ExtremeXOS 15.2.3-Patch1-12 RelNotes

ExtremeXOS Release Notes
Software Version ExtremeXOS 15.2.3-Patch1-12
Published: July 2013

Part Number: 120824-00 Rev 14
Copyright
Published: July 2013
Part Number: 120824-00 Rev 14
2013 Extreme Networks, Inc. All Rights Reserved.
Extreme Networks and the Extreme Networks logo are trademarks or registered trademarks
of Extreme Networks, Inc. in the United States and/or other countries.
AccessAdapt, Alpine, Altitude, BlackDiamond, EPICenter, Essentials, Ethernet Everywhere,
Extreme Enabled, Extreme Ethernet Everywhere, Extreme Networks, Extreme Standby Router
Protocol, Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, ExtremeXOS,
Go Purple Extreme Solution, Ridgeline, ScreenPlay, Sentriant, ServiceWatch, Summit,
SummitStack, Triumph, Unified Access Architecture, Unified Access RF Manager, UniStack, the
Extreme Networks logo, the Alpine logo, the BlackDiamond logo, the Extreme Turbodrive
logo, the Summit logos, and the Powered by ExtremeXOS logo are trademarks or registered
trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and/or other
countries.
Active Directory is a registered trademark of Microsoft.
sFlow is a registered trademark of InMon Corporation.
XenServer is a trademark of Citrix.
vCenter is trademark of VMware.
Specifications are subject to change without notice.
All other names are the property of their respective owners.
For additional information on Extreme Networks trademarks, please see:
www.extremenetworks.com/about-extreme/trademarks.aspx.
Contents
Chapter 1: Overview 5
Feature Corrections in ExtremeXOS 15.2.3 5
Customer Edge PortPort VLAN 5
Limitations 6
Supported Platforms 7
Changed CLI Commands 7
Features Corrections in ExtremeXOS 15.2.2 8
Expanded Digital Diagnostic Monitoring Interface Optics Support 8
New Features and Functionality in ExtremeXOS 15.2 10
Dynamic Host Configuration Protocol (DHCP)v6 BOOTP Relay 11
IPv6 Router Advertisement (RA) Filtering 11
IPv6 Router Advertisement Options for Domain Name System (DNS) Configuration 12
Dynamic Host Configuration Protocol (DHCP) Server General Options Support 13
Multi-cast Listener Discovery (MLD)v2 13
MLDv2 Snooping 13
Multi-switch Link Aggregation Group (MLAG)-MLD 14
Identity Management Database (IDM) Enable/Disable Snooping Identities 14
IDM Match Criteria InheritanceAutomatic Child Role Inheritance 15
IDM Policy/Access Control List (ACL) Order 15
IDM Multi-Windows Domain Support 15
IDM Network Zone Support for Policy Files 16
Redirected Port List in Access Control Lists (ACLs) 16
Multi-switch Link Aggregation group (MLAG) Support for Protocol Independent Multi-cast
(PIM) v4 16
Load Sharing Scaling Enhancement 17
IPv6 Routes and Hosts in External Ternary Content Addressable Memory (TCAM) Scaling
17
Layer 3 Convergence with Ring Protocols 17
Ethernet Automatic Protection Switching (EAPS) use of Connectivity Fault Management
(CFM) to detect Link Failure 18
NetLogin and IP Security Feature on the Same Port 19
New E4G-400 24V Power Supply 19
10/100/1000 Copper Gigabit Interface Converters (GBIC) Supported on BlackDiamond X8
Series Switches 19
New Hardware Supported in ExtremeXOS 15.2.2 19
New Hardware Supported in ExtremeXOS 15.2 19
Hardware No Longer Supported 20
ExtremeXOS Hardware and Software Compatibility Matrix 20
Upgrading to ExtremeXOS 20
Downloading Supported MIBs 21
ExtremeXOS Command Line Support 21
Tested Third-Party Products 21
Tested RADIUS Servers 21
Tested Third-Party Clients 21
PoE Capable VoIP Phones 22
Extreme Switch Security Assessment 23
DoS Attack Assessment 23
ICMP Attack Assessment 23
Port Scan Assessment 23
Service Notifications 23
Chapter 2: Limits 25
Supported Limits 25
Chapter 3: Open Issues, Known Behaviors, and Resolved Issues 65

Open Issues 65
Known Behaviors 81
Resolved Issues in ExtremeXOS 15.2.3-Patch1-12 85
Resolved Issues in ExtremeXOS 15.2.3 91
Resolved Issues in ExtremeXOS 15.2.2 98
Resolved Issues in ExtremeXOS 15.2 103
ExtremeXOS 15.2.3 Release Notes
Overview
These release notes document ExtremeXOS 15.2.3-patch1-12, which includes software

feature corrections and resolves software deficiencies.
This chapter contains the following sections:
Feature Corrections in ExtremeXOS 15.2.3 on page 5
Features Corrections in ExtremeXOS 15.2.2 on page 8
New Features and Functionality in ExtremeXOS 15.2 on page 10
New Hardware Supported in ExtremeXOS 15.2.2 on page 19
New Hardware Supported in ExtremeXOS 15.2 on page 19
Hardware No Longer Supported on page 20
ExtremeXOS Hardware and Software Compatibility Matrix on page 20
Upgrading to ExtremeXOS on page 20
Downloading Supported MIBs on page 21
ExtremeXOS Command Line Support on page 21
Tested Third-Party Products on page 21
Extreme Switch Security Assessment on page 23
Service Notifications on page 23
Feature Corrections in ExtremeXOS 15.2.3

Customer Edge PortPort VLAN
This feature adds an optional port customer VLAN ID (CVID) parameter to existing
untagged VMAN port configurations. Any untagged packet received on the port is
double tagged with the configured port CVID and the SVID associated with the
VMAN. Packets received with a single CVID on the same port still have the SVID
added as usual. As double-tagged packets are received from tagged VMAN ports and
forwarded to untagged VMAN ports, the SVID associated with the VMAN is stripped.
Additionally, the CVID associated with the configured port CVID is also stripped in the
same operation.
The following diagram illustrates a packet traversing between port p1, an untagged
VMAN port with a configured port CVID, and port p2, a tagged VMAN port.
Overview
S
0$&'$
0$&6$
(WKHUW\SH
,3SDFNHW!
S
0$&'$
0$&6$
73,' D
90$1 69,'!
73,'
9/$1WDJ &9,'!
(WKHUW\SH
,3SDFNHW!
Much like the CVIDs configured as part of the CEP feature, the configured port CVID
is not represented by a VLAN within ExtremeXOS. The implication is that protocols
and individual services cannot be applied to the port CVID alone. Protocols and
services are instead applied to the VMAN and/or port as the VMAN represents the
true layer-2 broadcast domain. Like regular untagged VMAN ports, MAC FDB learning
occurs on the VMAN, so duplicate MAC addresses received on multiple CVIDs that are
mapped to the same VMAN can be problematic.
Even when the additional port CVID is configured, the port still has all of the
attributes of a regular untagged VMAN port. This means that any single c-tagged
packet received on the same port has just the SVID associated with the VMAN added
to the packet. Likewise, any egress packet with a CVID other than the configured port
CVID has just the SVID stripped.
Limitations
All limitations that currently apply to untagged VMAN ports also apply when the
port VLAN ID element is added.
Overview
Supported Platforms
All Summit, BlackDiamond 8800, and BlackDiamond X8 platforms are supported with
the following exceptions:
Summit X150
Summit X250e
Summit X350
Summit X450e
Summit X450a
BlackDiamond 8800 series switches: G48Te2, G24Xc, G48Xc, G48Tc, 10G4Xc,

10G8Xc, S-G8Xc, S-10G1Xc, S-10G2Xc
BlackDiamond 8800 series switches: 8500-series
Changed CLI Commands

In support of this feature, the following option (shown in bold) has been added to the
following existing CLI command:
config vman <vman-name> add ports [<port_list> | all] untagged {port-cvid
<port_cvid>}
The following additional output (shown in bold) appears in the existing show vman
<vlan_name> | detail command:
VMAN Interface with name vm1 created by user
Admin State:
Enabled
Tagging:
802.1Q Tag 1000
Description:
None
Virtual router: VR-Default
IPv4 Forwarding: Disabled
IPv6 Forwarding: Disabled
IPv6:
None
STPD:
None
Protocol:
Match all unfiltered protocols
Loopback:
Disabled
NetLogin:
Disabled
QosProfile:
None configured
Egress Rate Limit Designated Port: None configured
Flood Rate Limit QosProfile:
None configured
Ports:
3.
(Number of active ports=3)
Untag:
*21: Port CVID 5,
*24: Port CVID 7,
Tag:
*22
Flags:
(*) Active, (!) Disabled, (g) Load Sharing port
(b) Port blocked on the vlan, (m) Mac-Based port
(a) Egress traffic allowed for NetLogin
(u) Egress traffic unallowed for NetLogin
(t) Translate VLAN tag for Private-VLAN
(s) Private-VLAN System Port, (L) Loopback port
(x) VMAN Tag Translated port
(G) Multi-switch LAG Group port
Overview
Features Corrections in ExtremeXOS 15.2.2

The following new feature and functionality is included in ExtremeXOS 15.2.2:
Expanded Digital Diagnostic Monitoring Interface Optics Support

Digital Diagnostics Monitoring Interface (DDMI) is a feature that provides critical
system information about 1G, 10G and 40G optical transceiver modules that aids in
troubleshooting:
Temperature (in Celsius)
Tx powertransmit power in dBM
Rx powerreceive power in dBM
Tx bias currentbias current in mA
Voltage (AUX 1 and AUX 2)AUX 1 and AUX 2 voltage (in Volts). AUX-2 voltage is
not supported in most of the optical modules.
In ExtremeXOS, DDMI information is accessible using the following commands:

show ports {<port-list> | tag <tag>} transceiver information
show ports {<port-list> | tag <tag>} transceiver information detail
All ports return either the data from the transceiver, or the reason why the data could
not be collected (not present/DDMI not supported). For more information about these
commands, see the ExtremeXOS Command Reference Guide.
NOTE
DDMI information is only available through the preceeding ExtremeXOS commands if the transceiver
supports it.
With ExtremeXOS 15.2.2, support for DDMI is expanded to:
All platforms
More transceiver form factors and types
All third-party transceivers that support DDMI
Overview
Table 1: Expanded Optical Transceiver Support in ExtremeXOS 15.2.2

Hardware Platform
Summit series switches
Optical Transceivers
Previously Supported
Currently Supported
SFP (ZX, LX100)
SFP (all types*)
SFP+ (SR, LR, ER)
SFP+ (all types*)
XFP (SR, LR, ER, ZR, DWDM, TDWDM)
XFP (all types*)

QSFP+ (optical only*, not
copper)
BlackDiamond 8800 series switches
XFP (SR, LR, ER, ZR, DWDM, TDWDM)
XFP (all types*)

SFP (all types*)
SFP+ (all types*)
copper)
BlackDiamond X8 series switches
None
SFP (all types*)

SFP+ (all types*)
copper)
NOTE: * Transceiver must support DDMI for ExtremeXOS to be able to show DDMI information.
Overview
New Features and Functionality in ExtremeXOS 15.2

The following new features and functionality are included in ExtremeXOS 15.2:
Dynamic Host Configuration Protocol (DHCP)v6 BOOTP Relay on page 11
IPv6 Router Advertisement (RA) Filtering on page 11
IPv6 Router Advertisement Options for Domain Name System (DNS) Configuration
on page 12
Dynamic Host Configuration Protocol (DHCP) Server General Options Support on

page 13
Multi-cast Listener Discovery (MLD)v2 on page 13
MLDv2 Snooping on page 13
Multi-switch Link Aggregation Group (MLAG)-MLD on page 14
Identity Management Database (IDM) Enable/Disable Snooping Identities on

page 14
IDM Match Criteria InheritanceAutomatic Child Role Inheritance on page 15
IDM Policy/Access Control List (ACL) Order on page 15
IDM Multi-Windows Domain Support on page 15
IDM Network Zone Support for Policy Files on page 16
Redirected Port List in Access Control Lists (ACLs) on page 16
Multi-switch Link Aggregation group (MLAG) Support for Protocol Independent

Multi-cast (PIM) v4 on page 16
Load Sharing Scaling Enhancement on page 17
IPv6 Routes and Hosts in External Ternary Content Addressable Memory (TCAM)
Scaling on page 17
Layer 3 Convergence with Ring Protocols on page 17
Ethernet Automatic Protection Switching (EAPS) use of Connectivity Fault

Management (CFM) to detect Link Failure on page 18
NetLogin and IP Security Feature on the Same Port on page 19
New E4G-400 24V Power Supply on page 19
10/100/1000 Copper Gigabit Interface Converters (GBIC) Supported on

BlackDiamond X8 Series Switches on page 19
10
Overview
Dynamic Host Configuration Protocol (DHCP)v6 BOOTP Relay

This feature relays DHCPv6 client messages from the IPv6 interface to the DCHPv6
server in larger IPv6 networks.
New CLI command: configure bootprelay ipv6 option interface-id
[<interface_id_string> | none] [vlan <vlan_name> | all]
Revised CLI commands (changes in bold):
[enable|disable] bootprelay {ipv4 | ipv6} {vlan [<vlan_name>] | {{vr}

<vr_name>} | all [{vr} <vr_name>]}
configure bootprelay [{ipv4} {vlan [<vlan_name>]} [add <ip_address> | delete

[<ip_address>|all]] | ipv6 {vlan [<vlan_name>]} [add <ipv6_address> | delete
[<ipv6_address>|all]]] {vr [<vrid>]}
show bootprelay {ipv4 | ipv6} configuration {{vlan <vlan_name>} | {vr

<vr_name>}}
IPv6 Router Advertisement (RA) Filtering

This feature supports ICMP-type access-list match criteria on IPv6 packets.
Supported Platforms:
Table 2: Supported Platforms for IPv6 RA Filtering
Supported Platform
Number of Extension Headers
Summit X460 and X670 series switches
Up to 2 extension headers
BlackDiamond 8900-40G6X-xm and BlackDiamond X8 series switches

All other BlackDiamond 8900, 8800, and Summit series switches
Zero extension headers
Limitations:
Only ingress ACLs support the ICMP-type match criteria for IPv6 packets. This
match criteria cannot be used with egress ACLs.
IPv6 source-address/destination-address fields cannot be matched in the same rule

without enabling double-wide mode. Double-wide mode is not available on all of
the supported platforms and causes a 50% reduction of ACL hardware resources.
IPv6 DIP (64- or 128-bit) cannot be matched in conjunction with IPv6 ICMP-type
on Summit X480, Summit X650, and BlackDiamond 8800 xl-series and
BlackDiamond 8900-10G24X-c switches even when configured for double-wide
access-list mode. IPv6 SIP (64- and 128-bit) can be matched in conjunction with
IPv6 ICMP-type on these platforms when configured for double-wide access-list
mode.
Ethernet-source-address/Ethernet-destination-address fields cannot be matched in

the same rule as IPv6 ICMP-type.
11
Overview
IPv6 Router Advertisement Options for Domain Name System (DNS)

Configuration
This feature adds support for RFC6106. RFC6106 specifies new Neighbour Discovery
(ND) Options to support IPv6 RA-based DNS configuration. The two new options are:
Recursive DNS server (RDNSS) option
DNS search list (DNSSL) option
For IPv6-only networks that rely only on IPv6 stateless autoconfiguration as a

deployment model, these two options allow a host to configure its DNS information.
This is a useful alternative where there is no Dynamic Host Configuration Protocol for
IPv6 (DHCPv6) infrastructure or hosts do not have a DHCPv6 client.
New CLI Commands:
configure {vlan} <vlan_name> router-discovery {ipv6} rdnss-lifetime

[<rdnss_lifetime> | infinity | auto]
configure {vlan} <vlan_name> router-discovery {ipv6} delete rdnss

[<ipaddress>|all]
configure {vlan} <vlan_name> router-discovery {ipv6} dnssl-lifetime

[<dnssl_lifetime> | infinity | auto]
configure {vlan} <vlan_name> router-discovery {ipv6} add dnssl <dns_suffix>

{{dnssl-lifetime} [<dnssl_lifetime> | infinity]}
configure {vlan} <vlan_name> router-discovery {ipv6} delete dnssl

[<dns_suffix>|all]
Revised CLI commands (changes in bold):
unconfigure {vlan} <vlan_name> router-discovery {ipv6}
show router-discovery {ipv6} {{vlan} <vlan_name>}
NOTE
This commands output now also shows information pertaining to RDNSS and DNSSL configuration.
unconfigure {vlan} <vlan_name> router-discovery {ipv6} [max-interval mininterval | hop-limit | default-lifetime | link-mtu | managed-config-flag |
other-config-flag | reachable-time | retransmit-time | rdnss-lifetime | dnssl-
lifetime]
12
Overview
Dynamic Host Configuration Protocol (DHCP) Server General Options

Support
The current configure vlan dhcp-options command is now extended to allow you to
enter a code for any DNCP option, rather than the current three: default gateway,
DNS, WINS server. The show dhcp-server and show vlan {vlan} dhcp-config
commands now display the option if it has been configured.
Multi-cast Listener Discovery (MLD)v2

MLDv2 is a component of the IPv6 suite. MLD is used by IPv6 routers for discovering
multi-cast listeners on a directly attached link, much like IGMP is used in IPv4. The
protocol is embedded in Internet Control Message Protocol (ICMP)v6 instead of using
a separate protocol. MLDv2 is similar to Internet Group Management Protocol
(IGMP)v3. The protocol is described in RFC 3810 which has been updated by RFC
4604.
MLDv2 Snooping
MLD snooping helps optimize IPv6 multi-cast forwarding by selectively forwarding the
multi-cast data stream based on the MLD snooping group database instead of
flooding to all ports of a VLAN. MLD snooping builds the group database by snooping
MLD packets. The MLD group database consists of groups and the ports on which
interested receivers for the group exist.
Limitations:
MLD snooping cannot be enabled on Virtual Private LAN Service (VPLS) VLANs/
VMANs. Traffic is flooded to all ports and pseudo wires of VPLS VLANs/VMANs.
MLD snooping cannot be enabled on remote-mirroring enabled VLANs.
Supported Platforms: All platforms

Hardware-Specific Features:
IPv6 multi-cast supports IPMC multi-cast compression on all platforms to provide

additional IP multi-cast forwarding database (FDB) scaling, when multiple FDB
entries have the same egress vport (VLAN+port) list. Compression is allowed
among IPv4 and IPv6 multi-cast entries. The existing compression configuration
command handles enabling/disabling of compression of both IPv4 and IPv6 cache
entries.
Programming external lookup table Ternary Content Addressable Memory (TCAM)

on External Search Machine (ESM) platforms is not supported for IPv6 multi-cast.
13
Overview
Multi-switch Link Aggregation Group (MLAG)-MLD

The MLAG feature allows a user to combine ports on two switches to form a single
logical connection to another network device. The other network device can be either
a server or a switch and is separately configured with a regular LAG (or appropriate
server port teaming) to form the port aggregation.
ExtremeXOS supports MLAG by snooping IGMP/MLD reports received on the MLAG
ports and synchronizes the database with the MLAG peer. It creates a group database
in the MLAG peer, so that the traffic switchover is seamless when the MLAG port on
one of the switches goes down. ExtremeXOS interacts with Virtual Switch Manager
(VSM) to get various events on the Inter-Switch Connections (ISC) and MLAG and
takes appropriate actions.
Limitations:
Addition of static receivers is not allowed on the ISC VLAN.
Adding static router ports is not allowed on the ISC VLAN.
Configuration of a group limit is not allowed on the ISC port, irrespective of the
VLAN. ExtremeXOS allows configuration of a group limit on other ports of the ISC
VLAN.
Identity Management Database (IDM) Enable/Disable Snooping

Identities
The identity management feature makes the edge of the network more intelligent in
providing access to the devices/users in the network. The identity manager detects
the identities through the following protocols:
Forwarding database (FDB)
IPARP
IPSecurity Dynamic Host Configuration Protocol (DHCP) Snooping
Link Layer Discovery Protocol (LLDP)
Netlogin
Kerberos
This feature allows you to enable or disable the detection of identities triggered
through the above protocols using the command: configure identity-management
detection [on | off] [fdb | iparp | ipsecurity | kerberos | lldp | netlogin |
all] ports [<port_list> | all]
14
Overview
IDM Match Criteria InheritanceAutomatic Child Role Inheritance

This feature makes the child role automatically inherit its parent roles match criteria:
The existing roles must have higher priority than their descendants.
After this feature is enabled, you cannot configure a child role with lesser priority
(higher priority number) than its parent.
Enabling this feature changes the order of the roles according to the parent-child
relationship.
An incoming identity is matched against the child role, and then against the parent
irrespective of the order of creation.
IDM Policy/Access Control List (ACL) Order

This feature allows you to change the order of the policy or the dynamic rule
associated with a role, even during the run time.
The following command has been revised (in bold): configure identity-management
role <role_name> add [policy <policy_name> {{before | after} <ref_policy_name>} |
dynamic-rule <rule_name> {{before | after} <ref_rule_name>}] {first | last}
IDM Multi-Windows Domain Support

Some organizations are large enough to have multiple Windows domains (or subdomains) in their network. This helps the administrator manage the network more
effectively. Each of these Windows domains could have its own Lightweight Directory
Access Protocol (LDAP) servers. Previously, ExtremeXOS supported up to eight LDAP
servers on the same domain. This feature now supports multiple Windows domains:
You can configure a base-dn and bind user for each domain.
Base-dn is assumed to be the same as the domain name unless explicitly

configured otherwise.
When upgrading, the base-dn configured on earlier versions of ExtremeXOS now

becomes the default domain name. This can be changed if required.
When upgrading, the LDAP servers configured on earlier versions of ExtremeXOS

are now servers under the default domain.
You can add up to eight domains to identity manager.
You can add up to eight LDAP servers to each of the user configured domains.
15
Overview
IDM Network Zone Support for Policy Files

This feature allows you to easily add or remove IP or MAC addresses in policies by
adding just a single attribute source-zone or destination-zone to an entry of the
policy. This entry then expands into multiple entries depending upon the number of
IP/MAC addresses configured in that particular zone, that is configured in the policy,
as source-zone or destination-zone. Whenever the network zone has IP or MAC
addresses added or removed, and then refreshed, all the policies that have this
network zone in their entries are automatically updated and refreshed.
Limitations:
A mix of source-zone and destination-zone is not supported in the same policy.
Policies applied in ingress direction cannot have the source-zone attribute;

policies applied in egress direction cannot have the destination-zone attribute, if
they are applied through IDM or XNV.
Network zones that are configured in policy files cannot be deleted from the CLI
until the policy is unconfigured, or the network zone is removed from the policy.
A particular network zone can have a maximum of eight attributes.
Redirected Port List in Access Control Lists (ACLs)

This feature allows matching packets to be layer 2 switched/redirected to a physical
port by overriding the normally applied forwarding decision. This feature adds a new
ACL action modifier, redirect-port-list, that accepts multiple redirect ports as
arguments.
Supported Platforms: Summit X440, Summit X460, Summit X480, Summit X650,
Summit X670; BlackDiamond 8800 with the following modules: 8900-G96T-c, 890010G24X-c, 8900-G48T-xl, 8900-G48X-xl, 8900-10G8X-xl, or 8900-40G6X-xm,
BlackDiamond X8 with the following modules: BDXA-40G24X, BDXA-40G12X, BDXA10G48X; and cell site routers E4G-200 and E4G-400.
Multi-switch Link Aggregation group (MLAG) Support for Protocol

Independent Multi-cast (PIM) v4
This feature removes the following two previous restrictions on MLAG support:
Non-MLAG VLANs on MLAG peer switches must not include the Inter Switch
Connection (ISC) port and must include a non-ISC port if they span both the peer
switches.
Multi-cast routing across MLAG VLANs does not work.
The following existing command now displays ingress VLAN information of all MLAG
peers (in bold):
show pim cache {{detail} | {state-refresh} {mlag-peer-info} {<group_addr>
{<source_addr>}}}
Supported Platforms: BlackDiamond X8 series switches, BlackDiamond 8000 series

modules, Summit family switches, and SummitStack
16
Overview
Load Sharing Scaling Enhancement

This feature increases the number of active ports in a load sharing group from 16 to
32 on Summit X670 switches, and from 16 to 64 on BlackDiamond X8 series switches.
Limitations:
Load sharing groups configured for more than 16 aggregator ports per group must
use the address-based custom algorithm.
Summit X670 switches in a stacking configuration do not support more than 8

aggregator ports per group even if all nodes are Summit X670.
With distributed Address Resolution Protocol (ARP) mode on, the maximum
number of aggregator ports on BlackDiamond X8 series switches is 16.
IPv6 Routes and Hosts in External Ternary Content Addressable Memory

(TCAM) Scaling
For the Summit X480 and BlackDiamond 8800 switches with xl-series modules, this
feature increases the following limits:
IPv6 route limit increases from 8,192 to 245,760.
IPv6 host limit increases from ~4,000 to 8,192.
Blend of IPv6 and IPv4 in external TCAM provides 49,152 IPv6 routes, and 475,104
IPv4 routes simultaneously.
The following existing command has two new options (in bold):
configure forwarding external-tables [l2-only | l3-only {ipv4 | ipv4-and-ipv6 |
ipv6} | acl-only | l2-and-l3 | l2-and-l3-and-acl | l2-and-l3-and-ipmc | none]
Layer 3 Convergence with Ring Protocols

This feature improves the convergence speed of IP traffic over ring networks through
a new command:
configure iparp fast-convergence [on|off]
By default, this command is off.
17
Overview
Ethernet Automatic Protection Switching (EAPS) use of Connectivity

Fault Management (CFM) to detect Link Failure
The feature integrates the use of CFM support within the EAPS protocol. EAPS will
communicate with the CFM process to set up point-to-point down Management
Endpoints (MEPs) to monitor link connectivity. The CFM module will notify EAPS of
any link-connectivity issues, triggering EAPS to take necessary action:
The following existing commands are modified (in bold).
Assign MEP group name when creating a MEP:
configure cfm domain <domain_name> association <association_name> [ports
<port_list> add [[end-point [up|down] <mepid> { group <group_name> } ] |
[intermediate-point]] | vpls add intermediate-point {linktrace-data [systemname | private-ip]} | isid add intermediate-point]
Assign MEP group name to an existing MEP.:

configure cfm domain <domain_name> association <association_name> ports
<port_list> end-point [up|down] [add|delete] group <group_name>
Limitations:
CFM protocol data unit (PDU) transmit intervals are limited by the supported limits
of CFM module. Platforms that do not support CFM in hardware are limited to a
minimum interval of 100 ms.
Maximum number of down MEPs limited by CFM module. This is as low as 32 MEPs
in some platforms.
Supported Platforms:
All platforms support this feature. However, not all platforms support hardware-based
CFM. Platforms without hardware-based CFM support are limited to software-based
CFM transmit intervals of 100 ms or higher. Hardware-based intervals can go as low as
3.3 ms.
Hardware-based CFM support: Summit X460 switches and E4G-200 and E4G-400
cell site routers
Software-based CFM support only: All other platforms
18
Overview
NetLogin and IP Security Feature on the Same Port

ExtremeXOS NetLogin provides the authentication, authorization, and accounting)
functionality, and provides a model or framework to determine who is requesting
network access, network resources that can be accessed by the requesting party, and
when the resources are used. Together with IP Security, administrators can enhance
security in the network by controlling access to upstream network and resources by
the hosts or clients.
IP security features in ExtremeXOS 15.2 include:
DHCP snooping and concept of trusted DHCP servers
Source IP lockdown
ARP learning and validation
Gratuitous ARP protection
New E4G-400 24V Power Supply

The Model 10933 wide-range 300W DC power supply is now available for the E4G400.
The Model 10933 wide-range power supply is used in redundant configurations and
has hot-swap capability. The power supply is designed to share the power load
equally among all installed power supplies during normal operation. It can accept both
+24V and -48V DC inputs.
10/100/1000 Copper Gigabit Interface Converters (GBIC) Supported on

BlackDiamond X8 Series Switches
The 10/100/1000 copper GBIC SFP 10065 and industrial temperature10070H are now
supported on the BlackDiamond X8 series switches.
New Hardware Supported in ExtremeXOS 15.2.2

This section lists the new hardware supported in ExtremeXOS 15.2.2:
Summit X670v-48T
E4G-200-12x
New Hardware Supported in ExtremeXOS 15.2

This section lists the new hardware supported in ExtremeXOS 15.2:
Summit X440-L2-24t
Summit X440-L2-48t
19
Overview
Hardware No Longer Supported

The following hardware is no longer supported in ExtremeXOS 15.2:
BlackDiamond 10808 switches
BlackDiamond 8800 series switches modules: G48Te, G48Pe, G48Ta, G48Xa,

10G4Xa, 10G4Ca
ExtremeXOS Hardware and Software Compatibility

Matrix
The ExtremeXOS Hardware and Software Compatibility Matrix provides information
about the minimum version of ExtremeXOS software required to support
BlackDiamond and Summit switches, as well as SFPs, XENPAKs, XFPs, and other
pluggable interfaces.
The latest version of the ExtremeXOS Hardware and Software Compatibility Matrix can
be found at:
www.extremenetworks.com/libraries/services/HW_SW_Compatibility_Matrix.pdf
Upgrading to ExtremeXOS
See Software Upgrade and Boot Options in the ExtremeXOS Concepts Guide for
instructions on upgrading ExtremeXOS software. Following are miscellaneous hitless
upgrade notes:
Beginning with ExtremeXOS 12.1, an ExtremeXOS core image (.xos file) must be
downloaded and installed on the alternate (non-active) partition. If you try to
download to an active partition, the error message "Error: Image can only be
installed to the non-active partition." is displayed. An ExtremeXOS
modular software package (.xmod file) can still be downloaded and installed on
either the active or alternate partition.
For the BlackDiamond 8800 series switches, a hitless upgrade to ExtremeXOS 15.2
from an earlier release is not supported and should not be attempted. Use the
normal software upgrade process for these switches.
Hitless upgrade from ExtremeXOS 12.0 and earlier to ExtremeXOS 12.1 and later is
not supported on the BlackDiamond 12800 switch.
SummitX software is required for E4G cell site routers.
20
Overview
Downloading Supported MIBs

The Extreme Networks MIBs are located on the eSupport website under Download
Software Updates, located at:
https://esupport.extremenetworks.com/
ExtremeXOS Command Line Support

The following is true for all Summit X150 and X350 series switches:
Summit X150 and X350 series switches do not support L3 functionality; this
platform does not support CLI commands for L3 functionality.
Summit X150 and X350 series switches do not support stacking; all CLI commands
for stacking are not supported on this platform.
Summit X150 and X350 series switches do not support IP forwarding; however, CLI
commands that configure IP addresses function in order to access the
management functionality of the switch are supported.
Upgrade or trial licensing is not available on the Summit X150 and X350 series
switches.
Tested Third-Party Products

This section lists the third-party products tested for ExtremeXOS 15.2.
Tested RADIUS Servers

The following RADIUS servers are fully tested:
MicrosoftInternet Authentication Server
Meetinghouse
FreeRADIUS
Tested Third-Party Clients

The following third-party clients are fully tested:
Windows 7
Windows Vista
Linux (IPv4 and IPv6)
Windows XP (IPv4)
21
Overview
PoE Capable VoIP Phones

The following PoE capable VoIP phones are fully tested:
Avaya 4620
Avaya 4620SW IP telephone
Avaya 9620
Avaya 4602
Avaya 9630
Avaya 4621SW
Avaya 4610
Avaya 1616
Avaya one-X
Cisco 7970
Cisco 7910
Cisco 7960
ShoreTel ShorePhone IP 212k
ShoreTel ShorePhone IP 560
ShoreTel ShorePhone IP 560g
ShoreTel ShorePhone IP 8000
ShoreTel ShorePhone IP BB 24
Siemens OptiPoint 410 standard2
Siemens OpenStage 20
22
Overview
Extreme Switch Security Assessment

DoS Attack Assessment
Tools used to assess DoS attack vulnerability:
Network Mapper (NMAP)
ICMP Attack Assessment

Tools used to assess ICMP attack vulnerability:
SSPing
Twinge
Nuke
WinFreeze
Port Scan Assessment

Tools used to assess port scan assessment:
Nessus
Service Notifications
To receive proactive service notification about newly released software or technical
service communications (for example, field notices, product change notices, etc.),
please register:
www.extremenetworks.com/services/service_notification_form.aspx
23
Overview
24
Limits
This chapter summarizes the supported limits in ExtremeXOS 15.2.3-patch1-12.
Supported Limits
Table 3 summarizes tested metrics for a variety of features, as measured in a persystem basis unless otherwise noted. These limits may change but represent the
current status. The contents of this table supersede any values mentioned in the
ExtremeXOS Concepts Guide.
NOTE
The term BlackDiamond 8000 e-series refers to all BlackDiamond 8500 e-series and 8800 e-series
modules.The term BlackDiamond 8000 series refers to all BlackDiamond 8500, 8800, and 8900 series
modules.
The scaling and performance information shown in Table 3 is provided for the purpose
of assisting with network design. It is recommended that network architects and
administrators design and manage networks with an appropriate level of network
scaling head room. The scaling and performance figures provided have been verified
using specific network topologies using limited switch configurations. There is no
guarantee that the scaling and performance figures shown are applicable to all
network topologies and switch configurations and are provided as a realistic
estimation only. If you experience scaling and performance characteristics that you
feel are sufficiently below what has been documented, contact Extreme Networks
technical support for additional assistance.
The route limits shown in Table 3 for IPv4 and IPv6 routing protocols are software
limits only. The actual hardware limits may be higher or lower than the software limits,
based on platform. The hardware limits for specific platforms are specified as "IPv4/
IPv6 routes (LPM entries in hardware)" in the following table.
On products other than the BlackDiamond 8900 xl-series, BlackDiamond X8 series,
and Summit X480 series, it is not advised to have greater than 25,000 total IP routes
from all routing protocols. Adverse effects can occur with routing tables larger than
this, especially when a single network event or CLI command affects a significant
number of routes. For example, just after such a network event, the added system
load will cause a save configuration command to time out.
Limits
26
Limits
Table 3: Supported Limits

Metric
Product
Access lists (meters)maximum number

of meters.
BlackDiamond 8000 series
Limit
e-series, group of 24 ports
512
a-series, group of 24 ports
1,024
c-series
2,048 ingress,
256 egress
Access lists (policies)suggested

maximum number of lines in a single
policy file.
8900-10G24X-c, group of 12 ports
1,024 ingress,
256 egress
8900 xl-series, 8900-G96T-c
4,096 ingress,
512 egress
8900-40G6X-xm
512 ingress
512 egress
BlackDiamond X8 series
512 ingress,
512 egress
E4G-200
1,024 ingress
256 egress
E4G-400
2,048 ingress
256 egress
Summit X150, X250e, X350, X450e group of 24

ports, Summit X440, per group of 24 ports
512
Summit X450a, per group of 24 ports
1,024
Summit X460, per group of 24 ports
2,048 ingress,
256 egress
Summit X480
4,096 ingress,
512 egress
Summit 650, group of 12 ports
512 ingress,
256 egress
Summit X670 with VIM4-40G4x

Summit X480 with VIM3-40G4X
Summit 650, group of 12 ports with VIM3-40G4x
512 ingress
512 egress
All platforms
300,000
27
Limits
Table 3: Supported Limits (Continued)

Metric
Product
Access lists (policies)maximum

number of rules in a single policy file.1
Limit
a-series, group of 24 ports
2,048
c-series, group of 24 ports
4,096 ingress,
512 egress
1,024 ingress
BlackDiamond 8900 c-series

8900-10G24X-c modules, group of 12 ports
2,048 ingress,
512 egress
8900-G96T-c modules, group of 48 ports
8,192 ingress,
1,024 egress
8900 xl-series
61,440 (up to)
8900-40G6X-xm
2,048 ingress,
1,024 egress
2,048 ingress,
1,024 egress
E4G-200
2,048 ingress,
512 egress
E4G-400
4,096 ingress,
512 egress
Summit X150, X250e, X350, X440, X450e group

of 24 ports
1,024 ingress
Summit X440
1,024 ingress
Summit X450a, group of 24 ports
2,048 ingress
Summit 460
4,096 ingress,
512 egress
Summit X480
Summit X650, group of 12 ports

VIM3-40G4x
Summit X670
VIM4-40G4x
Summit X480
VIM3-40G4X
(up to) 61,440

ingress,
1,024 egress
2,048 ingress,
512 egress
2,048 ingress,
1,024 egress
2,048 ingress
1,024 egress
2048 ingress
1024 egress
28
Limits

Metric
Product
Access lists (slices)number of ACL

slices.
Limit
a- and c-series, group of 48 ports
16

8900-10G24X-c modules, group of 12 ports
12 ingress,
4 egress
8900-G96T-c modules, group of 48 ports
16 ingress,
4 egress
8900 xl-series
172
8900-40G6X-xm
10 ingress,
4 egress
10 ingress,
4 egress
E4G-200
8 ingress,
4 egress
E4G-400
16 ingress,
4 egress
Summit X150, X250e, X350, X450e, group of 48

ports
8 ingress
Summit X450a, group of 24 ports
16 ingress
Summit X440
4 ingress
Summit 460
16 ingress,
4 egress
Summit X480
172 ingress,
4 egress
Summit X650, group of 12 ports
12 ingress,
4 egress
VIM3-40G4x
Summit X670
VIM4-40G4x
10 ingress,
4 egress
10 ingress,
4 egress
Summit X480
VIM3-40G4X
10 ingress
4 egress
AAA (local)maximum number of admin

and local user accounts.
All platforms
16
BFD sessionsmaximum number of BFD

sessions
All platforms (default timers)
512
All platforms (minimal timers)
103
BGP (aggregates)maximum number of

BGP aggregates.
All platforms with Core license or higher
256
BGP (networks)maximum number of

BGP networks.
1,024
1,024
29
Limits

Metric
Product
Limit
BGP (peers)maximum number of BGP

peers.
512
512
BlackDiamond xl-series
512
Summit X450a, X460, X650, X670
128*
Summit X480
512
* With default keepalive and hold timers.
BGP (peer groups)maximum number of

BGP peer groups.
128
128
Summit X480
128
All platforms (except BlackDiamond X8 series,

BlackDiamond 8900 series, and Summit X480)
with Core license or higher
64
BGP (policy entries)maximum number

of BGP policy entries per route policy.
256
BGP (policy statements)maximum

number of BGP policy statements per
route policy.
1,024
BGP (unicast address-family routes)

maximum number of unicast addressfamily routes.
25,000
BlackDiamond 8900 xl-series
524,256 (up to)2
25,000
Summit X450a, X460, X650, X670
25,000
Summit X480
524,256 (up to)2
25,000
1,200,000
25,000
Summit X450a, X460, X650, X670
25,000
BGP (non-unique routes)maximum

number of non-unique BGP routes (LPM
entries is limited to support TCAM entries
on a BlackDiamond 10808).
BGP multi-cast address-family routes

maximum number of multi-cast
address-family routes.
BGPv6 (unicast address-family routes)

maximum number of unicast address
family routes.
Summit X480
1,000,000
25,000
524,256 (up to)2
25,000
Summit X450a, X460, X650, X670
25,000
Summit X480
524,256 (up to)2
20,000
BlackDiamond 8800 a-, c-series
6,000
BlackDiamond 8000 e-series
240
Summit X450e,X250e
240
Summit X450a, X460, X650
6,000
Summit X480
20,000
Summit X670
8,000
8,000
30
Limits

Metric
Product
Limit
BGPv6 (non-unique routes)maximum

number of non-unique BGP routes
24,000
18,000
720
Summit X450e,X250e
720
18,000
Summit X480, X670
24,000
24,000
BOOTP/DHCP relaymaximum number of

BOOTP or DHCP servers per virtual
router.
All platforms
BOOTP/DHCP relaymaximum number of

BOOTP or DHCP servers per VLAN.
All platforms
CES TDM pseudo wiresmaximum

number of CES TDM pseudo wires per
switch.
E4G-200 and E4G-400
256
Connectivity fault management (CFM)

maximum number or CFM domains.
All platforms
CFMmaximum number of CFM

associations.
All platforms
256
CFMmaximum number of CFM up end

points.
32
32
Summit series
32
32
32
Summit series X460, E4G200, E4G400 (Nonload shared Ports)
256
Summit series X460, E4G200, E4G400

(Load shared ports)
32
Summit series
32
CFMmaximum number of CFM down

end points.
All other platforms
32
CFMmaximum number of CFM remote

end points per up/down end point.
All platforms
2,000
CFMmaximum number of dot1ag ports.
All platforms
128
CFMmaximum number of CFM

segments.
All platforms
1,000
CLEAR-Flowtotal number of rules

supported. The ACL rules plus CLEARFlow rules must be less than the total
number of supported ACLs.
4,096
4,096
4,096
Summit X440
1,024
2,048
Summit X480
4,096
31
Limits

Metric
Product
Limit
Data Center Bridging eXchange (DCBX)

protocol Type Length Value (TLVs)
maximum number of DCBX application
TLVs.
All platforms
Dynamic ACLsmaximum number of

ACLs processed per second.
BlackDiamond 8800 with c-series MSM and

I/O modules
Note: Limits are load dependent.
Summit X450a, X480, X650, X670

with 50 DACLs
with 500 DACLs
EAPS domainsmaximum number of
EAPS domains.
Note: An EAPS ring that is being spatially
reused cannot have more than four
configured EAPS domains.
EAPSv1 protected VLANsmaximum
number of protected VLANs.
EAPSv2 protected VLANsmaximum

ELSM (vlan-ports)maximum number of

VLAN ports.
ERPS domainsmaximum number of

ERPS domains without CFM configured
ERPS domainsmaximum number of

ERPS domains with CFM configured.
ERPSv1 protected VLANsmaximum

ERPSv2 protected VLANsmaximum

number of protected VLANs
ESRP groupsmaximum number of ESRP

groups.
10
5
64
64
Summit series, E4G-200, E4G-400
32
2,000
4,000
1,000
2,000
4,000
500
5,000
5,000
5,000
32
32
32
16
16
Summit series non-CSR platforms
16
Summit X460, E4G-200, E4G-400
32
2,000
2,000
1,000
2,000
2,000
500
All platforms
32
Limits

Metric
Product
Limit
ESRP domainsmaximum number of

ESRP domains.
64
64
128
Summit series
64
1,000
BlackDiamond X8 and 8900 series
2,048
ESRP VLANsmaximum number of ESRP

VLANs.
Summit series
1,000
ESRP (maximum ping tracks)maximum

number of ping tracks per VLAN.
All platforms
ESRP (IP route tracks)maximum IP

route tracks per VLAN.
All platforms
ESRP (VLAN tracks)maximum number

of VLAN tracks per VLAN.
All platforms
Forwarding ratemaximum L2/L3

software forwarding rate.
10,000 pps
20,000 pps
Summit series
10,000 pps
BlackDiamond 8800 a-series
16,000
32,000
8,000
FDB (blackhole entries)maximum

number of unicast blackhole FDB entries.

8900 c-series
8900 xl-series
8900-40G6X-xm
32,000
524,288 (up to)2
128,000
128,000
E4G-200, E4G-400
32,000
Summit X150, X250e, X350, X450e
8,000
Summit X440, X450a
16,000
Summit X480
524,288 (up to)2
Summit X460
32,000
Summit X650
VIM3-40G4x
32,000
Summit X670
VIM4-40G4x
FDB (blackhole entries)maximum
number of multi-cast blackhole FDB
entries.
128,000
1,024
1,024
Summit series
1,024
33
Limits

Metric
Product
Limit
FDB (maximum L2 entries)maximum

number of MAC addresses.
16,384
32,768
8,192
BlackDiamond 8000 (system), except

8900 xl-series
128,000
524,488 (up to)2
128,000
E4G-200, E4G-400
32,000
Summit X150, X350, X250e, X450e
8,192
Summit X440
16,000
Summit X450a
16,384
Summit X480
524,488 (up to)2
Summit X460, 650
32,768
SummitStack (except X480)
128,000
FDB (Maximum L2 entries)maximum

number of multi-cast FDB entries.
Summit X670
128,000
BlackDiamond X8
1024
BlackDiamond 8800
All Summit series switches
FIP Snooping VLANs
BlackDiamond X8
768
BlackDiamond 8800 (8900-40G6X-c only)

Summit X670
Summit X650 series
FIP Snooping Virtual Links
(FPMA mode) per port group
BlackDiamond X8
1,908

Summit X670
Summit X650 series
FIP Snooping FCFs

(with perimeter port) per port group
BlackDiamond X8
238

Summit X670
Summit X650 series
FIP Snooping FCFs

(with Enode-to-FCF port)
BlackDiamond X8
212

Summit X670
Summit X650 series
Identity management-maximum
number of Blacklist entries.
All platforms
512
number of Whitelist entries.
All platforms
512
number of roles that can be created.
All platforms
64
34
Limits

Metric
Product
Limit
Identity management-maximum role

hierarchy depth allowed.
All platforms
Identity management-maximum number

of attribute value pairs in a role match
criteria.
All platforms
16
Identity management-maximum of child

roles for a role.
All platforms

of policies/dynamic ACLs that can be
configured per role.
All platforms

of LDAP servers that can be configured.
All platforms
Identity management--maximum
number of Kerberos servers that can be
configured.
All platforms
20
Identity management--maximum
database memory-size.
All platforms
6449, 152
Identity management--recommended
number of identities per switch.
All platforms
100
All platforms
20
All platforms
500
NOTE: Number of identities per switch is

for a default identity management
database size (512 Kbytes) across all
platforms.
Identity management-recommended
number of ACL entries per identity.
NOTE: Number of ACLs per identity
based on system ACL limitation.
of dynamic ACL entries configured as an
individual dynamic rule, or as an ACL
entry in a policy file.
35
Limits

Metric
Product
Limit
IGMP sendermaximum number of IGMP

senders per switch (IP multi-cast
compression disabled).8
1,024
2,0484
5005
BlackDiamond 8900-10G24X-c modules
2,0484
BlackDiamond 8900-G96T-c modules
4,0964
BlackDiamond 8900-40G6X-xm
3,0005
4,0964
4,0966
E4G-200
2,048
E4G-400
2,048
Summit X150, X250e, X350, X450e
5005
Summit X440
64
Summit X450a
1,024
Summit X480
4,096
Summit X460
2,048
Summit X650
2,048
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
IGMP sendermaximum number of IGMP
senders per switch (IP multi-cast
compression enabled).8
3,0005
2,0005
6,0005
5005
6,0005
12,0002
3,0005
6,0005 6
E4G-200
3,0005
E4G-400
6,0005
Summit X150, X250e, X350, X450e
5005
Summit X440
1925
Summit X450a
2,0005
Summit X460
6,0005
Summit X480
12,0002
Summit X650
6,0005
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
3,0005
36
Limits

Metric
Product
Limit
IGMP snooping per VLAN filters

maximum number of VLANs supported
in per-VLAN IGMP snooping mode.
1,000
2,000
448
1,000
4,000
1,000
1,000
E4G-200, E4G-400
1,000
Summit X150, X250e, X350, X440 X450e
448
Summit X450a, X460, X650, X670
1,000
Summit X480
4,000
IGMPv1/v2 SSM-map entriesmaximum

number of IGMPv1/v2 SSM mapping
entries.
All platforms
500
IGMPv1/v2 SSM-MAP entriesmaximum

number of sources per group in IGMPv1/
v2 SSM mapping entries.
All platforms
50
IGMPv2 subscribermaximum number of

IGMPv2 subscribers per port.9
2,000
2,000
2,000
Summit series (except Summit X460, X480,

X650, and X670)
1,000
Summit X460, X480, X650, X670
2,000
20,000
20,000
20,000
Summit series (except Summit X480, X650, and

X670)
10,000

IGMPv2 subscribers per switch.9
Summit X460, X480, X650, X670
20,000
IGMPv3 maximum source per group

maximum number of source addresses
per group.
All platforms
250

IGMPv3 subscribers per port.9
BlackDiamond 8800 a-, e-series
1,000
2,000
5,000
3,000
Summit series (except Summit X460)
1,000
Summit X460
2,000
37
Limits

Metric
Product
Limit

IGMPv3 subscribers per switch.9
BlackDiamond 8800 a-, e-series
10,000
20,000
30,000
30,000
10,000
Summit X460
20,000
All platforms
20,480
BlackDiamond 8000 series with

8900-MSM128 or MSM-48c, and only
8900 xl-series I/O modules
260,000
BlackDiamond 8000 series with any I/O

modules that are not 8900 xl-series
100,000
28,000
All other platforms
N/A
Per BlackDiamond 8900-10G8X-xl, up to

260,000 per system
32,5002
Per BlackDiamond 8900-G48X-xl or 8900G48T-xl, up to 130,000 per system
16,2502
Per BlackDiamond 8000 c-series, up to 18,000

per system
8,000
BlackDiamond 8900-40G6X-xm, up to 22,000

per system
8,000
BlackDiamond X8 series, up to 28,000 per

system
12,000
All other platforms
N/A
BlackDiamond 8800 a-, c-, xm-series
8,000
1,0005
16,000
16,000
E4G-200
8,000
E4G-400
16,000
Summit X440
412
Summit X250e, X450e
1,0005
8,000
Summit X460, X480
16,000
IP ARP entries in softwaremaximum

number of IP ARP entries in software.
NOTE: May be limited by hardware
capacity of FDB (maximum L2 entries).
IP ARP entries in software with distributed
mode onmaximum number of IP ARP
entries in software with distributed mode
on.
IPv4 ARP entries in hardware with

distributed mode onmaximum number
of IP ARP entries in hardware with
distributed mode on

minimum LPM routesmaximum
recommended number of IPv4 ARP
entries in hardware, with minimum LPM
routes present. For BlackDiamond 8800,
BlackDiamond X8, E4G, and Summit
series switches, assumes number of IP
route reserved entries is 100 or less.
38
Limits

Metric
Product
Limit

maximum LPM routesmaximum
recommended number of IPv4 ARP
entries in hardware, with maximum LPM
routes present. For BlackDiamond 8800,
BlackDiamond X8, E4G, and Summit
series, assumes number of IP route
reserved entries is maximum.
2,0005
BlackDiamond 8800 c-, xm-series
6,0005
5005
12,0005
12,0005
E4G-200
6,0005
E4G-400
12,0005
Summit X440
380
Summit X250e, X450e
5005
Summit X450a
2,0005
Summit X460, X480
12,0005
Summit X650, X670
6,0005
14,0005
18,0005
1,0005
40,0002
22,0005
28,0005
E4G-200
18,0005
E4G-400
20,0005
Summit X440
448
Summit X250e, X450e
1,0005
Summit X450a
14,0005
Summit X460
20,0005
Summit X480
40,0002
Summit X650
18,0005
Summit X670
22,0005
BlackDiamond 8900 xl-series with

8900-MSM128 or MSM-48c
524,256 (up to)2
All other BlackDiamond 8000 series hardware
25,000
25,000
Summit X440
256
Summit X250e, X450a, X450e, X460, X650,

X670, E4G-400, E4G-200
25,000
IPv4 remote hosts in hardware with zero

LPM routesmaximum recommended
number of IPv4 remote hosts (hosts
reachable through a gateway) in
hardware when LPM routing is not used.
For BlackDiamond 8800, BlackDiamond
X8, E4G, and Summit series, assumes
number of IP route reserved entries is 0,
and number of IPv4 ARP entries present
is 100 or less.
IPv4 routesmaximum number of IPv4

routes in software (combination of
unicast and multi-cast routes).
SummitStack or standalone
Summit X480
524,256 (up to)2
SummitStack or standalone
39
Limits

Metric
Product
Limit
IPv4 routes (LPM entries in hardware)

number of IPv4 routes in hardware.
12,000
480
524,256 (up to)27
16,000e
16,000e
E4G-200, E4G-400
12,000
Summit X440
32
Summit X250e, X450e
480
12,000
Summit X480
524,256 (up to)27
Summit X670
16,0007
IPv6 addresses on an interface

maximum number of IPv6 addresses on
an interface.
All platforms
255
IPv6 addresses on a switchmaximum

number of IPv6 addresses on a switch
512
512
E4G-200, E4G-400
512
Summit X440
254
Summit X460, X480, X650, X670
512
1,0005
BlackDiamond 8800 c-, xm-series
3,0005
2505
BlackDiamond 8900-10G24X-c modules
2,0005
BlackDiamond 8900-G96T-c modules
4,0005
8,192 (up to)2
3,0005
E4G-200
2,0005
E4G-400
3,0005
Summit X440
192
Summit X250e, X450e
2505
Summit X450a
1,0005
Summit X460, X670
3,0005
Summit X650
2,0005
Summit X480
8,192 (up to)2
IPv6 host entries in hardwaremaximum

number of IPv6 neighbor entries in
hardware.
40
Limits

Metric
Product
Limit
IPv6 routes (LPM entries in hardware)

maximum number of IPv6 routes in
hardware.
6,000
240
BlackDiamond 8900 xm-series
8,000
245,760 (up to)2
8,000
E4G-200, E4G-400
6,000
Summit X440
16
Summit X250e, X450e
240
6,000
Summit X670
8,000
Summit X480
245,760 (up to)2
BlackDiamond 8000 a-, c-, e-, xm-series
256
245,760 (up to)2
256
E4G-200, E4G-400
256
Summit X250e, X440, X450e, X450a, X460,

X650, X670
256
Summit X480
245,760 (up to)2
BlackDiamond 8900 xl-series with 8900-MSM128

or MSM-48c
245,760 (up to)2
All other BlackDiamond 8000 series hardware
25,000
25,000
Summit X250e, X450a, X450e, X460, X650,

X670, E4G-200, E4G-400, SummitStack, or
standalone
25,000
IPv6 routes with a mask greater than 64

bits in hardwaremaximum number of
such IPv6 LPM routes in hardware.
IPv6 routes in softwaremaximum

number of IPv6 routes in software.
Summit X440
256
Summit X480, SummitStack, or standalone
245,760 (up to)2
IP router interfacesmaximum number of

VLANs performing IP routingexcludes
sub VLANs (IPv4 and IPv6 interfaces).
512
All BlackDiamond 8000 series and Summit

family switches with Edge license or higher
512
IP multi-cast static routesmaximum

number of permanent multi-cast IP
routes.
All platforms
1,024
IP unicast static routesmaximum

number of permanent IP unicast routes.
All platforms
1,024
IP route sharing (maximum gateways)

configurable maximum number of
configurable gateways used by equal
cost multipath OSPF, BGP, or static
routes.
BlackDiamond 8000 and X8 series
2, 4, or 8
2, 4, or 8
E4G
2, 4, or 8
41
Limits

Metric
Product
Limit
IP route sharing (total destinations)

maximum number of unique destinations
used by multipath OSPF, OSPFv3, BGP,
IS-IS, or static routes.
BlackDiamond 8800 a-series, c-series
12,256
480
524,256 (up to)2
NOTE: Each limit is based on up to 8

gateways per destination.
16,352
16,000
Summit X250e, X450e
480
Summit X450a, X460, X650, E4G-200, E4G-400

Summit X480
Summit X670
E4G-200, E4G-400
12.256
524,256 (up to)2
16,352
12,256
IP route sharing (total combinations of

gateway sets)maximum number of
combinations of sets of adjacent
gateways used by multipath OSPF, BGP,
IS-IS, or static routes.

default maximum gateways of 4
if maximum gateways is 2
510
1,022
254

30
62
14
BlackDiamond 8800 c-, xl-, xm-series

510
1,022
254
510
1,022
254
Summit X460, X480, X650, X670, E4G-200,

E4G-400
510
1,022
254
IP multinetting (secondary IP addresses)

maximum number of secondary IP
addresses per VLAN.
All platforms
64
IS-IS adjacenciesmaximum number of

supported IS-IS adjacencies.
128
128
255
Summit X450a, X460, X480, X650, X670
128
2, 4, or 8
2, 4, or 8
All Summit series (except Summit X440)
2, 4, or 8
E4G
2, 4, or 8
IS-IS ECMPmaximum number of equal

cost multipath for IS-IS.
42
Limits

Metric
Product
Limit
IS-IS interfacesmaximum number of

interfaces that can support IS-IS.
All platforms
255
IS-IS routers in an arearecommended

maximum number of IS-IS routers in an
area.
Summit X480
128
All other platforms
256
IS-IS route originationrecommended

maximum number of routes that can be
originated by an IS-IS node.
20,000
20,000
30,000
Summit X450a
5,000
Summit X480
30,000
Summit X460, X650, X670
20,000
25,000
25,000
120,000
Summit X450a
5,000
Summit X480
50,000
Summit X460, X650, X670
25,000
25,000
25,000
120,000
Summit X450a
5,000
Summit X480
50,000
Summit X460, X650, X670
25,000
20,000
20,000
20,000
Summit X450a
20,000
Summit X460, X480, X650, X670
20,000
10,000
10,000
40,000
Summit X450a
5,000
Summit X480
25,000
Summit X460, X650, X670
10,000
10,000
10,000
40,000
Summit X450a
5,000
Summit X480
25,000
Summit X460, X650, X670
10,000
IS-IS IPv4 L1 routes in an L1 router

recommended maximum number of IS-IS
Level 1 routes in a Level 1 IS-IS router.
IS-IS IPv4 L2 routesrecommended

maximum number of IS-IS Level 2 routes.
IS-IS IPv4 L1 routes in an L1/L2 router

Level 1 routes in an L1/L2 IS-IS router.
IS-IS IPv6 L1 routes in an L1 router

IS-IS IPv6 L2 routesrecommended

maximum number of IS-IS Level 2 routes.
43
Limits

Metric
Product
Limit
IS-IS IPv6 L1 routes in an L1/L2 router

Level 1 routes in a L1/l2 router.
10,000
10,000
15,000
Summit X450a
3,000
Summit X480
15,000
Summit X460, X650, X670
10,000
20,000
20,000
60,000
Summit X450a
5,000
Summit X480
40,000
Summit X460, X650, X670
20,000
20,000
20,000
60,000
Summit X450a
5,000
Summit X480
40,000
Summit X460, X650, X670
20,000
20,000
20,000
20,000
Summit X450a
3,000
Summit X460, X480, X650, X670
20,000
All platforms
9,216
IS-IS IPv4/IPv6 L1 routes in an L1 router

The numbers documented are based on
50% IPv4 routes and 50% IPv6 routes.
IS-IS IPv4/IPv6 L2 routes in an L2 router

The numbers documented are based on
50% IPv4 routes and 50% IPv6 routes.
IS-IS IPv4/IPv6 L1 routes in an L1/L2

routerrecommended maximum number
of IS-IS Level 1 routes in a Level 1/Level2
IS-IS router. The numbers documented
are based on 50% IPv4 routes and 50%
IPv6 routes.
Jumbo framesmaximum size supported
for jumbo frames, including the CRC.
44
Limits

Metric
Product
Load sharingmaximum number of

loadsharing groups.
BlackDiamond 8000 series without 8900-40G6X-xm
NOTE: The actual number of load-sharing

groups that can be configured is limited
by the number of physical ports present
in the switch or SummitStack.
Limit
With distributed IP ARP mode off (default)
128
With distributed IP ARP mode on
64
BlackDiamond 8000 series with 8900-40G6X-xm using address-based

custom algorithm
128
64
BlackDiamond 8000 series with 8900-40G6X-xm with L2, L3 or L3_L4

algorithm configured for any group
127
63
SummitStack with X670 with L2, L3 or L3_L4

algorithm configured for any group
127
All other SummitStack configurations and

Summit series switches
128
BlackDiamond X8 series using address-based custom algorithm

384
384
BlackDiamond X8 series with L2, L3 or L3_L4 algorithm configured for

any group
Load sharingmaximum number of

loadsharing groups.
127
63
BlackDiamond 8000 series without 8900-40G6X-xm
NOTE: The actual number of load-sharing

groups that can be configured is limited
by the number of physical ports present
in the switch or SummitStack.
128
64
BlackDiamond 8000 series with 8900-40G6X-xm using address-based

custom algorithm
Load sharingmaximum number of ports

per load-sharing group.
Logged messagesmaximum number of

messages logged locally on the system.
64
Summit X670 (non-stacked)
32
All other Summit series, SummitStacks, and

All platforms
20,000
45
Limits

Metric
Product
Limit
MAC-based securitymaximum number

of MAC-based security policies.
All platforms
1,024
Mirroring (filters)maximum number of

mirroring filters.
128
128
Summit series
128
Mirroring (monitor port)maximum

number of monitor ports.
All platforms
Mirroring, one-to-many (filters)

maximum number of one-to-many
mirroring filters.
128
128
Summit series
128
Mirroring, one-to-many (monitor port)

maximum number of one-to-many
monitor ports.
All platforms
16
MLAG portsmaximum number of MLAG

ports allowed.
768
768
Summit series
768
MLAG peersmaximum number of MLAG

peers allowed.
Summit series
Summit X460
32
Summit X480
64
Summit X670
32
64
64
E4G-200
32
E4G-400
32
Summit X460
32
Summit X480
64
Summit x670
32
64
64
E4G-400
32
E4G-200
32
50
50
E4G-200, E4G-400
50
Summit X460, X480, X670
50
MPLS LDP enabled interfacesmaximum

number of MPLS LDP configured
interfaces per switch.
MPLS LDP peersmaximum number of

MPLS LDP peers per switch.
MPLS LDP adjacenciesmaximum

number of MPLS LDP adjacencies per
switch.
46
Limits

Metric
Product
Limit
MPLS LDP ingress LSPsmaximum

number of MPLS LSPs that can originate
from a switch.
4,000
2,048
2,048
E4G-200
2,048
E4G-400
4,000
Summit X460, X480
4,000
MPLS LDP transit LSPsmaximum

number of MPLS transit LSPs per switch.
MPLS LDP egress LSPsmaximum

number of MPLS egress LSPs that can
terminate on a switch.
MPLS static LSPsmaximum number of

static LSPs.
MSDP active peersmaximum number of

active MSDP peers.
MSDP SA cache entriesmaximum

number of entries in SA cache.
MSDP maximum mesh groupsmaximum

number of MSDP mesh groups.
Summit X670
2,048
4,000
4,000
4,000
E4G-200
3,274
E4G-400
3,274
Summit X460, X480, X670
4,000
8,000
4,096
8,000
E4G-200
4,096
E4G-400
8,000
Summit X460, X480
8,000
Summit X670
4,096
100
100
E4G-200, E4G-400
100
Summit X460, X480, X670
100
32
64
64
Summit X460, X480, X650, X670
16
16,000
16,000
16,000
Summit X460, X480, X650, X670
8,000
16
16
Summit X460, X480, X650, X670
47
Limits

Metric
Product
Limit
Multi-cast listener discovery (MLD) IPv6

multi-cast data sendermaximum
number of IPv6 multi-cast streams
supported on a switch8 5
750
1,000
250
1,000
1,000
3,000
3,000
E4G-200
1,500
E4G-400
3,000
Summit X150, X250e, X350, X450e
250
Summit X440
90
Summit X450a
750
Summit X460
3,000
Summit X480
3,000
Summit X650
1,500
Summit X670
1,500
BlackDiamond a-series
500
BlackDiamond e-series
250
1,000
500
2,000
500
500
E4G-400, Summit X460
1,000
Summit X150, X250e, X350, X450e
250
Summit X450a
500
Summit X480
2,000
Summit X440
250
Summit X650, X670, E4G-200
500
500
BlackDiamond xl-series
1,500
BlackDiamond X8 Series
1,500
Summit X450a, X450e, X440, SummitStack
750
Summit X460, X480, X650, X670
1,500
10,000
10,000
5,000
Summit X460, X480, X650, X670
10,000
Multi-cast listener discovery (MLD)

snooping per-VLAN filtersmaximum
number of VLANs supported in perVLAN MLD snooping mode.
Multi-cast listener discovery (MLD)v1

subscribersmaximum number of MLDv1
subscribers per port9

subscribers per switch9
48
Limits

Metric
Product
Limit

subscribers per port9
500
BlackDiamond xl series
2,500
2,000
1,000
Summit X460, X480, X650, X670
2,000
10,000
BlackDiamond xl series
10,000
5,000
Summit X460, X480, x650, X670
1,0000

maximum source per groupmaximum
number of source addresses per group
All platforms
200
Multi-cast VLAN registration (MVR)

maximum number of MVR senders per
switch (IP multi-cast compression
disabled).
1,024
2,0484
5005

subscribers per switch9

8900-10G24X-c modules
8900-G96T-c modules
8900 xl-series
8900-40G6X-xm
2,0484
4,0964
4,0964
3,0005
4,096
E4G-200
E4G-400
2,048
Summit X150, X250, X350, X450e
5005
Summit X440
64
Summit X450a
1,024
Summit X480
4,096
Summit X460
2,048
Summit X650
2,048
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
3,0005
49
Limits

Metric
Product
Limit
Multi-cast VLAN registration (MVR)

maximum number of MVR senders per
switch (IP multi-cast compression
enabled).
2,0005
6,0005
5005
6,0005
12,0002
6,0005
8900-40G6X-xm module
3,0005
Summit X150, X250e, X350, X450e
5005
Summit X440
1925
Summit X450a
2,0005
Summit X460
6,0005
Summit X480
12,0002
Summit X650
6,0005
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
3,0005
BlackDiamond 8000 series (clients per module/

per system)
1,024
1,024
Summit series
1,024
Network loginmaximum number of

dynamic VLANs.
All platforms)
2,000
Network login VLAN VSAsmaximum

number of VLANs a client can be
authenticated on at any given time.
All platforms
10
OSPF adjacenciesmaximum number of

supported OSPF adjacencies.
128
255
BlackDiamond X8 Series
255
Summit X250e, X460, X650, X670
128
Summit X440
128
Summit X480
255
OSPF areasas an ABR, how many OSPF

areas are supported within the same
switch.
All platforms
OSPF ECMPmaximum number of equal

cost multipath OSPF.
2, 4, or 8
2, 4, or 8
All Summit series (except Summit X440)
2, 4, or 8
E4G
2, 4, or 8
Network loginmaximum number of

clients being authenticated on MACbased VLAN enabled ports.
50
Limits

Metric
Product
Limit
OSPF external routesrecommended

maximum number of external routes
contained in an OSPF LSDB without too
many other types of OSPF routes.
20,000
130,000
20,000
Summit X250e, X450a, X460, X650, X670
5,000
Summit X480
130,000
7,000
7,000
7,000
Summit X250e, X450a, X460, X650, X670
2,000
Summit X480
7,000
100
200
100
Summit X250e, X450a, X460, X650, X670
50
OSPF inter- or intra-area routes

recommended maximum number of
inter- or intra-area routes contained in an
OSPF LSDB without too many other
types of OSPF routes, with one ABR in
OSPF domain.
OSPF routers in a single area
routers in a single OSPF area.
Summit X480
200
OSPF subnets on a single router

OSPF routed subnets on a switch.
400
OSPF virtual linksmaximum number of

supported OSPF virtual links.
32
OSPFv2 linksmaximum number of links

in the router LSA.
All platforms
419
OSPFv3 active interfacesmaximum

number of OSPFv3 active interfaces.
All platforms with Advanced Edge license
OSPFv3 areasas an ABR, the maximum

number of supported OSPFv3 areas.
16
OSPFv3 external routesrecommended

maximum number of external routes.
10,000
10,000
60,000
Summit X450a, X460, X650, X670
10,000
Summit X480
60,000
256
256
384
Summit X450a, X460, X650, X670
128
Summit X480
384
6,000
6,000
6,000
Summit X450a, X460, X650, X670
3,000
Summit X480
6,000
OSPFv3 interfacesmaximum number of

OSPFv3 interfaces.
OSPFv3 inter- or intra-area routes

inter- or intra-area routes.
51
Limits

Metric
Product
Limit
OSPFv3 neighborsmaximum number of

OSPFv3 neighbors.
64
64
128
Summit X450a, X460, X650, X670
64
Summit X480
128
OSPFv3 virtual linksmaximum number

of OSPFv3 virtual links supported.
16
PIM snoopingmaximum number of

(S,G) entries programmed in the
hardware (IP multi-cast compression
disabled).
2,0484
5004

8900-G96T-c modules
8900 xl-series
8900-40G6X-xm
2,0484
4,0964
4,0964
3,0005
4,096
E4G-200
2,048
E4G-400
2,048
Summit X150, X250e, X350, X450e
5005
Summit X440
64
Summit X450a
1,024
Summit X460
2,048
Summit X480
4,096
Summit X650
2,048
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
3,0005
52
Limits

Metric
Product
Limit
PIM snoopingmaximum number of

(S,G) entries programmed in the
enabled).
2,0005
6,0005
5005
6,0005
12,0002
6,0005
E4G-200
3,0005
E4G-400
6,0005
8900-40G6X-xm
3,0005
Summit X150, X250e, X350, X450e
5005
Summit X440
1925
Summit X450a
2,0005
Summit X480
12,0002
Summit X460
6,0005
Summit X650
6,0005
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
PIMmaximum routesmaximum
number of (S,G) entries installed in the
disabled).
3,0005
2,0484
5005

8900-G96T-c modules
8900 xl-series
8900-40G6X-xm
2,0484
4,0964
4.0964
3,0005
4,094
E4G-200
2,048
E4G-400
2,048
Summit X150, X250e, X350, X450e
5005
Summit X440
645
Summit X450a
1,024
Summit X480
4,096
Summit X460
2,048
Summit X650
2,048
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
3,0005
53
Limits

Metric
Product
Limit
PIMmaximum routesmaximum
number of (S,G) entries installed in the
enabled).
2,0005
6,0005
5005
6,0005
12,0002
6,000f
E4G-200
3,0005
E4G-400
6,0005
8900-40G6X-xm modules
3,0005
Summit X150, X250e, X350, X450e
5005
Summit X440
192
Summit X450a
2,0005
Summit X480
12,0002
Summit X460
6,0005
Summit X650
6,0005
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
PIM-SSM (maximum SSM routes)
maximum number of (S,G) entries
installed in the hardware with PIM SSM
configuration (IP multi-cast compression
disabled).
3,0005
2,0484
5005

8900-G96T-c modules
8900 xl-series
8900-40G6X-xm
2,0484
4,0964
15,000
3,0005
4,094
E4G-200
2,048
E4G-400
2,048
Summit X150, X250e, X350, X450e
5005
Summit X440
64
Summit X450a
1,024
Summit X480
4,096
Summit X460
2,048
Summit X650
2,048
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
3,0005
54
Limits

Metric
Product
Limit
PIM-SSM (maximum SSM routes)

maximum number of (S,G) entries
installed in the hardware with PIM SSM
configuration (IP multi-cast compression
enabled).
2,0005
6,0005
5005
6,0005
12,0002
6,0005
E4G-200
3,0005
E4G-400
6,0005
8900-40G6X-xm
3,0005
Summit X150, X250e, X350, X450e
5005
Summit X440
1925
Summit X450a
2,0005
Summit X480
12,0002
Summit X460
6,0005
Summit X650
6,0005
VIM3-40G4x
3,0005
Summit X670
VIM4-40G4x
3,0005
PIM IPv4 (maximum interfaces)

maximum number of PIM active
interfaces.
All platforms
512
PIM IPv6 (maximum interfaces)

maximum number of PIM active
interfaces.
All platforms
512
PIM (maximum interfaces)maximum

number of PIM snooping enabled
interfaces.
All platforms
256
PIM Limitsmaximum number of multicast group per rendezvous point
All platforms
180
PIM Limitsmaximum number of multicast sources per group
All platforms
175
PIM Limitsmaximum number of

dynamic rendezvous points per multicast group
All platforms
145
PIM Limitsstatic rendezvous points
All platforms
32
Policy-based routing (PBR) redundancy

maximum number of flow-redirect and
nexthops per each flow-direct.
All platforms
32
55
Limits

Metric
Product
Private VLANsmaximum number of

subscribers. Assumes a minimum of one
port per network and subscriber VLAN.
BlackDiamond 8800 a-, c-, e-, xl-series

private VLANs with an IP address on the
network VLAN.
with eight modules of 48 ports

8900-G96T-c modules
Limit
383
767
767
Summit series
One less than the

number of available
user ports
All platforms
512
BlackDiamond 8800 a-, c-, e-series
384
2,046
2,046
E4G-200
597
E4G-400
1,280
Summit X440
254
Summit X250e, X450a, X450e
384
Summit X480, X650
2,046
Summit X670
597
Summit X460
820
E4G Platforms
32 for boundary
clock
NOTE: This limit is dependent on the

maximum number of private VLANs in an
L2-only environment if the configuration
has tagged and translated ports.
private VLANs in an L2-only
environment.
PTP/1588v2 Clock Ports
1 for ordinary clock

PTP/1588v2 Clock Instances
E4G Platforms
2 combinations:
Transparent
clock + ordinary
clock
Transparent
clock +
boundary clock
PTP/1588v2 Unicast Static Slaves
E4G Platforms
40 entries per clock

port
PTP/1588v2 Unicast Static Masters
E4G Platforms
10 entries per clock

type
Route policiessuggested maximum

number of lines in a route policy file.
All platforms
10,000
56
Limits

Metric
Product
Limit
RIP-learned routesmaximum number of

RIP routes supported without
aggregation.
10,000
10,000
10,000
Summit X250e, X450a
3,000
X440
3,000
Summit X460
10,000
RIP interfaces on a single router

recommended maximum number of RIP
routed interfaces on a switch.
RIPng learned routesmaximum number

of RIPng routes.
RSVP-TE interfacesmaximum number

of interfaces.
RSVP-TE ingress LSPsmaximum

number of ingress LSPs.
RSVP-TE egress LSPsmaximum

number of egress LSPs.
RSVP-TE transit LSPsmaximum number

of transit LSPs.
Summit X480, X650, X670
10,000
256
256
384
Summit X250e, X450a, X440
128
Summit X460
256
Summit X480
384
Summit X650, X670
256
3,000
3,000
5,000
Summit X250e, X450a
1,500
Summit X480
5,000
Summit X460, X650, X670
3,000
32
32
E4G-200, E4G-400
32
Summit X460, X480, X670
32
2,000
E4G-200, E4G-400
2,000
2,000
Summit X460, X480, X670
2,000
2,000
2,000
E4G-200, E4G-400
2,000
Summit X460, X480, X670
2,000
2,000
2,000
E4G-200, E4G-400
2,000
Summit X460, X480, X670
2,000
57
Limits

Metric
Product
Limit
RSVP-TE pathsmaximum number of

paths.
1,000
1,000
Summit X460, X480, X670
1,000
E4G-200, E4G-400
1,000
1,000
1,000
Summit X460, X480, X670
1,000
E4G-200, E4G-400
1,000
64
64
Summit X460, X480, X670
64
E4G-200, E4G-400
64
Spanning Tree (maximum STPDs)

maximum number of Spanning Tree
Domains on port mode EMISTP.
All platforms
64
Spanning Tree PVSTmaximum number

of port mode PVST domains.
All platforms
128
Spanning Treemaximum number of

multiple spanning tree instances (MSTI)
domains.
All platforms
64

VLANs per MSTI.
All platforms (except Summit X460)
500
Summit X460
600
1,000
RSVP-TE profilesmaximum number of

profiles.
RSVP-TE EROsmaximum number of

EROs per path.
NOTE: Maximum of 7 active ports per

PVST domain when 128 PVST domains
are configured.
NOTE: Maximum number of 10 active

ports per VLAN when all 500 VLANs are
in one MSTI.
VLANs on all MSTP instances.
Summit X460
1,024
Spanning Tree (802.1d domains)

maximum number of 802.1d domains per
port.
All platforms
Spanning Tree (number of ports)

maximum number of ports including all
Spanning Tree domains.
All platforms
2,048
Spanning Tree (maximum VLANs)

maximum number of STP protected
VLANs (dot1d and dot1w).
1,024
Summit X460
600
All other platforms
560
All platforms
SSH (number of sessions)maximum

number of simultaneous SSH sessions.
58
Limits

Metric
Product
Limit
Static MAC multi-cast FDB entries

maximum number of permanent multicast MAC entries configured into the
FDB.
1,024
1,024
Summit X150, X350, X250e, X450a, X450e,

X460, X480, X650, X670
1,024
Syslog serversmaximum number of

simultaneous syslog servers that are
supported.
All platforms
Telnet (number of sessions)maximum

number of simultaneous Telnet sessions.
All platforms
Virtual routersmaximum number of

user-created virtual routers that can be
created on a switch.
63
63
E4G-200, E4G-400
63
Summit X460, X480, X650, X670
63
190
190
NOTE: Virtual routers are not supported

on Summit X150, X250e, X350, X440,
X450a, and X450e series switches.
Virtual router forwarding (VRFs)
maximum number of VRFs that can be
created on a switch.
Summit X460, X480, X650, X670
190
VRF forwarding instancesnumber of

non-VPN VRFs that can be created on a
switch.
190
Summit X460, X480, X650, X670
190
Virtual router protocols per VR

maximum number of routing protocols
per VR.
All platforms
Virtual router protocols per switch

maximum number of VR protocols per
switch.
All platforms
64
VLAN aggregationmaximum number of

port-VLAN combinations on any one
superVLAN and all of its subVLANs.
1,000
Summit X440
256
VLANsincludes all VLANs.
All platforms
4,094
VLANs (Layer 2)maximum number of

Layer 2 VLANs.
All platforms
4,094
VLANs (Layer 3)maximum number of

Layer 3 VLANs.
512
All BlackDiamond 8000 series and Summit

family switches with Edge license or higher
512
Summit X440
254
VLANs (maximum active port-based)

number of simultaneously active portbased VLANs.
All platforms
4,094
VLANs (maximum active protocol-sensitive

filters)number of simultaneously active
protocol filters in the switch.
All platforms
15
59
Limits

Metric
Product
VLAN translationmaximum number of

translation VLANs. Assumes a minimum
of one port per translation and member
VLAN.

with eight modules of 48 ports
8900-G96T-c modules
Limit
383
767
767
Summit X450a and X450e, group of 24 ports

with two-port option cards
without option cards

translation VLAN pairs with an IP address
on the translation VLAN.
25
23
Summit series
One less than the

number of available
user ports
All platforms
512
BlackDiamond 8800 a-, c-, e-series
384
2,046
2,046
Summit X460, E4G-400, E4G-200
2,000
Summit X440
512
Summit X250e, X450a, X450e
384
NOTE: This limit is dependent on the

maximum number of translation VLAN
pairs in an L2-only environment if the
configuration has tagged and translated
ports.
translation VLAN pairs in an L2-only
environment.
Summit X480, X650, X670
2,046
VPLS: VCCV (pseudo wire Virtual Circuit

Connectivity Verification) VPNs
maximum number of VCCV enabled
VPLS VPNs.
All platforms
16
VPLS: MAC addressesmaximum number

of MAC addresses learned by a switch.
512,000
128,000
128,000
E4G-200, E4G-400
32,000
Summit X650
N/A
Summit X460
32,000
Summit X480
512,000
Summit X670
128,000
1,023
1,023
E4G-200, E4G-400
1,000
Summit 460
1,000
Summit X480, X670
1,023
VPLS VPNsmaximum number of VPLS

virtual private networks per switch.
60
Limits

Metric
Product
Limit
VPLS peersmaximum number of VPLS

peers per VPLS instance.
Summit X480
64
Summit X460
32
64
Summit X670
32
64
E4G-200, E4G-400
32
7,800
4,000
7,800
E4G-200, E4G-400
1,000
Summit X460
1,000
Summit X480
7,800
Summit X670
4,000
Summit X480
4,095
Summit X460
1,000
4,095
2,047
Summit X670
2,047
BlackDiamond X8
4,095
4,000
2,047
4,000
E4G-200, E4G-400
1,000
Summit X460
1,000
Summit X480
4,000
Summit X670
2,047
256
256
VPLS pseudo wiresmaximum number of

VPLS pseudo wires per switch.
Virtual Private Wire Service (VPWS):

pseudo wiresmaximum number of
VPWS pseudo wires per switch
Virtual Private Wire Service (VPWS):

VPNsmaximum number of virtual
private networks per switch.
VRRP (maximum instances)maximum

number of VRRP instances for a single
switch.
MSM-48c
8900-MSM128
256
128
All other platforms with Advanced Edge license

or higher
VRRP (maximum VRID)maximum
number of unique VRID numbers per
switch.
All platforms with Advanced Edge license or

higher
VRRP (maximum VRIDs per VLAN)

maximum number of VRIDs per VLAN.

higher
VRRP (maximum ping tracks)maximum

number of ping tracks per VLAN.

higher
61
Limits

Metric
Product
VRRP (maximum ping tracks)maximum

number of ping tracks per VRRP Instance
under 128 VRRP instances.

higher
Hello interval: 100 milliseconds
Limit
Hello interval: 1 second
VRRP (maximum iproute tracks)

maximum number of IP route tracks per
VLAN.

higher
VRRPmaximum number of VLAN tracks

per VLAN.

higher
XML requestsmaximum number of XML

requests per second.
NOTE: Limits are dependent on load and

type of XML request. These values are
dynamic ACL data requests.
with 100 DACLs

with 500 DACLs
10
3

with 100 DACLs
with 500 DACLs
10
3
Summit X450a, X480, X650, X670

with 100 DACLs
with 500 DACLs
1.
2.
3.
4.
5.
6.
4
1
XNV authenticationmaximum number

of VMs that can be processed
(combination of local and network VMs).
All platforms
2,048
XNV database entriesmaximum number

of VM database entries (combination of
local and network VMs).
All platforms
16,000
XNV database entriesmaximum number

of VPP database entries (combination of
local and network VPPs).
All platforms
2,048
XNV local VPPsmaximum number of

XNV local VPPs.
All platforms
XNV maximum number of policies/

dynamic ACLs that can be configured per
VPP.10
All platforms
XNV network VPPsmaximum number of

XNV network VPPs.10
All platforms
Ingress
Egress
Ingress
Egress
Ingress
Egress
2,048
512
8
4
2,048
512
The table shows the total available; see the note included in PD3-77983510.
Limit depends on setting configured for configure forwarding external-tables.
When there are BFD sessions with minimal timer, sessions with default timer should not be used.
Applies only if all enabled BlackDiamond 8000 I/O modules are BlackDiamond 8000 c-, xl-, or xm-series modules.
Effective capacity varies based on actual IP addresses and hash algorithm selected, but is higher for BlackDiamond 8000 c-, xl-,
xm-series modules, BlackDiamond X8, E4G, and Summit X460, X480, X650, and X670 switches compared to BlackDiamond 8800
a-series and 8000 e-series modules and Summit X250e, X450e, and X450a switches.
For the MVR feature in the BlackDiamond X8 series switches, the number of senders applies only when there are few egress VLANs
with subscribers. If there are many VLANs with subscribers, the limit is substantially less. Only 500 senders are supported for 100
VLANs. It is not recommended to exceed these limits.
62
Limits
7.
8.
The limit depends on setting configured with configure iproute reserved-entries.

The IPv4 and IPv6 multi-cast entries share the same hardware tables, so the effective number of IPv6 multi-cast entries depends on
the number of IPv4 multi-cast entries present and vice-versa.
9. If IGMP and MLD are simultaneously configured on the switch, the number of effective subscribers supported would be
appropriately lessened.
10. The number of XNV authentications supported based on system ACL limitations.
63
Limits
64
Open Issues, Known Behaviors,

and Resolved Issues
This chapter describes items needing further clarification and behaviors that might
not be intuitive. It also includes the items that have been resolved.
This chapter contains the following sections:
Open Issues on page 65
Known Behaviors on page 81
Resolved Issues in ExtremeXOS 15.2.3-Patch1-12 on page 85
Resolved Issues in ExtremeXOS 15.2.3 on page 91
Resolved Issues in ExtremeXOS 15.2.2 on page 98
Resolved Issues in ExtremeXOS 15.2 on page 103
Open Issues
Following are the open issues for supported features in ExtremeXOS 15.2.3.-patch1-12.
Table 4: Open Issues, Platform-Specific and Feature PDs
PD Number
Description
General
PD4-3892902098
In VPLS, FDB is not learned on service VLAN ports after rebooting the switch.
PD4-3492066323
On Summit stacks, a temporary loop occurs for short time in EAPS rings when a process
ends unexpectedly in backup/standby node or during slot failover.
PD4-3217352394
NTP packets from client do not egress until NTP is enabled on egress interface. This creates a
problem when there are multiple gateways for the NTP server and the preferred gateway
goes down. Need to enable NTP on all interfaces from which NTP server is reachable.
PD4-3217101680
NTP is not working when configured on loopback VLAN.
PD4-3223230501
The command run msm fail-over or run fail-over removes NTP configuration on
a VLAN when NTP and DAD are enabled on the same VLAN.
PD4-3138604241
[10063] 100BASE (with phy) FX SFP optics link is not coming up after issuing command
config ports 9-11 auto off speed 100 duplex full after saving and then
rebooting Summit X440/BlackDiamond 8800 series switches and although partner link is up.
This issue is seen between the Summit X440 and X460. This issue occurs in ExtremeXOS:
v1522b0-br-SR1-4, 15.2.1.5, and 15.1.2.12.
Workaround: Link comes up after unplugging, and then re-plugging the 100FX. On the
Summit X440, issue command configure ports <ports list> auto on.
Open Issues, Known Behaviors, and Resolved Issues
Table 4: Open Issues, Platform-Specific and Feature PDs (Continued)

PD Number
Description
PD4-2885820591
Netlogin web is not working in ISP mode.
PD4-3030089102
After tracking TCP port goes down, and then comes up, health check LAG always goes down
never comes back up, though TCP port is up.
Workaround: Delete TCP-tracking, and then add it back after verifying that TCP port/service
is up and running.
PD4-3000720361
Configuring NTP and then adding default route for reaching public NTP server causes reenabling of NTP for synchronization. Until then, NTP won't get synchronized.
PD4-2900366121
On WindowsXP and earlier systems, Kerebros snooping does not work with user names that
are 15 or more characters long.
When a Kerberos client uses UDP for transport, some of the Kerberos packets exchanged
between the client and the server may be fragmented, if the Kerberos user name is 15 or
more characters long.
Workaround:
Ensure that the Kerberos client uses TCP for transport.
For Microsoft WindowsXP and earlier clients, this patch from Microsoft ensures that the
Windows Kerberos clients always use TCP for transport:
http://support.microsoft.com/kb/244474
PD4-2797829304
After enabling SSH2, there's no indication from show config command that it is enabled.
PD4-2712839176
The DHCP-options code is not validated for the options given.
PD4-2483785534,
PD4-2483785491
The option end-point should not be included in the configure vlan < vlan name > add ports <
port no > tagged private-vlan command.
PD4-2255170647
After disabling and re-enabling a port using the clear elsm port < port no >
auto-restart command, the ELSM state does not come up.
PD4-1402339707
The following Warning message should be deleted for BlackDiamond 8900 xl- and c-series
cards when the switch is supporting 256 VRRP instances:
WARNING: Number of VRs has reached the recommended maximum (128).
PD4-2330473390,
PD4-2012884711
The following critical message may be logged followed by a system crash when making a
configuration change to a private VLAN:
System call ioctl failed failed: informCfgVlanAddPorts and 15
PD4-1688055111
A system crash occurs when the system is configured with 2,000 VPLS and 1,000 CFM
instances while running the restart ports, or save and reboot commands.
PD4-1820554590
A switch sends an MLDv2 listener report even though MLDv1 is enabled on the switch.
PD4-1820554531
While running a TAHI conformance suite for MLDv2, a switch always sets the QQI value to 0
in MLDv2 general query messages. It should set QQI to querier query interval.
PD4-1842342875,
PD4-1466022175
When an SNMP query is issued for non-existent IPv4 routes, the RtMgr process crashes with
signal 11.
PD4-1842342815,
PD4-1291631579
When working in network login, after a dot1x client logs out, the port is not moved to a MACbased VLAN.
PD4-1842342767,
PD4-1300978095
After installing a legacy CLI module, the CLI command load script returns the following
error message:
%% Unrecognized command: create vlan v$x
PD4-1771325794
If the configure ip-mtu command is configured on VLANs that have only an IPv6
address, the show configuration command does not display the output for the
configure ip-mtu command.
66

PD Number
Description
PD4-1540274936
An ISIS process crash with signal 6 may occur when disabling ISIS when ISISv6 and ISIS IP
route compression are configured.
PD4-1556309411
With multiple NSSA areas where there is more than one link between areas, OSPF default
routes are not installed in the routing table.
PD4-1549189647
In ISIS, when route summarization is configured with authentication, the authentication is not
effective and all the routes are advertised, regardless of the type of authentication
configured.
PD4-1535268629
ISIS tx-only authentication also authenticates received LSPs. The received routes are not
installed in the ISIS LSDB based on the authentication policy.
PD4-1620486143
When DHCP lease time is set to the maximum/infinity (4294967295), the DHCP client
continuously sends renewal requests.
PD4-813961562
When a service VLAN is changed to include a dot1q tag on both sides in CFM VPLS, the
RMEP entry is not learned on one side.
PD4-749060484
Errors are seen when a configuration having identifiers (SNMPv3 user name/EAPS domain
name) with special characters are loaded through a script.
PD4-561358261
If you create a super VLAN and a sub-VLAN in different virtual routers you are able to bind
the VLANs. Super VLANs and sub-VLANs should belong to the same virtual router.
PD4-460892051
Installing different versions of an ExtremeXOS image and an SSH image displays the
following error message:
Failed to install image- cannot read spec file" in the log
"upgrade failed installation:got error from installer DLL"
PD3-132508261
When issuing the enable jumbo-frame port all command on a BlackDiamond 8800,
the MTU size for the VLAN is not configured. Sending 5,000 byte traffic works correctly.
However, if you disable jumbo-frames on the egress port the error message Packet too
big is displayed.
PD3-104885349
When a shared link comes up, temporary traffic loss may occur until FDB entries are aged.
Aging occurs by default every five minutes.
Workaround: To reduce traffic loss, reduce the default age time.
PD3-132775269
Telnet sessions between two switches using two windows causes one session to hang if both
sessions are edited but only one session is saved.
PD3-28378521
Enabling load sharing on a port that is being mirrored causes the mirroring to stop.
PD4-1678280326
File system commands such as ls .* exposes internal files.
PD4-2340987025
Bestpath is not computed when we have received routes from peer that is direct exported.
PD4-2365834125
When you attempt to delete VPLS peers, the following message is received:
Warn:FDB.VPLSPeerNotFound on deleting vpls peers.
PD4-2377192305
Enabling and Disabling unicast-negotiation is not supported.
PD4-2383457620
PTP packets with TTL field set to one are discarded. The PTP master that sends packets with
TTL as one will not be identified as master by the slave clock.
PD4-2402929258
printf message on console:

"Error: No valid Ethernet port(s) in the specified
"taggedPorts" value "*"".
PD4-2459996844
Multipath routes (ECMP) from EBGP peers are not displayed correctly for multi-cast routes.
PD4-2207141998
ERPS takes average of 186 ms to recover the L3 traffic when erps ring reverts from
protection to idle state but G.8032 recommendation is to provide 50 ms recovery switching
for Ethernet traffic in a ring topology.
67

PD Number
Description
PD4-2275772790
UDP CES packets are not forwarding to next hop when the CES TTL value is sets as 1.
PD4-2341681237
Some FDB entries were missing in network vlan file database while they are seen in
subscriber VLAN.
PD4-2387510070
In a 7-node Summit Stack, the output of the command show default gets stuck after
displaying some ports if the default VLAN has all the ports added.
PD4-2443869637
Looping is not prevented with VLAN aggregation using ERPSv2.
PD4-2440608434
Default Sflow configuration uses configured Agent IP of 0.0.0.0 instead of Operational Agent
IP of management IP (configured IP of the management port).
PD4-2355250081
After adding the trapreceiver user, it does not display after the show snmpv3 user command.
Also the trapreceiver cannot be used as a RO or RW user even after given permissions to the
required user.
PD4-2445640160
PSU state shows Power_failed for E4G-200 in Screenplay, although it shows as Unsupported
in the CLI.
PD4-2501758416
Process route manager hits 99% CPU during link flap of LAG port in a PIM enabled VLAN.
PD4-2577130288
In E4G-400, when both XGM3S-2SF and XGM3-4SF are present, sometimes clock is not
recovered via SyncE when the input clock source port and output clock ports are across the
XGM modules.
PD4-2193216484
ERPS takes average of 94 ms to switch erps ring from idle to protection state (converge the
traffic) when failover occurred in the ring but G.8032 recommendation is to provide 50ms
protection and recovery switching for Ethernet traffic in a ring topology.
PD4-2415093851
If the CLI command enable bgp export ospfv3 address-family ipv6multicast is given in show conf bgp it is shown incorrectly.
PD4-2495369831
Next-hop of the aggregate address is changed even though the routes filtered through
aggregate policy has the same next-hop.
PD4-2479030541
Transmitted capabilities should not be shown when peering with neighbor that does not
support capabilities.
PD4-2492841430
IPARP entries could not be learned as an identity on a shared port.
PD4-2517224847
Maximum CPU sample limit on BCM platform is limited to 1,000 pps and should be
documented.
PD4-2473676475
When there are two VRRP instances with same VRID on two different VLANs, the switch is
master for one VRRP instance and backup for another VRRP instance. Packets received with
VRRP virtual mac on vlan-id for which switch is backup are consumed by the switch. The
switch should not consume those packets.
PD4-2562996591
MIB value for OID extremeInputPowerVoltage wrongly shows incorrect or unknown for
X460, E4G-400 and BlackDiamond 8806.
PD4-2769253950
The output of the command show igmp does not carry IGMP Snooping details.
Workaround: Use show igmp snooping command instead.
PD4-2711224879
On DHCP servers when DHCP snooping is enabled, the server releases the IP to the client
though it is not a trusted port.
PD4-2834808350
ESRP node doesn't L3 switch multi-cast traffic received on MLAG or non-MLAG ports when
the ESRP node is slave for ingress VLAN and master for egress VLAN. Also, the ESRP slave
doesn't switch L3 multi-cast traffic received on MLAG ports when it is slave for ingress and
egress VLANs. As a result, traffic is being dropped when MLAG-PIMv4 is configured with
ESRP.
PD4-2724480541
DHCP server does not work with PVLAN.
PD4-2860679997
512 BFD sessions are not stable (with default timers).
68

PD Number
Description
BlackDiamond 8800 Series Switches

PD4-3155393321
EMS component revisions between ExtremeXOS 15.1.1 and 15.2.2 are incompatible and
produce alarming-looking log messages that can be ignored.
The EMS component went from v8.2 (in ExtremeXOS 15.1.1.6) to v10.0 (in ExtremeXOS 15.2.2).
The incompatibility between these two EMS versions produces log messages that have no
effect on the functionality of the switch and can be ignored.
PD4-3121879961
BGP_GracefulRestart_NewStack: After an unplanned BGP process restart using the

command terminate process bgp graceful, trace.bgp should be stored in the
memory card if it exists. However, the trace .bgp is not stored in the memory card of the
switch; instead the file is stored in the internal memory. This issue applies to ExtremeXOS
15.2.1 and later versions.
PD4-2836155071
On BlackDiamond 8800 and Summit X480 series switches, IPv6 automatic tunnels require
hardware aging support when IPv6 uses external TCAM.
PD4-2820557781
Under certain conditions with VRRP, HAL process ends unexpectedly with signal 6: glibc
detectedProcess hal pid 1277 ends unexpectedly with signal 6 and signal 11 (two different
back trace).
PD4-2790183670
Graceful restart of BGP (in unplanned or both mode) does not work correctly with VPN VRF.
PD4-2840571161
License does not get applied if Backup MSM is not in synch but the CLI displays a messages
saying that it was successfully applied.
Workaround: Ensure that MSMs are in synch prior to performing a license upgrade.
PD4-2252055101
After disabling a 10G port on an 8900-10G24X-c module, entries are not flushed from the
software.
NOTE: This issue occurs on load-shared ports and can be reproduced by running the
disable port all command.
PD4-2166404788
Some software forwarding of untagged VMAN traffic does not work when an 8900-MSM128
module is installed. That is, the software forwarding that results when limit-learning is
configured does not work.
A similar problem occurs with untagged VMAN traffic received from one of the following I/O
modules regardless of the MSM installed:
8900-G48T-xl
8900-G48X-xl
8900-G96Tc
8900-10G8X-xl
10G8Xc
10G4Xc
This problem is also seen in ExtremeXOS 12.3, 12.4, and 12.5 software releases.
PD4-2049460356
Only partial traffic is forwarded between a service VLAN and VPLS (LACP). Transmitting
from a VLAN to VPLS, traffic loss is approximately 10%; from VPLS to a VLAN, traffic loss is
approximately 98%.
PD4-1633677741
On a BlackDiamond 8800 series switch, making link state changes during a large policy
refresh can take more than 20 seconds and may cause duplicate packet forwarding in an
MLAG configuration.
PD4-1546542587
ISIS process crashes with signal 6 while trying to change the metric-style to wide under
scaled conditions.
69

PD Number
Description
PD4-1637972971
Beginning with ExtremeXOS 12.5, the mirroring feature stops working after downgrading and
then upgrading the switch software.
PD4-1567438997
When an ExtremeXOS switch receives an OSPF user group LSA advertisement with a router
ID field as 0.0.0.0, the switch does not process the advertisement and reboots OSPF.
PD4-1674379381
When installing new PSU controller firmware, log messages starting with
<Crit:Kern.Critical> or <Erro:Kern.Error> may be generated by the backup
MSM and can be ignored.
PD4-1530729359
When there are a large number of OSPF routes (> 100K) and the switch is restarted, OSPF
session goes down and stays in EX_START and continues flapping to EXCHANGE and
EX_START states.
PD4-750014887
If a failover occurs during a refresh policy the HAL process dies on a new master MSM.
Workaround: Avoid performing a policy refresh if switching from one MSM to another.

PD4-3173100402
SFLOW: Spurious characters appear on console when enabling SFLOW.
PD4-3157840924
For BlackDiamond X8 series switches, the following error message appears "Error:Kern.Error
& Erro:HAL.Port.ReadOpticDDMIDataFail" while executing command show ports tr inf
detail on unsupported DDMI optics module.
Part and serial number are detected properly after:
<Erro:HAL.Card.Error> MM-A: aspenCardPortGetTransceiverInfoSfp: Unable to read DDMI info
from Transceiver for port 1:18.
<Erro:HAL.Port.ReadOpticDDMIDataFail> MM-A: Reading of DDMI data failed on the optical
module in port 1:18.
Workaround: Save and reboot, and then disable/enable slot in switch.
PD4-3110253401
The command show port rxerror displays an error if the value for Rx jabber is too
large {integer value too large to represent while executing "format "%8u"
$xmlData(reply.message.show_ports_rxerrors.rxJabber)"}
PD4-2968093558
If your configuration concurrently pushes the limits of both MSDP and (s,g) entries, you may
experience undefined behavior.
PD4-2749874087
Do not attempt to upgrade a BlackDiamond X8 switch using the hitless failover process if
newer BootROM or FPGA code has been installed as part of the installation of the newer
ExtremeXOS image. Use the standard method of installing a core image show in the
Concepts Guide, which requires rebooting the entire switch immediately after the installation.
PD4-2426499671
sFlow sampling is not working after running the disable slot and enable slot commands on a
BDXA-10G48X module.
PD4-2486716171
The console window for the MM BootROM is limited to 80 columns 25 rows. Using a larger
size results in displayed text overwriting the screen. Larger console sizes work appropriately
in ExtremeXOS.
PD4-2464885298
When we schedule a reboot time or cancel a reboot time, configuration allows changes on
MM-A and B independently when it is actually a global setting.
PD4-2560208473
Uninstalling SSH XMOD fails on MM-A with Device or resource busy error.
Summit Series Switches

PD4-3138196841
On Summit X460 switches, process dcbgp pid 1556 ends unexpectedly with signal 11 after
issuing command disable bgp.
PD4-3187826591
For Summit X670-48t series switches, diagnostics version 5.10 has < 0.5% false failure in
loopback phy and snake interface tests.
70

PD Number
Description
PD4-3159542451
For Summit X670v-48x series switches, ports with a SFP+_SR (SOURCEPHOTONICS) optic
inserted with link up will flap if any other ports (two or more) are disabled/enabled.
This issue does not occur with ExtremeXOS v15_1_2_12.
PD4-2488384169
In Summit X440 series switches, the maximum number of L3 interface supported is 256 only.
Switch allows user to create more than 256 L3 VLANs and displays no error/warning
message.
PD4-3012216202
Under certain conditions, in Summit X440 series switches, kernel oops" error occurs during
VRRP clean-up session. This issue occurs in the following versions ExtremeXOS 15.1.3.3, 15.1.3.1,
15.2.0.23, and 15.1.2.12.
PD4-2879629222
Under certain conditions, large number of packet drops occur when traffic is failed over to
other active member ports in the LAG.
PD4-2821074451
In Summit X670V series switches, packet looping occurs with unknown L2 traffic type when
32-member ports are configured using custom address based LACP.
PD4-2919055907
In Summit X650-24x series switches, 1000 BASE-BX-D/U, ZX and SX copper port fails to
negotiate flow control capability with peer ports. As a result, flow control is always set to
none after save and reboot.
PD4-2994375866
In Summit X460 series switches, enabling load sharing is not allowed when ports in front
panel ports (21 and 22) and XGM3-2sfpPort (49). The following error message appears:
Error: System cannot support Load Sharing among port media types with different
maximum speed. This started in ExtremeXOS version v15.1.2.12.
PD4-3037333500
In Summit X670-48x series switches, only SFP+_SR (SOURCEPHOTONICS) ports are not
coming up after restarting the port (25) and then save and reboot. This issue does not occur
with Summit 650-24x and BlackDiamond 8800 series switches.
Workaround: Disable, and then enable the far-end port.
PD4-3013094551
In Summit X440-8t series switches, 10/100/1000 Base-T link when speed is set to 100 Mbps
with "AutoNeg Off" between Summit x460 and x440. Observed BASET link is not coming up
after restart ports. x460-48x
x440-8t BASET
9 <----->9
10<----->10 Port
(9, 10) in Summit X440-8t is not coming to active state after a save and reboot of the
Summit x440 in the other DUT (Summit x460) ports (9, 10) link is coming up.
PD4-3012552953
In Summit X440-8t series switches, 10/100/1000 Base-T link when speed is set to 100 Mbps
with "AutoNeg Off", the link is coming up at speed of 1 Gbps and full-duplex mode in X440
and other end X460 link is coming up at speed 100 Gbps. Cannot ping between switches.
PD4-3064998712
In Summit X480 series switches with VIM3-40G4X and SummitStack, the following error
message occurs after issuing save and reboot with custom LACP load sharing:
<Erro:HAL.Port.CfgTrunkFail> Failed to configure load sharing group 27 on slot 1 unit 0:
Entry not found
Traffic does not appear to be affected. This problem does not occur with version
ExtremeXOS 15.1.2.12.
PD4-2967046316
In Summit X460 series switches, IGMP join-and-leave delay is very long compare to other
platforms.
PD4-2152137121
BFD sessions with minimal timers are not stable on Summit X460 and X670 switches.
PD4-2330727937,
PD4-2120554424
Ports with BASE-T SFPs do not become active after disabling those ports and enabling them
one by one.
PD4-2330727870,
PD4-1600530241
A HAL crash with signal 11 occurs when connecting a ReachNxt device to a load-shared port.
PD4-1545964372
On a Summit X480 switch, the log message Setting hwclock time to system
time, and broadcasting time is frequently displayed.
Workaround: Do not connect a ReachNxt device to a load-shared port.
71

PD Number
Description
PD4-2094910917
An LDAP bind fails after a system reboot.
PD4-2026467027
When a Summit X670V-48x switch with a 40G port in partition mode connected to a 10G
port using MTP breakout cables, the 10G side shows the link is up.
PD4-1950680298
On a Summit X670V-48x switch, inserting a copper GBIC (1000BASE-T) in a 10G capable

port changes the speed and duplex setting of the port.
PD4-1996237147
The priority flow control is not disabled when using the disable command with the all
option.
PD4-2092425173
When 500 virtual machines have 500 ingress or egress policies, running the clear fdb
command results in removing some of the installed ACL entries from the hardware after
receiving the following error message:
PD4-2093228351
On a Summit X670 series switch, FDB identities are not flushed from the identity
management table.
PD4-2095792132
When clearing an FDB entry or updating a policy entry on VM-tracking, MAC addresses with
a wide key policy installed results in the policy being uninstalled. When this occurs, the
following error message is displayed:
ACL refresh failed - updated policy has not taken effect.
ACL filter install failed on vlan *, port 1:16, rule

"VM1:16_00:00:11:00:00:1a_E601" index 601, Invalid parameter
(user-defined field (UDF))"
PD4-1824530443
The following behavior differences were observed between a Summit X480 and a Summit
X450a switch:
Configured a general query interval of 125 seconds but a Summit X480 switch sends
general queries every 130 seconds. This issue is not seen on a Summit X450a switch.
A Summit X480 is sending both MLDv1 and MLDv2 reports even though only MLDv2 is
enabled. This issue is not seen on a Summit X450a switch.
PD4-1436226210
With default ethertype (0x88a8) configured, Summit X460 and X480 switches do not display
an error message when adding a port as tagged to a VMAN when the port is already part of
a tagged VLAN. When the port is already part of an EAPS control VLAN, EAPS goes to a
failed state.
PD4-1721719301
The process HAL crashes with signal 11 after configuring a primary and secondary pseudo
wire and sending unicast traffic through the pseudo wire.
PD4-1676631313
When disabling sharing on a load-shared port that is part of multiple VLANs, VLAN statistics
shows a "-" for some VLANs.
Workaround: Unconfigure and reconfigure VLAN statistics.
PD4-1659644826
VLAN statistics monitoring is unconfigured for a specific VLAN if the VLAN name is changed.
PD4-1648023331
A Summit family switch configured with MLAG does not reply to the first ARP request
received on an ISC port.
PD4-1664831900
VLAN statistics are included in the output of the show configuration command for
load-sharing member ports even after the unconfigure ports monitor vlan
command is issued.
Workaround: Disable sharing, remove the VLAN statistics configuration, and enable sharing.
PD4-1673106807
For certain match conditions involving SIPv6 and DIPv6, packets may not hit an ACL in a
Summit X450a switch.
PD4-1676631313
When disabling sharing on a load-shared port that is part of multiple VLANs, VLAN statistics
shows a "-" for some VLANs.
Workaround: Unconfigure and reconfigure VLAN statistics.
72

PD Number
Description
PD4-1589959110
When adding ECMP routes using OSPF, a route flap occurs.
PD4-1603951551
On a Summit X460 stack, the following kernel warning is seen in the log during a failover.
<Warn:Kern.Card.Warning> Slot-1: select_mux:line 250:I2C I/O
operation failed
PD4-1590249340
Clearing FDB entries when a Summit X480 switch learns 512,000 MAC addresses from MLAG
ports disrupts MLAG peer TCP sessions.
PD4-749682632
You cannot run the configure port auto on command on XGM2-2bt ports.
PD4-427423116
When a dot1x client is authenticated at multiple VLANs, the output of the show netlogin
port command shows the client is sometimes authenticated at the local server and other
times at a RADIUS server.
NOTE: This occurs when dot1x and MAC authentication are enabled on the port.
PD4-1142692318
On Summit X480 switches, L3 multi-cast traffic sent from a service VLAN/VMAN to VPLS is
not received at the VPLS peer.
Workaround: When VPLS enabled VLANs exist on a port, all VLANs on that port must have
IGMP snooping disabled. Also, the IP address cannot be configured on any other VLANs
(including non-VPLS VLANs). Remove ports from the default VLAN.
PD4-448681226
The show l2stats command does not count ARP packets to the CPU, even though the
packet goes to the CPU.
PD4-489142320
One Gigabit ports set to auto on flap twice during a switch reboot.
PD4-489359602
Conflicting Link Fault Signal (LFS) alarms are shown when disabling local ports.
PD4-274249122
If a Summit switch populated with an XGM2-2bt module is rebooted, a false link up is seen on
10G links connected to the XGM2-2bt ports approximately 30 to 50 seconds before the
switch has fully booted.
PD3-43606168
If sFlow does not have a collector configured using the configure sflow collector
command, the show log command generates the following messages:
08/23/2005 12:28:09.55 <Noti:sflow.debug.AddCntSmplFail> : Could
not add the counter sample for port 0:1020, as receiver is not
configured.
08/23/2005 12:07:49.55 <Noti:sflow.debug.AddCntSmplFail> :
Previous message repeated 61 additional times in the last 1200
second(s).
PD3-40266236,
PD3-40233121
Traffic on load share ports configured as redundant ports incorrectly moves to other ports in
the load share group during link transition.
PD3-202013281
Learning is disabled by default on remote mirroring VLANs. Running the enable

learning command on those VLANs may cause a loss of remote mirrored traffic.
PD3-202013298
The valid value range for tags on remote-mirroring VLANs is 1 to 4,094. Use these values for
configuring the remote tag in the enable mirroring command.
PD4-2424777736
The following error message displays on Summit Stack on the new master node formed with
E4G-400 and x460 during stack failover:
<Erro:HAL.Port.Error> Slot-1:aspenCardPortLinkscanHandler():
port mapping failed for unit 1 port 1
SummitStack
PD4-2894216251
"<Erro:pim.vsm.RtxTimerExpNoRspns> Slot-1: Ingress VLAN query timer expired for S

10.158.111.12, G 225.5.0.94 for ISC 1, max retries 5 over, no response received" observed
continuously on console.
If you disable BFD, these messages do not occur.
73

PD Number
Description
PD4-3068413902
In Summit X480 stacks under certain conditions, ExtremeXOS ends unexpectedly with
"Process rtmgr pid 1502 died with signal 11".
PD4-3031740060
When rebooting any slot (master/backup/standby) in E4G-400 cell site router stacking,
SyncE configuration gets deleted and clock is not forwarded through that ports in that
particular slot.
PD4-3031740051
SyncE over stacking is not working after run failover when the clock source and output in are
in different slots.
PD4-3036895393
Ports (1:21 & 1:22) in Summit X670v stack (AlterNative) ports do not go into down state even
when the connected ports (through Tri Speed BASET link) in the other ports (6:21 & 6:22)
DUT is disabled and re-enabled.
Workaround: Ports go to down state after you save, and then reboot the switches in the
stack.
PD4-2970543225
When Vim3-40G4X is configured in 4x10G mode in Summit X650-24X series switches, you
cannot form alternate stacking using ports number 23 and 24. When the same card is
configured in 1x40G mode, you can enable stacking.
PD4-2899595434
On Summit X450a series stacks with the L3 egress broadcast. Traffic is not successfully with
mirrored in stack in enhanced mode. This issue occurs in the following version ExtremeXOS
12.6.1.1, 12.6.2.10, 12.6.3.1, 12.7, 15.1.1, 15.1.2, and 15.2.1.
PD4-2724480637
CFM_MIB : verification failed in SNMP walk while returning the correct values on
dot1agCfmMepTable after MSM failover. This is failed in New Stack (v320).
PD4-2600920021
The counters of the CLI <show port stack-ports utilization> do not increment
properly when different types of traffic streams are sent.
PD4-2131586058
A Summit X480 stack does not come up after a failover if the stack is configured with 50
identity roles.
PD4-2234586031
When using a SummitStack, known L2 traffic sent to port 64 is not forwarded in 4x10G
mode.
PD4-1678164933
After upgrading to ExtremeXOS 12.5.1.4, the following error is shown in the log:
<Erro:Kern.IPv4Mc.Error> Slot-1: Unable to Del IPmc vlan 924 for
1:15 s,G=a9e6f05,e1010028 IPMC 186, unit 0 Entry not found.
PD4-1645865216
The following error message is seen when operating a stack where the backup switch does
not have the same feature pack licenses as the master switch.
Error: Backup execution timed out, command execution aborted!
Workaround: When using VRs, be sure that while forming the stack using mixed platforms,
the master node and backup node have the same licenses feature pack.
PD4-1655280966
Using a SummitStack, a system crash may occur after running the unconfigure mpls
command and then loading scripts to configure MPLS.
Workaround: Use the CLI to configure MPLS line by line. Do not use scripts to load a large
MPLS configuration.
PD4-928567091
Running the synchronize command on a Summit X650 in a SummitStack causes the

system to time out and the stack to not synchronize for an extended period of time This also
results in the master node no longer being accessible.
PD3-181304741
After inserting a XENPAK in a stack (XGM2-2xn, XGM-2xn) and performing an snmpwalk on

the entityMib entPhysicalDescr variable, XGM- is always shown, not the complete module
description.
PD3-209191768
After running the disable port all command on a SummitStack, some port LEDs may
sometimes light green even though ports are not up.
74

PD Number
Description
PD3-204744742
IPv6 neighbor-discovery in a management VLAN in a SummitStack resolves to the node

address of the stack master, instead of the stack MAC address.
PD3-136493921
If a switch is added as a master-capable node of a stack whose master node has a license
level that is not equal to the level of the switch, the switch will fail. The complete condition
can be seen using the show slot detail command. In this state, the switch does not
have AAA services available. You will only be able to log into the switch using the failsafe
account that was last assigned to it. You must log into the switch to upgrade the license. If
the switch is not using the failsafe account configured on the stack, you can use the
synchronize stacking {node-address <node-address> | slot <slotnumber>} command to copy the failsafe account information from the master switch to the
failed switch NVRAM.
You can also use the configure stacking license-level command to configure a
license level restriction on the entire stack and then reboot the stack. Once the stack is
restarted, there is no longer a license mismatch, enabling you to log into the switch and
upgrade the license. From the master switch, run the unconfigure stacking
license-level command to get the stack to operate at the desired license and then
reboot the stack.
BGP
PD4-3138621068
BGP_QAD_NewStack: Issuing the command enable bgp export ospf addressfamily ipv4-multicast produces the error: "Error: Cannot change export policy for
protocol ospf while export is enable". This issue occurs in ExtremeXOS 15.2.1 and 15.2.2, but
not in 15.1.2.
PD4-2897496481
In BGP, various processes end unexpectedly and switches fail occasionally under certain
remote switch rebooting and/or disabling peers conditions.
PD4-2972980627
PD4-2918099300
PD4-2925483199
PD4-2940562102
PD4-2797497741
For some filtering situations there is no indication that incoming routes have been rejected
by a policy filter.
PD4-2744063235
If an RD (or RT) of "23:1" is set, the standard (RFC 4364) is vague as to whether that should
be a type 0 or type 2. An AS of "23" is a 2-byte AS, so it could be encoded as a type 0.
However, it could also be a type 2.
PD4-2965165797
BGPv6_ceasenotification - Verifying Notification message ADMINISTRATIVELY SHUTDOWN

is not showing the expected result for LastError Admin peer shutdown.
PD4-2933087364
BGP neighborship between IXIA to DUT fails when BGP router-id in DUT is configured
between 248.X.X.X to 255.X.X.X range.
PD4-2861990096
Advertised routes counter in BGP displays wrong values after a DUT reboot with an outbound route-policy configured.
PD4-2969922397
BGP_GracefulRestart_NewStack : Checking End-of-RIB Message with restart flag unset failed.
PD4-1599215746
Ping fails for remote loopback addresses.
PD4-1689076501
Rebooting a BlackDiamond 20800 series switch causes the system to crash in process HAL
signal 11.
PD4-1891612811
BGP routes are not made inactive if IP forwarding is disabled.
PD4-2092705405
A switch reports the following error when running the CLI command configure bgp
neighbor x.x.x.x no-route-reflector-client if the peer is not an RR client:
Error: RR Client Peer remote AS xxxxx does not match local AS
xxxxx
75

PD Number
Description
PD4-2151105474
On a Summit X480 stack, a watchdog timer reboots when a backup slot is unconfigured or
powered down when the stack has 524,000 BGP routes.
PD4-2051483560
The show iproute summary command output still occasionally shows the non-zero
number of compressed routes even though the routes are no longer there.
CLEAR-Flow
PD4-278443631
CLEAR-Flow commands display on platforms that do not support this capability, including
the Summit X150, X250, X350, and X450e series switches, as well as BlackDiamond 8800
non-c-series switches.
Connectivity Fault Management (CFM)

PD4-2492531418
When doing the restart process do1ag the following message appears:
"*** acl: transHandleSend
sendPacket peerId = 31 ret = -1"
PD4-2562050001
ERPS does not move to Idle state when we disable sharing because CFM does not learn
some MEPs do not show any issues when sharing is enabled.
PD4-2415095641
Unicast CCM, CFM Ping and trace route do not work on BD10k and BD12k platforms from 15.1
onwards. Only the multi-cast CCM will work
EAPS
PD4-2343129201,
PD4-2038216594
If a port is included in an EAPS protected VLAN, it cannot be configured for redundancy.
PD4-1673032272,
PD4-1676753651
EAPSv2 segment health-check packets received on a ring port may be dropped if the EAPS
node on a Summit family or BlackDiamond 8800 series switch has a different EAPS shared
port on any other ring ports.
PD4-749215481
Disabling the EAPS master primary port when there are no other ports configured on a
protected VLAN will cause a disruption of L2/L3 multi-cast traffic.
Workaround: Enable loopback on all EAPS protected VLANs.
PD4-471892924
Restarting the EAPS process on a controller generates the following error messages on a
console, but does not impact switch performance.
BD-8806.80 # restart process eaps
Step 1: terminating process eaps gracefully ...
Step 2: starting process eaps ...
Restarted process eaps successfully
BD-8806.81 # ERROR:VmgrProtocolIfRegister protoId:0 numIf:1
ERROR:VmgrProtocolIfRegister protoId:0 numIf:3
ERROR:VmgrProtocolIfRegister protoId:0 numIf:1
76

PD Number
Description
IP Routing Protocols
PD4-2905790321
The ip-option record-route is processed even while it is disabled in the intermediate switches.
PD4-2965217751
In OSPF/RTMGR, various processes end unexpectedly and switches fail occasionally under
certain conditions.
PD4-2965218003
PD4-2921267090
PD4-2925325781
PD4-2799443103
PD4-3041932280
PD4-2853885980
Hot plugging management cable with iPv6 address results in "exvlan_ioctl_handler:3036:"

error messages in the logs and remains in the "Tentative" state.
PD4-2914006121
OSPF router TLV disappears in the ospf lsdb detail lstype opaque after disable/
enable port two to three times or pulling out the cable two to three times.
PD4-2996986009
Unable to configure authentication for VRRPv2.
PD4-2886857541
PBR: Reject the configuration if the flow redirect next hop is same as vlan IP address
PD3-39411271
icmpInMsgs counter will display the incoming ICMP packets for VR-Default only.
PD3-128093864
MSDP Source-Active responses received from non-RPF peers are not processed.
PD3-192821161
For Summit X650, X450 a-series and e-series switches, and the BlackDiamond 8800 series of
switches, the maximum number of supported IP interfaces is 512 (IPv4 and IPv6 combined). If
there are more IP interfaces configured, the following log message is displayed:
<Info:HAL.VLAN.Info> Maximum # of IP interfaces (512) already
configured. Could not add IP address 0x0A010101 mask 0xFFFFFF00
PD3-202580681
Enabling IP route compression may cause temporary slow path forwarding for some of the
L3 traffic.
PD4-718946965
Directed broadcast traffic is not being forwarded.
Mirroring
PD4-2804878767
Dynamic ACL counter is not incremented properly. Packets are double counted. (Packets
sent=10000, counted=20000)
PD3-79867211
If you create a load sharing group (trunk), then enable mirroring to a port, the software
allows you to add the mirroring port to the load sharing group.
PD4-2678796534
If you use an ACL to mirror traffic to a port and then disable mirroring on that port, traffic
continues to flow to that port.
MPLS
PD4-3040869654
Switch is apparently swapping the label on a packets for which it should be removing the
label as PHP router.
PD4-2827940881
MPLS/BGP: After restarting MPLS process on provider edge, routes are not re-imported into
VRF.
PD4-1992679531
In VPLS, when configuring 7,190 pseudo-wires, FDB entries are not learned on 100 pseudowires.
PD4-1592270405
The run msm-failover command shows the following warning message in the log.
<Warn:Kern.IPv4FIB.Warning> Slot-4: dest 0x0A9E6D7C / 30 nexthop
0x0A9E6D39: Unable to add route to unit 1, rc Entry exists.
Shadow problem.
77

PD Number
Description
PD3-93218551
If either an egress or a transit LSP traverses the system, and an MPLS labelled packet
containing a router alert label is received, that packet is not forwarded.
PD3-203917264
When an explicit route object (ERO) is changed for an LSP session that is up, the LSP that is
already up is not torn down. LSP stays up based on the older values. The retry count
continues to increment as LSP tries to come up with new values by querying routes every 30
seconds. This is done while the earlier LSP session is still active using the previously
configured values. See the retry count in the command output for the show mpls rsvpte lsp <lsp_name> detail command.
Multi-cast
PD4-339945634
When a load-sharing group is a member of a mirrored VLAN, packets ingressing on the

member of the load-sharing group in the mirrored VLAN should be mirrored. On the Summit
family switches and BlackDiamond 8800 modules, packets ingressing on member ports other
than the master port of the load-sharing group in the VLAN are not mirrored.
Workaround: Packets ingressing non-master ports in the load sharing group on the mirrored
VLAN can be mirrored by adding virtual port mirroring filters for each of the non-master
member ports.
PD3-78144711
The show ipstats command does not increment IGMPv3 statistics.
PD3-79383551
IGMPv3 Report Record type "5" does not work as expected when sent after a type "2" or a
type "4" message.
Network Login
PD4-2329221040,
PD4-1324988340
The configure netlogin dot1x timers supp-resp-timeout command is

incorrectly stored in the configuration file.
PD4-468366251
A network login client is not authenticated if the username is 32 characters. Only 31 character
user names are supported, even if the user can create a 32-character username.
PD4-763062511
Hitless upgrade is not supported for network login in ExtremeXOS 12.3.1.
PD4-752731351
You should not be able to enable network login if a VLAN is a VLAN-aggregation subVLAN.
The system should generate a syntax error.
PD4-2930611052
Unable to enable netlogin in user-vr.
Network Services
PD3-67727590
Creating two sets of VMAN ACLs with 4000 entries each and performing a VMAN ID
translation on each ACL may generate the following error:
.....03/15/2006 17:57:28.84 <Info:pm.config.openingFile> MSM-B:
Loading policy RLL20k from file /config/RLL20k.pol
...03/15/2006 17:57:32.46 <Info:pm.config.loaded> MSM-B: Loaded
Policy: RLL20k number of entries 4002
.........Error in alloc txmi txmi 0x9f2 txmdi 0xffffffff
Error in alloc txmi txmi 0x9f4 txmdi 0xffffffff
Error in alloc txmi txmi 0x1102 txmdi 0xffffffff
OSPF
PD4-3135276301
OSPF is not properly installing next best hop for E1 routes.
PD4-2271653883
Using a specific configuration, OSPF neighbors may become a designated router even
though the switch only has an Advanced Edge license.
PD4-2078865382,
PD4-1493257018
The forwarding address in an external LSA should not be set for an interface that is
configured as passive.
78

PD Number
Description
PD4-1641495299
When 5,000 routes are received via the OSPF neighbor and advertised to 253 neighboring
OSPF routers, all 253 sessions go down. It then takes nearly 20 minutes for the sessions to
come back up.
PD4-1548969848
OSPF neighbors remain in the Exchange state after disabling and enabling an OSPF instance.
PD4-2148345931
Process ospfv3 pid 1527 died with signal 6 crash after issuing the command
unconfiguring ospfv3 then trying the show configuration ospfv3 command.
PD4-2113075901
IPv6 ECMP traffic is not flowing.
PD4-2100715451
OSPFv3 neighbor-ship goes to INIT state once after withdrawing ospfv3-external routes
when traffic is flowing.
PD4-2434344631
While flapping OSPFv3 Virtual link x670 crashed with the following message:
"ospfv3: ospf6_lsProcess ospfv3 pid 1588 died with signal 6"
PD4-2430322044
Unable to delete an OSPFv3 area which was configured for virtual link.
PD4-2110841706
OSPFv3 neighbors keeps flapping once after disabling and enabling IP forwarding IPv6 with
default timers.
Precision Time Protocol (PTP)

PD4-2667034651
If a PTP clock port is configured as "slave-only", its state should show as "PTP- Slave" in
"show network-clock ptp boundary port" output. However, "Master appears,
instead of Slave-only.
QoS
PD3-67431351
Configuring an ingress traffic queue and an egress traffic queue association to multiple ports
in sequential order generates the following error:
Egress queue already associated to this ingress queue
Configuration failed on backup MSM, command execution aborted!
PD3-16578296
The member ports of a trunk will retain the QoS profile configuration of the trunk (based on
the master port) after load sharing is disabled, or if a port is removed from the trunk.
RMON
PD3-12950492
Issuing the clear counter command might cause a high number to be displayed in
variables such as etherHistoryOctets, etherHistoryPkts, and etherHistoryTable.
ScreenPlay
PD3-111344472
ScreenPlay allows you to configure DHCP but you cannot enable DHCP.
Security
PD4-3515496818
For TACACS+ and RADIUS servers, when setting the shared secret key in encrypted form
with characters "&" and "<" , the show configuration aaa output shows a different
secret key than what was actually set.
PD4-2955462615
IDM: After MSM failover Netlogin table does not show correct users on enabling netlogin
dot1x. (DOt1x user is shown in Netlogin table in master and MAC user was shown in netlogin
table in backup.)
PD4-2900851991
IDMPolciyOrder: Adding policies before creating child roles is not generating an error on
adding child roles with policies that are the same as parent and because of this. On changing
order: Error: Policy "policy6" added already in the role's hierarchy of role "role1". Because of
this, re-ordering is not occuring.
PD4-2743463189
IDM Multiple Windows Domain: For show identity-management entries, user does not show
entries for Kerberos user (only dot1x and unknown users are shown). Show IDM entries
domain does not show entries for all the domains in IDM entries table.
PD4-2743526221
79

PD Number
Description
PD3-205012219
The source IP lockdown dynamic deny ACL counter is not working properly and increments
valid traffic from a trusted client.
PD3-186939931
Ingress mirroring is not working for DHCP snooping when snooping is enabled on
BlackDiamond 12800 series switches. DHCP snooping works correctly when DHCP snooping
is disabled.
PD3-75120608
The unconfigure radius and unconfigure tacacs commands do not reset the
timeout value to the system default of 3 seconds.
SNMP
PD4-2251137003
The following information will be added to the ExtremeXOS 15.0 version of the ExtremeXOS
15.1 Concepts Guide:
The SNMP context Name should be set to the name of the virtual router for which the
information is requested. If the context Name is not set, the switch retrieves the information
for VR-Default. If the SNMP request is targeted for a protocol running per a virtual router,
then the context Name should be set to the exact virtual router for which the information is
requested. Refer to the Adding Routing Protocols to a Virtual Router section in the
ExtremeXOS Concepts Guide.
Following is a list of protocols that run on a virtual router:
BGP
OSPF
PIM
RIP
OSPFv3
RIPng
MPLS
ISIS
PD4-1388191921
When changing an SNMP master configuration using SNMP set, the changes are not
immediately reflected in the show configuration snmp command output.
Workaround: Run the save configuration command to see the changed configuration
in the show configuration snmp output.
PD4-705730556
AES/3des users created using ExtremeXOS 12.3.1 software cannot be used for SNMP
operations in ExtremeXOS 12.1 or earlier releases. This may cause the SNMP master to crash.
PD4-2562996591
The SNMP MIB OID extremeInputPowerVoltage response is not correct for BD8806 having
48VDC power supplies in place and the response on X460, E4G-400 is unknown.
Spanning Tree Protocol

PD3-189927343
A temporary loop occurs when a root bridge is taken down by disabling all ports or powering
down the switch.
UPM
PD4-1664927541
UPM profiles for events identity-detect and identity-undetect are not executed when many
unique kerberos users login simultaneously from two client PCs. This happens when 50
unique users login continuously from PC1, and another 50 unique users login continuously
from PC2 at the same time.
WAN PHY
PD3-101226461
When show wan-phy commands are run on non WAN PHY ports, the ports display the
headers. It should only display the error wan command is not supported on nonwanphy port 25.
80
Known Behaviors
The following are limitations in ExtremeXOS system architecture that have yet to be
resolved.
Table 5: Known Behaviors, Platform-Specific and Feature PDs
PD Number
Description
General
PD4-3143967884
After authenticating two computers using the dot1x authentication method, a Remote
Desktop session between two computers fails.
Workaround: Enable computer-only authentication using the procedure from the Microsoft
Windows knowledge base: http://support.microsoft.com/kb/929847.
PD4-2039102228
There is no CLI command to verify which control and protected VLANs belongs to which
ERPS domains. Also missing are flags reserved for ERPS in show vlan command.
PD4-2744727326
clear bgp or show bgp commands should fail in VRF context.
PD4-2770013534
Valid MLD messages with unspecified address (::), are treated as valid MLD packets. instead,
these should be silently dropped.
PD4-2770013437
MLD protocol Timer value is not inherited from the current querier's query message instead
it is always the configured value on this router.
PD4-2835155421
On a private VLAN [network VLAN] translated port, the packets egressing when captured,
shows the subscriber VLAN tag instead of Network VLAN.
PD3-57182431
For the incoming traffic with alignment errors, the "RX Align" counter in the output of the
show ports <port number> rxerrors command is not incremented. Instead, the
"RX CRC" counter is incremented.
PD4-1663984367
Whenever a (*, G) join is received, all hardware entries installed on non upstream (*, G)
interfaces are cleared. Therefore, every 60 seconds, the L2 switching is affected, traffic
comes to the CPU, and entries are re-learned.
PD4-2110742669
When using SCP to transfer files to an Extreme switch, the transfer fails with an "incomplete
command" error.
BlackDiamond Series Switches

PD4-2938691821
For the BlackDiamond X8 series switches, differv value is not getting replace when dot1p
examination is enabled on ingress port with diffserv replacement enabled for slow path l3
traffic.
PD4-2339271510,
PD4-2180251961
For the BlackDiamond 8800 series switches, when running the show tech command on a
backup MSM, an error message is displayed.
PD4-2854254274
For the BlackDiamond X8 and 8800 series switches, L3 traffic with IPv4 options or IPv6 ext.
headers is not sent to the CPU when redirected by flow-redirection.

PD4-2913932450
QSFP+LR (ColorChip) optics link is coming up when connected back-to-back and after a
save and reboot of ExtremeXOS fails to detect the media type when a Q+LR4 in ports <port
lists> on Summit X650 and X480-24x series switches.
Workaround: Only the media type is getting properly set after unplug/plug the optics from
ports. This issue is not seen with QSFP+ SR4 on Summit X650 and X480 series switches.
PD4-2760140871
For Summit X670 series switches, dynamically learned FDB entries on non-FIP snooping
VLANs disappear after FIP snooping is disabled and re-enabled on the VLAN.
81
Table 5: Known Behaviors, Platform-Specific and Feature PDs (Continued)

PD Number
Description
PD4-2835588361
For Summit X670 series switches, the show conf bgp command is not vr-aware. VRdefault BGP config appears even though inside vrf-a context. It should show BGP config for
vrf-a
PD4-2857038040
For Summit X650 series switches, differv value is not getting replace when dot1p
examination is enabled on ingress port with diffserv replacement enabled for slow path l3
traffic.
PD4-2857038031
For Summit X650 series switches, dot1p value changes to zero when both dot1p and diffser
examination is enabled on ingress port.
PD4-1637091230
With 4,000 VPWS sessions, traffic recovery takes approximately 8 minutes before a port flap
occurs.
Workaround: On a Summit X460, it is recommended that you only configure 1,000 VPWS
instances.
ACL
PD4-2649674514
Policies with "redirect-port-list" as the action modifier do not get installed on a G48Te2 nor a
10G2Xc. It is not installed on either Summit X450a nor x450e.
PD4-2761666711
Redirect port list changes its behavior when sending slow path traffic.
PD4-1933402713,
PD4-1933225935
The ACL action "copy-cpu-and-drop" is not copying EAPS control packets to the CPU.
82

PD Number
Description
PD3-77983510
Summit X450a and Summit X450e series switches and BlackDiamond 8800 a-series and eseries modules provide more powerful ACL capabilities. Because of this, the amount and
complexity of ACL rules will naturally impact the time needed to process and apply the ACL
rules to the switch. This will also impact switch bootup time. Access Control List limitations
fall into two areas: physical and virtual.
Physical LimitsSummit X450a and Summit X450e series switches:
The per-VLAN, wildcard (port any), and single-port access list installation limitations are
1,024 rules for the Summit X450e and 2048 rules for the Summit X450a.
Physical LimitsBlackDiamond 8800 a-series and e-series modules:
The per-VLAN, wildcard (port any), and single-port access list installation limitations are
1,024 rules for the e-series modules, and 2048 rules for the a-series modules.
Extreme Networks recommends that you configure ACLs as per-VLAN, wildcard, or singleport. If either of the following is true, you will have to configure ACLs with multi-port lists:
Your application requires that ports do not have a homogeneous ACL policy.
When BlackDiamond 8800 original series modules are operational in the same chassis, it may
be necessary to configure ACLs to specific port-lists instead of as wildcard or per-VLAN. This
is because the original series modules have smaller physical limits.
Virtual LimitsSummit X450a and Summit X450e series switches:
When configuring a multi-port ACL, use the following guideline. The total ACL count (as
calculated by ACL rules times ports applied to) should not exceed 48,000 total ACL rules.
For example, applying a 1,000 rule policy file to a 48 port multi-port list is supported (1,000
rules * 48 ports in the list <= 48,000).
Virtual LimitsBlackDiamond 8800 a-series and e-series modules:
When configuring a multi-port ACL, use the following guideline. For any a-series or e-series
blade in the system, its total ACL count (as calculated by ACL rules times ports applied to)
should not exceed 48,000 total ACL rules.
For example, applying a 1,000 rule policy file to a 48 port multi-port list on an a-series
module on slot 1 and an e-series module in slot 2 is fine. Neither module exceeds the 48,000
total ACL rules.
Excessive boot times and CPU resource starvation can be seen with larger total rule counts.
If your application requires additional capacity, contact Extreme Networks.
BGP
PD4-2216087479
A confederation ID is used as an aggregator ID when in a confederation instead of an ASnumber.
PD4-2125200453
A backup slot does not come up when rebooted with 1,000 non-unique routes on a Summit
X480 stack.
MPLS
PD4-521915271
The Internet Group Management Protocol (IGMP) group reports may occasionally change
from Version 2 to Version 3.
PD4-581950231
Multi-cast traffic is not received even though the rendezvous point (RP) tree and source
information is shown in the PIM cache table
PD4-475414505
In more complex topologies, detour Label Switched Path (LSP) connections are not set up.
PD4-475414370
The following warning message is seen numerous times after changing VLAN Virtual Private
LAN Services (VPLS) mappings:
<Warn:MPLS.LDP.InternalProb>
83

PD Number
Description
PD4-464587012
All unicast traffic routed by MPLS is stopped when penultimate hop popping (PHP) is
enabled on all MPLS VLANs. VPLS traffic is not impacted.
PD3-203917264
If an LSP is already Up, and an ERO is added such that a subsequent path calculation will fail,
the LSP will remain Up, and at the same time, continue to retry to calculate a new path with
the new ERO. This situation is not clearly visible in the show mpls rsvp-te lsp
detail output. The retry counters incrementing is really the only indication that this is
happening. The fields showing the "Msg Src," "Msg Time," "Error code," and "Error
Value" should be shown because the reason for the path calculation failure is shown in
these fields.
PD3-93069318
Only VLANs configured as protocol any should be added to MPLS.
PD3-92653036
The show mpls label, show mpls rsvp-te label, and show mpls rsvp-te
lsp command output currently does not display egress LSPs using advertised implicit NULL
labels.
PD3-157687121
ExtremeXOS software uses Control Channel Type 2 to indicate router alert label mode. In
MPLS Router Alert Label mode, VCCV packets are encapsulated in a label stack. However,
the existing VCCV packets are sent like a stack without any PW label.
PD3-104731701
When a traceroute is performed by setting the MPLS TTL to the IP TTL, ExtremeXOS does
not correctly send back an ICMP response. The result is * characters in the traceroute for
the routers that timed out. If a route is available, ExtremeXOS should attempt to send back
an ICMP response.
PD3-93630853
LDP should not advertise a label mapping for a direct VLAN that does not have IP
forwarding enabled.
PD3-139423053
Running the show mpls rsvp-te lsp summary command on a system configured
with 2,000 ingress LSPs takes an excessive amount of time to process.
PD3-111544904
When a router receives an explicit NULL label, it is incorrectly treated as an implicit NULL
label, so rather than sending label 0, no label is sent.
PD3-184989177
When an LDP advertise static setting is set to all, all static routes are treated as
egress routes and egress LSPs are created. That is, a label is generated and advertised for
the static route. If the router at the end of the static route advertises a label matching that
static route, the LSP that was previously an egress LSP becomes a transit LSP. An ingress
LSP should also be created whenever a label is received, however, the ingress LSP is never
created.
Workaround: Do not use the LDP advertise static all configuration in situations
where an ingress LSP for a static route is required.
84
Resolved Issues in ExtremeXOS 15.2.3-Patch1-12

The following issues were resolved in ExtremeXOS 15.2.3-patch1-12. ExtremeXOS 15.2.3patch1-12 includes all fixes up to and including ExtremeXOS 11.1.4.4, ExtremeXOS
11.2.3.3, ExtremeXOS 11.3.4.5, ExtremeXOS 11.4.4.7, ExtremeXOS 11.5.2.10, ExtremeXOS
11.6.5.3, ExtremeXOS 12.0.5, ExtremeXOS 12.1.7, ExtremeXOS 12.2.2-patch1-12,
ExtremeXOS 12.3.6, ExtremeXOS 12.4.5, ExtremeXOS 12.5.5, ExtremeXOS 12.6.3,
ExtremeXOS 12.7.1, ExtremeXOS 15.1.3 and ExtremeXOS 15.2.3. For information about
those fixes, see the release notes for the specific release.
Table 6: Resolved Issues, Platform-Specific and Feature PDs in ExtremeXOS 15.2.3-Patch1112
PD Number
Description
General
PD4-3819192571
Disabling or enabling sharing of a LAG port in VRRP-enabled VLANs should be allowed

without requiring the disabling of VRRP.
PD4-3858989088
OSPFv3 neighborship does not get established across MPLS L2VPN clouds when a service
VLAN port is part of another VLAN where IPv6 addresses are configured.
PD4-3831014347
Secondary IP addresses for VLANs become unusable after the deletion and re-configuration
of any other existing secondary IP address in the same VLAN.
PD4-3802664251
Kernel error messages appear while configuring CEP translation for two different VMANs
with the same port and same target VLAN ID.
PD4-3814562861
Changing OSPFv3 timers to area 0.0.0.0 affects all other areas.

PD4-3820269757
When distributed ARP mode is enabled with a large number of ARP entries, the next hop
MAC addresses in the hardware get programmed incorrectly leading to L3 reachability
issues.

PD4-3818645432
LACP ports do not become active after enabling the ports.
Summit Family Switches

PD4-3798370770
Newly added nodes to existing summit stacks get stuck in reboot loop (kernel panic).
PD4-3858988980
OSPF neighborship over L2VPN fails when IGMP snooping filter per VLAN is configured on
the switch.
Summit X460 Series Switches

PD4-3836341215
Deleting LAG ports from a service VLAN, affects traffic on the other service VLAN.
85

PD Number
Description
General
PD4-3710359670
OID values for extremeCpuMonitorSystemTable are not the same as those defined in the
MIB descriptions.
PD4-3797678291
Renaming VLANs with same name as existing user-created virtual-routers should not be
allowed.
PD4-3715382199
The command disable ip-security arp learning learn-from-arp vlan

<vlan_name> ports <ports> appears incorrectly in the output of the command show
configuration.
PD4-3687764905
Unable to delete the port from the VLAN via the snmpset operation.
PD4-3733598341
Jumbo-frame-sized packets are not fragmented and therefore get dropped if the ingress
port and egress LAG member ports are on the same unit.
PD4-3747603622
ELRP disabled ports are getting displayed as "Enabled" on ScreenPlay.
PD4-3743455906
STP port status moves from "Blocking" to "Forwarding" state when a VLAN tag is changed.
E4G Cell Site Routers

PD4-3601344461
Configuring TDM UDP CESoP pseudo-wire with unsupported UDP port range does not
produce warning messages.

PD4-3747350624
Known unicast traffic is not shared between the stacking ports when v320 G stacking is
enabled.

PD4-3769605949
In Summit stacks, after failover the backup nodes stay in the down state and other nodes go
into the failed state.

PD4-3659934112
ACL policies with match conditions like "arp-sender-address" or "arp-target-address" do not

work.
86

The following issues were resolved in ExtremeXOS 15.2.3-patch1-10. ExtremeXOS
15.2.3-patch1-10 includes all fixes up to and including ExtremeXOS 11.1.4.4, ExtremeXOS
PD Number
Description
General
PD4-3723422655
In Summit stacks, false fan failure SNMP traps are triggered.
PD4-3665828836
In STP domains, temporary flooding should not get triggered during link down events of a
port configured with edge-safeguard.
PD4-3675538288
In show log output the peer-id logged for MLAG port events is different from the
configured peer-id.
PD4-3689300563
Hardware CFM is not detecting remote MEP down events.
PD4-3664359469
Applying access-profile to SSH2 produces an error.
PD4-3693822476
During authentication, a user rejected by Radius/TACACS server should not be allowed to

authenticate via local database.
PD4-3683540240
In CLI scripting, $READ statements in both IF and ELSE conditions are executed at the same
time, even though only one of IF/ELSE condition is satisfied
87

PD Number
Description
General
PD4-3633803094
In MPLS-enabled switches, IP ARP is not getting resolved after executing the clear
iparp command.
PD4-3649152359
VSM memory leak occurs on backup slot with link state changes.
PD4-3634029212
Routes are not advertised to EBGP peer after restarting BGP process.
PD4-3651395026
Switch incurs parity errors and traffic loss from LAG.
PD4-3636948340
Connectivity on a port for a VLAN is lost when the same port is deleted from a VMAN to
which its a member.
PD4-3633905658
Memory leak occurs on HAL process while flapping VRRP backup.
PD4-3569228547
Missing a semicolon after mirror-cpu action modifier causes the ACL process to end
unexpectedly even though check policyreports is successful.
PD4-3551125140
Configuring SNMP community name with special characters is getting rejected.
PD4-3569214167
When a load sharing port is added to five or more STP domains, the command show
sharing details output has the error "Error: Missing inputs, cannot process," and it is
not showing more than five STP domains.
PD4-3621148482
VMAN traffic egressing LAG ports is suppressed if LAG ports are configured to use
secondary ethertype.
PD4-3603702239
In EAPS, when segment ports and shared ports are disabled and then enabled in quick
succession, sometimes the segment port can remain blocked for up to 10 seconds.
PD4-3597525762
In Summit stacks, snmpwalk/snmpgetnext does not fetch

"ExtremeCpuMonitorSystemUtilization" information from the standby nodes.

PD4-3598279687
Sharing not formed with VIM ports when the switch comes up for the first time with the
VIM. Also, the error message does not convey what the problem is.

PD4-3642679845
On Summit X440 series switches, slot reboots after sending multicast packet from one node
to another when the egress port speed is slower than the ingress traffic rate.

PD4-3578903770
ERPS with ELSM is malfunctioning when CFM/CCM is enabled.

PD4-3635445130
On Summit X650 series switches with vim3-40Gx modules installed, errors occur when
enabling rate limit on any port.
88
Table 9: Resolved Issues, Platform-Specific and Feature PDs in ExtremeXOS 15.2.3-Patch18 (Continued)
PD Number
Description

PD4-3631098169
Some MAC addresses are not check-pointed between MLAG peers after a switch reboot.
PD4-3557203110
On BlackDiamond 8800 series switches, traffic fails to switch over to next available gateway
after removing the Master MSM physically.

PD4-3607363219
On BlackDiamond X8 series switches, while using DAD to detect duplicate IP addresses,

DAD does not get completed and duplicate IP address is not detected.
PD4-3246804801
The temperature row is showing RED even when the slots are under the recommended
normal temperature level (25100 C).

ExtremeXOS 12.7.1, ExtremeXOS 15.1.2, ExtremeXOS 15.2.1, ExtremeXOS 15.2.2, and
ExtremeXOS 15.2.3. For information about those fixes, see the release notes for the
specific release.
PD Number
Description
General
PD3-93829391
Configurations using a VR-Mgmt interface as a RADIUS client IP may not load at boot-up.
However, using an interface in VR-Default will load correctly.
PD4-3238152635
NTP and DAD cannot co-exist. If you enable NTP and DAD on the same VLANs, save the
configuration, and then reboot the switch, the NTP configuration for VLANs is removed
when switch comes up.
PD4-3527728683
Existing account password cannot be changed if password string contains '&' or '<' special
characters.
PD4-3564773195
Summit stack in ring mode gets converted to daisy-chain mode or dual master state after
rebooting. This happens when stacking is formed using alternate stack ports with SFP+ from
SumitomoElectric and OpNext vendors.
PD4-3541676921
ACL policy applied to different VLAN instances always uses different priority range causing
faster ACL slice utilization.
PD4-3579843209
Manual ESRP failover exceeds neighbor timeout instead of normal hello timeout.
PD4-3577171480
CliMaster process ends unexpectedly after logging in and out of the switch multiple times.
PD4-3553937872
Process snmpSubagent ends unexpectedly with signal 6 while retrieving one of the variable
in the ifentry.
PD4-3379330941
Dynamic ACL entry for a port is not flushed until the DHCP snoop entry is cleared with
source-ip-lockdown enabled.
89
PD Number
Description
PD4-3470847729
The telnetd process is not re-started when executing restart process telnetd from
a telnet session.
PD4-3478132197
Packet statistics do not appear when aborting ping/traceroute.
PD4-3510728726
PoE process ends unexpectedly when executing show inline-power info detail
ports <port list> command.
PD4-3531064048
When enabling LAG and VLAN translations together, L2 broadcast traffic is not forwarded
to the LAG ports by the switch.

PD4-3563289076
Power budget calculation is not accurate in the show power budget output on
BlackDiamond X8 series switches.

PD4-3515686762
Remote mirroring on a source switch is enabling software learning after rebooting the
switch with the configuration.
PD4-3519894110
With VPLS configuration, FDB entries are missing from hardware after a slot reboot.

PD4-3518342510
Multicast packets are getting software-forwarded for groups that receive IGMP join or leave
message, although there are other active receivers. This happens when there is no
Source(S,G) tree and the traffic is switched via only RP(*, G) tree. The reprogramming can
result in additional latency (with low data rates) and packet drops with high data rates.

PD4-3551570211
Rx CRC is incremented when traffic passes through 10 Meter 10G DA passive copper cable.
PD4-3551570462
On Summit X460 series switches, certain MAC addresses like HSRP/VRRP were not relearned after an STP-triggered FDB flush event.
PD4-3549204954
On Summit X460 series switches, HSRP MAC are not learned on both the switching units.
90
Resolved Issues in ExtremeXOS 15.2.3

The following issues were resolved in ExtremeXOS 15.2.3. ExtremeXOS 15.2.3 includes
all fixes up to and including ExtremeXOS 11.1.4.4, ExtremeXOS 11.2.3.3, ExtremeXOS
12.0.5, ExtremeXOS 12.1.6, ExtremeXOS 12.2.2-patch1-12, ExtremeXOS 12.3.6,
ExtremeXOS 15.1.2, ExtremeXOS 15.2.1, and ExtremeXOS 15.2.2. For information about
Table 11: Resolved Issues, Platform-Specific and Feature PDs in ExtremeXOS 15.2.3
PD Number
Description
General
PD4-2881055333
SNMP traps are not sent when FAN module is removed.
PD4-3303172341
CLI scripting produces inappropriate error message while trying to access non-existent
argument.
PD4-3496981751
Port congestion counter increments for a port that receives IGMP leave on a port.
PD4-3298430801
Need a CLI command to drop BGP AS-0 aggregate attribute routes.
PD4-3379380321
The command show configuration output does not show QP1 QoS profile.
PD4-3447641607
In show configuration esrp output, count and interval arguments of elrppremaster-poll configuration appear swapped.
PD4-3448314838
An inappropriate error message appears while unconfiguring default-gateway from dhcpoptions for any VLAN.
PD4-3492093869
ISIS LSP is not advertised to the peer when the switch receives the same LSP within a short
interval.
PD4-3418436931
On Summit X440 and X460 series switches, link remains down on ports with these settings
speed 1000/half-duplex/auto-negotiation on.
PD4-3444143360
CPU utilization value is not normalized on platforms with multi-core CPUs.
PD4-3468165290
TACACS+ and RADIUS shared secrets do not allow '&' or '<' characters in the configuration.
PD4-3456943061
Nettools process ends unexpectedly while forwarding DHCPv6 packet over the 6-in-4
tunnel.
PD4-3424116511
soc_l2x_thread: DMA failed: Operation failed errors appear in debug shell. Error occurs on
Summit X450, X460, X650, X670, and BlackDiamond X8 line cards.
PD4-3468923480
IP address of the system does not appear in the switch log message when logged on
through ScreenPlay (XML).
PD4-3449497172
Need a CLI to ignore PIM neighborship check for the ingress multicast traffic in PIM dense
mode.

PD4-3219407635
Bootprelay does not work on BlackDiamond X88 series switches.
PD4-2787569240
OSPFv3 adjacency state changes after doing MM failover.

NOTE: Closed due to the issue being expected behavior.

PD4-3482543781
On x440 Summit stack switches, i2c-1: shid_eeprom_tlv_readv warning messages occur

during boot up.
91
PD Number
Description

PD4-3484451029
MAC addresses are not learned by the switch while sending a LLC packet.

PD4-3494126141
On Summit X650 series switches, VRRP hello with advertisement 0 is sent while disabling
and enabling the links on VRRP master.

PD4-3432119636
On Summit X670V-48x series switches with VIM4-40G4X, kernel error messages "Disabling
IRQ" occur during boot up.

PD4-3494909785
Bit errors occur on TDM port when the port uses a clock recovered adaptively from a CES
pseudowire to time the data in transmit direction.
PD4-3468165320
Traffic on SAToP CES pseudowire goes down when adding an ACL to an uplink port.
Summit NWI-E450A Switches

PD4-3475400591
No log message occurs when switch temperature exceeds maximum temperature.
92

ExtremeXOS 12.7.1, ExtremeXOS 15.1.2, ExtremeXOS 15.2.1, and ExtremeXOS 15.2.2. For
information about those fixes, see the release notes for the specific release.
PD Number
Description
General
PD4-3399361522
Log messages are not generated for some MLAG events, despite being configured in the log
filter.
PD4-3329293741
Process rtmgr ends unexpectedly when an IP prefix resolved via BGP default route is later
resolved via a better, more specific route.
PD4-3447946505
CLI or ACL process ends unexpectedly when refreshing ACL policy containing so many rules
that it can fill up the ACL hardware resources.
PD4-3447946675
Process rtmgr ends unexpectedly while updating routing table with IBGP and OSPF routes
learned from two different gateways.
PD4-3248512615
AAA process ends unexpectedly when radius and tacacs servers are configured with a large
input string as the shared-secret.
PD4-3248512451
ACL process ends unexpectedly when creating a flow-redirect with a large string for the
redirect-name.
PD4-3417774686
In ExtremeXOS 15.X, several SNMP traps still appear as current in the newest MIB, even
though they are using objects that are currently deprecated.
PD4-3357584946
System MAC for VLAN gets overwritten with dynamic MAC in case of hash collision, causing
L3 reachability issues.
PD4-3288698581
Multicast cache entries associated with a router port get deleted after age-out timer expires,
if MVR is enabled, causing traffic loss.
PD4-3250827971
FDB process ends unexpectedly while clearing neighbor-discovery cache.
PD4-3387317962
bcmasync process consumes 80% of CPU while loading with QoS configuration.
PD4-3404733305
Switch logs "Info:RtMgr.Server.ProcGetRtMsgFail" message appears frequently (every 30

seconds) when it tries to export an unfeasible route. Informational messages should appear
less frequently.
PD4-3425074718
The log message "unspecified Nexthop. Not downloading Route" appears continuously since
OSPFv3 does not retry downloading a route with an unspecified gateway next hop.
PD4-3332827410
In some circumstances, filtering on a port for "FDB.MACTracking" is not logging any

informational messages.
PD4-3404666051
HAL process ends unexpectedly with signal 11.
PD4-3331814046
ESRP dual SLAVE state occurs when a physical loop is detected in the switch having elrppremaster-poll and elrp-master-poll configuration.
PD4-3435560302
ACL process ends unexpectedly when deleting/creating meters and simultaneously

executing the show meter command from another telnet session.
PD4-3337432315
ERPS CCM priority is being set to QP1 instead of QP7.
93
PD Number
Description

PD4-3312714211
In Summit X440 stacks, the temperature from the stack node does not appear properly.
PD4-3343247797
Summit X440 switches are reaching the maximum temperature limit of 60C under normal
conditions.
PD4-3332827505
In 10G ports of Summit X440 series switches, traffic stops when you change the port speed
from 1G to 10G while traffic is running in the background.

PD4-3423025121
Unicast packet are getting dropped while passing through Summit X460 stacking.

PD4-3420992458
ICMP packets are getting dropped in different VLANs/ports while there are flapping bootp
hosts connected to the ports.

PD4-3337454749
FAN speed reaches 5,000 RPM after hot-swapping FAN modules and does not return to
normal range (3,000 RPM).
PD4-3246799483
idmgr process ends unexpectedly while binding a user with a lengthy password.
PD4-3279780290
On BlackDiamond X8 series switches, execution of the CLI command show log message
nvram is very slow.

ExtremeXOS 12.7.1, ExtremeXOS 15.1.2, ExtremeXOS 15.2.1, and ExtremeXOS 15.2.2. For
information about those fixes, see the release notes for the specific release.
PD Number
Description
General
PD4-3302318720
When a solicited ARP violation is triggered on a LAG port, the following error message
appears: <Erro:FDB.ArpError> Unable to retrieve pif, for slot:port=0:0.
PD4-3288465204
Log messages are not generated when SSH2 access is rejected by access-profile.
PD4-3314858114
MLAG and EAPS: When an ISC port is part of multiple EAPS domains, and through the ISC
port is not a secondary port on the master domain, and is only a secondary port in the
transit domain, the MLAG peer configuration fails, with an error.
PD4-3271740739
While using Dot1x and MAC-based netlogin on the same port, the MAC re-authentication
timer should stop after the client is authenticated with dot1x credentials.
PD4-3332155173
snmpMaster process ends unexpectedly with signal 6.
94
PD Number
Description
PD4-3333709107
When an SNMP get operation is performed from the SNMP Manager and through a CLI
script, snmpMaster process ends unexpectedly with signal 6.
PD4-3273707563
XML is not working with IPv6 making is impossible to manage the switch from the web
using an IPv6 address.
PD4-3246751671
ISIS process ends unexpectedly while configuring interlevel-filter with a lengthy policy file
name.
PD4-3288028207
Packets not matching ACL rules are flooding to all ports in redirect-port-list.
PD4-3247277689
OSPF process ends unexpectedly if a lengthy password is used.
PD4-3316990415
IPFIX configuration does not take the vr configuration into effect.
PD4-3316990529
Configuring translation VLAN as subVLAN causes the mcmgr process to end unexpectedly.
PD4-3317958589
Packet losses up to 2 seconds occur when one of the MLAG peer switches is rebooted.
PD4-3272239699
Enabling LAG on a MEP port removes CFM endpoint configurations without any warning
message.
PD4-3330304059
VRRP process ends unexpectedly while trying to configure more than 256 VRRP instances.
PD4-3242007411
V/W flag description does not appear in the show vman command output.
PD4-3242760218
Manually configured ACL system application priority is reduced by one for every reboot and
more application appears in ACL zone.
PD4-3299730394
Ingressing local multicast traffic to the superVLAN via subVLAN ports is sent back to the
same port.
PD4-3314306554
IGMP general query is dropped due to multicast loop detection.
PD4-3305101003
Filtering on a port appears several times in show log config filter

DefaultFilter command output.
PD4-3291095384
snmpSubagent process ends unexpectedly while sending snmpset with 1.3.6.1.2.1.3.1.1.1.2.1

OID.

PD4-3193434847
On BlackDiamond 8800 series switches, when the number of packets queued for transmit
by the CPU exceeds 500. Additional slow path forwarded packets are dropped.
PD4-3297769096
Switch-fabric egress port is getting deleted when pseudo-wire adds and deletes arrive out
of order.
PD4-3297769096
On BlackDiamond 8800 series switches, traffic ingressing on the 8900-10G24X-c module is

not egressing on slot-6 of the 10G1Xc module.
PD4-3298782346
On BlackDiamond 8806 and 8810 series switches running ExtremeXOS 12.5 and later, the I/O
card in the dual-use slot (MSM or I/O slot) does not become operational.
BlackDiamond 12800 Switches

PD4-3328741221
Port on a VLAN stops learning after limit learning is enabled on that VLAN.

PD4-3247277623
xmlc process ends unexpectedly while creating XML-notification with lengthy parameters.
95
PD Number
Description

PD4-3288698655
On Summit X440 and X460 switches PoE-capable switches, log message and SNMP traps
are not generated when the power usage threshold is reached.
PD4-3300688322
Fan tray failure error messages appears on Summit family switches.
PD4-3327782618
Update free memory requirement for VLAN creation and port addition to VLANs.
PD4-3302743345
Rx jabber counter increment when receiving jumbo frames.

PD4-3332601856
On Summit X250e-24xDC switches do not boot up with ExtremeXOS 15.2 program.

PD4-3339241511
On Summit X440 switches, pre-standard PoE Cisco phones 7940 and 7960 do not turn on
when connected to a legacy mode-enabled PoE port.
PD4-3311902960
CRC error and bad packets should increment the RxError counter only, but the congestion
counter increments, too.

PD4-2397912301
Link does not become active with SX Mini-GBIC SFP, if it's inserted on a port where
100BASE-FX SFP was used previously.

PD4-3206116628
Able to assign non-existing QoS profile to CES pseudowire.

The following issues were resolved in ExtremeXOS 15.2.2-patch1-1. ExtremeXOS 15.2.2patch1-1 includes all fixes up to and including ExtremeXOS 11.1.4.4, ExtremeXOS 11.2.3.3,
ExtremeXOS 11.3.4.5, ExtremeXOS 11.4.4.7, ExtremeXOS 11.5.2.10, ExtremeXOS 11.6.5.3,
ExtremeXOS 12.0.5, ExtremeXOS 12.1.6, ExtremeXOS 12.2.2-patch1-12, ExtremeXOS
12.3.6, ExtremeXOS 12.4.5, ExtremeXOS 12.5.4, ExtremeXOS 12.6.2, ExtremeXOS 12.7.1,
ExtremeXOS 15.1.2, ExtremeXOS 15.2.1, and ExtremeXOS 15.2.2. For information about
PD Number
Description
General
PD4-3198160204
ACL refresh fails with error message: "unavailability of hardware resource or system error".
PD4-3199137648
Switch does not get/pick up model information (EVENT.DEVICE_MODEL) when a LLDPenabled device is unplugged from the switch.
PD4-3204228107
SNMP OID for ExtremeportQP TxBytes always returns 0.
PD4-3237306241
DHCP snooping does not work if VLAN translation and IP-security are configured together
on a switch.
PD4-3240646443
SNMPv3 polling causes memory leak in snmpMaster process.
96
PD Number
Description
PD4-3234332561
STP process ends unexpectedly when restricted role is enabled in dot1d mode.
PD4-3269759070
CLI leaks memory occurs after issuing show configuration command.
PD4-3269759132
CLI memory leak occurs after closing a telnet session with the show vlan detail
command.
PD4-3237904700
EAPS failtime range needs to be modified for milliseconds.
PD4-3237904788
Not able to upload the DHCP-binding manually to the server.
PD4-3237904925
Error message appears while uploading DHCP-binding to the server after changing the file
name.
PD4-3250650128
After a Radius server authentication failure, you cannot access the switch using failsafe
account.
PD4-3247277361
NetTools process ends unexpectedly while displaying auto-provision for a virtual-router with
a lengthy name.
PD4-3267725670
ACL process signal 6 ends unexpectedly while unconfiguring an access-list profile, which has
32 characters.
PD4-3267770748
The number of blank lines printed under the RIP module of the output of the show
configuration command increases with an increase in number of Layer 3 VLANs.

PD4-3228305010
Traffic forwarding stops on VLANs, which have a port part of multiple VLANs and PVLANs,
when a port is removed from one of the PVLAN's network VLAN.
PD4-3099443768
Executing "snmpwalk" operation on "pethMainPseTable" causes snmpMaster process

occasionally to end unexpectedly.
BlackDiamond 10800 Switches

PD4-3255799491
When an EAPS ring has multiples of 284 as protected VLANs, then ports are not blocked
and can cause a traffic loop after rebooting the switch.

PD4-3199448031
Decreasing the sFlow sample rate on a list/range of ports only reduces the hardware
sampling rate on one port in that list.
PD4-3259169701
The switch does not handle the incoming DMM and LMM frames.

PD4-3276508510
On Summit X440 series switches, some ports stop receiving/forwarding traffic at random
times and do not work until the switch is rebooted.
PD4-3250952662
Backup node rebooting continuously after rebooting a Summit X440 stack.

PD4-3253186873
Runtime diagnostics on Summit X450a series switches fail when there is an XGM2-2Xf
module with XFP installed.

PD4-3228083430
Links on VIM modules go active during bootup of the switch before configuration is loaded.
This happens on the Summit X460 with XMG3-2sf and XMG3-4sf modules.
97
Resolved Issues in ExtremeXOS 15.2.2

The following issues were resolved in ExtremeXOS 15.2.2. ExtremeXOS 15.2.2 includes
all fixes up to and including ExtremeXOS 11.1.4.4, ExtremeXOS 11.2.3.3, ExtremeXOS
ExtremeXOS 15.1.2, and ExtremeXOS 15.2.1. For information about those fixes, see the
release notes for the specific release.
PD Number
Description
General
PD4-3160471731
Virtual link is not working in OSPF.
PD4-3137122710
BFD protected static route does not failover when BFD session goes down.
PD4-3118104391
OSPF process ends unexpectedly while moving VLAN from one area to another area.
PD4-3115200928
ARP request is getting dropped due to the ARP validation when it is received from the
DHCP-client.
PD4-2430419473
NTP client is not selecting NTP server (added statically) as system peer.
PD4-3136817418
Duplicated multi-cast packets are seen while receiving J/P packets from LHR when a switch
acting as a assert-winner and a non-RP.
PD4-3184827944
IPMC forwarding config fails after enabling license.
PD4-3173858278
Multi-cast packets are getting duplicated when source IP address is 0.0.0.0.
PD4-3075596914
The command show ospfv3 lsdb detail output displays error message while
displaying default routes originated from external area.
PD4-3062899649
FHR drops source multi-cast stream after receiving (s, g, rpt) prune message.
PD4-3008418101
Process rtmgr sometimes ends unexpectedly with signal 5 while rebooting neighbor
switches.
PD4-3173621491
Router lifetime is marked as zero in all outgoing IPv6 router advertisement packets.
PD4-3103168790
ELRP process ends unexpectedly with signal 6 when STP tries to disable a trunk port.
PD4-3136548666
Traffic is dropped in MLAG failed state when using static FDBs and convergence control set
to conserve-access-lists.
PD4-3116189132
"halIsCardAlive-183 Slot 0" message appears at console when a trunk port is disabled by
STP.
PD4-3161130717
Need provision to turn off temporary flooding in STP domains using command line option.
PD4-3083297710
DHCP-snooping enabled switch dropping DHCP-client ARP-response when ARP validation is

enabled.
PD4-3100712761
Deploying identity management (IDM) on ExtremeXOS 15.2 with Ridgeline 3.1 does not work
properly. If IDM is deployed on earlier versions of ExtremeXOS, and then upgraded to
ExtremeXOS 15.2, IDM functions properly.
PD4-3160447120
After downloading and installing SSH module, "image selected" information in the show
switch command, changes back to the booted partition.
PD4-3182610916
When 10G SFP+ passive copper cable is used, Rx errors are observed on that port.
PD4-3160204717
Combo port doesn't come up with auto-negotiation off after reboot when preferred medium
is configured.
98
PD Number
Description

PD4-3036017760
IDM: Netlogin Mac with Kerebros correlation is not in synch with master and backup with
Netbios User. With kerebros detection off, Kerberos user goes off in master, but backup still
shows the kereberos user.
PD4-2968093427
With BGP max peering, the disable bgp neighbor all command causes the switch
to fail.
PD4-2897396101
I/O card 10G4Xc goes to failed state after reporting conduit asynchronous transmit error
encountered, and then reboots.
PD4-3178639961
Disabling IGMP snooping while PIMv6 is operating on IPv6 traffic causes the traffic to stop
flowing across VLANs.
PD4-2973262826
rtmgr process sometimes ends unexpectedly with signal 11 while rebooting neighbor
switches.
PD4-2991527171
For BlackDiamond 8800 series switches, on ERPS, if the switch is an RPL neighbor, its
neighbor port is not blocked, but other ring ports are blocked with following error messages:
06/04/2012 00:46:20.55 <Crit:ERPS.PreAllocFailNoAckIndx> MSM-A: Pre-allocation of
memory to set up acknowledgement data failed because index was not available
06/04/2012 00:46:20.55 <Warn:ERPS.SetPortStateNoGrpIdAck> MSM-A:
Acknowledgement not setup for VLAN group Id 64 having #vlans: 7 for the west port for
ring ring4-dut144
PD4-3134475788
Error message occurs while disabling/enabling the slot with mirroring configuration.
PD4-3017249887
The following error messages appear while inserting, saving and rebooting, and then
removing-inserting (IO) the TDWDM optics module in BlackDiamond 8800 series switches
with 8900-10G8X-xl:
<Erro:Kern.Card.Error> Slot-2: Unable to set the offset (148) of EEPROM to read (-145)
<Erro:Card.Error> Slot-2: aspendiags: XFP Vendor Name read error on rv -1
This issue does not occur with other XFPs in BlackDiamond 8800 series switches and
Summit X480 switches.
PD4-3017541589
On BlackDiamond 8900-40G6X-xm switches, the command show ports 1:*

transceiver information detail all goes into and infinite loop and never comes
up. The only way to come out of this is, either reboot the switch or press Ctrl + C.
PD4-2918828737
On BlackDiamond 8900-10G8X-xl switches while executing the debug hal show

optic-info slot 2 command, the following error messages appear:
06/20/2012 08:24:43.09 <Erro:Card.Error> Slot-2: aspendiags: Unable to read XFP inserted
status for port 4194304, rv 1
06/20/2012 08:24:43.09 <Erro:Card.Error> Slot-2: aspendiags: Port passed into XFP
functions is out of range (4194304)

PD4-2850764933
IPv4/IPv6 multi-cast traffic for certain groups does not egress from the switch after issuing
the commands disable/enable slot or run msm fail-over. These groups are
there in HAL and mcast cache, but the traffic doesn't egress on the ports.
PD4-3080806262
BlackDiamond X8 switches persist in dual master state and all slots fail to boot if both
master modules initialize at different times.
PD4-2838542511
With MPLS enabled, async queue keeps growing and system memory is getting depleted.
PD4-2882346381
DCBGP process sometimes ends unexpectedly while trying to delete the 512 peers in a
scaling test.
99
PD Number
Description
PD4-3150473221
DCBGP process ends unexpectedly while configuring IPv6 address to the VLAN which was
associated with BGP.
PD4-3029386061
With IP DAD on, MPLS peers of BlackDiamond X8 are missing LDP address for next hops.
PD4-2863139836
L2 forwarding stops and parity error in PORT_CBL_TABLE occurs after hot-swapping

multiple I/O modules in BlackDiamond X8.
PD4-2986619334
The command restart ports all produces the following error message:
<Erro:HAL.MPLS.Error> MM-A: pibMplsPwUpdate pibMplsPwNhlfeIlmWrite failed with error 1
PD4-3057474321
The command show ntp association <server ipaddress> statistics does

not display any output.
PD4-3092483396
ExtremeXOS image download triggers DOS-protect information when downloading over the
gig connection.
PD4-2997471401
After an ExtremeXOS image upgrade, the backup management module stays in the INIT
state.
PD4-3041931675
When in 4X10G mode, the 4 channels of the QSFP Vendor ID is not shown the DDMI
information separately in Everest platform.

PD4-3152127672
Slot reboot occurs while flapping a port continuously in a Summit X440 stack.
PD4-3039950390
DCBGP signal 11 sometimes ends unexpectedly when deleting BGP neighbors on Summit
X460-48x series switches.
PD4-3075884958
OSPF doesn't converge during link failure in non-backbone multi-area switch.
PD4-3029214521
On Summit X440 switches, erps process ends unexpectedly with signal 11 after issuing
delete erps submetro command.
PD4-3063327252
In Summit X670 series switches, with L2 LACP load sharing, traffic does not get forwarded
on one of the member ports after a save and reboot.
PD4-3083297543
On Summit X460 switches, the command show temperature output is not showing the
correct maximum/normal temperature of the switch in stacking.
PD4-3173621567
Summit X440 switches are getting stuck at 29.5 C temperature and logging a hot spot
temperature on the console instead of switch temperature when it reaches maximum limit.
PD4-2882010101
Add additional PSU/temp/fan support for Summit X670v-48T series switches.
PD4-2989036361
On Summit switches, when a combo port is used as a loopback port for mirroring to a portlist, the port may not come back up to active state after disabling mirroring.
PD4-3083089498
QSFP+ direct-attach active optical cable does not link up when used with SummitStack-V80
stacking module in Summit X460 series switch.
PD4-3060199814
The following error messages appear when executing the show ports <ports list>
transceiver information detail command for unsupported DDMI optics vendor
on all summit switches:
<Warn:HAL.Port.Warning> Optics module in port 23 is not Ddmi capable
<Erro:HAL.Port.Error> summitCardPortGetTransceiverInfoSfp: Unable to read DDMI info
from Transceiver for port 1:23
<Erro:HAL.Port.ReadOpticDDMIDataFail> Reading of DDMI data failed
PD4-3030064985
Error message for unsupported optics should be Error: DDMI is not supported on
transceiver in port <port list>.
PD4-3024962451
In Summit X460-48x series switches with XGM3S-2xf, transceiver information detail is not
available for DDMI XFP_SR optics module.
100
PD Number
Description
PD4-2902478051
On Summit X460 switches, 10/100/1000BASET loopback link is not coming up. This issue
only seen with BASET (Part Number: FCLF8522P2BTL-EX). This issue is not seen with
BASET (Part Number: FCLF-8520-3-EX).
PD4-3017456006
On Summit X480-24x switches, transceiver information detail is not available for DDMI
TDWDM optics modules.
PD4-3041931620
DDMI is not supported when QSFPs in 4X10G mode.

When in 4X10G mode, the four channels of the QSFP are not shown the DDMI information
separately on Summit X670v switches.
PD4-3031383332
On Summit 480-vim2-10G4X and X460-XGM3S-2xf with panel ports, the show ports
<port list> transceiver information detail command output is not working
on DDMI supported optics. It is working fine for 1 Gig ports (front panel).
PD4-2787357397
On Summit X480-48x switches, BASET optics link is not coming up when connected backto-back.
PD4-3075375856
On Summit X670 switches, 550 W power supply does not respond to SNMP gets for power
supply information.
PD4-3083298112
VRRP hello messages received on ports in super VLAN are flooded back on the same port.
PD4-3054429411
After the following series of commands, Summit X440 series switches reboot with the
message Unable to handle kernel paging request at virtual address 00000000:
create vlan v11 tag 100
create vman vm1 tag 111
create vman vm2 tag 222
configure vlan v11 add port 1 tagged
configure vman vm1 add port 1 cep cvid 10
configure vman vm2 add port 1 cep cvid 20
SummitStack
PD4-3094883815
Traffic drops sometimes with mixed-mode configuration when configuring per-vlan

igmp/mld filters and disable/enable load shared ports.
PD4-2833088901
In stack topology, rebooting the backup/standby slot, and then issuing the show power
command is not displaying the backup/standby power status as present.
Cell Site Routers

PD4-2983613830
Frequent warning level log messages appear for the timer expiration from CFM process.
AAA
PD4-3163943281
802.1x re-authentication fails when EAP ID reaches 255.
EAPS
PD4-3086010569
In ExtremeXOS 12.4.4-patch1-4, EAPS shared-port controller is stuck in preforwarding [F]

even when the shared port is down. This can result in a super loop. Issue occurs when there
are subsecond link flaps between the partner and controller.
FDB
PD4-3130902298
When the ARP entry on the ISC port ages out faster than the ARP entry on the MLAG peer,
the corresponding MAC address doesn't get re-learned on the ISC port.
MPLS
PD4-3029386128
MPLS packets are being forwarded in software instead of hardware on Summit X670,
BlackDiamond X8 and BlackDiamond 8900-40G6X-xm when IP DAD is enabled, causing
LDP sessions to drop/timeout.
101
PD Number
Description
Security
PD4-3157387215
The process Idmgr ends unexpectedly while issuing the command config identitymanagement delete ports all.
PD4-3063188501
The command unconfig identity-management returns the error "no such variable"
when no identity management configuration exists.
SNMP
PD4-3074480838
The process snmpSubagent ends unexpectedly when setting sysContact, sysName, or

sysLocation.
PD4-3174250718
SNMP walk does not work after restarting snmpSubagent process.
PD4-3002763257
snmpmaster memory leak occurs while polling from Ridgeline.
PD4-3145891867
SNMPv3 request authentication fails after switch reboot.
VLAN
PD4-3044932818
OSPF does not advertise network configured in passive super VLAN after disable/
enable supervlan.
PD4-3189051792
Need to update kernel error message when the switch receives the ARP-reply when there is
no ARP entry for ARP-sender.
PD4-3144429800
In PVLAN configuration, multi-cast traffic with destination address 224.0.0.0/24, is sent on

the same sub-VLAN on which it received.
XNV
PD4-3134503320
With VM_MAP authentication, the policy downloaded gets installed in the incorrect order
(that is, the Entry 2 gets installed before the Entry 1 of the same policy.
PD4-3134503353
Refresh egress policy locks up the switch. Must reboot to access the console.
PD4-3176440236
After a save, and then reboot, the authentication database-order is lost only when vmtracking is disabled.
102
Resolved Issues in ExtremeXOS 15.2

The following issues were resolved in ExtremeXOS 15.2. ExtremeXOS 15.2 includes all
fixes up to and including ExtremeXOS 11.1.4.4, ExtremeXOS 11.2.3.3, ExtremeXOS
ExtremeXOS 15.1.1, and ExtremeXOS 15.1.2. For information about those fixes, see the
release notes for the specific release.
Table 16: Resolved Issues, Platform-Specific and Feature PDs in ExtremeXOS 15.2
PD Number
Description
General
PD4-2301818698
The following error is logged when disabling load sharing on a syncE port configured as
clock source:
"<Erro:LACP.UnBindExpktFiltFail> : Failed to unbind the Expkt
filter". The log is not service affecting.
PD4-2531969596
The CLI command show ces shows Local and Remote Alarms for TDM MPLS Pseudo-wires
when transport LSP is changed from LDP to RSVP-TE and vice-versa.
This is a problem with the show command.
PD4-2414815644
In Y.1731 Frame-loss and Frame-delay measurements, it is seen that upon doing a restart
process dot1ag followed by a save and reboot, the Rxb counters become null (in case
of LMM) and they display incorrect values (in case of DMM). This behavior has also been
observed when an RSTP ring has been configured between the end points or when L3
protocols were enabled between the end points.
PD4-2643365511
After the following series of commands:

disable bootprelay
enable bootprelay ipv6
show bootprelay
save
restart process nettools
The bootprelay is enabled, which should be in disabled state. Show bootprelay displays
bootprelay as being in the enabled state.
PD4-2978037891
ExtremeXOS 12.5.4: Dynamically learned PIM cache entries in hardware should be retained
indefinitely unless cleared manually.
PD4-2978038040
IGMP Snooping: Last member leave time-out needs 100 ms precision for configurations up
to 5 seconds.
PD4-3045249000
Configuration allows VLAN aggregation when MVR is enabled. And after that, output from
the command show igmp snooping cache keeps looping.
PD4-3028729634
SNMP access profile mode changed when configuring another access profile with mode.
PD4-3028729294
With ExtremeXOS 15.1.1 on Summit X460-48p: For ACL with meter configuration and
counters, the counters are not incrementing when the meter is re-configured.
PD4-2404321089
Provider edge router doesn't copy EXP bits to dot1p bits while decapsulating and sending
out on attachment circuit.
PD4-3047615870
CPU utilization statistics are not getting updated after process restart.
PD4-2989674015
Identity management entries are not added for a MAC after the port-MAC movement.
103
PD Number
Description
PD4-3012718194
SSH logon to the switch fails to authenticate locally when remote authentication service to
AAA server is no longer available.
PD4-3005605163
Even after administrator manually disables a port, ELRP enables the port under some
conditions.
PD4-3037124066
VLAN process ends unexpectedly while executing show ipv6 dad <linklocal>.
PD4-2978037814
When a PIM router builds a neighbor update packet for a group and the number of sources
are more than 175, PIM process ends unexpectedly.
PD4-2870063625
Changing the priority1 value in GPTP does not trigger successful BMCA recalculation.
PD4-2143671531
In a mesh MLAG configuration, DAD does not detect duplicate addresses configured on a
VLAN.
PD4-2954106819
PIM considers RP address mask as default classful network mask instead of taking classless
network mask.
PD4-2732135918
Virtual machine (VM) is authenticated by local-vm database although "local" is not selected
as authentication method.
PD4-2322182306,
PD4-2677132492
Log filter with multiple match condition is not working. It matches the last match condition
only.
PD4-2465611841
Universal port management (UPM) log targets do not appear in the command show log
configuration target.
PD4-2566353861
configure log target console command is accepted, but does not do anything.
PD4-2906076358
IP security for gratuitous ARP does not work if enabled on a LAG port.
PD4-2906076449
Gratuitous ARP storm occurs between two switches in VRRP master state if GARP
protection is enabled on the VLAN.
PD4-1216469810
On a staticly configured IGMP receiver, an IGMP leave request received on a port is

incorrectly forwarded to all router ports. This could cause packets to be dropped.
PD4-2780220697
For ExtremeXOS 12.5.4/G48Ta modules: User virtual routers is not natively supported. If user
configuration has user virtual router and the chassis or stack has a mixed generation of
switches/slots, adding entries to the IPMC table could fail.
PD4-2742581831
Executing the command debug mcmgr igmp show ssm-map causes the process
mcmgr to end unexpectedly with signal 11.
PD4-2778012401
ISIS adjacency goes down on IPv4 interface when IPv6 is added on one of the peers.
PD4-2939996157
ExtremeXOS/PIM: When moving from shared tree to source tree, LHR should send the (*, G)
join and (S, G, RPT) prune in one packet to RP. With more than 51 groups, the message
exceeds the IP MTU size and the (*, G) join is sent in one packet and (S, G, rpt ) the prune is
sent in another packet. This causes churning of entries on FHR and momentary packet loss.
PD4-2480633531
Route target keyword is shown in the configure <vr-name> add option.
PD4-2841252816
In VLAN aggregation configuration, after disabling the VLAN, the IP interface is up after a
reboot.
PD4-2747957565
disable icmp redirect vlan <vlan_name>" is not disabling ICMP redirect

packets.
PD4-2704705840
The output of the command show iproute origin static is not in sorted order.
PD4-2836415688
ICMPv6 router advertisement is not sent from the switch when router-discovery is enabled
in the VLAN.
PD4-2727871291
ARP responses issued by the master to answer host requests for a virtual IP are transmitted
with the VRRP virtual MAC as source address. This should be the physical address of the
router.
PD4-2916680134
ICMPv6 router advertisements stop when VRRP is enabled on a VLAN.
104
PD Number
Description
PD4-2821007769
Even though the LAG master port is in "down-stuck" state after link flaps, it continues to
forward packets.
PD4-2768706180
MLAG documentation for local fault and remote fault counter should be changed to:
"Local and remote link state and fail counts reflect the status of the entire LAG when a LAG
is used in conjunction with an MLAG. For example, if 1 or 2 ports in a local LAG on the switch
associated with an MLAG is down, the local link state still shows as active and the associated
local fail count is incremented.
PD4-2837691998
disable ip-security dhcp-snooping vlan X port allcommand fails when

one of the ports is part of a port share.
PD4-2735563172
Packets are not forwarded out of LAG.
PD4-2787894144
In MSTP domain, BPDU packets are exchanged every one second interval, regardless of the
configured hello interval.
PD4-2866999658
STP ports from the STP domain are removed when you remove the untagged port from the
VLAN which is auto-binded to an STP domain.
PD4-2880945001
IPFIX does not provide required fields in the template for collectors.
PD4-2634400803
After establishing eight active SSH connection to the switch, the connection terminates after
60 minutes and subsequent SSH connections are rejected with the error message "Maximum
number of shell sessions has been reached".
PD4-2835605011
In some cases, telnetd process ends unexpectedly with signal 11.
PD4-2921789847
Error message appears while pinging link-local address without VLAN name.
PD4-1400989583
These commands are no longer valid: configure banner netlogin and show
banner netlogin.
PD4-2912666194
Using the "<" symbol when configuring a banner may result in a syntax error when loading
the configuration.
PD4-2635887468
With the Enode-facing port configured as "All", when logging out the virtual links,
DelVNPortFiltFail error messages appear with "Null pointer argument" as the error are
logged.
PD4-2742270345
Fibre channel over Ethernet (FCOE) process does not handle port status changes.
PD4-2925800238
The following EMS message should be modified to provide more information:

Info:RtMgr.Server.ProcGetRtMsgFail> MSM-A: Processed get Rt request for from Client
id=0x20002 Role=BGP Vrid=2 Instance=0 failed
PD4-2853979542
Telnet/SSH session fails to connect and displays error "Failed to spawn processing thread
for new shell".
PD4-2742270722
cliMaster process ends unexpectedly with signal 6.
PD4-2881055463
use image <primary/secondary> command is ignored after downloading the

ExtremeXOS image and SSH.xmod file in that order.
PD4-2665234271
Cannot install image to individual MSMs/MMs even though the command is accepted in
ExtremeXOS.
PD4-2663186888
unconfigure switch all did not default to auto-provisioning.
PD4-2791779493
The default value for CPU-monitoring interval value mentioned in CLI help message is
different from default value in the configuration file.
PD4-2728011001
There is some "port confusion" in ExtremeXOS after removing an unsupported I/O module
and inserting a supported I/O module into that same slot.
PD4-2885305312
Need to update the default shared-packet-buffer percentage for the E4G-200 and E4G-400
cell site routers, and Summit X460 switches in the Command Reference Guide.
105
PD Number
Description

PD4-2907259725
CliScripting: "Error: System configuration save is in progress. Please retry after completion."
occurs when the command run upm profile profile1 is executed. Issue occurs only
on all chassis/stack.
PD4-2417928733
Following error messages occur when sending multi-cast traffic ingresses by the 8900-40g
tribeca and egresses to 8900-10gig slot and do the run fail over.
11/17/2011 08:58:20.54 <Erro:Kern.Card.Error> Slot-8: exSmIpmcBitmapSetComplete: failed to
set bitmap, group=239, unit=1, err=-7 11/17/2011 08:58:15.78 <Erro:Kern.Card.Error> Slot-8:
exSmIpmcBitmapSetComplete: failed to set bitmap, group=223, unit=1, err=-7 11/17/2011
08:58:15.53 <Erro:Kern.Card.Error> Slot-8: exSmIpmcBitmapSetComplete: failed to set
bitmap, group=230, unit=1, err=-7
PD4-2952485772
Refresh policy that is applied as egress policy to a port on the unsupported card (card
type:G48Te2).
PD4-2246299321
Disabling or enabling links causes the following kernel error on the IPv4-multi-cast:
08/22/2011 18:29:28.92 <Erro:Kern.IPv4Mc.Error> Slot-1: IPmc sender entry
s,G,v=a010102,e3020132,361 IPMC 2 was not added to all switching resources 08/22/2011
18:29:28.93 <Erro:Kern.IPv4Mc.Error> Slot-1: Unable to Add L2 1:3 to
s,G,v=a010102,e3020132,361 IPMC 2, unit 0 Entry not found 08/23/2011 01:14:49.17
<Erro:Kern.IPv4Mc.Error> Slot-1: IPmc sender entry s,G,v=a010102,e305014e,361 IPMC 3 was
not added to all switching resources
PD4-2864233901
FDB aged out after 60 seconds when flapping occurs continuously on the other port in the
I/O module.
PD4-2829188786
Configuring wrong ACL on egress results in slices not being released on sharing member
port.
PD4-2795152108
When a port is added in the existing LAG which is a part of an STP domain, accessed
through telnet, the LAG is removed from the STP domain without a warning message.
PD4-2671167512
In a VPLS instance, if MPLS LSP takes different paths in opposite directions, then broadcast
packets might get dropped and not forwarded to service VLAN.
PD4-2699312155
DHCP Snooping entries are not removed when DHCP release is received on sub-VLAN.
PD4-2907892378
ExtremeXOS displays an incorrect error message after the configure access-list

width double slot all" command is issued when the slot is not present.
PD4-2787923708
If the MSM failover and I/O module reboot happen at the same time in some cases, the "hal"
process might end unexpectedly by EPM while check-pointing ACL,
PD4-2825824729
Dynamic ACL installation on BlackDiamond 8500-G24X-e card fails, while moving last rule in
current slice to next slice.
PD4-2578192235
Backup MSM restarted while exporting static routes using route-policy to BGP.
PD4-2771113628
show slot <slot-num> detail does not show software build information after the
failover.
PD4-2788718342
Need provision to tune conduit retry timeout for I/O modules.
PD4-2424777744
On 10/100/1000 BASET optic links come up when speed is set to 100 Mbps in BlackDiamond
8800 and Summit X480 series switches. After that, the link is not coming up when you
unplug, and then insert into the port which contains the BASET optics on the BlackDiamond
8800 switch side. For the BlackDiamond 8800 series switches, only link is coming on when
Auto ON.
Only link is coming when Auto ON in Aspen.
106
PD Number
Description

PD4-2559262856
The following error message displays when running diagnostics:

<Erro:HAL.Card.Error> MM-B: pibConduitSlotHandler: socket
closed, slot number 1, tcp port 5000"
This behavior does not affect the operation of the switch or diagnostic results.
PD4-3019353315
MM-B process ends unexpectedly and core is dumped when power supplies were being
removed and reinserted.
After power supplies were removed, cards in slots 5 and 7 powered down due to insufficient
power. The card in slot 5 had ACLs configured on it. After sufficient power was restored,
card 5 came up and the MM-B process ended unexpectedly.
PD4-2768755851
VLAN propagation is not occurring.
PD4-2879919838
When restarting the ports at both the end nodes (restart ports all) propagation seems to
happen from only one side.
PD4-3028729339
SNMP traps are not being sent when configuring the port explicitly.
PD4-2636370881
Sometimes while starting up the switch, the Bootrom displays the message "ERROR: failed
to read backplane mac - Aborted". The system recovers from this message with no side
effects when ExtremeXOS finishes loading.
PD4-2952228921
Slow path link failure is not getting detected, and the slow path traffic is not being rerouted when this failure occurs.
PD4-2585362045
After trying to add IBGP neighbor to peer group, the following error appears and the show
bgp neighbor command doesnt display any sessions.
Error: vr bgp_vr: Configuration for family 0X41000002 and index 12 failed with rc 3vr
bgp_vr: Configuration for family 0X41000002 and index 0 failed with rc 6vr bgp_vr: An
internal error has corrupted the BGP neighbor configuration. Please delete and recreate the
BGP neighbor
PD4-2803533541
BlackDiamond X8 series switches route traffic targeted at their link local IPv6 address to the
default route.
PD4-2567771006
Traffic to particular VRRP sessions get dropped after using restart process vrrp
command on a node.
PD4-2461685909
Disabling 802.3x rx flow control still pauses the traffic.
PD4-2822871387
VPWS/VPLS traffic does not pass traffic through ports, if ports belong to module ID 0 of
slot 1.
PD4-2461685161
ACL counters do not work when they are used with XNV.
PD4-2706101397
Unable to use files on USB memory card from ExtremeXOS
PD4-2851158065
debug hal show forwarding distribution command needs corrected syntax.
PD4-2786010151
kernel oops occurred (mwait_idle) in the switch.
PD4-2528569381
When all FM slots are disabled or removed and then an FM appears and is enabled in the
slot, I/O slots may appear empty for up to five minutes. After that time, they appear and
boot normally.
PD4-2770386159
BlackDiamond X8 series switches are displaying error messages continuously and eventually
are rebooting after some time. This occurs in ExtremeXOS 15.1.2.3, but not in 15.1.2.1.
PD4-2481395861
Enabling PFC flow-control for ports sometimes causes a warning message.
107
PD Number
Description

PD4-2985786177
Port 1 on Summit X460-48X series switches fails to detect any GBIC which is inserted. This
can be confirmed from the output from show ports 1 information detail and
debug hal show optic-info. Other ports on the switch are detecting the GBICs
without any issues. This occurs only in ExtremeXOS 15.1.2 patch 1-4 firmware.
PD4-2355609884
For Summit X460 series switches, EXP examination and replacement doesnt work.
PD4-2729723284
For Summit X480 series switches with VIM3-40G4x, enabling IP-fix on VIM3-40G4x ports
generates HAL.Port.Error instead of message saying "not supported".
PD4-3030877233
For Summit X250 series switches, applying an ACL containing ARP-sender-address on to 48

ports causes kernel panic (Kernel Oops) and switch reboots.
PD4-2977861770
For Summit X250 series switches, need to restrict the CFM frame loss in VLAN statistics for
unsupported platform.
PD4-2447129751
For Summit X460 series switches, getting a warning IPFIX message in the log even after
disabling and unconfiguring IPFIX from the DUT.
PD4-1417220471
Penultimate hop popping configured on Summit series switches is not forwarding customer
VPN traffic when it receives only VPN label.
PD4-3002763648
In Summit X480 series switches, dcbgp process signal 11 ends unexpectedly after issuing
command sh bgp route as-path "^$".
PD4-2970200467
Multi-cast packets are getting dropped in Summit X440 and mcast cache is not getting
refreshed periodically.
PD4-2632661788
For Summit X450 switches, IPARP entry does not get updated if multiple gratuitous ARP
replies are received in less than 1 second time gaps.
PD4-2733505021
For Summit X480 switches, memory depletion occurs on flapping BGP neighbors with large
number of BGP routes.
PD4-2795775351
For Summit X480 switches with VIM3-40G4x: Hash collision occurs when populating NH
hardware table.
PD4-2680914217
Enabling RIPng on 6in4 tunnel that is using the IP address of the VLAN from a port on a
Summit X440 slot causes the stack to fail.
PD4-2685429761
For Summit X670 switches on 40G4X and 48X(40G4X) ports, some packets are dropped
for TCP and non-TCP green traffic when drop profile is set to min-threshold 1 and maxthreshold 2 for TCP red profile.
PD4-2742044601
On all Summit switches, changing a VLAN name, unconfigures VLAN statistics monitoring
for that specific VLAN.
PD4-2634942001
On Summit X670 switches, xe fiber ports operate at 1 G speed failing to negotiate flow
control capability with peer port (IXIA) and thus Rx flow control is not working.
PD4-2731643776
Summit X350, X150, and X350 switches do not support L3 forwarding. Thus, there is no
support for the L3 /L3_L4 loadsharing algorithm. Those CLIs though accepted without error,
are not functional: enable sharing 2 grouping 2 algorithm address-based L3_L4 LACP. These
CLIs should be blocked in these switches. However, they do work in Summit X250 and X450
switches, since they support L3 forwarding.
PD4-2788055198
For Summit X250 switches, the switch is taking more time in FDB sync state, and the
backup is not synced properly when the standby modules are x250e-48p.
PD4-2670646485
For Summit X670 switches, once the VPLS and VPWS sessions are formed and traffic is
going through, error messages occur and traffic does not recover on run failover in scaled
configurations: 02/01/2012 07:24:50.71 <Erro:HAL.FDB.Error> Slot-1: FDB Add failed for mac
= 00:01:a7:01:03:a3, due to unknown port type 7F0000C0, vid = 1131
108
PD Number
Description
PD4-2708465820
For Summit X480 switches with VIM3-40G modules, clear counters doesnt clear PW Rx
Pkts.
PD4-2731392831
For Summit X480 switches, for VPLS, traffic drop is seen over static LAG 10 G links.
PD4-2783515028
For Summit X450 switches, STP blocked port still reports rogue DHCP server when DHCP
snooping is enabled.
PD4-2713629354
For Summit X670 switches, thttpd process ends unexpectedly after issuing enable or
disable web https commands.
PD4-2825824891
On Summit X460 stacks, CCM is not transmitting.
PD4-2826101793
On Summit X460 stacks, the MEP is not created on the hardware.
PD4-2826101191
Summit X480 switches with VIM3-40G4x modules: In ACL-only mode, applying ACL on
ports in 40G VIM is not accepted and produces an error.
PD4-2821082630
On Summit X450a switches with XGM2-2bt modules, "Firmware Version does not match
build level" message appears while booting up.
PD4-2785211408
configure firmware install-on-demand command is still part of show config

epm detail. However, this is an invalid command on all platforms except the BlackDiamond
8800 series switches.
PD4-2711516827
In Summit X650 stack, console connection is lost on master node when running debug
commands on both nodes.
PD4-2887819631
On Summit X440 switches, fan does not operate when temperature is greater than 30C as
show in show temperature command output.
PD4-2680914961
In Summit X670 stacks, when CPU-generated packets are sent to an egress port which
transit through a x670/x440/40G VIM module, tag 0 is added to that packet.
PD4-2918666310
In Summit X670 switches, after enabling the trial license, the process VLAN ends
unexpectedly with signal 11.
PD4-2695604890
On Summit X440 switches, PoE+ ports go to discovered state instead of fault state when
overload condition occurs.
PD4-2798357608
CLI prompt doesnt start at new line after using show port info command.
PD4-2740817914
Load sharing is not configurable with 10G ports. 10G link is done by partioning 40G link in
Summit X480 stack using VIM3 module.
PD4-2872693751
For Summit X450a switches, port flaps occur when configured with 1G speed.
PD4-2594974751
The uplink combo port behavior is incorrect while configuring the preferred medium on
E4G-400 cell site routers.
PD4-2673750965
Unplugging/plugging the SF+_SR/LR module on Summit X460-48x-XGM3SB-4sf switches

causes ExtremeXOS to fail to detect the media type.
PD4-2485596683
Management port LEDs on Summit X480 switches work in reverse to the physical port
status after the reboot.
PD4-2788055358
For all Summit switches, querying SNMP MIB object "extremePortQosCongestionStatsEntry",

resets the QoS ingress dropped-packet counter value to 0.
PD4-2728295841
FCoE process has fails repeatedly on Summit switches while running a particular test.
SummitStack
PD4-2455565221
PFC is not working between ports in different slots in Summit X670 V-160 stack.
PD4-1917835901
Summit V-80 stack: Need to program same hashing algorithm (RTAG7) for load sharing
from co-residential trunk member ports to stack trunk member ports, and from stack trunk
member ports to co-residential trunk member ports of V-80 stack.
PD4-1935516959
Summit switches dont forward IP option packets to local destination if MPLS is enabled.
109
PD Number
Description
PD4-2670646555
VPLS flood traffic is duplicated after command run failover.
PD4-2790987089
Fetching stack detail fails in screenplay.
PD4-2729657107
320G stacking: Applying ACL policy file caused the backup node to fail with the following
error message:
02/03/2012 16:19:56.93 <Erro:EPM.Msg.timer_thread> Slot-2: Because the Parent process
(715987696) thread of process 1474, has not responded within 41 periods of 10 seconds, the
process will be terminated. 02/03/2012 16:19:56.93 <Warn:EPM.proc_kill> Slot-2: Process hal
ID 1474 killed 02/03/2012 16:19:57.34 <Crit:Kern.Card.Alert> Slot-2: Process hal pid 1474 died
with signal 6
PD4-2823612835
When the policy is applied to VLAN/any in egress mode, counters are incremented to three
times the correct value. For example, when 100 packets are sent, the counter shows 300.
PD4-2787388647
In Summit X670v/X460 stacks, after changing and refreshing the policy file, stack nodes fail
and reboot.
PD4-2730345384
320g Stacking: Stack LED not lit for Summit X650 and X480 switches when it is part of a
320G stack. Also, sh ports stack-ports statistics command output shows the
stack ports are in ready state for Summit X650 and X480 switches.
PD4-2778009853
For 320G stacks: When Summit X480 switches are master and backup, backup node gets
stuck in "config synced" state and repeatedly ends unexpectedly.
PD4-2818733637
The output for the show version command does not include VIM and PSU on the master
node, and the PSU version of the backup node.
PD4-2694131638
160 G stacking with VIM3-40G4x modules: When a Summit X650 switch is a master and a
backup in 160 G stacking, on running failover, one of the standby Summit X480 switches
fails.
PD4-2558563499
Slot reboots with 100% shared-packet buffer during severe congestion.
Cell Site Routers

PD4-2577228064
For E4G-400 cell site routers, when the MPLS unframed CES payload size changed to 32 or
33 bytes, then both devices sets R bit in CES packets and PWE3 is in a faulty state.
PD4-2669581633
HAL end unexpectedly with an error saying "Error while loading "maintenancePoint": HAL
Timeout during LMEP Create operation. The system may be busy completing a prior
operation" appears when issuing show cfm after restarting process dot1ag.
PD4-2649882790
<Warn:LACP.RxPDUUnkType> message getting printed in the console continuously for

every port that is connected to SyncE source. Issue occurs after enabling
ServiceProviderEdge license.
PD4-2577372092
A reboot is necessary after enabling the "Network Timing" license for PTP. Only after
rebooting, can a clock instance be created successfully.
PD4-2554319032
Unconfiguring the source-1/2 leaves the show network-clock clock-source input

clock value to last received.
PD4-2679549734
E4G-stackingSync-E clock fails to get recovered (locked) on ports 1:17-1:24 of E4G-400

master node in stacking setup. Recovery remains in HOLDOVER state. In the backup node,
clock gets locked on all ports, but TIE shows variations when the clock is recovered through
ports 2:172:24.
PD4-2672321819
VRID range in CLI error message appears as [0, 4294967295] when creating a VRRP with
invalid VRID. It should be [1,255].
PD4-2790576851
In VPLS EAPS redundancy scenario, sometimes VPLS sessions in EAPS controller node are in
ready state after disable/enable eaps shared port. These VPLS sessions should move to up
state after enabling the shared-port. As a result, end-to-end traffic drop occurs.
110
PD Number
Description
PD4-2572557763
In VPLS EAPS redundancy scenario, often end-to-end traffic drop occurs when either
disable/enable EAPS shared-port. This is caused by incorrect FDB entries in the VPLS
neighbor node. FDB entries in neighbor node points to wrong next-hop. FDB is relearned
and traffic recovers after FDB aging timer expires.
PD4-2725732621
Process ERPS ends unexpectedly and DUT reboots when unconfiguring the ERPS neighborport.
PD4-2552388760
After changing the CCM-interval, CFM failed to create all the MEPs.
PD4-2732221380
Dynamically changing RMEP ID for an active ERPS ring returns error, but the show
configuration command displays the newly configured RMEP ID.
PD4-2457249982
MPLS ping from Cisco switch is not working.
PD4-2770386470
Y.1731 egress frames are double-tagged when mirrored on E4G-200 cell site routers even
though the actual frames are sent out correctly.
PD4-2692964441
While measuring Y1731 frame loss between two cell site routers, for which data traffic has
not been injected, FLM counters display a "Last NE Tx" value of 43981.
PD4-2580187246
MPLS CES should be disabled to change CES payload when the CES admin state is up.
AAA
PD4-2732119232
When TACACS accounting server is not available, in some cases, process AAA ends
unexpectedly with signal 6.
ACL
PD4-2974142019
ACL process ends unexpectedly with signal 11 when incorrect count syntax is used in the
policy file.
PD4-2912975612
CLEAR-Flow is supported only on ingress.
PD4-2635887431
SPMA mode in FIP Snooping is not supported.
PD4-2635887468
With the Enode-facing port configured as "All", when logging out the virtual links,
DelVNPortFiltFail error messages appear with "Null pointer argument" as the error are
logged.
PD4-2636565030
After issuing the command, enable fip snooping vlan v1 before configuring the
FIP snooping parameters on the VLAN in a script, no FIP sessions are established. However,
if you perform the same set of operations manually, this does not occur.
PD4-2661837371
After setting up FIP snooping on a switch, virtual links disappear eventually since there are
no VN_Port keep-alives exchanged.
PD4-2673364058
An ACL leak occurs in the hardware table when the fcf-update mode is set to manual and
port 1 is configured as "enode-to-fcf". However, show commands do not show this leak.
PD4-2720537461
Signal 11 ends unexpectedly while running SPMA mode with manual fcf-update mode.
PD4-2695154281
IPv6 packets are being incorrectly matched to ACL rule entries with different source/
destination IPv6 address match conditions.
PD4-2799087111
Soft-path-forwarded packets might get dropped due to rate limiting, if switch has more
than 500 ACL rules installed.
PD4-2826235067
ACL rule compression is not functioning as expected.
PD4-2742270839
In Summit series switches, after continuous link flap, a memory leak occurs.
PD4-2790948464
When installing ACLs with greater than 500 rules, slow-path-forwarded packets like LACP
are getting dropped.
111
PD Number
Description
BGP
PD4-1593569487
Traffic is lost when running MPLS/EAPS on the core network side. IAM receiving three level
label stack on the traffic.
PD4-1684914234
The commands disable/enable virtual-router <vrf-name> results in routes

missing at remote-pe.
PD4-1723130721
EPM watchdog expires and switch shuts down while trying to configure BGP as ce-pe
protocol in more than 93 VPN VRF instances. Switch is also reporting that it is low on
memory.
PD4-1373833751
import RT and then export same RT acting as delete import RT and add export RT.
PD4-2343002075
Cease code is not sent properly when disable bgp neighbor/peer-group

command is issued.
PD4-2175520591
Routes are inactivated when a VLAN (gateway) is deleted.
PD4-2777377105
show bgp neighbor command output is misaligned if a switch has BGP neighborship
with both a 2-byte ASN peer and a 4-byte ASN peer.
PD4-2406977658
ExtremeXOS software ends unexpectedly when a route policy is unconfigured from peer.
CFM
PD4-2783609095
CFM shows information on only one domain when more domains are present.
PD4-2389784861
When endpoints and intermediate points are configured in the same domain and in different
associations, the intermediate points in association a2 pick up CCMs intended for endpoints
in association a1.
FDB
PD4-2612115890
Changing the VLAN tag is shown on the FDB entries installed by the FIP Snooping process.
PD4-2726461622
FDB process ends unexpectedly with signal 11 after issuing command clear fdb, after
removing MLAG configuration.
PD4-2673364793
With LAG on the enode-to-fcf and fcf-to-enode ports and with FIP snooping disabled on
VLAN v1 on DUT 1 and enabled on VLAN v1 on DUT 2, FDB installation errors occur.
PD4-2654374177
EAPS triggered FDB flush should not remove FDBs learned by check pointing from MLAG
peer on ISC port.
MPLS
PD4-3046317681
L2VPN stuck in ready state after unconfiguring redundancy EAPS.
PD4-2671167582
FDB entries are not learned in VPLS if MPLS LSP takes different path in opposite directions.
Security
PD4-2662926291
SSH_SCP: exsshd process ends unexpectedly with signal 11.
PD4-2953058237
enable sshv2 access-profile none configuration is not showing in the show config and
show config detail outputs.
PD4-2592763931
Need support to specify order for the role policies.
PD4-2592763942
ID manager needs to support role match criteria inheritance.
PD4-2798513456
Netlogin users are not getting detected back after deleting greylist entry.
PD4-2821113980
Gratuitous ARP protection only sends one reply, while WindowsXP computer sends three
GARP packets. Consequently, if the computer is connected to a router using L2 switch, then
the other devices connected on the same L2 switch will l have their ARP cache entries
pointing to the computer's MAC address instead of router's MAC address.
112
PD Number
Description
PD4-2613122234
After executing the command enable ip-security arp gratuitousprotection vlan <vlan> or enable iparp gratuitous protect vlan
<vlan>, invalid command appears in the configuration.
PD4-2668891218
Running the save configuration command causes a memory leak in the ipSecurity
and rtmgr processes.
PD4-2773599834
Netlogin port sends a DHCP NAK when receiving the DHCP-request from non-netlogin
enabled VLAN.
PD4-2906076512
dot1x client not authenticated when switched over to secondary radius server.
SNMP
PD4-2791356371
SNMP trap receiver configurations in switches are not cleared completely after being
configured and deleted through Ridgeline.
PD4-2630598186
CPU utilization of "snmpMaster" process goes up to 99% when SNMPv3 access is disabled
and RMON rule is set.
PD4-2934941224
When the Failtimer Expired flag is set in an EAPS ring, a SNMP trap is sent with a value of 0
for the OID extremeEapsFailedFlag.
Sync-E
PD4-2271688588
show port <port> information command does not display the SyncE information.
UPM
PD4-2899595530
The following error message occurs when issuing the command run upm profile
maxScript:"Error: System configuration save is in progress."
Also, show upm history command is not showing the UPM history. This issue does
not not occur in version 15.1.2.12.
PD4-2623268850
UPM timer is drifting when configured with SNTP-client.
PD4-2829188861
After installing an ExtremeXOS image, UPM fails to execute a profile.
PD4-2791923318
When using UPM for assigning ports to VLANs upon device detect, adding ports fails when
a save operation is done at the same time.
VLAN
PD4-2756351801
mrp pid 1502 ended unexpectedly with signal 11 when one of the DUT in the topology is
given unconfigure switch,
PD4-2643119982
When super VLANs and sub-VLANs are configured, DHCP offer messages are sent out with
wrong tag values.
PD4-2742270506
When you add a previously added VLAN to FIP snooping, and then delete it, FCOE process
ends unexpectedly with signal-11.
PD4-2795294408
Adding loopback port to subscriber VLAN generates additional unwanted configurations

under VLAN module.
VRRP
PD4-2727871300
Gratuitous ARP is sent before the first VRRP advertisement when transiting from backup to
master. The VRRP advertisement should be sent prior to gratuitous ARPs when transitioning
from backup to master.
113
114
115
116

ExtremeXOS 15.2.3-Patch1-12 RelNotes

Enviado por

Dados do documento

Título original

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

ExtremeXOS 15.2.3-Patch1-12 RelNotes

Enviado por

Direitos autorais:

Formatos disponíveis

ExtremeXOS Release Notes

Software Version ExtremeXOS 15.2.3-Patch1-12

Published: July 2013

Chapter 3: Open Issues, Known Behaviors, and Resolved Issues 65

ExtremeXOS 15.2.3 Release Notes

These release notes document ExtremeXOS 15.2.3-patch1-12, which includes software

Feature Corrections in ExtremeXOS 15.2.3 on page 5

Features Corrections in ExtremeXOS 15.2.2 on page 8

New Features and Functionality in ExtremeXOS 15.2 on page 10

New Hardware Supported in ExtremeXOS 15.2.2 on page 19

New Hardware Supported in ExtremeXOS 15.2 on page 19

Hardware No Longer Supported on page 20

ExtremeXOS Hardware and Software Compatibility Matrix on page 20

Upgrading to ExtremeXOS on page 20

Downloading Supported MIBs on page 21

ExtremeXOS Command Line Support on page 21

Tested Third-Party Products on page 21

Extreme Switch Security Assessment on page 23

Service Notifications on page 23

Feature Corrections in ExtremeXOS 15.2.3

ExtremeXOS 15.2.3 Release Notes

BlackDiamond 8800 series switches: G48Te2, G24Xc, G48Xc, G48Tc, 10G4Xc,

BlackDiamond 8800 series switches: 8500-series

Changed CLI Commands

ExtremeXOS 15.2.3 Release Notes

Features Corrections in ExtremeXOS 15.2.2

Expanded Digital Diagnostic Monitoring Interface Optics Support

Temperature (in Celsius)

Tx powertransmit power in dBM

Rx powerreceive power in dBM

Tx bias currentbias current in mA

In ExtremeXOS, DDMI information is accessible using the following commands:

With ExtremeXOS 15.2.2, support for DDMI is expanded to:

More transceiver form factors and types

All third-party transceivers that support DDMI

ExtremeXOS 15.2.3 Release Notes

Table 1: Expanded Optical Transceiver Support in ExtremeXOS 15.2.2

Summit series switches

SFP (ZX, LX100)

SFP (all types*)

SFP+ (SR, LR, ER)

SFP+ (all types*)

XFP (SR, LR, ER, ZR, DWDM, TDWDM)

XFP (all types*)

BlackDiamond 8800 series switches

XFP (SR, LR, ER, ZR, DWDM, TDWDM)

XFP (all types*)

BlackDiamond X8 series switches

SFP (all types*)

ExtremeXOS 15.2.3 Release Notes

New Features and Functionality in ExtremeXOS 15.2

Dynamic Host Configuration Protocol (DHCP)v6 BOOTP Relay on page 11

IPv6 Router Advertisement (RA) Filtering on page 11

Dynamic Host Configuration Protocol (DHCP) Server General Options Support on

Multi-cast Listener Discovery (MLD)v2 on page 13

MLDv2 Snooping on page 13

Multi-switch Link Aggregation Group (MLAG)-MLD on page 14

Identity Management Database (IDM) Enable/Disable Snooping Identities on

IDM Match Criteria InheritanceAutomatic Child Role Inheritance on page 15

IDM Policy/Access Control List (ACL) Order on page 15

IDM Multi-Windows Domain Support on page 15

IDM Network Zone Support for Policy Files on page 16

Redirected Port List in Access Control Lists (ACLs) on page 16