Guest

Cisco Catalyst 6000 Series Switches

Field Notice: *Expired* FN - 13613 - Embedded/Nonembedded Cisco View for Catalyst 4000, 5000, and 6000 Stops Working


Revised October 10, 2006

May 21, 2001

THIS FIELD NOTICE HAS BEEN ARCHIVED AND IS NO LONGER MAINTAINED OR UPDATED BY CISCO.

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE, WARRANTY OR SUPPORT. USE OF THE INFORMATION ON THIS FIELD NOTICE OR MATERIALS LINKED FROM THIS FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.


Products Affected

Product

Comments

cat4000-cv_5-5-1.bin

Cisco View release of C4K 5.5(1)

cat4000-cv_5-5-2.bin

Cisco View release of C4K 5.5(2)

cat4000-cv_5-5-3.bin

Cisco View release of C4K 5.5(3)

cat4000-cv_5-5-5.bin

Cisco View release of C4K 5.5(5)

cat5000-sup3cv_5-5-1.bin

Cisco View release of Catalyst 5000 5.5(1)

cat5000-sup3cv_5-5-2.bin

Cisco View release of Catalyst 5000 5.5(2)

cat5000-sup3cv_5-5-3.bin

Cisco View release of Catalyst 5000 5.5(3)

cat5000-sup3cv_5-5-4a.bin

Cisco View release of Catalyst 5000 5.5(4a)

cat5000-sup3cv_5-5-4b.bin

Cisco View release of Catalyst 5000 5.5(4b)

cat5000-sup3cv_5-5-5.bin

Cisco View release of Catalyst 5000 5.5(5)

cat5000-sup3cv_5-5-6.bin

Cisco View release of Catalyst 5000 5.5(6)

cat5000-sup3cv_5-5-7.bin

Cisco View release of Catalyst 5000 5.5(7)

cat5000-sup3cv_5-5-8.bin

Cisco View release of Catalyst 5000 5.5(8)

cat6000-supcv_5-5-1.bin

Cisco View release of Catalyst 6000 5.5(1)

cat6000-supcv_5-5-2.bin

Cisco View release of Catalyst 6000 5.5(2)

cat6000-supcv_5-5-3.bin

Cisco View release of Catalyst 6000 5.5(3)

cat6000-supcv_5-5-4a.bin

Cisco View release of Catalyst 6000 5.5(4a)

cat6000-supcv_5-5-4b.bin

Cisco View release of Catalyst 6000 5.5(4b)

cat6000-supcv_5-5-5.bin

Cisco View release of Catalyst 6000 5.5(5)

cat6000-supcv_5-5-6.bin

Cisco View release of Catalyst 6000 5.5(6)

cat6000-supcv_5-5-6a.bin

Cisco View release of Catalyst 6000 5.5(6a)

cat6000-supcv_5-5-7.bin

Cisco View release of Catalyst 6000 5.5(7)

cat6000-supcv_5-5-8.bin

Cisco View release of Catalyst 6000 5.5(8)

cat5000-supcv_6-1-1b.bin

Catalyst 5000 6.1(1b) CV image

cat5000-supcv_6-1-2.bin

Catalyst 5000 6.1(2) CV image

cat6000-supcv_6-1-1b.bin

Catalyst 6000 6.1(1b) CV image

cat6000-supcv_6-1-2.bin

Catalyst 6000 6.1(2) CV image

Problem Description

The Cisco View ADP package embedded in Catalyst software 5.x and 6.1 releases for Catalyst 5000 and 6000 families stops working on 5/11/2001.

The non-embedded Cisco View for Catalyst 4000 software 5.x and 6.1 releases stops working on May 11, 2001.

Background

The embedded and non-embedded CiscoView for Catalyst OS software (CMF) 5.x releases no longer works after May 11, 2001. This is because the digital certificates used to sign the Java classes have expired.

Problem Symptoms

This problem will not have any impact on the functionality of the Catalyst switches, but will generate error messages when a user attempts to access a Catalyst 4000, 5000, or 6000 switch from Cisco View.

  1. A browser window will pop up with the following message:

     Access Control Error
          Embedded CiscoView could not be launched due to an authentication error. Your
          system needs to be setup to accept code signed by Cisco Systems, Inc. 
          ...
    
  2. The user will not be able to launch telnet from CiscoView. A Java dialog will appear that says:

    Cannot launch Telnet.
          java.lang.SecurityException: Could not get Environment
    

Workaround/Solution

Workarounds:

  • Add a grant codeBase section to the java.policy file under \lib\security\java.policy for each device that you want to launch embedded CiscoView from.

    Note: This is the directory where the Java Plug-in is installed on your workstation. (for example, C:\Program Files\JavaSoft\JRE\1.3)

    Example: type: grant codeBase http://devicename.cisco.com/ {permission Java.security.AllPermission;};

    This example demonstrates grant permission for the "devicename.cisco.com" device in the network. There needs to be one copy of this section for each device.

  • Install Java Runtime/Plug-in 1.3.1. This plug-in can be downloaded from the URL http://java.sun.com/j2se/1.3/index.jsp leavingcisco.com.

    1. By using this Java Plug-in version, you will be prompted with a warning dialog when launching embedded CiscoView indicating: "The certificate is expired. Do you want to ignore this warning and proceed?"

    2. Click "Yes", then you can proceed to launch the embedded CiscoView.

Solution:

  • For Cisco View monitoring of Catalyst 5000 and 6000 switches, upgrade to the Cisco View Embedded Catalyst OS release 5.5(8a)cv or 6.2(2)cv. These releases are available on CCO. To download this software,

  • For Cisco View monitoring of Catalyst 4000 Switches, upgrade to the Non-embedded Cisco View release 5.5(8a)cv or 6.2(2)cv. These releases are available on CCO. To download this software, click here (registered customers only)

DDTS

To follow the bug ID link below and see detailed bug information, you must be a registered user and you must be logged in.

DDTS

Description

CSCdu19715 (registered customers only)

digital certificates used in CMF 1.2 will expire in May 2001

CSCdu25881 (registered customers only)

Embedded CV on CatOS switches does not work after 5/11/2001

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

Product Alert Tool - Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.