customer release notes - ciena portal security39xx_51... · 39xx/51xx service delivery, aggregation...

009-3265-020 - Standard Revision FMarch 2017Copyright© 2016 - 2017 Ciena® Corporation. All rights reserved.

39XX/51XX Service Delivery, Aggregation and Virtualization Switches

Customer Release Notes

SAOS 6.15.1.147

What’s inside...New in this releaseUpgrade and downgrade considerationsFixed in this releaseFound in this releaseFixed prior to this releaseFound in previous releases

LEGAL NOTICES

THIS DOCUMENT CONTAINS CONFIDENTIAL AND TRADE SECRET INFORMATION OF CIENACORPORATION AND ITS RECEIPT OR POSSESSION DOES NOT CONVEY ANY RIGHTS TO REPRODUCEOR DISCLOSE ITS CONTENTS, OR TO MANUFACTURE, USE, OR SELL ANYTHING THAT IT MAY DESCRIBE.REPRODUCTION, DISCLOSURE, OR USE IN WHOLE OR IN PART WITHOUT THE SPECIFIC WRITTENAUTHORIZATION OF CIENA CORPORATION IS STRICTLY FORBIDDEN.

EVERY EFFORT HAS BEEN MADE TO ENSURE THAT THE INFORMATION IN THIS DOCUMENT ISCOMPLETE AND ACCURATE AT THE TIME OF PUBLISHING; HOWEVER, THE INFORMATION CONTAINED INTHIS DOCUMENT IS SUBJECT TO CHANGE.

While the information in this document is believed to be accurate and reliable, except as otherwise expressly agreedto in writing CIENA PROVIDES THIS DOCUMENT “AS IS” WITHOUT WARRANTY OR CONDITION OF ANYKIND, EITHER EXPRESS OR IMPLIED. The information and/or products described in this document are subject tochange without notice.

Copyright© 2016 - 2017 Ciena® Corporation. All Rights Reserved

The material contained in this document is also protected by copyright laws of the United States of America andother countries. It may not be reproduced or distributed in any form by any means, altered in any fashion, or storedin a data base or retrieval system, without express written permission of the Ciena Corporation.

Security

Ciena® cannot be responsible for unauthorized use of equipment and will not make allowance or credit forunauthorized use or access.

Contacting Ciena

For additional office locations and phone numbers, please visit the Ciena web site at www.ciena.com.

Corporate Headquarters 410-694-5700 or 800-921-1144 www.ciena.com

Customer Technical Support/Warranty

In North America 1-800-CIENA24 (243-6224)

410-865-4961

In Europe, Middle East, and Africa

800-CIENA-24-7 (800-2436-2247)

+44-207-012-5508

In Asia-Pacific 800-CIENA-24-7 (800-2436-2247) +81-3-6367-3989

+91-124-4340-600

In Caribbean and Latin America

800-CIENA-24-7 (800-2436-2247) 410-865-4944 (USA)

Sales and General Information 410-694-5700 E-mail: [email protected]

In North America 410-694-5700 or 800-207-3714 E-mail: [email protected]

In Europe +44-207-012-5500 (UK) E-mail: [email protected]

In Asia +81-3-3248-4680 (Japan) E-mail: [email protected]

In India +91-124-434-0500 E-mail: [email protected]

In Latin America 011-5255-1719-0220 (Mexico City) E-mail: [email protected]

Training 877-CIENA-TD (243-6283) or 410-865-8996

E-mail: [email protected]

39XX/51XX Service Delivery, Aggregation and Virtualization Switches Customer Release NotesSAOS 6.15.1.147 009-3265-020 Standard Revision FCopyright© 2016 - 2017 Ciena® Corporation March 2017

IMPORTANT: PLEASE READ THIS LICENSE AGREEMENT (“AGREEMENT”) CAREFULLY BEFORE INSTALLING OR USING CIENA CORPORATION (“Ciena”) SOFTWARE, HARDWARE OR DOCUMENTATION (COLLECTIVELY, THE “EQUIPMENT”).

BY INSTALLING OR USING THE EQUIPMENT, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS AGREEMENT AND AGREE TO BE BOUND BY ITS TERMS AND CONDITIONS.

1. Right to Use License; Restrictions. Subject to these terms, and the payment of all applicable license fees,Ciena grants to you, as end user, a non-exclusive license to use the Ciena software (the “Software”) in object codeform solely in connection with, and as embedded within, the Equipment,. You shall have the right to use theSoftware solely for your own internal use and benefit. You may make one copy of the Software and documentationsolely for backup and archival purpose, however you must reproduce and affix all copyright and other proprietaryrights notices that appear in or on the original. You may not, without Ciena's prior written consent, (i) sublicense,assign, sell, rent, lend, lease, transfer or otherwise distribute the Software; (ii) grant any rights in the Software ordocumentation not expressly authorized herein; (iii) modify the Software nor provide any third person the means todo the same; (iv) create derivative works, translate, disassemble, recompile, reverse engineer or attempt to obtainthe source code of the Software in any way; or (v) alter, destroy, or otherwise remove any proprietary notices orlabels on or embedded within the Software or documentation. You acknowledge that this license is subject toSection 365 of the U.S. Bankruptcy Code and requires Ciena's consent to any assignment related to a bankruptcyproceeding. Sole title to the Software and documentation, to any derivative works, and to any associated patentsand copyrights, remains with Ciena or its licensors. Ciena reserves to itself and its licensors all rights in theSoftware and documentation not expressly granted to you. You shall preserve intact any notice of copyright,trademark, logo, legend or other notice of ownership from any original or copies of the Software or documentation.

2. Audit: Upon Ciena's reasonable request, but not more frequently than annually without reasonable cause, youshall permit Ciena to audit the use of the Software at such times as may be mutually agreed upon to ensurecompliance with this Agreement.

3. Confidentiality. You agree that you will receive confidential or proprietary information (“Confidential Information”)in connection with the purchase, deployment and use of the Equipment. You will not disclose ConfidentialInformation to any third party without prior written consent of Ciena, will use it only for purposes for which it wasdisclosed, use your best efforts to prevent and protect the contents of the Software from unauthorized disclosure oruse, and must treat it with the same degree of care as you do your own similar information, but with no less thanreasonable care. You acknowledge that the design and structure of the Software constitute trade secrets and/orcopyrighted materials of Ciena and agree that the Equipment is Confidential Information for purposes of thisAgreement.

4. U.S. Government Use. The Software is provided to the Government only with restricted rights and limited rights.Use, duplication, or disclosure by the Government is subject to restrictions set forth in FAR Sections 52-227-14 and52-227-19 or DFARS Section 52.227-7013(C)(1)(ii), as applicable. The Equipment and any accompanying technicaldata (collectively “Materials”) are commercial within the meaning of applicable Federal acquisition regulations.These Materials were developed fully at private expense. U.S. Government use of the Materials is restricted by thisAgreement, and all other U.S. Government use is prohibited. In accordance with FAR 12.212 and DFARSupplement 227.7202, software delivered to you is commercial computer software and the use of that software isfurther restricted by this Agreement.

5. Term of License. This license is effective until terminated. Customer may terminate this license at any time bygiving written notice to Ciena [or] and destroying or erasing all copies of Software including any documentation.Ciena may terminate this Agreement and your license to the Software immediately by giving you written notice oftermination in the event that either (i) you breach any term or condition of this Agreement or (ii) you are wound upother than voluntarily for the purposes of amalgamation or reorganization, have a receiver appointed or enter intoliquidation or bankruptcy or analogous process in your home country. Termination shall be without prejudice to anyother rights or remedies Ciena may have. In the event of any termination you will have no right to keep or use theSoftware or any copy of the Software for any purpose and you shall destroy and erase all copies of such Software inits possession or control, and forward written certification to Ciena that all such copies of Software have beendestroyed or erased.

6. Compliance with laws. You agree to comply with all applicable laws, including all import regulations, and toobtain all required licenses and permits related to installation and use of Equipment. Software, including technicaldata, is subject to U.S. export control laws, including the U.S. Export Administration Act and its associatedregulations, and may be subject to export or import regulations in other countries. Customer agrees to complystrictly with all such regulations and acknowledges that it has the responsibility to obtain licenses to export, re-export, or import Software.


7. Limitation of Liability. ANY LIABILITY OF Ciena SHALL BE LIMITED IN THE AGGREGATE TO THEAMOUNTS PAID BY YOU FOR THE SOFTWARE. THIS LIMITATION APPLIES TO ALL CAUSES OF ACTION,INCLUDING WITHOUT LIMITATION BREACH OF CONTRACT, BREACH OF WARRANTY, NEGLIGENCE,STRICT LIABILITY, MISREPRESENTATION AND OTHER TORTS. THE LIMITATIONS OF LIABILITY DESCRIBEDIN THIS SECTION ALSO APPLY TO ANY THIRD-PARTY SUPPLIER OF Ciena. NEITHER Ciena NOR ANY OFITS THIRD-PARTY SUPPLIERS SHALL BE LIABLE FOR ANY INJURY, LOSS OR DAMAGE, WHETHERINDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL INCLUDING WITHOUT LIMITATION ANY LOSTPROFITS, CONTRACTS, DATA OR PROGRAMS, AND THE COST OF RECOVERING SUCH DATA ORPROGRAMS, EVEN IF INFORMED OF THE POSSIBILITY OF SUCH DAMAGES IN ADVANCE

8. General. Ciena may assign this Agreement to any Ciena affiliate or to a purchaser of the intellectual propertyrights in the Software, but otherwise neither this Agreement nor any rights hereunder may be assigned nor dutiesdelegated by either party, and any attempt to do so will be void. This Agreement shall be governed by the laws ofthe State of Maryland (without regard to the conflict of laws provisions) and shall be enforceable in the courts ofMaryland. The U.N. Convention on Contracts for the International Sale of Goods shall not apply hereto. ThisAgreement constitutes the complete and exclusive statement of agreement between the parties relating to thelicense for the Software and supersedes all proposals, communications, purchase orders, and prior agreements,verbal or written, between the parties. If any portion hereof is found to be void or unenforceable, the remainingprovisions shall remain in full force and effect.


v

Publication history 0

August 2016Standard Revision A

First Standard release of this document for 6.15.1.82.

September 2016Standard Revision B

Second Standard release of this document for 6.15.1.82.

Clarified 3906 support in Table 0-1 on page ix.

Added additional issues to “Fixed in this release”:

November 2016Standard Revision C

Third Standard release of this document for SAOS 6.15.1.114.

November 2016Standard Revision D

Fourth Standard release of this document for SAOS 6.15.1.114 updating description for JE-60805.

December 2016Standard Revision E

Fifth Standard release of this document for SAOS 6.15.1.124.

March 2017Standard Revision F

Sixth Standard release of this document for SAOS 6.15.1.147.


vi Publication history


vii

Contents 0

About this document 1-ix

New in this release 1-1Introduced in SAOS 6.15.1.147 1-1Introduced in SAOS 6.15.1.124 1-1Introduced in SAOS 6.15.1.114 1-1Introduced in SAOS 6.15.1.82 1-2Introduced in SAOS 6.15.0.255 1-3Introduced in SAOS 6.15.0.242 1-3Introduced in SAOS 6.15.0.102 1-4

Upgrade and downgrade considerations 2-1Upgrade to 6.15.1.x from pre-6.15.0.x - L2-CFT 2-1Upgrade to 6.15.1.x from pre-6.15.0.x - VC Transform 2-1Downgrading to pre-06.15.01x - VC Transform 2-1Upgrade to 6.15.1.x from pre-6.15.0.x - L2 Control Frame Tunneling 2-2Downgrade to pre-06.15.1.x - L2 Control Frame Tunneling 2-2Upgrading to SAOS 6.14.0.x – CFM over MPLS 2-3Upgrading to 6.14.0.x - Traffic profile PIR, CIR and EBS 2-4Upgrading to 6.14.0.x - Multicast 2-4Downgrading to pre-6.14.0.x - Multicast 2-4Downgrading to pre-6.14.0.x – Access Control List 2-5Upgrading to 6.14.0.x – Connectivity Fault Management 2-5Downgrading to pre-6.14.0.x – Connectivity Fault Management 2-5

Fixed in this release 3-1Fixed in SAOS 6.15.1.147 3-1

Found in this release 4-1Found in SAOS 6.15.1.147 4-1

4-1

Fixed prior to this release 5-1Fixed in SAOS 6.15.1.124 5-1Fixed in SAOS 6.15.1.114 5-2Fixed in SAOS 6.15.1.82 5-6Fixed in SAOS 6.15.0.255 5-11


viii Contents

Fixed in SAOS 6.15.0.242 5-12Fixed in SAOS 6.15.0.102 5-19

Found in previous releases 6-1Found in SAOS 6.15.1.124 6-1Found in SAOS 6.15.1.114 6-1Found in SAOS 6.15.1.82 6-2Found in SAOS 6.15.0.242 6-2Found in SAOS 6.15.0.102 6-10Found prior to SAOS 6.15.0.102 6-14


ix

About this document 0

This document lists the new features, fixed issues, and found issues in this Service Aware Operating System (SAOS) release.

The 39XX/51XX switches are configured with base software. Table 0-1 shows the active software versions for each platform.

Table 0-1Active software

Platform 6.8.X 6.9.X 6.10.X 6.11.X 6.12.X 6.13.X 6.14.X 6.15.X

3902 X X

3903 X X X

3903x X X X

3904 X X X

3905 X X X

3906 (NID SW support starts in 6.15.1.82)

X

3911 X X X

3916 AC Standard X X X X X X X X

3916 AC Mini X X X X X

3916 Dual AC Standard X X X X X X

3916 Dual AC Mini X X X X X

3916 DC Standard X X X X X X X

3920 X X X

3930 X X X X X X X X

3930-930 X X X X X X



x About this document

Related DocumentationRefer to the SAOS 6.15 Product Fundamentals for a list of related documents.

Trademark AcknowledgementsCiena® is a registered trademark of Ciena Corporation.

3932 X X X X X

3938 X X X

3940 X X X X X

3942 X X X X


5140 X X X X X

5142 X X X X X


5160 X X X X X

Platform 6.8.X 6.9.X 6.10.X 6.11.X 6.12.X 6.13.X 6.14.X 6.15.X


1-1

New in this release 1-

Introduced in SAOS 6.15.1.147



Key Summary

JE-63489 Added support for having more than 1 UNI port under a VS with mixes of EVPLs and EPL between the two (or more) when in enhanced mode.

SAOS-113

JE-64679 SAOS now adds the ability to display the FPGA versions in the CLI output. SAOS-122

Key Summary

JE-62961 Benchmark Reflector Mode vid-out-of-service now blocks ingressing traffic on the reflector's port using the specified VLAN when using VLAN translation on the 3960mvi.(SAOS-221)

JE-61784 SAOS added support to generate a trap when an unsupported SFP/SFP+ module is inserted into the port.

JE-62495 SAOS added support for Syslog using the loopback interface.

Key Summary

JE-54535 SAOS now offers support for the 170-3906-900 x86 D-NFVI Server Blade.

JE-60715 SAOS now supports IP Ping with VLAN Translation (Single-tag VID and Double-tag VID). (SAOS-136)

JE-61784 SAOS added support to generate a trap when an unsupported SFP/SFP+ module is inserted into the port. (C160829-053)


https://product-jira.ciena.com/browse/JE-54535








1-2 New in this release


Key Summary

JE-48135 Support dual rate OC3/OC1 in two versions:

— small jitter buffer (XCVR-CEP001)

— large jitter buffer (XCVR-CEP002)

JE-48995 EVC Ping now works with an SVID with a TPID value of 88a8 as the ARP frames are now being sent to the CPU for resolution.

JE-51026 Support DS3 traffic to a packet stream using RFC4553 SAToP TDM over packet pseudowire technology using XCVR-CEP003

JE-54074 Support channelization for VCoP OC12 modes. Specifically

— STS1 (12 channels)

— STS3c (4 channels)

JE-56051 Support boxwide TPID option.

JE-57051 l2-cft priorities are now consistently mapped between 613 and 6.15. For additional information refer to Upgrade to 6.15.1.x from pre-6.15.0.x - L2-CFT.

JE-57840 Support optional setting for disabling MAC checking of test traffic: MAC-agnostic Y.1564

JE-58232 Support one-way (near-end to far, far-end to near) jitter measurements:

— Support the measurement of one-way inter-frame delay variation (a.k.a., jitter) measurements during a DMM/DMR test. The one-way results are near-end to far-end and far-end to near-end.

— Support the measurement of the "total" inter-frame delay variation, where the "total" is the sum of the one-way inter-frame delay variations (near-to-far plus far-to-near) for each transaction (that is, DMM/DMR pair) over the duration of the iteration.

— Support the display of both one-way (near-to-far, far-to-near) and "total" inter-frame delay variation measurements via CLI

— Support the retrieval of both one-way adn "total" inter-frame delay variation measurements using SNMP/MIB

— Support the storage of both one-way nd "total" inter-frame delay variation measurements in the history MIB

JE-58233 Support Frame Deliver Ratio metrics during SLM/SLR sessions:

— display via a CLI show

— storage in MIB

— storage in history MIBs.










New in this release 1-3

Introduced in SAOS 6.15.0.255The following features were introduced in SAOS 6.15.0.255:


JE-58234 VC Transform on 5160 device (10G Y.1564 generation and reflection).

JE-58572 Support for new optics:

— XCVR-S80U49 (10 GIG,SINGLE FIBER SM SFP+ OPTIC,LC CONN,80 KM,1550 NM RX/1490 NM TX,EXT. TEMP.,USE W/ XCVR-S80U55)

— XCVR-S80U55 (10 GIG,SINGLE FIBER SM SFP+ OPTIC,LC CONN,80 KM,1490 NM RX/1550 NM TX,EXT. TEMP.,USE W/ XCVR-S80U49)

JE-59466 Allow level 0 CCMs to bypass level checking and filtering/discarding at the level 2 Up MEP. Supported for:

— devices participating in both MPLS and QiQ network segments

— service type EPL

Key Summary

JE-57721 Added support for single-VID and double-VID VLAN translation for CFM and Y.1731.

Key Summary

JE-51725 Add new alarms into Alarm Manager

JE-51697 Support MPLS and QiQ on same port

JE-53684 Support VLLI instance name to 45 characters

JE-53748 Support interoperation of VC Transforms and X-Connect for TDM ports

JE-51585 Support port-baed PFG and double tags

JE-52970 Correct VLAN stacking behavior for IP-interface attached to VS using translate-tag 0

JE-50138 Support virtual switch name to 31 characters

JE-54073 Support STS1 channelization for VCOP OC3 SFP

JE-51218 Support PM bulkstats for services

JE-52167 External alarm input configuration

JE-53452 Support for 390mvi Modular 1G Integrated SDS & NFV Server





1-4 New in this release


Key Summary

JE-35906 Ability to push two tags on UNI Traffic

JE-48137 CEP VCOP OC3 XCVR-CEP001 Support

JE-52167 External Alarm Configuration

JE-53150 Configurable P-Bit on IP Interfaces

JE-44531 Detect and Handle Tagged L2CP Frames

JE-50349 L2 Transform Enhancement



2-1

Upgrade and downgrade considerations2-

Upgrade to 6.15.1.x from pre-6.15.0.x - L2-CFTIn SAOS 6.15, L2-CFT introduces per-profile CoS policy (ignore or fixed). However, fixed L2-CFT priority values have now been condensed to three possible categories (low, medium, high). Low, medium and high priorities can be assigned a priority value from 0-7. The ignore cos-policy forwards untagged control frames with the same priority as untagged data. Fixed cos-policy assigns priority to forwarded untagged control frames according to the profile’s fixed priority category.

In SAOS 6.13, each VS l2-cft configuration could be assigned a priority value from 0-7. Upgrading from an older release to SAOS 6.15 now maps the VS l2-cft priority as below:

Unique vs l2-cft priority values are read from the configuration and assigned to (low, medium, high):

1 Low = lowest VS l2-cft priority2 Medium = Median of unique VS l2-cft priorities3 High = Highest VS l2-cft priority4 Otherwise, default values of low, medium, and high are 2, 4, and 6

respectively.If the VS l2-cft priority matches the untagged data priority, the corresponding L2-CFT profile is assigned ignore cos-policy.

Otherwise, the corresponding L2-CFT profile is assigned a fixed cos-policy and its fixed priority is mapped to one of the 3 categories (low, medium, high) that matches or is closest to its VS l2-cft priority.

Upgrade to 6.15.1.x from pre-6.15.0.x - VC TransformThe upgrade procedure for VC Transforms does not affect the upgrade functionality of existing features.

Downgrading to pre-06.15.01x - VC TransformAll VC Transform objects and VC Transform attributes are removed on the associated virtual circuits.


2-2 Upgrade and downgrade considerations

Upgrade to 6.15.1.x from pre-6.15.0.x - L2 Control Frame TunnelingStarting in SAOS 6.15, L2CFT configuration CLIs have been moved out of the virtual-switch container.

The upgrade procedure for L2CFT converts pre-SAOS 6.15 L2CFT CLIs to equivalent SAOS 6.15 CLIs and ensures that there is no loss of functionality after the upgrade.

During the upgrade to SAOS 6.15, the L2CFT profile instance shall be created with a name that is identical to the old release’s virtual switch name, and it inherits the protocol dispositions from the old virtual switch.

Tagged L2CFs are given the forward action when upgrading from a release that does not support tagged L2CF handling.

Starting in SAOS 6.15, L2CFT supports the handling of two new protocols: E-LMI and PTP Peer Delay. After upgrading to SAOS 6.15 from a pre-SAOS 6.15 release, E-LMI and PTP Peer Delay are assigned the Bridge Block disposition for untagged L2CFs.

Starting with SAOS 6.15, L2CFT introduces globally configurable high, low and medium priorities. The priority of forwarded, untagged L2CFs is assigned to one of these three values. The following algorithm assigns values to high, low and medium priorities on a software upgrade to SAOS 6.15 from a pre-SAOS release:

• If the old-release system is using three or less distinct egress priorities earlier, the system will set low medium and high priorities based on in use after the upgrade.

• If the old-release-based system used more than three distinct egress priorities, it sets its Low and High priority to lowest and its highest in-use .1D priority values after the upgrade. Medium priority is one of in-between in-use or .1D priority. L2CFT instances are mapped to egress priority equal to or nearest to the pre-upgrade values.

Downgrade to pre-06.15.1.x - L2 Control Frame TunnelingThe following limitations apply when downgrading to a release that does not support independent L2CFT profile instances:

• If an L2CFT profile is associated to the virtual-switch EPL member port, the L2CFT profile must have the same name as the virtual-switch to which that port has been added as the EPL member.

• If an L2CFT profile instance is associated with a VS EVPL member, the L2CFT profile instance must have the same name as the untagged-ctrl-vs of the port to which it has been associated.


Upgrade and downgrade considerations 2-3

During a downgrade from SAOS 6.15, the downgrade procedure copies the L2CFT profile instance’s protocol untagged dispositions to an identically named virtual switch. Tagged dispositions are removed during the downgrade.

If the downgraded release does not support recognizing ELMI and PTP Peer Delay, these L2CPs are assigned Bridge-Block disposition. Individual L2CP action of E-LMI or PTP Peer Delay is disregarded.

Downgrading to a release supporting all possible 0-7 untagged L2CFs egress priority, results in L2CFT instances being assigned an egress PCP value equal to its configured value based on the system’s Low, Medium or High priority.

Upgrading to SAOS 6.14.0.x – CFM over MPLS6.13.0.x introduced bundling on MPLS/MPLS-TP Pseudowires. This changed the behavior of CFM over MPLS, making it similar to the behavior of CFM over Q-in-Q. As a result, a CFM service over an EVPL AC on a Raw type VC and EPL AC on a Tagged type VC will become faulted (Instability Fault) when one of the LER nodes is upgraded to 6.13 or later and the other LER node is still running 6.12 or earlier. The fault will clear once the other LER node is upgraded to 6.13 or later.

If you wish to keep the LER running 6.12 or earlier, the CFM service's tagged/ untagged configuration on the LER running 6.13 or later must be changed to match what is being sent by the LER running 6.12 or earlier. CFM service over an EVPL AC on a Raw type VC sends untagged CFM Frames and EPL AC on a Tagged type VC sends tagged CFM frames.

Example- Tagged:If the CFM service on the LER running 6.12 or earlier is sending a tagged CCM, ensure that the CFM service on the LER running 6.13 or later explicitly configures the VLAN tag.

Note: This example assumes that the CFM service has already been configured on 6.13 or later and does not specify a VLAN tag. If this is the case, you will need to delete and recreate the existing service to specify the tag. Otherwise, just create the service as shown and save the configuration.

> cfm mep delete service CustA_CFM mepid 2> cfm mep create service CustA_CFM port 1 vlan 100 type up mepid 2> config save

Example- Untagged:If the CFM service on the LER running 6.12 or earlier is sending an untagged CCM, ensure that the CFM service on the LER running 6.13 or later does not configure a VLAN tag.



Note: This example assumes that the CFM has service already configured on 6.13 or later and specifies a VLAN tag. If this is the case, you will need to delete and recreate the existing service to remove the tag. Otherwise, just create the service as shown and save the configuration.

> cfm mep delete service CustA_CFM mepid 2> cfm mep create service CustA_CFM port 1 type up mepid 2> config save

Upgrading to 6.14.0.x - Traffic profile PIR, CIR and EBSA new constraint introduced by JE-42717 for traffic-profiling prevents setting EBS to zero value when PIR is greater than CIR.

Prior to JE-42717, this command was incorrectly allowed. During an upgrade to 6.14, the system will reject a config line in which PIR is greater than CIR and EBS is zero.

# Create a profile with PIR value greater than CIR value.> traffic-profiling standard-profile create port 1 cir 10048 cbs 4 pir 15040 name testProfile

# Set EBS to zero. > traffic-profiling standard-profile set port 1 profile testProfile ebs 0ERROR: Setting EBS for profile 1 on port 1 -- Traffic Profile Non-Zero EIR cannot have zero EBS

In order to accommodate new constraints for the traffic-profile command, edit the config file as required prior to upgrading to ensure that the EBS value is non-zero for Traffic Profiles in which the PIR value is greater than the CIR value.

Upgrading to 6.14.0.x - MulticastSince compatibility mode is no longer configurable, any commands that reference compatibility-mode when upgrading are deleted before the upgrade. Compatibility mode defaults to IGMPv2 prior to SAOS 6.14 and defaults to IGMPv3 in SAOS 6.14 onwards. This does not change the configuration.

Downgrading to pre-6.14.0.x - MulticastWith the addition of virtual switch as a forwarding domain in SAOS 6.14, any IGMP commands that refer to a virtual switch configuration are deleted before the configuration is applied to a downgraded device. The change in scale numbers means that any configuration that exceeds the scale numbers of older versions is deleted before the configuration is applied to a downgraded device.


Upgrade and downgrade considerations 2-5

Downgrading to pre-6.14.0.x – Access Control ListRemove all Access Control List (ACL) configuration when downgrading to prior releases.

Upgrading to 6.14.0.x – Connectivity Fault ManagementOAM enhanced platforms support accelerated sessions in earlier releases. However, those sessions offload OAM processing to an ASIC and not the enhanced port. ASIC-based OAM sessions are no longer supported and accelerated sessions are offloaded to the enhanced port instead. The ASIC-based OAM supports significantly fewer OAM sessions than the enhanced port.

• Non-accelerated sessions in existing configurations are ensured CFM frame budget resources normally allocated to them.

• Accelerated sessions in existing configurations are retained if possible.

• A session that cannot be offloaded to the OAM enhanced port due to configuration constraints or resource limitations is converted to non-accelerated.

• If a session conversion to non-accelerated causes the CFM frame budget to be exceeded, then the corresponding CFM service is administratively disabled.

Downgrading to pre-6.14.0.x – Connectivity Fault ManagementDuring a downgrade, as many accelerated sessions as possible are retained by offloading them to the ASIC-based OAM module. Any remaining accelerated sessions are converted to non-accelerated.

• Non-accelerated sessions in existing configurations are ensured CFM frame budget resources normally allocated to them.

• A CCM session that cannot be offloaded to the ASIC-based OAM module due to configuration constraints or resource limitations are converted to non-accelerated.

• Accelerated DMM initiator and responder sessions are removed.

• Accelerated SLM initiator and responder sessions are removed.

• Accelerated LMM sessions are no longer exempt from the CFM frame budget. If downgrading an LMM session causes the CFM frame budget to be exceeded, then the corresponding CFM service is administratively disabled.


3-1

Fixed in this release 3-

Fixed in SAOS 6.15.1.147Affect Product Features

Key Release Notes Content Customer Tracking ID

Network Tracking ID

CFM JE-63143 SAOS is now forwarding/multicasting received CCM frames on the 5160.

Configuration Mgmt

JE-63462 SAOS no longer has a leak when the device does not have IP connectivity but has SYSLOG collectors configured. The leak eventually caused a SAOS restart.

Configuration Mgmt

JE-65047 An initialization stage race condition no longer causes SAOS to crash at syncMgrNotifyHalEvtUpdate.

Dataplane - General

JE-63006 The p-tag setting is no-longer removed when the 'port set port loopback off' command is performed on the p-tag resource port. The 'port set loopback' command to change the loopback state is no longer honored for system reserved ports.

Dataplane - Ingress Metering-QoS

JE-64669 The global-mode traffic-profile no-longer requires all virtual switches to be built prior to creating the TP to be created, for traffic to be assigned to the correct profile.

Dataplane - Ingress Metering-QoS

JE-64198 Changing a service Traffic Profile (CIR) no longer causes a Traffic Hit/service disruption.

HPQC#2375

C170129-050

Health Monitoring

JE-63306 Improved the memory available calculation. Previously, the calculation gave an inaccurate (lower) value after the system created/deleted a lot of files (e.g. after a state-dump).









3-2 Fixed in this release

IGMP_Multicast JE-62950 SAOS no longer crashes after issuing CLI command 'multicast-services enable' after vlan remove/add.

C161110-136

IPv6 Mgmt Plane

JE-63474 IPv6 dying gasp now works as expected

MPLS - General JE-63184 An IP/UDP encapsulated LSP Ping from a Cisco router no longer causes Ciena devices to crash.

C161104-022

MPLS - VC JE-64505 SAOS no longer crashes a few minutes after disabling an MPLS VC.

C161212-175

OAM-AIS/LDI JE-64422 AIS fault now recovers as expected after inserting a new node between two NEs over a gmpls-corouted tunnel.

PBB-TE JE-63727 Traffic will now traverse over the new tunnel after setting the PBT VC to a new tunnel. Previously traffic would remain on the old tunnel.

C161223-035

SNMPv3 JE-63081 SNMP User strings now allow all printable characters except the double quote “ ” which has special meaning to the SAOS CLI.

SNMPv3 JE-63237 SNMP Dying gasp on the Loopback management interface no longer has intermittent issues reaching the gateway. Dying gasp frames now always egress the device with a valid gateway MAC address.

C160119-181

SyncE, System Stability

JE-65053 SAOS no longer experiences heartbeat or signal timeout crashes after an NNI port flaps every 2 seconds.

System Stability JE-64500 SAOS no longer crashes after trying to add an AC to a VPWS VS.

C170111-128

Y1731-LM JE-63135 Y.1731 HW frame loss test is no longer reporting incorrect loss counters if the UNI port is a LAG.

C161110-096

Y1731-LM JE-64713 Y.1731 HW frame loss test now reports correct frame loss numbers

C161104-155

Affect Product Features


Network Tracking ID














4-1

Found in this release 4-

Found in SAOS 6.15.1.147



Network Tracking ID

NETCONF JE-62289 CFM LinkTrace is not working on 5150

RFC 2544 JE-63114 Benchmark Reflector Mode vid-out-of-service does not block ingressing traffic on the reflector's port using the specified VLAN when using VLAN translation on the 3960.

Workaround: If benchmark was not disabled prior to changing/adding/removing VLAN translation related to the benchmark port under test, the user can disable benchmark and re-enable it for the VLAN translation to be taken into consideration when setting up the benchmark core switch configuration.

RMON JE-63949 RMON falling alarms are not working.

VLLI JE-65025 VLLI Port stays in down status after provisioning the service from One Control with VLLI enabled while CFM service shows up on both ends.






4-2 Found in this release


5-1

Fixed prior to this release 5-

Fixed in SAOS 6.15.1.124Affect Product Features


Network Tracking ID

Alarm Mgmt, MIBs

JE-62439 SAOS added a missing Timestamp field for alarms in the Alarm MIB.

Configuration Mgmt

JE-62090 Previously, SAOS failed to load an entire config file when the file contained an unsupported ASCII character (e.g. hex code greater than 0x7F). Now, SAOS will fail to load only the line containing the unsupported ASCII character.

INM16/0005145

C160921-085

Configuration Mgmt

JE-62642 SAOS no longer produces a configuration error with "interface ipv6-stack disable" after upgrading from 6.13.0.410 to 6.15.1.124.

Dataplane - VLAN

JE-62751 SAOS now allows the PVID value of a port to be set even if the port is not a member of the VLAN and the AFT is set to untagged.

MPLS - General JE-62557 UNI LAG MPLS AC's are no longer detached from the Virtual-Switch after upgrading from 6.13.0.410 to 6.15.1.114.

MPLS - Tunnel Mgmt

JE-62491 Attempting to create multiple tunnels with the same name (ingress and egress) now cleans up the CLI tab completion tables.

C161020-177

RADIUS JE-62657 SAOS now supports RADIUS over the IP Loopback interface.









5-2 Fixed prior to this release

Fixed in SAOS 6.15.1.114

System Mgmt JE-62598 On the 3906mvi, when an x86 NFV Server Module is installed, the SAOS server module diag-shell now displays properly when system shell global-more is on.



Network Tracking ID

CFM JE-61592 CFM service no longer remains with an "IS" instability alarm after negative test resumes normal operation.

SAOS-188

CLI JE-61176 SAOS virtual-switch create commands now correctly find virtual-circuit names which include numeric strings greater than (2^32) 4,294,967,296.

SAOS-186

Dataplane - Access Interface

JE-60749 Internal port loop-back is no longer limited to 1G on 10G ports.

5160 Defect 2

Dataplane - Virtual Switches

JE-62086 A change in the default setting of translate-tag from 6.13 to 6.14 no longer causes outage for customer upon upgrade. Adds configuration conversion to add translate-tag 0.

C161021-089

Dataplane - Virtual Switches, Dataplane - VLAN, MPLS - General

JE-60319 VLAN 1 traffic will no longer be transmitted on port configured with VPWS Port based AC (EPL).

This fix affects MPLS EPL and EVPL scenarios. When a MPLS EPL is added to a UNI port this UNI port will automatically be removed from the default VLAN. In the EVPL case we will not automatically remove the default VLAN membership, instead we will allow a user to remove the UNI port from the default VLAN via the CLI. Once the default VLAN membership for



Network Tracking ID








Fixed prior to this release 5-3

the EPL/EVPL port has been removed, traffic that is flooded on the default VLAN will no longer egress the UNI port.

Note: In order to resolve the MPLS EVPL use case, a new section was added to the configuration file. This section comes after any MPLS AC configuration and will include default VLAN removal commands.

Dataplane - VLAN

JE-61728 The CVLAN's PCP value is no longer changing to SVLAN's PCP in double tagged vlan-translation use case.

SAOS-207

Dataplane - VLAN

JE-61321 SAOS is now able to create a Virtual-Circuit for a (internal) VALN with a CFM service.

Dataplane - Q-in-Q

JE-60119 A SAOS VC with PTAG configuration no longer stops transmitting out the NNI port if the reserved-port is disabled.

Dataplane - Traffic Classification

JE-61413 SAOS is now able to view, delete or set configured traffic-profiles with numeric only name strings between (2^31) 2,147,483,648 and (2^32) 4,294,967,296 without getting a SHELL AUTOCOMPLETION FAILURE.

SAOS-190 C160916-123

IP ACL JE-61983 SAOS has restored deprecated IP ACL commands as normal commands.

SAOS-206

IP-Routing JE-61531 After link flapping, slow-path software routing will no longer occasionally forward valid packets to the cached destination meant for unreachable prefixes.

Mgmt Interfaces JE-61735 SNMP now supports using the loopback interface with “snmp set preferred-source-address loopback”.



Network Tracking ID










MPLS - General JE-59812 BFD sessions now remain up after node insertion.

MPLS - General, OAM-BFD

JE-62104 The end user's IP-BFD frames are no longer being sent to the CPU after upgrading 5160 to 6.15.0.

C161018-190

MPLS - RSVP-TE

JE-62005 MPLS-TE dynamic LSP tunnel will now forward traffic after IP-BFD flap on the primary link with Status-TLV = OFF on PW.

C161009-021

Dataplane - Traffic Classification

JE-60817 SAOS is now able to view and/or delete configured traffic-profile without getting SHELL PARSER FAILUREs. An issue was previously observed where traffic profile (or other SAOS objects) containing numeric strings between 2,147,483,647 (31 bits) and 4,294,967,294 (32 bits) in the name would randomly become disordered in the CLI shell's internal list(s) making these traffic-profiles unable to be viewed or deleted. This has been corrected.

C160916-123

MPLS - Tunnel Mgmt

JE-60805 SAOS no longer restarts after running an MPLS tunnel traceroute command with encapsulation of non-ip/udp.

C160916-028

PBB-TE JE-60689 VLAN transit switches that have PBT traffic are no longer required to have a PBT license to pass the PBT transit traffic. Without the PBT license, the PBT Tunnel E-type will now default to 0x8100 and pass the PBT transit traffic. When the PBT license is installed, the default PBT Tunnel E-type will change to 0x88a8 (this is the prior default without this change).

C160629-072

Performance Monitoring

JE-61961 PM Bulkstats now sends all statistic sample times as a monotonic uptime, including the sample time for LAG Ports.



Network Tracking ID








RFC 2544 JE-61406 SAOS 3960 Benchmark Reflector with VLAN translation now reflects correctly when using individual VLANs.

SAOS-189

RFC 2544 JE-59066 SNMP mset now works on 390x platforms for setting the benchmark profile fame-size-list.

SNMPv3 JE-62047 SAOS can now create an SNMP viewtree for 'mib-2'.

SNMPv3 JE-60710 SAOS now sends a DyingGasp trap with the agent-addr matching the egress remote address.

C160829-036

State-dump JE-60573 The following commands now properly execute when producing a system state-dump file:

• on MPLS platforms, the 'ais' and 'mpg' commands

• on all systems, the 'iptables' and 'ip6tables' commands

C160628-130

System Mgmt JE-61631 SAOS can now exit the server module by sending CTRL-A CTRL-X via serial port "module diag-shell".

System Stability JE-62071 SAOS no longer crashes when adding or removing an AC from a VPLS VS after removing the first AC added to the VPLS VS.

C161024-124

Y1731-DM JE-61734 Two-way jitter results in Delay History are now correct.



Network Tracking ID











Affects Product Features


Network Tracker ID

CFM JE-58464 SAOS is now able to create a CFM 'Up-MEP' over MPLS and PBT where the CFM PDUs are replicated and forwarded as data on OAM FPGA platforms (5142-931, 5160, 3942, 3938vi).

CFM JE-57690 CFM services now work properly on the 3838 with SAOS 6.15.

CFM JE-54399 A CFM Linktrace "send-mac" operation to a MIP mac address now properly egresses the NTE for a 2-port VS that has learning disabled.

SAOS-94

CFM JE-54350 CFM Linktrace messages (LTM) are now correctly processed on a two-port virtual-switch with learning disabled. When an LTM targeting an unknown mac-address is processed by a MEP or MIP on one port, it is forwarded out the other port, and an LTR is transmitted back to the LTM originator.

SAOS-96

CFM, Dataplane-Virtual Switches, MPLS-Tunnel Protection, MPLS-VC

JE-59677 CFM UP MEP on VPWS AC now processes RX CCM frames when PW is configured on a protected LSP.

Configuration Mgmt, Dataplane - VLAN

JE-59305 Ports “PVID” and “egress-untag-vlan” are no longer lost after reboot when the configuration file contains the information.

C160706-128

Dataplane - General, System Stability

JE-59687 A system crash no longer results when the coreSwitchManager receives a flood of CS_PLTFM_HAL_EVENT_LOS signals (0xc806).

SNTT-33181 C160531-058, C160712-025, C160617-030, C160404-214, C160808-153, C160404-214










Dataplane - L2CFT

JE-57051 In SAOS 6.15, L2-CFT introduces per-profile CoS policy (ignore or fixed). However, fixed L2-CFT priority values have now been condensed to three possible categories (low, medium, high). Low, medium and high priorities can be assigned a priority value from 0-7. The ignore cos-policy forwards untagged control frames with the same priority as untagged data. Fixed cos-policy assigns priority to forwarded untagged control frames according to the profile’s fixed priority category.

In SAOS 6.13, each VS l2-cft configuration could be assigned a priority value from 0-7. Upgrading from an older release to SAOS 6.15 now maps the VS l2-cft priority as below:

SAOS-131

i)Unique vs l2-cft priority values are read from the configuration and assigned to (low, medium, high): :

a. Low = lowest VS l2-cft priority

b. Medium = Median of unique VS l2-cft priorities

c. High = Highest VS l2-cft priority

d. Otherwise, default values of low, medium, and high are 2, 4, and 6 respectively.

ii)If the VS l2-cft priority matches the untagged data priority, the corresponding L2-CFT profile is assigned ignore cos-policy.

iii)Else, the corresponding L2-CFT profile is assigned a fixed cos-policy and its fixed priority is mapped to one of the 3 categories (low, medium, high) that matches or is closest to its VS l2-cft priority.

Dataplane - Q-in-Q

JE56156 Customer yellow traffic (CFI=1) no longer reaches the far end UNI with CFI=0 in the case where a non-zero translate_tag is used in a transparent EVPL service.



Network Tracker ID





Dataplane - Resource Mgmt

JE-58795 MPLS OAM protocols are not part of protocols subject to CPU rate-limiting. Previously, the default rate-limit was 5 PPS,

which caused packet drops with protocols such as BFD when rate-limiting was turned on. To avoid inconsistency with the CPU rate-limiting feature that does not include MPLS OAM, they have been removed from CPU rate-limiting.


JE-58873 Removing a physical port that is part of a LAG from a VS no longer causes the node reboot.

Dying Gasp JE-57806 The “chassis show capabilities” output has been updated to indicated that dying-gasp is not supported.

IGMP_Multicast JE-57817 Devices configured with "querier-compatibility-mode v2" no longer send IGMPv3 group queries on the active V2 interface, even when V3 hosts have been joined.

C160223-121

IGMP_Multicast JE-57814 IGMPv3 group queries sent by 6.x devices now include the "Router-Alert field" in the IP header. Previously this field was missing, which could result in the V2 host ignoring the query

IGMP_Multicast JE-57998 When the IGMP query engine is OFF, SAOS no longer sends a IGMP v3 Group Specific Query.

C160223-121

Link Agg - Manual JE-55938 On the 5142 and 5160 devices, the “port over-provisioned” alarm is now raised when adding a port on an aggregate while other software delivery system platforms are sending.

LLDP JE-58529 The number of LLDP mgmt addresses displayed in both the CLI and SNMP has been increased from 8 to 30.

C160406-042



Network Tracker ID











LLDP JE-58359 SAOS now accepts a LLDP PDU message size of up to 1500 bytes. Previously, SAOS ignored a neighbor's LLDP PDU message if it was larger than 1024 bytes.

C160519-014

MIBs JE-57450 wwpLeosTrafifcProfileStdName MIB now correctly renames profiles when the new profile-name has less characters than the original.

Mgmt Interfaces JE-57044 The SAOS upgrade package now contains the complete set of XML CLI definition files, not just the top level mainShellMenu.xml file.

MPLS - General JE-59364 When an IP interface is deleted, SAOS now checks to see if there are dependent objects (such as Ingress, Egress, or transit tunnels) and prevents the deletion If dependent objects are found. It also displays a warning such as the following:

“MPLS tunnel configured on this IP interface. Unconfig mpls tunnel running on this interface first”

To delete an IP interface, delete all the tunnels pointing to the interface before the deleting it.

The following commands can be used to identity the dependent IP interface for the tunnels:

gmpls tp-tunnel show matching-lsp next-hop <>

gmpls tp-tunnel show matching-lsp prev-hop <>

gmpls tp-tunnel show matching-lsp fwd-out-ip-intf <>

gmpls tp-tunnel show matching-lsp rev-out-ip-intf <>

C160627-044

MPLS - General JE-57635 AIS is now triggered upon an IP BFD session failure when using static ARP.

C160311-015



Network Tracker ID






MPLS - General, OAM-BFD

JE-57782 If a port is used as an MPLS Attachment Circuit (attached to a VPLS VS), MPLS is disabled on the port. Previously, removing the port from the Attachment Circuit did not re-enable MPLS. SAOS now re-enables MPLS once the port is removed from the VS.

C160404-047

OAM-BFD JE-58657 After experiencing a fiber cut, between MPLS-TP, static co-routed tunnels, the BFD status is accurately reported on both sides of the fiber cut. Previously, the BFD could report as up on one side and down on other.

C160601-043, C160313-026, C160516-167

RFC 2544 JE-58299 Benchmark frame loss results are now rounded off to near 0.01% (hundredths of a percent).

SNMPv3 JE-58550 SNMP Community strings now allow all printable characters except the double quote '"' which has special meaning to the SAOS CLI.

System Mgmt JE-58673 A limited user can no longer reboot the 5160 device.

System Mgmt JE-57731 The local date/time of “system show time” is now correct in SSH sessions.

C160329-129



Network Tracker ID








Network Tracker ID

CFM JE-57552 A CFM Linktrace "send-mac" operation to a MIP mac address now properly egresses the NTE for a 2-port VS that has learning disabled.

SAOS-94, SAOS-135

CFM JE-57713 CFM Linktrace messages (LTM) are now correctly processed on a two-port virtual-switch with learning disabled. When an LTM targeting an unknown MAC address is processed by a MEP or MIP on one port, it is forwarded out the other port, and an LTR is transmitted back to the LTM originator.

SAOS-96

Dataplane - General

JE-57548 On the 3930 and 3931, when the traffic-services egress-port-queue-group is set to EIR of 100000 SAOS no longer shows the value as 100032 after a configuration show/save.

SAOS-143

Dataplane - L2CFT

JE-57882 In SAOS 6.15, L2-CFT priority values have been condensed to three possible l2-cft per-profile priority categories (low, medium, high). In SAOS 6.13, each VS l2-cft configuration could be assigned a priority value from 0-7. Upgrading from an older release to SAOS 6.15 now maps the VS l2-cft priority to one of these three categories:

• low: 0

• medium: 1-4

• high: 5-7

SAOS-131

Dataplane -Q-in-Q

JE-58171 Inner C-VID DEI/CFI values are now correctly preserved for Customer traffic. Previously, a CFI=1 would reach the far end UNI as CFI=0 for Translate_Tag=Non_zero in Transparent EVPL Service.

SAOS-141

Dataplane - VLAN JE-58107 When using double VLAN translation, SAOS no longer forces the CVLAN DEI bit to 0 when it's sent out of egress port but correctly retains the ingressing CVLAN DEI bit.

SAOS-140




G.8032 JE-58218 On the 3903, 3904, 3905, and 3906 platforms that originate or forwarded CFM, IGMP or PTP traffic, SAOS will no longer flood traffic through a blocked VLAN or incorrectly drop traffic on an unblocked VLAN.

C160427-097

MPLS - General, SyncE, TDM PWE

JE-57807 SAOS TDM Sync event reporting no longer causes a continuous SAOS reset.

System Mgmt JE-57730 SSH sessions now report the correct time after updating the system time.

SAOS-142 C160329-129



Network Tracker ID

Alarm Mgmt JE-55472

The wwpLeos8021xAuthAuthenticationEvent trap now contains accurate data in the varbinds.

ARP, MPLS - VC JE-55246

The 5142 and 5160 devices no longer push VTAG of 4095 when protection PW is configured with protected tunnels. Formerly the push of VTAG 4095 caused ARP/ping failures.

C151221-033

ARP, CLI, System Mgmt, System Stability

JE-54411

Use of Static Arp entries with a VS Member IP Interface no longer generates a config error on reboot.

ARP JE-54296

An ARP request now reaches the CPU on the PBT-based remote interface from the UNI port attachment.

C151105-058

CFM JE-55713

CFM and Y.1731 frames received by a subscriber port with the "translate-tag" option configured are no longer discarded without being processed by local MEPs or forwarded. This issue only impacted certain device platforms (5142-931, 5160, 3942, 3938).



Network Tracker ID








CFM, Y1731-DM JE-55573

Y.1731 DMM and DMR frames are now correctly transmitted out a subscriber port when the "translate-tag" option is configured on it.

CFM JE-55932

CFM: linktrace now works on a VS service with UNI UP MEP when Evpl has translate-tag 0.

CFM JE-52509

A system with an OAM scale greater than 13K no longer crashes when CFM is globally enabled and then disabled.

CFM JE-51697

Prior to SAOS 6.15 it was not possible to have a VLAN and an MPLS UNI coexisting on the same port. VLAN and MPLS EVPLs can co-exist on the same port. However, a VLAN and MPLS EPLs cannot exist on the same port. When a VLAN and an MPLS EVPL co-exist on the same port, untagged packets will be dropped unless the port is configured with untagged data virtual switches or untagged control virtual switches.

CLI JE-54368

Commands longer than 447 characters are now being supported by SAOS nodes.

When using the default ESM Device backup template with append IP and date sending the username and secret hash, the command no longer fails in ESM stating ERROR: Bad Value. This command line now accepts the full secret hash.

HPQC#2185 C151028-203

Configuration Mgmt

JE-57313

When the temperature high threshold is set to the default value on a 3903x, the dirty bit for configuration change is set. The “config show difference-from-saved” now shows the configuration change.



Network Tracker ID









Dataplane - Egress QoS

JE-37549

On 3938, 3942, 5142 and 5160 devices, EPL VS members on Q-in-Q virtual switches that use an encap-cos-policy of “port-inherit” resolve an S-Tag PCP value by copying the PCP value on the C-Tag. This behavior has been adjusted to match the behavior of EVPL VS members on Q-in-Q virtual switches.

Dataplane - General

JE-53946

bcmHalStatsDetach & bcmHalClassifierEntryRemove faults no longer occur while removing the aggregation member port from the aggregation.

Dataplane - General, Link Agg - LACP, Link Agg - Manual

JE-57233

A BCM error no longer results when adding and removing a physical port from linkagg and adding it to the vc VLAN.

Dataplane - Q-in-Q

JE-54578

VC transform NNI port cannot be mirrored or mirroring. This configuration is now blocked in the CLI.

Dataplane - Q-in-Q

JE-53959

VC Tx stats no longer count the Pvlan 4 bytes on a VC that uses VC transform.


JE-53666

VLAN tagged MPLS labeled traffic is no longer dropped on EPL UNI attached to default mode VS.

C151019-189


JE-54950

The 3930 device no longer experiences a crash while removing a port/vlan member from the virtual switch using the CLI.

C151220-005

DNS JE-55879

A security fix is implemented for CVE-2015-7547 (glibc getaddrinfo() stack-based buffer overflow). This prevents a remote attacker from creating a specially crafted DNS response which can cause libresolv to crash or execute code with the permissions of the user running the library.

IEEE 1588v2 JE-55324

A "P-Tag" OC slave can now maintain a session with a "P-Tag" BC.



Network Tracker ID












IEEE 1588v2 JE-55152

On the 3930, PTP/1588v2, the phase protection group no longer periodically transitions from phase locked, to holdover and back to locked.

Link Agg - LACP JE-54397

The command “aggregation create” no longer fails silently on 5150, 5142, 5160, 3942 platforms when a dash “-“ is used in the agg name together with a leading digit.

Link Agg - Manual JE-55814

On 5142 and 5160 devices, the “port overprovisioned” alarm is now raised when adding a port on an aggregate while other software delivery system platforms are sending.

HPQC#2203 C160112-004

Link Agg - MC-LAG, TDM PWE

JE-55989

When Inter Chassis Lag and CFM are configured, the save configuration now loads CFM services after a chassis reboot.

Logging, System Diagnostics

JE-55432

The setting for panic_on_oops is now changed so that the system will panic rather than linger on in an unhealthy state after certain errors.

Mgmt Interfaces JE-54908

The wwpLeos8021xNotificationAuthenticationEvent now contains the correct varbind values.

MPLS - General JE-57178

There is no longer a delayed AIS upon IP BFD session failure when using dynamic ARP.

C160311-015

NETCONF JE-53839

An error is no longer returned when an egress untagged vlan and pvid is modified in NETCONF, even though the egress untagged VLAN is shown.

NTP JE-53772

When using IPv6 NTP in multicast mode, changing the management interface from local to remote interface no longer causes the NTP to lose synchronization.



Network Tracker ID












NTP JE-43026

NTP does not sync with IPv6 NTP multicast server after reboot with local interface enabled. *Workaround*: Disable and then enable NTP or disable the local interface.

NTP JE-54640

NTP daemon now synchronizes with an NTP IPv6 multicast/broadcast server when configured with “interface ipv6-stack set accept-router-advertisement on”.

Port - Mgmt/Statistics

JE-49453

“port set port untagged-data-vs” is now moved to the appropriate section of the configuration where it applies. This places an MPLS AC in the Virtual-Switch MPLS AC section, and a Q-in-Q attachment in the Virtual-Switch Configuration section.

Port - Mgmt/Statistics

JE-55964

When ports 9 to 12 are allowed to set mode to SFP on the 3960, an error message is now given on the first attempt, and this is not allowed. The error was previously happening on the second attempt.

SAOS-124

RFC 2544 JE-55753

pcp-bw-allocation profiles are no longer in an error state when the PCP allocations add up to 100%.

RFC 2544 JE-50334

The Benchmark Port Statistics no longer increment with every MCAST IPv6 NTP packet that ingresses the benchmark port. The IPv6 MCAST NTP packets are on a different VLAN than the benchmark profiles.

SAOS-78

SNMPv3, TDM PWE

JE-55692

When a UNEQ-P alarm is raised, an OC3 port shows a "Path Unequipped" alarm. The SNMP OC3 sonetPathCurrentStatus did not show a defect, however, this has been fixed.



Network Tracker ID










SSH_SFTP JE-55184

The SFTP client now explicitly indicates when an SSH connection is closed with an "SSH Disconnect" message. This message indicates an appropriate status/result string, including: * successful file transfer * unsuccessful file transfer due to: ** inaccessible file server ** bad login credentials ** file-not-found on the server (in response to a 'get')

SSH_SFTP JE-55899

The SAOS SFTP-Server now transfers files to an SFTP client in the following scenario: - sftp-server is enabled (it is disabled by default) - sftp server enabled (with key generated) - user auth set for tacacs as priority 1 and local as priority 2 - tacacs authentication is skipped (for example, tacacs is globally disabled)

SSH_SFTP JE-55962

The SAOS SFTP-Server now transfers files to an SFTP client in the following scenario: - SAOS's SFTP-Server enabled (and SSH enabled with key generated) - SAOS user auth set up for radius is primary and local as secondary authentication methods. - SAOS radius configuration set up to authenticate to a valid, reachable server. - The sftp-client that is fetching the file is using curl (for example a curl command line from any linux workstation or using xftp to transfer file from another SAOS device.

When the file transfer is attempted, after successful authentication from the radius server, the file transfer will now proceed, with an non-meaningful error returned to the sftp-client (actual curl error might report "Timeout waiting for response from SFTP subsystem")



Network Tracker ID






System Mgmt JE-56739

"Chassis reboot time" functionality now works as expected when the system has time-offset set. Attempting to set with a valid time could previously fail with an error, or could result in a reboot being scheduled at a time different than what was expected. This has been resolved.


On the 3916 platform, the system set time-offset now takes affect on the system show time and no longer shows the wrong time.

System Stability JE-55230

Passing an unresolved IP address to the DyingGaspHelper no longer results in a crash.

TACACS JE-55217

TACACS accounting now works when there are no global and authorization servers.

TDM PWE JE-54165

The "ACR Locked" state no longer triggers a "Port Alarm" state. Instead of reporting "ACR Locked" as an alarm, it is now reported as an event.

TDM PWE JE-55271

The order of the OIDs in SNMP v1 Linkup/Linkdown traps for TDM has been amended, and the traps now work as intended.

TDM PWE JE-54613

Underrun and Overrun events are now properly detected by the OC3 AV SFP.

Y1731-DM JE-49100

When running delay measurement tests on a VS on the 5142/5160, the DMM priority is only used in the CVID TAG and now gets copied into the SVID TAG.



Network Tracker ID













Key Release Notes Content Customer Tracking

ID

Network Tracker

ID

SSH_SFTP JE-55184 The SFTP client now explicitly indicates when an SSH connection is closed with an "SSH Disconnect" message. This message indicates an appropriate status/result string, including:

• successful file transfer

• unsuccessful file transfer due to:

— inaccessible file server

— bad login credentials

— file-not-found on the server (in response to a 'get')

TDM PWE JE-55271 The order of the OIDs in SNMP v1 Linkup/Linkdown traps for TDM has been amended, and the traps now work as intended.




6-1

Found in previous releases 6-





Network Tracking ID

SNMPv3 JE-63237 SNMP Dying gasp on the Loopback management interface has intermittent issues reaching the gateway. As a result, the dying gasp sometimes does not appear to egress the device because it contains a gateway with a zero mac address.

C160119-181

Affects ProductFeatures

Key Release Notes Content CustomerTracking ID

NetworkTracker ID

Configuration Mgmt

JE-62090 SAOS fails to load configuration files with ASCII extended characters (with 0x80 bit on).

INM16/0005145

C160921-085

MPLS - Tunnel Mgmt

JE-62491 Attempting to create multiple tunnels with the same name (ingress and egress) doesn't clean up CLI tab completion tables.

C161020-177





6-2 Found in previous releases



Affects ProductFeatures

Key Release Notes Content CustomerTracking ID

NetworkTracker ID

CFM JE-59377 On 5160, the accelerated CFM service with DOWN MEP does not come up when NNI is LAG.

Workaround: NA.

Dataplane - General

JE-58972 The “chassis set oam-services-port-role oam-services” gets reflected in the configuration after the reboot if “config show brief” is used before the reboot. No “config save” is done before the reboot.

Workaround: Do not use "config show brief" before rebooting.

Dataplane - General

JE-59516 Phy Loopback is not working on Copper SFP on the 5142 platform and other platforms.

System Mgmt JE-59824 When one of the egress queues for a specific port is set to 100Mbps, its speed then gets normalized to 100032 Kbps. When the port speed tries to change to 100Mbps, it displays an error that the egress port is oversubscribed. This results because it checks for the value 100000 Kbps with 100032 Kbps set on the egress queue and tit fails.


Key Release Notes Content Network Tracker

ID

Customer Tracking ID

Alarm Mgmt JE-55549

Not all alarms have corresponding traps. Refer to Fault Management documentation for more information.







Found in previous releases 6-3

CFM, Y1731-DM, Y1731-SLM

JE-56237

In response to Canoga Perkins DMM, CFM DMR contains only the original T1 timestamp and Ciena T2 timestamp. Interop is affected. Workaround: Initiate sessions from the Ciena device.

CFM JE-57515

When HW CFM service linkagg MEP is deleted and replaced by a physical port, it was not removed in hardware and caused a CC fault on the service. Workaround: Delete the remote MEPs and then create the MEPs on the physical ports.

CFM JE-56389

SDS devices do not set a T3 timestamp to ingress DMM when Version 1 is used instead of Version 0 DMM. Workaround: Make Ciena the originators so that Version is always 0.

CFM, Dataplane - Q-in-Q

JE-57297

CFM frame-loss results are wrong with the wrong statistics in “cfm frame-loss show” when the frame-loss session is started on a service in accelerate mode for UP-MEP CFM service on a VS that has a translate-tag set. Workaround: None

CFM JE-57180

cfm mip-level-enforcement off no longer accepts CFM messages on MIPs that are at a lower MD level than the MIP is created on. Workaround: Create MIPs at every level you wish to have them work at.

SAOS-114

Dataplane - Egress QoS

JE-57292

Service-based hierarchical egress queuing is not supported in conjunction with VC Transforms. Workaround: None

Dataplane - FCoS_RCoS, NETCONF

JE-56631

Special characters cannot be part (in the beginning or in the ending) of Frame-to-Cos Map name when configured by CLI. However, when a special character isin the middle of the Frame-to-Cos Map name, it is accepted. Workaround: Special characters should not be used in cos-map names.



ID











Dataplane - General, NETCONF

JE-56673

Traffic-profiles with multiple DSCP classifiers do not show up correctly in Netconf. Netconf currently only supports single values for DSCP classifiers, and displays only the lowest value when multiple values are set via the CLI. Workaround: Use only one DSCP classifier per traffic-profile when using Netconf

Dataplane - General, NETCONF

JE-57463

Traffic profiles with multiple ip-prec classifiers do not show up correctly in Netconf. Netconf currently only supports single values for ip-prec classifiers and displays only the lowest value when multiple values are set from the CLI.Workaround: Use only one ip-prec classifier per traffic profile when using Netconf.

Dataplane - Q-in-Q JE-56469

The inner PCP value is not preserved in the UNI to NNI direction on double-tagged traffic on a translate-tag 0 member. Workaround: None

Dataplane - Q-in-Q JE-56156

Customer yellow traffic (CFI=1) is reaching the far end UNI with CFI=0 in the case wher a non-zero translate_tag is used in a transparent EVPL service. Workaround: None


JE-56258

The TX/Rx statistics for a virtual circuit are all zero after MAC learning is enabled, regardless of MAC being learned. Workaround: Enable VC Stats after enabling MAC learning or reboot the device after enabling MAC learning when VC stats are enabled.

Dataplane - Virtual Switches, Dataplane - VLAN

JE-56850

When VLAN and MPLS UNI are configured on a port, the PVID configuration does not take effect, and the untagged packet is dropped on ingress if neither untagged-data-vs or untagged-ctrl-vs is set. The egress-untag-vlan still works in the egress direction if configured with the port VLAN. Workaround: None



ID










Dataplane - VLAN JE-57237

The CVLAN DEI bit is set to 0 in a double VLAN translation. Workaround: None

DHCP Relay JE-57171

A VLAN can be added to a virtual circuit even if the VLAN is already associated with the DHCP relay. Workaround: Add the VLAN to the DHCP relay first.

Fault Mgmt JE-57172

The NE is not sending the varbins for the cienaCesVlliFaultTrap in the ordered specified by CIENA-CES-VLLI-MIB. The order should be 1. cienaGlobalSeverity, 2. cienaGlobalMacAddress, 3. cienaCesVlliInstanceGrpId, 4. cienaCesVlliInstanceId, 5. cienaCesVlliInstanceGroupName, 6. cienaCesVlliInstanceName

Instead the order is 1. cienaGlobalSeverity, 2. cienaGlobalMacAddress, 3. cienaCesVlliInstanceName 4. cienaCesVlliInstanceGroupName 5. cienaCesVlliInstanceId 6. cienaCesVlliInstanceGrpId

The pertinent varbind OIDs have been replaced with their text equivalents in the log. Workaround: None

Link Agg - LACP, NETCONF

JE-56812

The LAG port created through the CLI does not get synced in the Netconf queue-group profile on the 5160 device. Workaround: Disable and enable NETCONF in SAOS.

NETCONF JE-57012

Adding a port to the FC profile succeeds in NETCONF even though the port is already attached to another FC profile. Workaround: None



ID









NETCONF JE-56728

In NetConf, configuration changes in the logical-ports leaf does not roll back when there is an error. Workaround: None

NETCONF JE-55480

The port description cannot be set under the logical port through NETCONF. When the port description is set through the CLI, Netconf <get-config> retrieves the port description value correctly, but it appears in both logical port and interfaces. Workaround: Set the port description under interfaces.

NETCONF JE-56828

When multiple dot1dpri are configured in a traffic-profile in NETCONF, removing one dot1pri removes all dot1dpri in this traffic profile. Workaround: None

NETCONF, YANG JE-57505

An attempt to create or modify a broadcast-containment profile through Netconf fails if resource-mode is "off". Workaround: None.

NETCONF JE-57010

The “rollback-on-error” error option does not work properly for flood-containment-profile creation in NETCONF. Workaround: Disable and enable NETCONF.

NETCONF JE-56987

In NETCONF <get-config> cannot get the correct rate result for the broadcast-containment filter created through the CLI. Workaround: Use the CLI to disable and enable NETCONF.

NETCONF JE-57025

Netconf <get-config> gets incorrect results after broadcast-containment filter is changed through the CLI. Workaround: Disable and enable NETCONF in SAOS.



ID











NETCONF JE-56420

For 5142 and 5160 devices, newly created linkagg in NETCONF is not shown in Egress QoS modules: queue-group-profile, scheduler-profile, queue-group, scheduler until the configuration is saved and the device is rebooted. Workaround: None

NETCONF JE-57060

The long flood containment profile name is not accepted by NETCONF client by CLI. The CLI accepts the partial FC profile name. This also results in the NETCONF client being out of sync with the NETCONF server, meaning that the CLI has the configuration, but the NETCONF client does not. Workaround: None

NETCONF JE-56968

The broadcast-containment filter created through NETCONF, the CLI incorrectly shows the filter rate of “0”. Workaround: None

NETCONF JE-57080

NETCONF:"rollback-on-error" error option does not work properly for flood-containment-profile modification. Workaround: N/A.

NETCONF JE-56981

Netconf <get-config> on a flood-containment-profile returned multiple containment objects after setting a broadcast-containment filter with different containment-classification values through the CLI. Workaround: Use the CLI to disable and enable NETCONF.

NETCONF JE-57144

For 5142 and 5160 devices, egress-qos scheduler-profile shaper bw (cir) and shaper burst size (cbs) are displayed as 0s in NETCONF. Workaround: None

NETCONF JE-57147

NETCONF fails to set the dynamic-max-queue-depth for queue-group-profile on a 5160 device. Workaround: None



ID











NETCONF JE-57146

Netconf <get-config> on queue-group-profile cannot get correct dynamic-max-queue-depth results for 5160. Workaround: N/A.

NETCONF JE-56869

When errors are encountered during cos-to-frame profile creation through Netconf, the profiles are not created in SAOS but are still visible from NETCONF, until the NETCONF server is disabled and re-enabled.

NETCONF JE-57261

NETCONF <get-config> cannot get the correct FP results after setting the port egress-untag-vlan through NETCONF <edit-config>. Workaround: Disable and enable NETCONF.

NETCONF JE-57121

NETCONF does not rollback the config upon error when creating greater than the max FTC profiles. Workaround: Only create up to the max number of FTC profiles

NETCONF JE-56790

In NETCONF, the rollback-on-error on the logical port egress-frame-cos-policy does not function correctly. Workaround: None

NETCONF JE-56563

Traffic-profiles with multiple dot1dpri classifiers do not show up correctly in Netconf. Netconf currently only supports single values for dot1dpri classifiers, and displays only the lowest value when multiple values are set via the CLI. Workaround: Use only one dot1dpri classifier per traffic-profile when using Netconf

NETCONF JE-57145

For 5142 and 5160 devices, setting egress-qos scheduler-profile port shaper bw (circ) and burst size (cbs) fails in NETCONF, but succeeds in the CLI. Workaround: None



ID











NETCONF JE-56941

The congestion-avoidance-profile created through the CLI is not synchronized in NETCONF on the 5160 device. Workaround: Use the CLI to disable and enable NETCONF.

NETCONF JE-56531

Netconf <get-config> shows incorrect LAG port name in egress-qos. The LAG port name in egress-qos should be the same as the logical port name. Workaround: None

NETCONF JE-56692

In NETCONF, most attributes in the congestion avoidance profile in the egress-qos model are missing. Workaround: None

NETCONF JE-56780

The fixed-color attribure is missing in the logical-port YANG model. Workaround: None

NETCONF JE-56514

The NETCONF virtual switch member encap-cos-policy and encap-fixed-dot1dpri are missing in FP. Workaround: None


"wwpLeosChassisResourcesFreeAggrs" shows an incorrect and out-of-range value as per object description on 5142. Workaround: N/A

TDM PWE JE-57268

A software downgrade from 6.15.0 to 6.14.x or earlier will throw CFM config errors if the user has CFM configured on an OC3 VC VLAN. Workaround: Ignore the error, or remove any CFM configuration on an OC3 VC VLAN prior to the downgrade.

VLLI JE-56145

VLLI instance group names which contains embedded spaces are removed after a software downgrade. Workaround: Do not use spaces in the name.



ID















ID

Network Tracker

ID

CFM, Y1731-DM

JE-55573

Y.1731 DMM and DMR frames are not correctly transmitted out a subscriber port when the "translate-tag" option is configured on it. The frames either fail to egress the device or are sent with an extra VLAN tag. Workaround: None.

CFM JE-55932

CFM: linktrace does not work on a VS service with UNI UP MEP when Evpl has translate-tag 0. Workaround: None.

CFM, Dataplane - Q-in-Q

JE-54307

Accelerated CFM services are not functional for a down MEP on a virtual-switch subscriber member interface. Received CFM/Y.1731 frames tagged with the subscriber VLAN are not processed by the accelerated MEP in hardware. In this state, the local CFM service appears to be fault free, but its accelerated MEP is actually transmitting CCMs with an RDI fault indicator. Workaround: None.

CFM JE-55713

CFM and Y.1731 frames received by a subscriber port with the "translate-tag" option configured are discarded without being processed by local MEPs or forwarded. This issue only impacts certain device platforms (5142-931, 5160, 3942, 3938). Workaround: None.

CFM JE-54276

Accelerated CFM services do not support untagged CFM/Y.1731 session operation over a network facing interface. This restriction refers to a CFM service created on a port's egress-untagged-vlan and pvid VLAN. Although this configuration is accepted, untagged CFM/Y.1731 frames received by the port are not processed by the accelerated MEP in hardware. In this state, the local CFM service appears to be fault free, but its accelerated MEP is actually transmitting CCMs with an RDI fault indicator. Workaround: Disable the CFM service, unsetting its "accelerate" attribute, and then re-enabling it.








CLI JE-54387

The commands "interface show resolver" and "interface set resolver-timeout x" are both non-functional and are therefore deprecated. Though present in the CLI, they do not appear in command completion. Workaround: Not applicable.

Dataplane - Q-in-Q

JE-54578

VC transform NNI port cannot be mirrored or mirroring. However, that configuration is not blocked in CLI. Workaround: Do not use this configuration.

Dataplane - Q-in-Q

JE-55768

When VS EVPL translate-tag=0, the traffic egress UNI has C-tag PCP set to S-tag PCP and DEI set to P-tag DEI. The expected behavior is that C-tag PCP and DEI should be set based on S-tag PCP and DEI. Workaround: None.

Dataplane - Q-in-Q

JE-53959

VC Tx stats do not count the Pvlan 4 bytes on a VC that uses VC transform. Workaround: None.


JE-53680

VS Member Interface Priority changes are handled incorrectly when the VC-VLAN is modified. The same issue is present when changing the MTU value to an invalid value on the VS member IP Interface (for example, setting it to 9216 when the parent S-VLAN MTU is only 1500). Workaround: Reboot and then a config error will be produced when adding the vs-member IP Interface, thereby returning the system to its original state. Alternatively, remove the VS Member and add it again with the proper CVid.

IEEE 1588v2

JE-55324

A "P-Tag" OC slave cannot maintain a session with a "P-Tag" BC. Workaround: None.

JITC Security

JE-54354

Traceroute takes long time on a 3903 if enhanced security is enabled: {{system security set security-mode enhanced}} Workaround: If using the traceroute command from the CLI, the ICMP port unreachable under the interface should be set to *on* for the appropriate IP stack, for example {{interface ipv4-stack set icmp-port-unreachable on}}



ID

Network Tracker

ID










Link Agg - MC-LAG, TDM PWE

JE-55989

When Inter Chassis Lag and CFM are configured, the save configuration will fail to load CFM services after a chassis reboot. Workaround: Add CFM services to ICL after a reboot.

RFC 2544 JE-55355

When a large number of EVCs (~750) are configured on a 5142, some benchmark commands may take longer than 20 seconds to respond. Workaround: None.

RFC 2544 JE-55861

Untagged benchmark test fails for Transparent Service when the following three conditions exist: - VC transform is NOT enabled on the VS - VS UNI port vs-l2-transform = “i-stamp:push,e-match-pop:stamp” - UNI port untagged-data-vid is configured Workaround: None.

RFC 2544 JE-55753

Some pcp-bw-allocation profiles are in an error state even though the PCP allocations add up to 100%. As a result, error messages are thrown when corresponding benchmark profiles are started. Workaround: Use pcp-pw-allocation combinations that show a good status.

SNMPv3, TDM PWE

JE-55692

If an UNEQ-P alarm is raised, as indicated under the TDM VC show command, the SNMP OC3 sonetPathCurrentStatus does not show a defect.Workaround: None.

SSH_SFTP JE-55899

The SAOS SFTP-Server will not transfer files to an SFTP client in the following scenario: - sftp-server is enabled (it is disabled by default) - sftp server enabled (with key generated) - user auth set for tacacs as priority 1 and local as priority 2 - tacacs authentication is skipped (for example, tacacs is globally disabled) Workaround: None.



ID

Network Tracker

ID









SSH_SFTP JE-55962

The SAOS SFTP-Server will not transfer files to an SFTP client in the following scenario: - SAOS's SFTP-Server enabled (and SSH enabled with key generated) - SAOS user auth set up for radius is primary and local as secondary authentication methods. - SAOS radius configuration set up to authenticate to a valid, reachable server. - The sftp-client that is fetching the file is using curl (for example a curl command line from any linux workstation or using xftp to transfer file from another SAOS device.

When the file transfer is attempted, after successful authentication from the radius server, the file transfer will not proceed, with an non-meaningful error returned to the sftp-client (actual curl error might report "Timeout waiting for response from SFTP subsystem") Workaround: None.

TACACS JE-55217

TACACS accounting fails when there are no global servers and no authorization servers. Workaround: Use global tables, or include an entry in the authorization tables even if you are not doing authorization.

TDM PWE JE-54613

Underrun and Overrun PM counters may not increase properly in extreme delay variation by the OC3 AV SFP.Workaround: None.



ID

Network Tracker

ID






Found prior to SAOS 6.15.0.102



ID

Network Tracker

ID

ARP, CLI, System Mgmt, System Stability

JE-54411

Use of Static Arp entries with a VS Member IP Interface will generate a config error on reboot. Workaround: Add the static ARP entry after the reboot is complete.

CFM JE-55167

On an EPL service, specifying vlan 0 in the cfm delay send command returns an "invalid range" failure. Workaround: Do not specify vlan option with a vlan of 0 as part of cfm delay send command.

pending

CLI JE-54368

Commands longer than 447 characters are not being supported by SAOS nodes.

When using the default ESM Device backup template with append IP and date sending the username and secret hash, the command fails in ESM stating ERROR: Bad Value. This is because command line does not accept the full secret hash. It truncates at around the 447 character mark.

Workarounds: 1) If the cleartext passwords are substantially shorter than the 259-character encrypted secrets, use "password" instead of "secret". If ssh is being used as a control channel, passwords will still be protected against exposure. If using telnet they'll be vulnerable to capture. OR 2) Split the offending line into two lines by setting the configuration for the default sftp server. Then use the default server to offload the file. Note that this is not viable if more than one session is going to try to send things to different places at the same time.

HPQC#2185

C151028-203






DNS JE-55879

A stack-based buffer overflow exists in the way the libresolv library performs dual A/AAAA DNS queries. A remote attacker can create a specially crafted DNS response which can cause libresolv to crash or, potentially, execute code with the permissions of the user running the library.

Note: This issue is only exposed when libresolv is called from the nss_dns NSS service module. https://access.redhat.com/security/cve/cve-2015-7547 .

Workaround: None.

Link Agg - MC-LAG

JE-52472

Primary member port of an agg never comes to distribution after enabling DHD port after RG reboot. Workaround: None.

MPLS - General

JE-55599

PW traffic stops forwarding upon disable/enable of ip-interface tied to the RSVP-TE tunnel. Workaround: None.

C151108-012

TACACS JE-55883

Software BFD session//Tunnel bounces upon creating new user or authenticating user with TACACS/RADIUS.

Workaround:

1) Use hardware BFD. (Note: it is not known at this point what else can get impacted.) 2) Avoid 10msec sessions. 3) Avoid remote authentication, and manipulation of local user accounts, while 10msec sessions are running.

C160210-127

MPLS - General

JE-57093

No AIS is triggered upon IP BFD session failure when using static ARP.

Workaround: None

C160311-015

MPLS - General

JE-57404

Replicated syslog notifications from AIS are occurring on the LERs.

Workaround: None

C160311-015



ID

Network Tracker

ID








39XX/51XX Service Delivery, Aggregation and Virtualization Switches

Customer Release Notes

Copyright© 2016 - 2017 Ciena® Corporation. All rights reserved.

SAOS 6.15.1.147 Publication: 009-3265-020 Document status: StandardRevision FDocument release date: March 2017

CONTACT CIENAFor additional information, office locations, and phone numbers, please visit the Ciena web site at www.ciena.com

customer release notes - ciena portal security39xx_51... · 39xx/51xx service delivery, aggregation...

Documents