Dell PowerConnect 8024 Release Notes

PowerConnect 8024/8024F Release Notes Date: March 2011 System Firmware Version 3.1.4.16

© 2011 Dell Inc. All rights reserved. Reproduction in any manner whatsoever without the written permission of Dell Inc is strictly forbidden. Trademarks used in this text: Dell, the DELL logo and PowerConnect are trademarks of Dell Inc; Intel and Pentium are registered trademarks and Celeron is a trademark of Intel Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entity claiming the marks and names or their products. Dell Inc disclaims any proprietary interest in trademarks and trade names other than its own. All rights reserved. This document may not, in whole or in part, be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine-readable form without the prior written consent of Dell. Dell reserves the right to make changes without further notices to any products or specifications referred to herein to improve reliability, functionality or design. Reproduction, adaptation or translation without prior written permission is prohibited, except as allowed under the copyright laws.

Table of Contents Introduction 3 Global Support 3 Firmw are Specifications 3 Hardw are Support ed 3 Features Introduced in this Rel ease 4 Release 3.1.4.16 4 Release 3.1.4.8 4 Release 3.1.4.5 4 Changed Functionalit y in this Release 5 Release 3.1.4.16 5 Release 3.1.4.8 5 Release 3.1.4.5 5 Issues Resol ved 6 Release 3.1.4.16 6 Release 3.1.4.8 7 Release 3.1.4.5 7 Know n Restrictions and Limitations 12 Interfaces 12 Layer 2 13 Layer 3 15 Management 17 End of Release Notes 18

System Firmware Version 3.1.4.16 Page 3 Introduction This document provides specific information for the Dell PowerConnect 8024/8024F switches, firmware version 3.1.4.16. It is recommended that this release note be thoroughly reviewed prior to installing or upgrading of this product. Global Support For information regarding the latest available firmware, release note revisions, or additional assistance, please visit the Support Web Site http://support.dell.com/. Firmware Specifications Firmware Version Details Boot PROM Name Version No. Release Date Not Applicable 3.1.4.16 March 2011 Firmware Image Name Version No. Release Date PC8024v3.1.4.16 3.1.4.16 March 2011 Version Numbering Convention Version number Description PC8024/PC8024F 3 1 4 16 Four part version number  Denotes the build number.  Denotes an ad hoc release of the product software.  Denotes a scheduled maintenance release of the product software.  Denotes a major version number. Supported Firmware Functionality For more details regarding the functionalities listed, please refer to the Dell™ PowerConnect™ PC8024/PC8024F Switches CLI Reference Guide and the Dell™ PowerConnect™ PC8024/PC8024F Switches Configuration Guide. Hardware Supported PowerConnect 8024F PowerConnect 8024

Page 4 System Firmware Version 3.1.4.16 Features Introduced in this Release Release 3.1.4.16 No new features introduced in Release 3.1.4.16. Release 3.1.4.8 No new features introduced in Release 3.1.4.8. Release 3.1.4.5  New PowerConnect 8024 Switch A 24 port 10GBase-T (1Gigabit/10Gigabit) switch with 20 fixed 10GBase-T ports and 4 combo ports that can be either 10GBase-T or SFP/SFP+. There are two redundant power supplies each of which can supply 300W. For management there is one RS232 console port and an OOB port.  Fiber ports support 1Gigabit and 10Gigabit Transceivers The PC8024/PC8024F support 1Gigabit SFP and 10Gigabit SFP+ transceivers on fiber ports. The following table explains the supported transceivers and their capabilities on fiber ports. Module Type Negotiation Support Default Negotiation Supported Speeds SFP Yes Enabled 1G SFP+ No Not Applicable 10G  RTAG7 Hashing Mode Support Port Channels now can use the RTAG7 hashing support for improved load sharing. There are several configurable RTAG7 options such as packet field selection, source and destination port numbers, XOR and CRC algorithms, and modulo operation. The RTAG7 settings apply to both Trunk hashing and ECMP hashing. There cannot be 2 different RTAG7 settings for LAGs and ECMP.

System Firmware Version 3.1.4.16 Page 5  ReFormatFLASHFileSystem There is now a file system recovery option that is present in the boot menu that users can use if they suspect an issue with the file system on a switch. This option will copy the minimum required files from the file system, reformat the file system, and copy the files back. Changed Functionality in this Release Release 3.1.4.16 No changes in functionality for Release 3.1.4.16. Release 3.1.4.8 No changes in functionality for Release 3.1.4.8. Release 3.1.4.5  VLAN Limit Increases MAC based VLAN limit was increased from 128 to 256. Subnet based VLAN limit was increased from 64 to 128.  Layer 2 Multicast Group The Layer 2 Multicast Group limit was increased from 1K to 2K.  ISDP Advertise/Display hostname ISDP can now use the hostname as the Device ID instead of the Serial Number. The user needs to change the default hostname on the switch and can verify the results via the show isdp command.

Page 6 System Firmware Version 3.1.4.16 Issues Resolved Release 3.1.4.16 Description User Impact Resolution In simple mode STP BPDU will pass through from one port-aggregator to the other port-aggregator Switches receiving unwanted STP BPDUs may shut the port down. BPDU flooding set to disabled in simple mode by default. Switch is crashing when it is connected to a CDP enabled CISCO 6509 The CISCO 6509 sends CDP PDUs that are larger than expected which can occasionally result in a switch reboot. Updated the local buffer to be tolerant of larger packet sizes. Interface metric not working on OSPF passive interface. When an OSPF interface is configured as Passive, 8024F advertises the interface metric (cost) as 0, irrespective of cost configured. Corrected to generate the proper interface cost. Displaying the wrong LACP system MAC address in "show lacp port- channel". The incorrect MAC address was shown for the partner switch in "show lacp port-channel" CLI command output. Corrected to retrieve the proper MAC address. SNMP Agent becoming unresponsive. The switch will stop responding to SNMP requests. A semaphore now used to properly control SNMP and CLI access to common configuration data structures. TX DMA will timeout and cause the switch to reboot. The stack crashes with a crash dump from the workQAdd2 task. Corrected a heap memory fragmentation problem when processing DMA transactions. H323 VoIP traffic crashes the switch VoIP task processing was not allowing other tasks to run causing a stalled task to reboot the switch. VoIP packets are not sent to the switch CPU if the auto-VoIP feature is administratively disabled. LACP not working with Juniper EX- 4200 when supporting Non-Stop Forwarding The LAG will not establish because all the LACP data units are dropped. Dropped LACP data units were caused by an incorrect packet length. The packet length of 132 was changed to 128 in order to conform to the standard. Invalid SNMP query result on walking ipAdEntNetMask. Secondary Netmask configuration is not displayed for an interface IP Address, and the Netmask of the primary IP Address is shown instead. Changed the implementation of ipmIpAdEntNetMaskGet to also take the address parameter and look up the specific Netmask.

System Firmware Version 3.1.4.16 Page 7 Description User Impact Resolution The show ip igmp groups vlan detail does not show any registered MC groups. Only detail fails to show registered MC groups. Other commands show the groups correctly. Corrected the show ip igmp groups detail command. Release 3.1.4.8 Description User Impact Resolution Occasionally, the switch will stop responding to SNMP The switch will become unresponsive with the message ”Timeout: No Response from AA.BB.CC.DD.” Semaphores were added to protect data from becoming corrupted. Release 3.1.4.5 Description User Impact Resolution IGMP Querier does not work if IP Multicast not enabled. User must enable IP multicast in order for IGMP Querier to function properly. Automatically enable IP Multicast when IGMP is enabled. Sending multiple DHCP discoveries to the switch results in log messages on the console. Sending multiple DHCP discoveries to the switch results in log messages on the console. The driver modified to handle MAC addresses correctly to prevent the log messages. Radius Servers always show active status. The RADIUS Server Status web page was always displaying the server’s status as active. Retrieved the server status the same as the CLI for each row in the web page display. PFC frames received per priority queue are always shown as zero. Per priority PFC frames received count is always zero. PFC frames statistics are not properly reported. productIdentificationPerUnitTable OID was re-numbered when banner OIDs were inserted. Management applications that use the OID in the 3.1.1.9 release will not work properly. Reverted the OID to the proper value used on the other PowerConnect switches. BPDU protection fails when port is in dot1x un-authorized state. When the port is in Dot1x Unauthorized mode STP bpdus will not be allowed to the Dot1s application and increase CPU utilization. Allow STP BPDUs without considering the dot1x authorized state of the port. Code Download is getting failed with HTTPs as management session and downloading protocol as HTTP. Code Download is getting failed with HTTPs as management session and downloading protocol as HTTP. Pass correct file path when HTTP is selected as the download method. Service Port MAC address is not valid The OOB port is not using the correct MAC address, even though the output of "show ip interface out-of-band" shows the correct MAC address. Initialized driver to properly process the MAC Address.

Page 8 System Firmware Version 3.1.4.16 Description User Impact Resolution Switch throws errors of level info/debug when clearing PFC interface counters or checking PFC interface counters. Error messages are displayed on the console and the counters not incremented properly due to misintepreted failure conditions. Now counters are properly handled based on the applicable registers. Switch uploads startup-config when tried uploading running-config. Running-config cannot be uploaded from web. Corrected algorithm to determine proper file type to upload. PFC counters on LAG interface are not incrementing. Error messages are displayed on the console and the counters not incremented properly due to misinterpreted failure conditions. Now counters are properly handled based on the applicable registers. Summer Time enabled does not reflect correctly in the output of 'show running-config' and 'show clock detail'. When summer time is configured, the time reported is incorrect. Updated the algorithm to correctly calculate the summer-time period. Recurring Summer Time is getting configured for max offset value even though offset is not configured. When summer time is configured, the time reported is incorrect. Updated the algorithm to correctly calculate the summer-time period. Location information is not found in CLI / Web when Recurring Summer Time is configured. show commands do not reflect the correct status, when summer-time for EU or USA is configured. Detect when the configuration matches those modes to allow user to identify what mode was selected. Summer Time does not work when date falls under configured window. When summer time is configured, the time reported is incorrect. Updated the algorithm to correctly calculate the summer-time period. Web does not show starting / ending month & year for non-recurring summer time configuration. The Start Month and Year, End Month and Year fields were missing in the Clock Detail Web page. Added missing fields to the web page IGMP Queriers are sent out from the switch after the pre-configured 60 secs interval Partner would receive IGMP querier packets later than the expected time, even though the delay is neglected. Updated cpu utilization mechanism along with using accurate values for system clock. Summer Time offset range is not correct. User is allowed to configure out of range values from the web page. Corrected help string along with field validations. Failed to delete configured radius server key Radius server key cannot be deleted once it's configured Added no command support for deleting key from Radius configuration mode. Upgrade PHY firmware to version 1.4.1.0 10G copper ports may take 2-5 minutes to link-up. Switches automatically upgrade the PHY firmware that corrects link up time. Switch is accepting any letter other than "y" to generate SSH key. Switch generates SSH key on entering anything other than 'n' letter, even though help is saying that it allows only 'y' or 'n'. Modified validation to not allow anything other than 'y'/'n' No button is selected by default in the copy file web page No button is selected by default in the copy file web page Modified web page to have a default selection.

System Firmware Version 3.1.4.16 Page 9 Description User Impact Resolution MLD Packets are not snooped, when sending MLD packets with Hop-by- Hop header with Router Alert Option. Switch limitation such that it cannot properly identify IPv6 MLD packets that have the hop-by-hop option set. Added a new MLD rule to the FFP which will trap to the CPU IPv6 Membership reports which use the well known MAC address 33:33:00:00:00:16. Bridge multicast forbidden forward- unregistered causes L3 Multicast to fail. Flooding in ingress VLAN. Modified the L3 interaction code of snooping to notify the driver when snooping is enabled. When snooping is disabled, the current operational state of snooping is also sent to the driver. Show interfaces advertise ethernet command is not parsed properly. No error message is printed if Improved validation for invalid interface. 'show interfaces switchport ethernet' displays Egress Rule as "------" for dynamic VLAN's. Dynamic vlan is learned correctly. But the show command "show interfaces switchport ethernet " command displays the dashed line in place of participation strings when an interface is participated in a dynamic vlan. Using different API to retrieve tagging configuration of dynamic vlan's versus static vlan's. User can not configure protocol based vlans on lag interfaces. User can not configure protocol based vlans on lag interfaces. Updated to also allow protocol based vlan's on LAG interfaces. FDB entries are not getting deleted on MAB enabled port when the dotx state is changed to force unauthorization The client MAC Address is still present in the Forwarding Database upon the Dot1x state change. Corrected logic to clear FDB table on setting the port state to force un- authorized. User with read-write access and with enable authentication set as None is not allowed to enter in to priviledge mode. User is unable to login enable mode when authentication method is none. Corrected retreiving of user access based on the username and index. Switch crashed when trying to authenticate the Client using MAB The switch reboots. Modified driver layer to use a semaphore to access the VLAN shared data. Device crashes when enabling Dynamic Arp Inspection and DHCPSnooping on out of range VLAN Id. The switch reboots. Corrected the validation for the valid VLAN ID range in the Dynamic Arp Inspection an DHCP Snooping feature. IP Source Guard commands are not available in port-channel mode Cannot configure IP Source Guard on port-channel interface via CLI. Addeed IP Source Guard CLI commands for port-channel mode. Ports fail to participate in GVRP VLAN on receiving GVRP packet, even though VLAN gets created. GVRP registrations are not occurring. Synchronization between vlan creation and vlan member participation is addressed. Configured radius accounting attributes do not reflect in running- config. Accounting Server name not displayed in the running config. Updated running config to show configured radius accouting attributes.

Page 10 System Firmware Version 3.1.4.16 Description User Impact Resolution Read-write user gets Read-only access for telnet and SSH session, when authentication method is RADIUS. Read-write user gets Read-only access for telnet and SSH session, when authentication method is RADIUS. Use access level assigned by the radius server instead of getting from the local user database. Traffic matching with COS 7 is getting dropped, when inbound MAC ACL is configured on the interface with vlan priority as 7. Traffic matching with COS 7 is getting dropped, when inbound MAC ACL is configured on the interface with vlan priority as 7. Corrected logic that configures vlan priority as 6, when user is trying to configure priority 7. Switch crashes when File System page is accessed after configuring file descriptor through CLI with more than 128 characters length. The switch reboots. Increased buffer size to be 256. Configured non-existing host cannot be deleted for logging syslog Only valid servers could be deleted by the user. Updated logic to remove non- existing hosts also in CLI command handler. Able to successfully configure Banner MOTD from WEB, but unable to disable successfully. Able to successfully configure Banner MOTD from WEB, but unable to disable successfully. Added a checkbox in the web page that to enable/disable MOTD message. Local user database does not accept a user without a password from web, although password minimum length is disabled. The Web would not accept the username without a password which was inconsistent with the CLI. Changed the text box property to allow empty password also. UDP data is not received by the mrouter interface at egress vlan even though L2 MFDB table showing both join registered interface and mrouter interface Querier attached interfaces will not receive mcast data traffic Add support for interfaces on which queries are recevied. Observed Internal BRCM_escape_lt; brBRCM_escape_gt; words are displayed on clicking Route Redistribution Summary web page Irrelevant text displayed on the web page. Modified object handler code to interpret html tags correctly. Out Of Band Port status is shown as UP, even though it's shutdown. Incorrect status communicated to the user. Update the status in PHY, when service port is shutdown Huge running-config display hogs up screen space with downloaded image for captive poral It's an inconvienence to the CLI user for the need to scroll past unreadable data. Remove all encoded binary and Unicode from "show running-config". Show encoded binary and Unicode for show scripts (and show all) commands. Precede encoded binary and Unicode with user notification indiciating unreadable data. Most encoded binary and Unicode to the END of the show scripts (and show all) command output.

System Firmware Version 3.1.4.16 Page 11 Description User Impact Resolution guest-vlan-timeout' command is missing from CLI. User cannot configure the guest-vlan- timeout period. Since the default timeout is 30 sec's, this may be too long before host is put into the guest VLAN causing such issues as DHCP clients’ timeouts waiting for DHCP ACK's. Added the new CLI command. System LED state/color is not correct. System LED does not indicate if both images are invalid or one of the fan/power module reports failure or system temperate exceeds threshold. Modified system LED algorithm to reflect the correct status. Switch is accepting IGMPv2 Joins with TTL as 64. Multicast traffic may get forwarded to the unwanted user. Added additional checks in packet Rx process. Static IP cannot be configured from WEB Static IP cannot be configured from WEB, as session is getting lost as soon as the protocol is set to None. Corrected dependencies in web to allow confirmation of static IP from Web. Switch hangs when invalid image is downloaded into script Switch hangs when invalid image is downloaded into script Added a check to raise an error if a downloaded script file is binary or if it does not contain any commands. IGMP Querier does not work if IP Multicast not enabled. User must enable IP multicast in order for IGMP Querier to work. Automatically enable IP Multicast when IGMP is enabled. Sending multiple DHCP discoveries to the switch results in log messages on the console. Sending multiple DHCP discoveries to the switch results in log messages on the console. Driver modified to handle MAC addresses correctly. Radius Servers always show active status. The RADIUS Server Status web page was always displaying the server’s status as active. Retrieved the server status the same as the CLI for each row in the web page display. Interface Configuration web page would not allow the user to set the MTU size to zero. Interface Configuration web page restricted the user to configure the IP MTU from 68-9198. Changed the weg page IP MTI field do allow the following values to be configured: 0 or 68-9198. Missing RFC1213 MIB-2 SNMP Trap counter System did not provide values for mib- 2, snmp, snmpOutTraps (Oid .1.3.6.1.2.1.11.29). Re-enabled objects to provide support even though they are obsolete in RFC-1907.

Page 12 System Firmware Version 3.1.4.16 Known Restrictions and Limitations Interfaces Ports Description User Impact 10GBaseT ports operating at speeds lower than 10G must have both Flow Control and Priority Flow Control enabled in hardware. As a result, when showing the interface status, Flow Control will show active on interfaces enabled for Priority Flow Control. This is automatically enabled when the user enables Priority Flow Control. When using Priority Flow Control, the dot1p-mapping to traffic class must be one-to-one. For example, dot1p value 0 must be mapped to traffic class 0, and dot1p value 1 must be mapped to traffic class 1. If this is not done, the wrong queue may be suspended when priority flow control frames are received.

System Firmware Version 3.1.4.16 Page 13 Layer 2 802.1AB (LLDP) Description User Impact TLV Information is flushed as soon as power to the link partner is disconnected. The remote information that should age out in 120 seconds will age out when the port loses link. Currently no application features use these entries. It is just information that is displayed. LLDP-MED location and inventory transmit TLVs have no effect. The switch does not support configuring this data so enabling these TLVs has no effect. 802.1X Description User Impact Windows Vista® Authentication The Windows Vista® client will fail to authenticate properly on subsequent connections when the option to cache user credentials is selected. Workaround: 1. In Control Panel  Network Connections, right-click on the desired Local Area Connection and select Properties. 2. In the Properties window, select the Authentication tab. 3. Deselect the checkbox for Cache user information for subsequent connections to this network. 4. Click OK. RSTP blocked ports reporting Blocked STP ports will not show in the CLI command show spanning-tree blocked ports. 802.1X clients MAC do not appear in the bridge address table. Customers cannot see the authenticated clients MAC addresses in the Forwarding Database but have to dump via show dot2x commands which do not show a summarized table. VLAN Description User Impact vlan association mac command limitations The maximum number of MAC-based VLANs is 256. Spanning Tree Description User Impact STP Topology change Notification count is not showing in log messages. Log messages do not contain the topology count which is minimal impact.

Page 14 System Firmware Version 3.1.4.16 DHCP Snooping Description User Impact DHCP client packets received on trusted ports are forwarded onto untrusted ports. If another Client is receiving the flooded packet on an untrusted port, there is no impact. If a Server on the untrusted port receives this flooded packet and responds to it with OFFER, which would be dropped by the Snooping application.

System Firmware Version 3.1.4.16 Page 15 Layer 3 IP Map Description User Impact "ip default gateway" and "ip default route" are for different types of interfaces. "ip default gateway" is for the in-band and out-of-band management interface and "ip default route" is for VLAN routing interfaces. Ensure the correct command is used for the interface being configured. ICMP Description User Impact IPv4 Fragmentation support. The switch is not fragmenting the datagram and forwards even when the IP MTU of the forwarding Interface is set to a lower value (than the datagram size). If a packet is sent to the switch and it exceeds the IP MTU, but the packet is smaller than the link MTU then the packet is not fragmented but is silently discarded. An ICMP error message is not sent to the sender. ICMP Error message generation. The ICMP Error Message generated by the switch has the fields (TTL) unmodified instead of sending with a modified value resulted as a part of forwarding process. No significant impact to the user since the TTL field, which is not decremented, is in the packet contained in the error message. ICMPv6 Packet Too Big If a packet is sent to the switch and it exceeds the IPv6 MTU, but the packet is smaller than the link MTU then the packet is not fragmented but is silently discarded. An ICMP error message is not sent to the sender. Multicast Description User Impact DVMRP will drop packets under high loads. DVMRP functionality works fine and such issues are not seen in 2 or 3 router topologies. This issue is seen only in complex topologies under high loads in the presence of other multicast entries upon table full conditions. Routing Description User Impact Routable interface ping times. The ping latency is highly variable on routable interfaces. IS-IS tagged traffic will change to IS-IS packets are always forwarded untagged, regardless of the port’s

Page 16 System Firmware Version 3.1.4.16 untagged packet. tagging configuration.

System Firmware Version 3.1.4.16 Page 17 Management CLI Description User Impact The CLI does not support the ability to download RSA or DSA keys or certificates. The user can perform this download via the web management interface. SNMP Description User Impact Not able to set the value for dellLanMngInfEnable Management ACLs are always enabled and cannot be disabled. dot3StatsAlignmentErrors not incrementing The value for all ports shows up as 0. agentStpPortRootGuard object has been obsoleted. Use agentStpCstPortRootGuard instead. SNMP causing crash. The switch will crash under heavy simultaneous RMON and SNMP transaction loads. Web-based Management Description User Impact Traffic Monitoring Chart Rate display not valid. The chart displays a count rather than a rate. Browser-specific issue: Submitting a page in IE6 multiple times before the switch has responded may cause the browser to hang. Wait for the response from the switch before pressing other buttons on the page. Browser-specific issue: On the VRRP Router Configuration page, the authentication type is not saved when using Firefox v2.x. To configure the authentication type, either upgrade the browser to Firefox 3.x or use the CLI. Web UI shows incorrect available memory (off by 3 decimal places) The user will have to get the actual available memory from the CLI. User can not configure protocol based vlans on lag interfaces via the web interface. User can use the CLI to configure Protocol VLAN on a port channel.

Page 18 System Firmware Version 3.1.4.16 Cable Diagnostics Description User Impact Time is reported as UTC and not local time in log files and CLI for copper ports. The times are not adjusted for the local time zone. Issues with show fiber-ports optical- transceiver output. The port is enabled when the fiber diagnostics are run. Because of this, the user sees the same diagnostics for both port up and down. There is also an invalid value that shows in power out. Management ACL Description User Impact Management ACL is not working for Out-Of-Band interface Management ACLs are not implemented on the Out-Of-Band interface. SNTP Description User Impact Too many SNTP messages in log file. The log can fill up with informational message of SNTP: system clock synchronized. Change Log message from notice level to NTP debug level in order to avoid the additional messages. User Manager Description User Impact A user that configures a User Level 15 and disables the RADIUS authentication server may not be able to login. When the radius server does not exist and the authentication fails, the next authentication method is not getting invoked. End of Release Notes