco IOS Release 12.4T document. This document lists severity 1 and 2 caveats; the documents are located on Cisco.com.
Note
•
•
•
•
•
•
•
•
•
•
Open Caveats - Cisco IOS Release 12.4(11)XJ6
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(11)XJ6
CSCsh12480Cisco IOS software configured for Cisco IOS firewall Application Inspection Control (AIC) with a HTTP configured application-specific policy are vulnerable to a Denial of Service when processing a specific malformed HTTP transit packet. Successful exploitation of the vulnerability may result in a reload of the affected device.
Cisco has released free software updates that address this vulnerability.
A mitigation for this vulnerability is available. See the "Workarounds" section of the advisory for details.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-iosfw.shtml.
CSCsg91306Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS that can be exploited remotely to trigger a memory leak or to cause a reload of the Cisco IOS device.
Cisco has released free software updates that address these vulnerabilities. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities addressed in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself, if administrators do not require the Cisco IOS device to provide voice over IP services.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-sip.shtml.
Open Caveats - Cisco IOS Release 12.4(11)XJ4
There are no open caveats for this release.
Resolved Caveats - Cisco IOS Release 12.4(11)XJ4
Miscellaneous Caveats
•
A device running Cisco IOS software that has Internet Protocol version 6 (IPv6) enabled may be subject to a denial of service (DoS) attack. For the device to be affected by this vulnerability the device also has to have certain Internet Protocol version 4 (IPv4) User Datagram Protocol (UDP) services enabled. To exploit this vulnerability an offending IPv6 packet must be targeted to the device. Packets that are routed throughout the router can not trigger this vulnerability. Successful exploitation will prevent the interface from receiving any additional traffic. The only exception is Resource Reservation Protocol (RSVP) service, which if exploited, will cause the device to crash. Only the interface on which the vulnerability was exploited will be affected.
Cisco is providing fixed software to address this issue. There are workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml.
•
Certain Cisco Catalyst 6500 Series and Cisco 7600 Router devices that run branches of Cisco IOS based on 12.2 can be vulnerable to a denial of service vulnerability that can prevent any traffic from entering an affected interface. For a device to be vulnerable, it must be configured for Open Shortest Path First (OSPF) Sham-Link and Multi Protocol Label Switching (MPLS) Virtual Private Networking (VPN). This vulnerability only affects Cisco Catalyst 6500 Series or Catalyst 7600 Series devices with the Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720) or Route Switch Processor 720 (RSP720) modules. The Supervisor 32, Supervisor 720, Supervisor 720-3B, Supervisor 720-3BXL, Route Switch Processor 720, Route Switch Processor 720-3C, and Route Switch Processor 720-3CXL are all potentially vulnerable.
OSPF and MPLS VPNs are not enabled by default.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtml.
•
Cisco IOS contains multiple vulnerabilities in the Data-link Switching (DLSw) feature that may result in a reload or memory leaks when processing specially crafted UDP or IP Protocol 91 packets.
Cisco has released free software updates that address these vulnerabilities. Workarounds are available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-dlsw.shtml
•
A vulnerability in the Cisco implementation of Multicast Virtual Private Network (MVPN) is subject to exploitation that can allow a malicious user to create extra multicast states on the core routers or receive multicast traffic from other Multiprotocol Label Switching (MPLS) based Virtual Private Networks (VPN) by sending specially crafted messages.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml.
•
Two vulnerabilities exist in the virtual private dial-up network (VPDN) solution when Point-to-Point Tunneling Protocol (PPTP) is used in certain Cisco IOS releases prior to 12.3. PPTP is only one of the supported tunneling protocols used to tunnel PPP frames within the VPDN solution.
The first vulnerability is a memory leak that occurs as a result of PPTP session termination. The second vulnerability may consume all interface descriptor blocks on the affected device because those devices will not reuse virtual access interfaces. If these vulnerabilities are repeatedly exploited, the memory and/or interface resources of the attacked device may be depleted.
Cisco has made free software available to address these vulnerabilities for affected customers.
There are no workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-pptp.shtml
•
Two vulnerabilities exist in the virtual private dial-up network (VPDN) solution when Point-to-Point Tunneling Protocol (PPTP) is used in certain Cisco IOS releases prior to 12.3. PPTP is only one of the supported tunneling protocols used to tunnel PPP frames within the VPDN solution.
The first vulnerability is a memory leak that occurs as a result of PPTP session termination. The second vulnerability may consume all interface descriptor blocks on the affected device because those devices will not reuse virtual access interfaces. If these vulnerabilities are repeatedly exploited, the memory and/or interface resources of the attacked device may be depleted.
Cisco has made free software available to address these vulnerabilities for affected customers.
There are no workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-pptp.shtml
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsi60004Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsi80749Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsh84171 Memory corruption in IOMEM - block overrun, FPGA ISDN DMA issueSymptom Router is crashing due to memory corruption with following message:
%SYS-3-OVERRUN: Block overrun at 3F379450 (red zone 2A2A2A2A)Conditions
Workaround
CSCsi60919 HWIC-ADSL-B/ST or HWIC-1ADSL Ping Fails After External Shut/No ShutSymptom ADSL stops receiving any more packet after external shut/no shut or ADSL line retrains several times. This is specific to HWIC-1ADSL, HWIC-1ADSLI, HWIC-ADSL-B/ST, and HWIC-ADSLI-B/ST.
Conditions
shut/no shut the ADSL ATM interface.
Workaround
CSCsg03449 Etherswitch module VLAN Trunking Protocol VulnerabilitiesSymptom
* VTP Version field DoS
* Integer Wrap in VTP revision
* Buffer Overflow in VTP VLAN nameConditions
Further Information
On the 13th September 2006, Phenoelit Group posted an advisory containing three vulnerabilities:
* VTP Version field DoS
* Integer Wrap in VTP revision
* Buffer Overflow in VTP VLAN name
These vulnerabilities are addressed by Cisco IDs:
* CSCsd52629/CSCsd34759 -- VTP version field DoS
* CSCse40078/CSCse47765 -- Integer Wrap in VTP revision
* CSCsd34855/CSCei54611 -- Buffer Overflow in VTP VLAN name
* CSCsg03449 -- Etherswitch module VLAN Trunking Protocol Vulnerabilities Cisco's statement and further information are available on the Cisco public web site at:
http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtmlCSCsi45826 When a call is made, display shows its own ephone-dn nameCSCsh89887 One way voice path with h/w conference on ephone-dn w/o preference 0CSCsi46911 MALLOCFAIL failure on 2800,Cause: Mempool corruptSymptom While doing h323 to sip interop, the router is crashing due to Mempool corrupt.
Topology: PhoneA -- CME1 --- SIP --- CME2 -- PhoneB
Call flow:1.
2.
3.
4.
5.
6.
7.
8.
9.
Workaround
CSCsi65535 codec configured under ephone is used by all monitored phone.Symptom The "codec" configuration under a "ephone" which monitors a line ("ephone-dn") with the "m" button configuration command affects the codec of calls involving that "ephone-dn" as if the line was shared in the regular manner (using the ":" button configuration command).
Conditions
under "ephone" is for phones registering over a WAN to the CME router. It directs CME to attempt to use the G.729 codec to save some bandwidth over that WAN segment, in some (non-VoIP) call scenarios. It doesn't restrict the codec of any call in any way. There is no well defined "negotiation" mechanism that makes use of this codec configuration as in H.323/H.245 codec negotiation for example.Workaround
CSCsi79331 Overlay DN gets stuck to BUSY when using loopbacked TCL script invocationSymptom Ephone dn gets stuck in a busy state.
Conditions
Workaround
CSCsi58842 CME: 7960+7914 display select line when conference IP phoneSymptom
1.
2.
3.
4.
5.
6.
7.
Workaround
CSCsi14143 Some phone types not working with trunk monitor linesSymptom The 7920, 7921, and 7985's line icon change does not change in response to a seized trunk line.
Conditions
Workaround
CSCsi04538 Router crash with memory corruption when configure cert-upgrade auth modSymptom A router that is configured as a Cisco Unified Call Manager Express (CUCME) router may crash because of a memory corruption.
Conditions
Workaround
CSCsg38919 Traceback and DSP timeout found after T1/E1 CAS call is establishedCSCek74685 Wrong caller ID showed on XEE after Consult TransferSymptom When SIP phone calls through SIP trunk to (XOR) phone and transfer to another (XTO) phone, the XTO phone shows the XOR caller id.
CSCsf02356 <calling-number local> is broken for hairpin call forwardingSymptom Calling party information is shown wrongly for a forwarded call when using 'calling-number local'.
Conditions
Workaround
CSCsi41401 Spurious memory access at ephone_delete_tftp_binding_by_urlSymptom Spurious memory access seen on startup or after creating cnf files.
Conditions
Workaround
CSCsi29899 Fast busy in CME 4.1 if two conferences completed at same timeSymptom Creator of conference gets a fast busy when trying to complete conference. Other parties of potential conferenced are connected to parties of separate conference
Conditions
Workaround
CSCsg96319 reverse ssh eliminated telnet authentication on VTYSymptom Anyone can have unprivileged Telnet access to a system without being authenticated, when a reverse SSH session is established with valid authentication credentials. This only affects reverse SSH sessions where a connection is made with the ssh -l userid:number ip-address command.
Conditions
used. This enhancement is documented at the following URL:
http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_rev_ssh_enhanmt_external_docbase_0900e4b1805b0676_4container_external_docbase_0900e4b1807b42a5.htmlWorkaround
This configuration is explained at the following URL:
http://www.cisco.com/en/US/tech/tk583/tk617/technologies_q_and_a_item09186a0080267e0f.shtml#newq1
CSCsi56172 CME 4.1 IP phone dropped when trying to complete hardware conferenceSymptom IP phone trying to create an ad-hoc conference is dropped when pressing "Conf" softkey the second time.
Conditions
CSCsg37315 IOS FW on VPN tunnels fail on 12.4(11)T on 87x and 18xx platformsSymptom If CBAC is configured in conjunction with VPN tunnels, TCP connections through the firewall might fail. CBAC ignores the SYN/ACK packets coming from IPsec tunnel and then drops all outbound TCP packets except initial SYN, generating message "Invalid Segment tcp". Outbound TCP connections to the Internet (not over IPSec tunnel) are not affected and work fine with CBAC.
Conditions
Workaround
CSCsi93064 Only One line is available in CME GUI for 7921 instead of SIXSymptom When a 7921 IP Phone is in "registered" status, CME GUI displays only one line instead of six lines.
Conditions
Workaround
CSCsi07340 no call waiting notification for monitored lineCSCsh24266 L2TP connection fails on PPP phase due to invalid UDP port#Symptom L2TP connection fails on PPP phase because the LNS replies PPP frame
within L2TP frame including invalid UDP destination port number, to LAC.Conditions
- This problem only occurs on PPP phase after L2TP setup.
- On L2TP tunnel/session setup phase, LNS uses correct UDP port number.
- source port number which LNS generates is not affected.
- If you use Cisco router as LAC, this problem will not occur.Workaround
CSCsi78162 SNASw %DATACORRUPTION-1-DATAINCONSISTENCY messagesCSCsf96318 QSIG (ISO) Call back fails between 3745 and 1760CSCsi13312 Authentication fails and unable to login to a factory fresh routerSymptom Authentication with Security Device Manager (SDM) 2.3.3 fails, preventing you from logging into the router through HTTPS, HTTP, SSH, Telnet, console, or any management application.
Conditions
Cisco 800 series
Cisco 1700 series
Cisco 1800 series
Cisco 2700 series
Cisco 2800 series
Cisco 3700 series
Cisco 3800 series
Workaround
http://www.cisco.com/en/US/support/tsd_products_field_notice_summary.html
CSCsi39520 CME: SIP MWI relay does not send notify msg after MWI on from UnityCSCsi94745 ISDN call is dropped in due to STATUS message from PBXSymptom Call is dropped from GW in response to STATUS message from PBX.
Conditions
Workaround
CSCse91298 Sharedline and Overlay Phone Calling the Sharedline Cause Port HungSymptom STCAPP port get hung in various state.
Conditions
Workaround
CSCsi76991 incoming sip call transferred local; audio not heard on ip phoneSymptom After the call transfer on alert, audio is not heard on ip phone
Conditions
Workaround
Further Problem Description: During the call transfer, service provider network send slightly different media capabilities on the 200 OK with SDP; capabilities are agreed from CME; but this new capabilities seem to make the issue;CSCsg40567 Memory leak found with malformed tls/ssl packets in http core processSymptom Malformed SSL packets may cause a router to leak multiple memory blocks.
Conditions
Workaround
CSCsi67763 memory leak under simpleudpfuzz attack for port 500Symptom The U.S. Computer Emergency Response Team (US-CERT) has reported a network evasion technique using full-width and half-width unicode characters that affects several Cisco products. The US-CERT advisory is available at the following link: http://www.kb.cert.org/vuls/id/739224.
By encoding attacks using a full-width or half-width unicode character set, an attacker can exploit this vulnerability to evade detection by an Intrusion Prevention System (IPS) or firewall. This may allow the attacker to covertly scan and attack systems normally protected by an IPS or firewall.
Cisco response is posted at the following link:
http://www.cisco.com/warp/public/707/cisco-sr-20070514-unicode.shtm
CSCsh86912 HWIC-4SHDSL: Implement CO mode support and line probing (PMMS) configSymptom Need to add a CLI to configure a HWIC-4SHDSL as CO and a CLI to configure the noise margin settings for auto mode.
Workaround
Further Problem Description:
Router(config)#controller shdSL 0/3/0Router(config-controller)#termination ?co termination co (network)cpe termination cpe (customer)Router(config-controller-dsl-group)#shd rate auto pmmsmargin ?current PMMS Current SNR Marginworst PMMS Worst SNR MarginCSCsi11217 HWIC-4SHDSL has issue on IMA interface w/Lucent SHDSL-IMA cardSymptom Some links in IMA group are shown as down though they are active at IMA level.
Conditions
Workaround
CSCsj23569 codec selection issue on incoming SIP trunkSymptom Incoming call on a SIP trunk with G729 as preferred codec sets up but there is no ringback and dtmf is not working.
Conditions
incoming SDP 18 0 8 101!voice class codec 729codec preference 1 g729br8codec preference 2 g729r8codec preference 3 g711ulaw!Workaround
CSCsj03494 I/O Memory corruption crash with IP communicator and 7961 IP PhonesSymptom A 2811 series router may crash due to I/O memory corruption.
Conditions
Workaround
CSCsj18014 Caller ID string received with extra charactersSymptom Caller ID is received with extra characters.
Conditions
Workaround
CSCsi84017 c2600 router hangs during reloadSymptom When a c2600 router is loaded with the c2600-entservices-mz.124-9.T4 image, the router hangs during reload.
Conditions
Workaround
CSCsh84117 Memory corruption in IOMEM - block overrun, FPGA ISDN DMA issueSymptom A router that is configured with an HWIC-ADSL-B/ST crashes because of memory corruption and generates the following error message:
%SYS-3-OVERRUN: Block overrun at 3F379450 (red zone 2A2A2A2A)Conditions
Workaround
CSCsg96319 reverse ssh eliminated telnet authention on VTYSymptom When a reverse SSH session is established with valid authentication credentials, anyone can obtain unprivileged Telnet access to a system without being authenticated. This situation affects only reverse SSH sessions when a connection is made with the ssh -l userid : number ip-address command.
Conditions
Workaround
http://www.cisco.com/en/US/tech/tk583/tk617/technologies_q_and_a_item09186a0080267e0f.shtml#newq1CSCsi76991 incoming sip call transferred local; audio not heard on ip phoneSymptom After a call is transferred on alert, audio is not heard on IP phones.
Conditions
Workaround
Further Problem Description: During the call transfer, the service provider network sends slightly different media capabilities on the 200 OK with SDP; these capabilities are agreed upon from CME; but this new capabilities seems to cause this problem.
CSCsj04361 W button may not be lit onSymptom The W button is not lit on when the watched phone goes off hook.
Conditions
Workaround
CSCek76902 Router with ISDN interface may crash - Bus Error at CCPRI_AcceptChanIdSymptom Router with ISDN interfaces may crash with a bus error.
Conditions
Workaround
CSCsg62638 CPU usage reaches 99% after nmap scan on port 53Symptom Scan of a router when a DNS server is enabled can cause high CPU usage of the DNS process itself. Overall performance of the device can deteriorate to some extent.
Conditions
Workaround
Further Problem Description Upgrading the software is suggested.
CSCse80323 modify component build system to support qnx and freescale processorsSymptom The cbs did not support qnx.
Conditions
Workaround
CSCsj32707 GW rejects SIP UPDATE with Cseq 0Symptom A
SIP UPDATEmessage from a Cisco CallManager or SIP Proxy Server with aCseqvalue of 0 may be rejected or considered invalid by A Cisco gateway.Conditions
Workaround
Note
CSCsh34690 Commit cflow patches for source files and link maps to all branchesSymptom Cflow instrumentation requires definitions of constructors. If it is not defined the build fails with the following error: Undefined reference to __CTOR_INIT__ Few *.link files in the platform directory gets patched during cflow build.
Conditions
Further Problem Description Extra time is spend by the dpe-cli tool to checkout-patch and again undo-checkout while exiting. Also since this checkout-patches happens during every build, modified files will be compiled and linked every time. This extra processing can be reduced by checking-in the changes to the branches.
CSCsb79076 MGCP RSVP enabled calls fails due to spurious error @ qosmodule_mainSymptom Errors and tracebacks are observed while making MGCP RSVP calls on a analog (RGW) setups. Observed in 12.4(3.9)T1 IOS version.
Workaround
CSCsi39520 CME: SIP MWI relay does not send notify msg after SCCP MWI on from UnitySymptom CME does not send the necessary SIP notify message to remote CME systems following the receipt of a valid SCCP mwi on message from Unity or Unity Connection even though the remote phones are properly listed in show mwi relay clients command.
MWI works correctly for phones on CME1. Phones on CME2 can subscribe and show up in show mwi relay clients command however no notify is sent in response to messaging from Unity.
Workaround
CSCsi84335 tracebacks observed in parseCallerIDStringSymptom When testing hsi performance with cps=50 and CHT=180. The GW main will core dump:
-rw------- 1 root root 584659614 Mar 21 12:30 core.25935_0_GWmain_1174451419-rw------- 1 root root 584659614 Mar 21 18:00 core.26122_0_GWmain_1174471233bash-3.00$Conditions
Workaround
CSCek75251 repeat fix of damageCSCse93722 change component build system to suppoprt the generation of shared objsCSCsh53643 mbar/isync compiler automationCSCsh77241 Reverting the compiler back to c2.95.3-p11bOpen Caveats - Cisco IOS Release 12.4(11)XJ3
There are no open caveats for this release.
Resolved Caveats - Cisco IOS Release 12.4(11)XJ3
There are no resolved caveats for this release.
Open Caveats - Cisco IOS Release 12.4(11)XJ2
CSCsi09530 CME SIP phone failed to register because of authenticate registerSymptom If "authenticate register" is configured under "voice register global", CME SIP failed to registered.
Conditions
Workaround
Further Problem Description: In registrar Functionality, CME challenges an inbound Register request with 401 response If "authenticate register" is configured under "voice register global". The Registering Endpoint then Sends a Register Request with Crdentials. GW Stack is not processing this Request and is dropping it.
Resolved Caveats - Cisco IOS Release 12.4(11)XJ2
CSCec12299Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching (MPLS) Virtual Private Networks (VPNs) or VPN Routing and Forwarding Lite (VRF Lite) and using Border Gateway Protocol (BGP) between Customer Edge (CE) and Provider Edge (PE) devices may permit information to propagate between VPNs.
Workarounds are available to help mitigate this vulnerability.
This issue is triggered by a logic error when processing extended communities on the PE device.
This issue cannot be deterministically exploited by an attacker.
Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-vpn.shtml.
CSCsf08998Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsd85587A vulnerability has been discovered in a third party cryptographic library which is used by a number of Cisco products. This vulnerability may be triggered when a malformed Abstract Syntax Notation One (ASN.1) object is parsed. Due to the nature of the vulnerability it may be possible, in some cases, to trigger this vulnerability without a valid certificate or valid application-layer credentials (such as a valid username or password).
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
The vulnerable cryptographic library is used in the following Cisco products:
–
–
–
–
–
This vulnerability is also being tracked by CERT/CC as VU#754281.
Cisco has made free software available to address this vulnerability for affected customers. There are no workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml.
Note
CSCsg59037 85x/87x cannot upgrade rommon from IOSSymptom Cisco 851 and 871 routers have no way to remotely upgrade the ROMMON firmware image.
Conditions
Workaround
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcr/tcf_r/cf_13ht.htm#wp1032550
Csg51259 CME: DTMF stops working after consult transfer to called party's mailboxCSCsg51244 CME: CME does not send 3xx messages for transfer --> forward scenariosCSCsg46411 CME: CME does not send a REFER over SIP trunk for calls involving AACSCsg30101 CME: dtmf-relay force rtp-nte CLI does not workCSCsf32028 CME: Host portion of Refer-To: header must be an Address of RecordCSCsf26561 CME: User portion of Diversion header is incorrect when calling through AAConditions
Workaround
CSCsg46362 contact header incorrect in 302 message using sip-srst redirect modeSymptom The contact header ip address is incorrect in the 302 message sent by sip srst in redirect mode. As the result basic call fails in this mode.B2b mode is working okay.
Workaround
CSCsg17289 DNS-SRV issues for SIP registrationsCSCsg39750 Spurious mem access/traceback while resetting sip phone with presenceCSCsg18902 Blind transfer is not working on SIP trunkSymptom Blind transfer failed on SCCP endpoint over SIP trunk
Conditions
Workaround
CSCse89321 Dtmf path not getting confirmed in sip media forking callCSCsh23992 IAD2801 BRI voice port ISDN status does not come upCSCsg94873 One way audio for PSTN to AA and calls xferred to SIP phone with G.729CSCsh25511 A router may crash with CPU Vector 300Symptom A router may crash with CPU vector 300
Conditions
Workaround
CSCsh45544 Placed call list in 7970 phone always shows unknown numberCSCsh37177 %SDP-3-SDP_PTR_ERROR traceback error when redirecting call to AACSCsg31719 Digits are not relayed correctly when call is not connected.Symptom When onhook dialing or speed dial is performed from CME to an analog port where dialtone is slightly delayed some digits are dropped.
Conditions
Workaround
CSCsh14247 Call transfer fails when initiated from SIP PhoneCSCsg49416 Refer is not sent by CME when Cfwd all is set from TNP phoneCSCsh19990 Traceback= 0x438662AC 0x40BF2BEC with Call Park/Pick Up operationCSCsh37345 DSL Operating-mode `auto tone low' enables ETSI mode onlySymptom The DSL line fails to train with "dsl operating-mode auto tone low" command if the DSLAM does not support ETSI mode.
Conditions
a.
b.
Workaround
CSCsh11146 Memory leak at AFW_SS_SIP_PrepareTransferSetupSymptom Memory leak occurred in transfer scenarios.
Workaround
CSCek67638 include presence feature in c2801 security packageSymptom The 2801 security image does not have presence feature.
CSCsh59469 DTMF is distorted when played from SCCP controlled ATA on CMESymptom DTMF generated by a SCCP controlled ATA registered to CallManager Express may be choppy, broken, or overlapping when multiple digits are pressed, one after another.
Example topology:
IVR---fxs---ATA---sccp---CME---pri---PSTNA user in the PSTN calls the IVR. The digits are not reliably detected by the IVR when pressed by the PSTN user because of the overlapping / choppy output.
Conditions
Workaround
CSCsh55262 Update CME GUI version and new Cisco logoCSCsg95736 MAC address is missing for radio interfaceSymptom IOS image is not reading the mac address for radio interface.
Workaround
CSCsh53808 Transcoder fails after several H.323 transcoded calls to CUECSCsg31559 Spurious memory access at strncmp, skinny_hwconf_check_adhoc_registerCSCsh14101 503 Service Unavailable should be sent to CAC rejected callsCSCsh60218 VG224 continues to ring when first of two ringing shared calls hangs upCSCsh48646 FAC fails for the first time after enabling in certain conditionsCSCsh78605 Need CLI to enable/disable SIP Line incoming dial-peer matchingSymptom For an inbound call across a SIP Trunk, IOS might match an dynamically configured dial-peer instead of the user-defined dial-peer configured with "incoming called-number".
Conditions
Workaround
CSCsh39749 Few objects of hdsl2ShdslSpanStatusTable giving wrong values with ARCHERSymptom MIB value for LineRate (hdsl2ShdslStatusMaxAttainableLineRate) queried through SNMP GET/GETNEXT returns incorrect values. Also hdsl2ShdslInvVendorID displays data in wrong format.
Conditions
Workaround
CSCsh63545 ARCHER IMA MIB modificationsSymptom SNMP walk on imaLinkIntervalTable returns no entries. SNMP get does not work for imaGroupTable.
Conditions
Workaround
CSCsh46622 HDSL2-SHDSL-LINE-MIB:Few tables not populated for ARCHER with CRUSHER onSymptom When HWIC-4SHDSL and WIC-1SHDSL-V2 are present in a router, HDSL2-SHDSL-LINE-MIB entries for HWIC-4SHDSL are not getting displayed.
Conditions
1.
2.
3.
CSCsh41397 SNMP getone gives NO_SUCH_INSTANCE_EXCEPTION error for HWIC-4SHDSLSymptom SNMP GET operation on HDSL2-SHDSL-LINE-MIB objects returns no such instance for HWIC-4SHDSL.
Conditions
Workaround
CSCsh68584 CME MWI notify message not compliant to RFC 3842Symptom MWI lights on 7970 does not glow
Conditions
Workaround
CSCsh68560 CME: sip to sccp to sccp attend transfer fails
Symptom One way audio.
Conditions
Workaround
CSCsh22682 vlan information disappears after router reloadSymptom Devices in data VLAN on MVAP configured port with portfast loose connectivity
Conditions
Workaround
12.4(9)T and earlier releases do not see this problem
Do not use portfast on MVAP port
Further Problem Description: After the router has been reloaded we see an incomplete arp entry. Removing and adding VLAN data fixes this issue for a while. This issue is also resolved If the MVAP port does not have portfast enabled.
CSCsg76281 CME 4.1:PSTN-to-AA, tx to sccp1, then tx to sccp2, cfwd all to CUE failsCSCsg18481 Consult Transfer failed with Call forward busySymptom Consult transfer failed when XTO has call-forward busy
Conditions
Workaround
CSCsh58082 SIP: A router may reload due to SIP trafficSymptom Cisco devices running an affected version of Internetwork Operating System (IOS) which supports Session Initiation Protocol (SIP) are affected by a vulnerability that may lead to a reload of the device when receiving a specific series of packets destined to port 5060. This issue is compounded by a related bug which allows traffic to TCP 5060 and UDP port 5060 on devices not configured for SIP. There are no known instances of intentional exploitation of this issue. However, Cisco has observed data streams that appear to be unintentionally triggering the vulnerability.
Workaround
CSCec12299 Corruption of ext communities when receiving over ipv4 EBGP sessionSymptom EIGRP-specific Extended Community 0x8800 is corrupted and shown as 0x0:0:0.
Conditions
ASBR/PE-1 <----> VRF-to-VRF <----> ASBR/PE-2
Workaround
router bgp 1address-family ipv4 vrf oneneighbor 1.0.0.1 remote-as 100neighbor 1.0.0.1 activateneighbor 1.0.0.1 route-map FILTER inexit-address-family!ip extcommunity-list 100 permit _RT.*_!!route-map FILTER permit 10set extcomm-list 100 delete!CSCsh95740 CME tftp bindings corrupt/erroneous with perphone cnfSymptom On 12.4(11)XJ, performing a `show tele tftp-bindings' may show corrupted or incorrect output.
Conditions
Workaround
CSCek68607 CallerID not updated with AA CFB call to sip phone over SIP trunkCSCsh90148 SIP UPDATE message sending should be controllable via CME on SIP trunkSymptom UPDATE messages being sent on the SIP trunk cause calls to fail under certain conditions
Conditions
Workaround
CSCsh45568 Alignment errors in classify_packetSymptom Alignment errors may be seen on a Cisco router due to NBAR. High CPU may be seen as well.
Workaround
CSCsf25671 Client with L2TPv2 on Virtual-PPP fails to get ip add from LNSs ip poolSymptom L2TPv2 VPDN sessions are terminated by the client shortly after IPCP negotiation completion
00:00:23.859: Vp1 IPCP: State is Open00:00:23.859: Vp1 IPCP: Install negotiated IP interface address #.#.#.#00:00:23.859: IP-ADDR: ip_new_address(), old 0.0.0.0/0, new #.#.#.#/# onVirtual-PPP100:00:23.859: ACLIB [Vp1, 22]: ac_ppp_voluntary_restore_link_vectors() -Restoring previously saved link00:00:23.859: ACLIB [Vp1, 22]: SW AC interface UNPROVISIONED for PPP interfaceVp100:00:23.859: ACLIB: Unbinding SWSB subblock00:00:23.859: ACLIB [Vp1, 22]: Deleting AC sublock structure.00:00:23.859: ACLIB: ac_ppp_restart_session() - restarting LCP.00:00:23.859: Xconnect[ac:Vp1(PPP)]: provisioning fwder with fwd_type=1,sss_role=200:00:23.859: ACLIB: Setting new AC state to Ac-Provisioning, old state wasAc-Idle00:00:23.859: ACLquest00:00:23.859: IP-ADDR: invoke_ip_address_change() to 0.0.0.0/0, secondaryoff, sense off, on Virtual-PPP100:00:23.859: IP-ADDR: invoke_ip_address_change() to #.#.#.#/#, secondaryoff, sense on, on Virtual-PPP100:00:23.859: IP-ADDR: ipaddr_table_insert() #.#.#.#, in global table onVirtual-PPP1IB [Vp1, 22]: AC attached subblock to Virtual-PPP100:00:23.859: ACLIB ive <Circuit Provisioned> msg00:00:23.863: ACMGR [Vp1, 22]: provision event, FSP down state no chg, actionis ignore[Vp1, 22]: AC provisioned. Bringing down existin00:00:23.863: XC L2TP: Received L2TUN API message <Unprovision>00:00:23.863: XC L2TP: uid:116[#.#.#.#/#] Event <L2TUN Session Unprovision>,state Established -> Established00:00:23.863: XC L2TP: Sending L2TUN message <Disconnect>00:00:23.863: XC L2TP: uid:116[#.#.#.#/#] L2TUN socket teardown:00:00:23.863: XC L2TP: uid:116[#.#.#.#/#] "xconnect destroyed"00:00:23.863: XC L2TP: uid:116[#.#.#.#/#] PW-MGMT: PW peer #.#.#.#, vcid #00:00:23.863: XC L2TP: uid:116[#.#.#.#/#] PW-MGMT: Reason [Unprovisioned]gPPP session on interface Vp100:00:23.859: ACLIB [Vp1, 22]: ac_ppp_voluntary_set_link_vectors() changingvectors for Vp100:00:23.859: ACLIB [Vp1, 22]: SW AC intf PROVISIONED for PPP interface Vp100:00:23.859: Xconnect[unkn:#.#.#.#:#]: provisioning fwder with fwd_type=2,sss_role=100:00:23.859: XC L2TP: XConnect provision re00:00:23.859: Vp1 IPCP: Install route to #.#.#.#00:00:23.863: L2TP:(Tnl#:Sn#)L2X s/w switching session unboun #.#.#.# vcid #,Unprovisioned, VC state UP00:00:23.863: XC L2TP: uid:116[#.#.#.#/#] Tell MIB that PW peer #.#.#.#, vcid1 is UP00:00:23.863: L2TUN APP: uid:116handle/176170Destroying app session00:00:23.863: XC L2TP: Received L2TUN API message <Provision>00:00:23.863: XC L2TP: uid:121[#.#.#.#/#] PW-MGMT: PW peer #.#.#.#, vcid 100:00:23.863: XC L2TP: uid:121[#.#.#.#/#] PW-MGMT: Reason [Provisioned]d00:00:23.863: L2TP #:#:# : Received a SSM L2TP segment down event00:00:23.863: ACMGR [Vp1, 22]: Receive <Circuit Unprovisioned> msg00:00:23.863: ACMGR [Vp1, 22]: unprovision event, SIP state chg both up toend, action is peer service disconnect00:00:23.863: ACMGR [Vp1, 22]: Sent a sip service disconnectConditions
Workaround
CSCse78963 Adopt new default summer-time rules from EPA BADCODE BUGSymptom Starting in calendar year 2007, daylight savings summer-time rules may cause Cisco IOS to generate timestamps (such as in syslog messages) that are off by one hour.
Conditions
Workaround
CSCsi06347 CLI for MOH should be displayed under voice-portSymptom CLI for MOH is hidden
Conditions
Workaround
CSCsh98465 INFO request not generated on hookflashSymptom INFO request messages is generated properly on hookflash
Conditions
Workaround
CSCse24889 Malformed SSH version 2 packets may cause processor memory depletionSymptom Malformed SSH version 2 packets may cause a memory leak, causing the platform to operate under a degraded condition. Under rare circumstances, the platform may reload to recover itself.
Conditions
Workaround
CSCse24889, configure SSH version 1 from the global configuration mode, as in the following example:config tip ssh version 1endAlternate Workaround: Permit only known trusted hosts and/or networks to connect to the router by creating a vty access list, as in the following example:
10.1.1.0/24 is a trusted network thatis permitted access to the router, allother access is deniedaccess-list 99 permit 10.1.1.0 0.0.0.255access-list 99 deny anyline vty 0 4access-class 99 inendFurther Problem Description: For information about configuring vty access lists, see the Controlling Access to a Virtual Terminal Line document.
For information about SSH, see the Configuring Secure Shell on Routers and Switches Running Cisco IOS document:
http://www.cisco.com/warp/public/707/ssh.shtml
CSCse98165 Mid-call invite not sent to OGW with nat symmetric check-media-srcSymptom IPIP gateway does not send an to the Originating gateway when a mid-call invite is received from the terminating gateway The following is configured on the IPIP gateway
sip-ua
nat symmetric check-media-src
Workaround
CSCsh74276 Counter for Lost packet not cumulative during a callSymptom Packet loss counter varies randomly.
Conditions
Workaround
CSCek70160 UDP packet corrupted in SIP->H323 IPIPGW during T38 modeSymptom In fax1 -- OGW --sip--- IPIPGW -- h323 -- TGW --fax2 scenario, T38 fax fails.
Conditions
Workaround
CSCsh67943 7301 fails on a T38 when configured as IPIPGW doing SIP - H323
Symptom In fax1 -- OGW --sip--- IPIPGW -- h323 -- TGW --fax2 scenario, T38 fax fails.
Conditions
Workaround
CSCsi09696 CME SIP missed quotation for aop parameterCSCsi18104 SIP: 400 Bad Request for AA's REFER, and AA's transfer failedSymptom Seeing "400 Bad Request" response for AA's "REFER" request, and AA's semi-attended transfer failed against XJ1 image.
Conditions
Workaround
CSCek56688 Change after-hours login timer to 1 minSymptom The minimum after-hours login timer is 5 mins. It is too long. Customer wants to be able to deactivate the login in 1 min.
Conditions
Workaround
CSCsg31867 Router crashes on large ping pkts with IPSEC/NAT configuredSymptom A Cisco IOS router may experience a unexpected reload.
Conditions
Workaround
CSCsh33057 SPEs in stuck state after stressSymptom SPEs may hang after voice calls have been processed. When you enter the clear spe command for the affected SPEs, the platform may reload unexpectedly.
Conditions
Workaround
CSCsg46624 Router crashes on applying service policy on the atm subinterfaceSymptom Router crash
Conditions
Workaround
CSCsh16540 Router Crashes when encapsulation dot1Q <VC id is enabledSymptom A router crashes when you enter the encapsulation dot1q vlan-id command.
Conditions
Workaround
CSCsh83836 C1700 Router crashes @ fpm_db_add_aclCSCsg80097 Calling name in Facility sent via CCM Sip trunk does not appear on SIP CMECSCsh11157 Memory leak at DestCaptureCallForwardCSCsg40247 T38 Fax Relay calls are going as Cisco Fax RelayCSCsi15229 No memory available if qos and acl on routerSymptom One or more of the following symptoms may occur. CPU HOGS, crashes, high cpu, and/or memory allocation failures.
Conditions
Workaround
CSCsg14313 traceback seen while making conference/transcoder co_exist callsCSCsg57002 SIP timer tree corruption is causing SIP gateway crash under loadSymptom The SIP Gateway will crash when handling calls involving DTMF relay.
Conditions
Workaround
1.
2.
CSCsg34501 Traceback from voice_reg_supports_utf8 is seenCSCsb79829 call dropped when incoming invite with alert-info headerCSCsg92387 Calling name in Notify message does not appear on SIP-CME PhoneCSCsh17599 One way audio with Adhoc conference by CCM and 1 participant hangs upCSCsg36224 DSPs not released when conference DN no. is directly dialedCSCsh32714 Spurious memory access traceback at sipSPI_ipip_copy_channelInfo_to_sdpCSCsh57237 router crashes immediately after enabling service policySymptom Router crashes
Conditions
Workaround
CSCsi24620 Enable support for StationUnicodeCapableMsk feature bitSymptom UTF8 localized characters can not display on new generation phones, ex 7970, 7961 and etc.
Conditions
Workaround
Further Problem Description: If the locale on CME requires UTF8 encoding the character will not display correctly with 8.0.x and newer phone loads.
CSCsh11907 Router crashes @ fair_queue_classify_wredSymptom Router crashes after show policy-map command
Workaround
CSCsg03849 Spurious accesses traceback seen @ AFW_Leg_CheckConsultSetupOpen Caveats - Cisco IOS Release 12.4(11)XJ
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(11)XJ
CSCse89321 DTMF path not getting confirmed in sip media forking callSymptom There is no end-to-end DTMF path confirmation.
Workaround
CSCsf26561 User portion of Diversion header is incorrect when calling through AASymptom Tests on customer setup have revealed that PSTN to AA --> tx to SCCP phone--> CFWD to CUE/PSTN has an issue. The 302 Moved Temporarily from CME to BroadSoft has a Diversion header whose user portion is the private extension #, not the expanded DID # due to which the subsequent call fails.
Workaround
CSCsf32028 Host portion of Refer-To: header must be an Address of RecordSymptom SIP trunking environments (for example, Cbeyond) need the URIs to carry Address of Record [AOR] in many SIP headers.
Workaround
CSCsg17289 DNS-SRV issues for SIP registrationsSymptom Registrar, both the dial-peers would try to send a REGISTER request sequentially. When first Dial-peer (D1) is sending REGISTER Request, the registrar cache is empty. It first sends a DNS query (SRV). After getting the DNS Response, it updates the Registrar cache and sends the REGISTER request to Registrar R1. dns_count variable here is set to SIP_DNS_MODE.
When second dial-peer is sending REGISTER request, it finds the resolved IP address in registrar cache (R1) so it sends the REGISTER request to R1. dns_count variable here is set to SIP_NON_DNS_MODE. But both the REGISTER request fails as R1 is down.
As D1 is set to SIP_DNS_MODE, D1 would send a DNS query again with incremented dns_count to get any alternate Registrar and it gets R2. It sends REGISTER request to R2 and gets successfully registered. As D2 is set to SIP_NON_DNS_MODE, it does not retry the DNS query and simply backs off for period REG_EXPIRES/20.
Workaround
CSCsg18902 Blind transfer is not working on SIP trunkSymptom Blind transfer failed on SCCP endpoint over SIP trunk
Conditions
Workaround
CSCsg30101 CME: dtmf-relay force rtp-nte CLI does not workSymptom The voice-class sip dtmf-relay force rtp-nte command does not work.
Conditions
As a result, rfc2833 is not negotiated and hence DTMF is sent raw inband. When PSTN caller presses DTMF digits after being prompted by AA, nothing works, since the CME cannot convert raw-inband DTMF to NOTIFY. With 12.4-4T3 the CME replied to the PSTN gw with g711u and rfc2833(PT=101).
Workaround
CSCsg39750 Spurious mem access/traceback while resetting sip phone with presenceSymptom Spurious memory access and traceback is encountered while resetting the SIP phone (7961). After configuring presence with CME.BLF speed dial entries, the status is not updated for the watched phones.
Workaround
CSCsg46362 contact header incorrect in 302 message using sip-srst redirect modeSymptom The contact header ip address is incorrect in the 302 message sent by SIP SRST in redirect mode. As the result basic call fails in this mode. B2b mode is working okay.
Workaround
CSCsg46411 CME does not send a REFER over SIP trunk for calls involving AASymptom CME fails to send a REFER over the SIP trunk for calls coming into the CUE-AA and being transferred to a local extension.
Conditions
Workaround
CSCsg51244 CME does not send 3xx messages for transfer --> forward scenariosSymptom CME does not send a 3xx message during call fwd if there was a call-transfer invoked before the call-forward happens.
Conditions
Workaround
CSCsg51259: DTMF stops working after consult transfer to called party mailboxSymptom PSTN connects to extension A, A transfers to B, B's CUE voicemail answers due to CFNA, A does a full consult transfer to B's CUE voicemail.
Conditions
Workaround
CSCek61666 Ephone DNs get stuck in SEIZE state under certain conditionsSymptom Ephone DNs gets stuck in seize state under certain conditions, particularly under the following sequence:
1. phone-A has multiple trunk-DNs configured.2. Call comes in on one of trunk-DN, say DN1. Call is answered and thetransfer button is pressed and another extension (DN3) is dialed.The dialed extension answers the call.3. At this time, the user on phone-A goes offhook on another trunk DN(say DN2), and dials one digit.4. The PSTN user who is connected to DN1 hangs up and so does DN3The above sequence gets both channels of DN1 into SEIZE state.
Conditions
Workaround
CSCek37305 Cisco 7200 router crashes at get_hwidb_if_sameSymptom Router crashes on unconfiguring T1 controller with interface configured for RTP priority.
Conditions
Workaround
CSCek39470 Router memory leak due to pak subblock chunk leaking with crypto+BVISymptom Cisco IOS router running 12.4 may experience per packet memory leak due to pak subblock leak in Process memPool (not in IO mem pool). The symptom is: show proc mem 1 output seeing the first allocator's memory count is keep growing, and never decrease.
Conditions
Workaround
CSCek45272 NAT overload failing with static mappingsSymptom NAT overloading from inside source address to an outside interface may fail.
Conditions
Workaround
CSCek61570 Trunk dn stuck in seize/seize state and does not recoverSymptom The ephone DN may get stuck in SEIZED state and one-way audio would occur afterwards.
Conditions
Workaround
CSCek62099 MLP: PPPoE encap not applied to CEF switched non-MLP packetsSymptom When PPP Multilink is enabled over a PPP over Ethernet (PPPoE) session, outbound packets are incorrectly sent without PPPoE headers. This causes them to be dropped.
Conditions
Workaround
CSCir00074 Router crashes when casnDisconnect is set to true for pppoe sessionSymptom A router crashes when the casnDisconnect object is set to "true" for a PPPoE session.
Conditions
Workaround
CSCir00530 CJ-Ph2:Entry missing in cefcModuleTable for a CJ PA in Escort slotSymptom Entry for Crackerjack PA missing from cefcModuleTable.
Conditions
Workaround
CSCsc48536 A router may reload unexpected due to bus error at ipnat_lock_natSymptom A Cisco router may reload unexpectedly with a bus error exception.
Conditions
Workaround
CSCsd50476 When channel-group configured serial interface goes down CSCse35510 OER misidentifying overlapping prefixesSymptom A serial link goes down.
Conditions
Workaround
CSCse46648 IP Address Getting Removed From Interface On Deleting Crypto ConfigSymptom IP address removal from a physical interface
Conditions
Workaround
CSCse88584 Router proposes the default ISKMP policy if configured one does not matchSymptom Router is proposing the default ISAKMP policy if the configured one does not match
Workaround
•
Symptom A Cisco IOS router may experience a unexpected reload.
Conditions
Workaround
CSCsf27796 1841 router reloads at retparticle with %SYS-2-BADSHARE errorSymptom A 1841 router may reload at retparticle with %SYS-2-BADSHARE errors.
Conditions
Workaround
CSCsg02881 MLP: Bandwidth of down MLP group should be sum of member bandwidthsSymptom The bandwidth of a multilink group interface that is down does not reflect the actual bandwidths of the links that are configured as members of the multilink group. In Cisco IOS Release 12.4(8) and later, the multilink interface bandwidth reflects the bandwidth of the last link in the bundle prior to going down. In earlier versions, the bandwidth is restored to 100000 Kbps.
Conditions
Workaround
CSCsg10159 Successive Default route ctrl fails on different link but on same routerSymptom Default route withdrawn message is send from BR immediately after successful control of default roue. And prefix goes to DEFAULT state.
Conditions
Workaround
CSCsg12813 Speech loss after receiving MDCX from PGWSymptom A Cisco AS5400 gateway may change it's RTP sequence numbers after receiving a MDCX command. The RTP Stream SSRC is always the same but the Sequence Number seems to be randomly initiated again.
Conditions
Workaround
CSCsg16186 SCMabort Event crash seen on NPE-G2Symptom System may crash during bootup.
Conditions
Workaround
Further Problem Description: You should see SCM Abort message in the crash info file.
CSCsg16748 ABR deletes OSPF type 3 LSA after it received max-aged type 2 LSASymptom In the situation ABR has both type 2 LSA and type 1 LSA for a prefix, ABR deletes type 3 LSA if it received max-aged type 2 LSA.
Workaround
CSCsg33172 IPS 5.0: Provide more informational error message XML and namesSymptom A few inconsistent error message.
Conditions
Workaround
CSCsg38907 rip - redistribute static: redistributed prefixes have metric 16Symptom Under some conditions redistributed static routes are sent out with metric 16
Conditions
Workaround
CSCsg39216 ezvpn tunnel traffic with acl keyword is not excluded from NATSymptom When EZVPN client is configured with "acl" keyword, the tunneled (vpn) traffic also gets NATed.
Conditions
Example:
crypto ipsec client ezvpn hwclientconnect autogroup cisco key cisco123mode network-extensionpeer 10.1.1.1acl 103access-list 103 permit ip 192.168.100.0 0.0.0.255 192.168.1.0 0.0.0.255
This occurs when the following is true:
1) ezvpn client is configured
2) interesting tunnel traffic is defined using the "acl" keyword under global ezvpn configuration
3) NAT is configured
Workaround
CSCsg39961 crash sending pki request to CA CSCsg43460 Improve NPE-G2 ENVM handlingSymptom A router may unexpectedly reload when trying to send a PKI request to a CA.
Conditions
Workaround
CSCsg46546 Erroneous alerting during pickup with CSCek58324 scenarioSymptom Pickup will result in alerting from the pickup target instead of connected.
Conditions
Workaround
CSCsg47834 NACK is observed for Open voice channel commandSymptom NACK message may be received from 5510 DSP in response to Open Voice Channel command sent by the Cisco IOS software.
2568288: Oct 24 13:11:33.240: //-1/xxxxxxxxxxxx/HPI/[]/hpi_tx_global_debug_info:DSP 3/0x3 port INVALID_CHANNEL_STATE(85), info 0x01(1)DSP 3/0x00000003 port mode CLOSED(1), state UNDEFINED(133), NACKed message 74/0x4A @0DSP message header 0008 0003 004A 0001 Payload: 0x0000 0x0000 0xFFFF 0x0000Conditions
Workaround
1) Disable Transcoding
(or)
2) Make sure that the Transoding and Voice Termination are on different DSP(s).
This can be performed by configuring the maximum number of transcoding sessions to a value such that it would require a multiple of 240 DSP credits.
Example 1:
In the following configuration each transcoding session (complexity=high) will require 40 DSP credits. In order to use a multiple of 240 credits, we need to set the maximum transcoding sessions to 6 (6 * 40 = 240) or any multiple of 6.
dspfarm profile 1 transcodecodec g711ulawcodec g729r8associate application SCCPRouter(conf-t)#dspfarm profile 1 transcodeRouter(config-dspfarm-profile)#maximum sessions 6Example 2:
In the following configuration each transcoding session (complexity=medium) will require 30 DSP credits. In order to use a multiple of 240 credits, we need to set the maximum transcoding sessions to 8 (8 * 30 = 240) or any multiple of 8.
dspfarm profile 2 transcodecodec g711ulawcodec g711alawcodec g729ar8codec g729abr8associate application SCCPRouter(conf-t)#dspfarm profile 2 transcodeRouter(config-dspfarm-profile)#maximum sessions 8Use show voice dsp group all command to verify DSP resource allocation.
Note
CSCsg48183 Unforeseen ARP request send from all interfacesSymptom A router may unexpectedly send an ARP request from all its active interfaces to the nexthop of the network of an SNMP server.
Conditions
–
–
–
Workaround
CSCsg57228 IPS5.0: c871 reloads using IOS-S222 package fileSymptom Router crashes loading the IOS signature package file
Conditions
Workaround
CSCsg68199 Trunk DN offhook is not propagated to a phone already in dial out modeSymptom Two IP Phones A and B are registered with Cisco CallManager Express; these phones share two trunk DNs 1 & 2. If Phone-A goes offhook on DN-1 and Phone-B immediately goes offhook on DN-2. This condition should show the DN-2 button on Phone-A as busy which is not happening.
Conditions
Workaround
CSCsg68711 Incoming call in background does not audibly ring after transfer commitSymptom Phone does not ring for the second incoming call after committing transfer at alert for the first call.
Conditions
Workaround
CSCsg70221 DTMF through the hairpin of a trunk DN does not workSymptom DTMF tones are being suppressed to prevent duplicate DTMF tones from being extended to an SCCP controlled VG224 port. This problem is direct result of a fix implemented for correct CSCsf98754. The lack of DTMF prevents IVR devices from working correctly
Conditions
A call comes into a FXO port that is part of a trunk group and gets transferred to an extension that is hanging off of a vg224. DTMF is not relayed to the end point
Workaround
CSCsg70355 Adopt new default summer-time rules from Energy Policy Act of 2005Symptom Starting in calendar year 2007, daylight savings summer-time rules may cause Cisco IOS to generate timestamps (such as in syslog messages) that are off by one hour.
Conditions
Workaround
clock summer-time PDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00(this example is for the US/Pacific time zone)
CSCsg73806 Runaway debugs: AFW_Module_ObjectCount pCallIndSsSymptom A router may display the following message to the console repeatedly:
AFW_Module_ObjectCount pCallIndSs 1This is a cosmetic error. With the fix, this message will only be seen with debugs enabled.
Conditions
Workaround
CSCsg78801 4.x MinHits or 5.0 event-count not summarizing correctlySymptom Min hit or event count not resetting correctly
Conditions
Workaround
CSCsg90212 VSA: Add code to handle CRNG failure interruptSymptom When VSA encounters a Continual RNG failure, the IOS will print the message
VSA encountered CRNG failureWorkaround
Additional References
The following sections describe the documentation available for the Cisco 800 series routers. Typically, these documents consist of hardware and software installation guides, Cisco IOS configuration and command references, system error messages, feature modules, and other documents. Documentation is available in pdf or html form.
Use these release notes with the documents listed in the following sections:
Release-Specific Documents
The following documents are specific to Release 12.4T and apply to Cisco IOS Release 12.4(11)XJ. They are located on Cisco.com in pdf and html format:
•
•
Note
Platform-Specific Documents
Hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 800 series routers are available on Cisco.com at the following location: http://www.cisco.com/univercd/cc/td/doc/product/access/acs_fix/85x87x
Cisco Feature Navigator
Cisco Feature Navigator is a web-based tool that enables you to quickly determine which Cisco IOS software images support a particular set of features and which features are supported in a particular Cisco IOS image. Cisco Feature Navigator is available 24 hours a day, 7 days a week.
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or lost your account information, e-mail the Contact Database Administration group at cdbadmin@cisco.com. If you do not have an account on Cisco.com, go to http://www.cisco.com/register and follow the directions to set up an account.
To use Cisco Feature Navigator, you must have a JavaScript-enabled web browser such as Netscape 3.0 or later, or Internet Explorer 4.0 or later. Internet Explorer 4.0 always has JavaScript enabled. To enable JavaScript for Netscape 3.x or Netscape 4.x, follow the instructions provided with the web browser. For JavaScript support and enabling instructions for other browsers, check with the browser vendor.
Feature Navigator is updated when major Cisco IOS software releases and technology releases occur. You can access Feature Navigator at the following URL:
Cisco IOS Software Documentation Set
The Cisco IOS software documentation set consists of the Cisco IOS configuration guides, Cisco IOS command references, and several other supporting documents that are shipped with your order in electronic form.
Documentation Modules
Each module in the Cisco IOS documentation set consists of one or more configuration guides and one or more corresponding command references. Chapters in a configuration guide describe protocols, configuration tasks, and Cisco IOS software functionality, and contain comprehensive configuration examples. Chapters in a command reference provide complete command syntax information. Use each configuration guide with its corresponding command reference.Cisco IOS Software Documentation is available in html or pdf form.
Select your release and click the command references, configuration guides, or any other Cisco IOS documentation you need.
Open Source License Acknowledgements
The following notices pertain to this software license.
OpenSSL/Open SSL Project
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
License Issues
The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.
OpenSSL License:
Copyright © 1998-2007 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
4.
5.
6.
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).
Original SSLeay License:
Copyright © 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".
The word `cryptographic' can be left out if the routines from the library being used are not cryptography-related.
4.
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].
Obtaining Documentation, Obtaining Support, and Security Guidelines
For information on obtaining documentation, obtaining support, providing documentation feed-back, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Use this document in conjunction with the documents listed in the "Additional References" section.
CCVP, the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar, Packet, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0705R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
© 2006-2007, Cisco Systems, Inc. All rights reserved.
FeedbackContact Cisco
- Open a Support Case
- (Requires a Cisco Service Contract)