Release Notes for Cisco AS5x00 Universal Gateways with Cisco IOS Release 12.4(20)YA

Table Of Contents

Release Notes for Cisco AS5000 Series Universal Gateways with Cisco IOS Release 12.4(20)YA

Contents

Introduction

System Requirements

Memory Requirements

Supported Hardware

Determining the Software Version

Upgrading to a New Software Release

Feature Set Tables

New and Changed Information

New Hardware Features in Cisco IOS Release 12.4(20)YA3

New Software Features in Cisco IOS Release 12.4(20)YA3

New Hardware Features in Cisco IOS Release 12.4(20)YA2

New Software Features in Cisco IOS Release 12.4(20)YA2

New Hardware Features in Cisco IOS Release 12.4(20)YA1

New Software Features in Cisco IOS Release 12.4(20)YA1

New Hardware Features in Cisco IOS Release 12.4(20)YA

New Software Features in Cisco IOS Release 12.4(20)YA

CVP IOS Debug CLI

SIT Detection and Reporting

New Features in Release 12.4T

Limitations and Restrictions

Caveats

Open Caveats - Cisco IOS Release 12.4(20)YA3

Resolved Caveats - Cisco IOS Release 12.4(20)YA3

Open Caveats - Cisco IOS Release 12.4(20)YA2

Resolved Caveats - Cisco IOS Release 12.4(20)YA2

Open Caveats - Cisco IOS Release 12.4(20)YA1

Resolved Caveats - Cisco IOS Release 12.4(20)YA1

Open Caveats - Cisco IOS Release 12.4(20)YA

Resolved Caveats - Cisco IOS Release 12.4(20)YA

Additional References

Release-Specific Documents

Platform-Specific Documents

Cisco IOS Software Documentation Set

Documentation Modules

Notices

Release Notes for Cisco AS5000 Series Universal Gateways with Cisco IOS Release 12.4(20)YA

---

First Released: August 1, 2008

Last Revised: April 7, 2009

Cisco IOS Release 12.4(20)YA3

OL-17461-04 Fourth Release

These release notes describe new features and significant software components for the Cisco AS5000 series universal gateways that support Cisco IOS Release 12.4(20)YA. These release notes are updated as needed. Use these release notes with the Cross-Platform Release Notes for Cisco IOS Release 12.4T and About Cisco IOS Release Notes.

For a list of the software caveats that apply to Cisco IOS Release 12.4(20)YA, see the "Caveats" section and the online Caveats for Cisco IOS Release 12.4(20)T. The caveats document is updated for every 12.4T maintenance release.

Contents

•Introduction

•System Requirements

•New and Changed Information

•Caveats

•Additional References

•Notices

Introduction

The Cisco AS5350XM and Cisco AS5400XM universal gateways are the only 1-rack unit, 2-, 4-, or 8-PRI gateway that provides universal services—data, voice, and fax services on any service, any port. The Cisco AS5350XM and Cisco AS5400XM universal gateways offer high performance and high reliability in a compact, modular design. This cost-effective platform is appropriate for Internet service providers (ISPs) and enterprises that require innovative universal services.

System Requirements

This section describes the system requirements for Cisco IOS Release 12.4(20)YA and includes the following sections:

•Memory Requirements

•Supported Hardware

•Determining the Software Version

•Upgrading to a New Software Release

•Feature Set Tables

Memory Requirements

Table 1 and Table 2 describe the memory requirements for the Cisco IOS feature sets that are supported by Cisco IOS Release 12.4(20)YA on the Cisco AS5350XM and the Cisco AS5400XM universal gateways.

Table 1 Memory Requirements for the Cisco AS5350XM Universal Gateway 

Platform	Feature Set	Software Image	Flash Memory (MB)	DRAM (MB)
Cisco AS5350XM	Cisco AS5350 IOS IP PLUS IPSEC 3DES	c5350-ik9s-mz	64	256
	Cisco AS5350 IOS IP PLUS IPSEC 3DES LAWFUL INTERCEPT	c5350-ik9su2-mz	64	256
	Cisco AS5350 IOS IP PLUS	c5350-is-mz	64	256
	Cisco AS5350 IOS ENTERPRISE PLUS IPSEC 3DES	c5350-jk9s-mz	64	256
	Cisco AS5350 Ser. IOS INT VOICE/VIDEO IPIPGW, TDMIP GW LI	c5350-jk9su2_ivs-mz	64	512
	Cisco AS5350 IOS ENTERPRISE PLUS	c5350-js-mz	64	256
	Cisco AS5350 Ser. IOS INT VOICE/VIDEO IPIPGW, TDMIP GW EPLUS	c5350-js_ivs-mz	128	512
Cisco AS5350	Cisco AS5350 IOS IP PLUS IPSEC 3DES	c5350-ik9s-mz	64	128
	Cisco AS5350 IOS IP PLUS IPSEC 3DES LAWFUL INTERCEPT	c5350-ik9su2-mz	64	128
	Cisco AS5350 IOS IP PLUS	c5350-is-mz	64	128
	Cisco AS5350 IOS ENTERPRISE PLUS IPSEC 3DES	c5350-jk9s-mz	64	128
	Cisco AS5350 IOS ENTERPRISE PLUS	c5350-js-mz	64	128

Table 2 Memory Requirements for the Cisco AS5400XM Universal Gateway 

Platform	Feature Set	Software Image	Flash Memory (MB)	DRAM (MB)
Cisco AS5400XM	Cisco AS5400 IOS IP PLUS IPSEC 3DES	c5400-ik9s-mz	64	512
	Cisco AS5400 IOS IP PLUS IPSEC 3DES LAWFUL INTERCEPT	c5400-ik9su2-mz	64	512
	Cisco AS5400 IOS IP PLUS	c5400-is-mz	64	512
	Cisco AS5400 IOS ENTERPRISE PLUS IPSEC 3DES	c5400-jk9s-mz	64	512
	Cisco AS5400 Ser. IOS INT VOICE/VIDEO IPIPGW, TDMIP GW LI	c5400-jk9su2_ivs-mz	64	512
	Cisco AS5400 IOS ENTERPRISE PLUS	c5400-js-mz	64	512
	Cisco AS5400 Ser. IOS INT VOICE/VIDEO IPIPGW, TDMIP GW EPLUS	c5400-js_ivs-mz	128	512
Cisco AS5400, Cisco AS5400HPX,	Cisco AS5400 IOS IP PLUS IPSEC 3DES	c5400-ik9s-mz	64	128
	Cisco AS5400 IOS IP PLUS IPSEC 3DES LAWFUL INTERCEPT	c5400-ik9su2-mz	64	128
	Cisco AS5400 IOS IP PLUS	c5400-is-mz	64	128
	Cisco AS5400 IOS ENTERPRISE PLUS IPSEC 3DES	c5400-jk9s-mz	64	128
	Cisco AS5400 IOS ENTERPRISE PLUS	c5400-js-mz	64	128

Supported Hardware

Cisco IOS Release 12.4(20)YA supports the following Cisco AS5000 platforms:

•Cisco AS5350

•Cisco AS5350XM

•Cisco AS5400

•Cisco AS5400HPX

•Cisco AS5400XM

For detailed descriptions of new hardware features and which features are supported on each router, see the "New and Changed Information" section. For descriptions of existing hardware features and supported modules, see the hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco AS5350XM router at:

http://www.cisco.com/en/US/products/hw/univgate/ps501/tsd_products_support_series_home.html

For descriptions of existing hardware features and supported modules, see the hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco AS5400XM router at:

http://www.cisco.com/en/US/products/hw/univgate/ps505/tsd_products_support_series_home.html

Determining the Software Version

To determine the version of Cisco IOS software currently running on your Cisco AS5000 series router, see About Cisco IOS Release Notes located at: http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.

Upgrading to a New Software Release

For general information about upgrading to a new software release, see About Cisco IOS Release Notes located at:

http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.

Feature Set Tables

For information about feature set tables, see About Cisco IOS Release Notes located at: http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.

New and Changed Information

•New Hardware Features in Cisco IOS Release 12.4(20)YA3

•New Software Features in Cisco IOS Release 12.4(20)YA3

•New Hardware Features in Cisco IOS Release 12.4(20)YA2

•New Software Features in Cisco IOS Release 12.4(20)YA2

•New Hardware Features in Cisco IOS Release 12.4(20)YA1

•New Software Features in Cisco IOS Release 12.4(20)YA1

•New Hardware Features in Cisco IOS Release 12.4(20)YA

•New Software Features in Cisco IOS Release 12.4(20)YA

•New Features in Release 12.4T

New Hardware Features in Cisco IOS Release 12.4(20)YA3

There are no new hardware features in this release.

New Software Features in Cisco IOS Release 12.4(20)YA3

There are no new software features in this release.

New Hardware Features in Cisco IOS Release 12.4(20)YA2

There are no new hardware features in this release.

New Software Features in Cisco IOS Release 12.4(20)YA2

There are no new software features in this release.

New Hardware Features in Cisco IOS Release 12.4(20)YA1

There are no new hardware features in this release.

New Software Features in Cisco IOS Release 12.4(20)YA1

There are no new software features in this release.

New Hardware Features in Cisco IOS Release 12.4(20)YA

There are no new hardware features in this release.

New Software Features in Cisco IOS Release 12.4(20)YA

The new software features are:

•CVP IOS Debug CLI

•SIT Detection and Reporting

CVP IOS Debug CLI

When a voice gateway is used as a contact center, it is often necessary to turn on the error debugging for AFW/IVR, HTTP, MRCP, RTSP, and VoiceXML. Enabling the ivr contact-center command automatically turns on all of these error debugs, and also prevents these error debugs from being turned off when the no debug all command is entered. For more information, see the ivr contact-center command in the Cisco IOS Voice Command Reference:

http://www.cisco.com/en/US/docs/ios/voice/command/reference/vr_i2.html#wp1112650

SIT Detection and Reporting

This feature provides detection of the eight U.S. special information tones (SITs) and reporting of the detected SIT with a preassigned disconnect cause code for disconnect supervision. This capability is supported for analog FXO trunk and T1/E1 channel-associated signaling (CAS) FXO loop-start. The SIT reporting complies with standard Q.850 messages in order for fax servers to uniquely identify each condition.For more information, see the supervisory sit us command in the Cisco IOS Voice Command Reference:

http://www.cisco.com/en/US/docs/ios/voice/command/reference/vr_s12.html#wp1198948

New Features in Release 12.4T

For information regarding the features supported in Cisco IOS Release 12.4T, see the Cross-Platform Release Notes links at:

http://www.cisco.com/en/US/products/ps6441/prod_release_notes_list.html

Limitations and Restrictions

There are no known limitations or restrictions in this release.

Caveats

For general information on caveats and the bug toolkit, see About Cisco IOS Release Notes located at http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.

This section contains the following caveat information:

•Open Caveats - Cisco IOS Release 12.4(20)YA3

•Resolved Caveats - Cisco IOS Release 12.4(20)YA3

•Open Caveats - Cisco IOS Release 12.4(20)YA2

•Resolved Caveats - Cisco IOS Release 12.4(20)YA2

•Open Caveats - Cisco IOS Release 12.4(20)YA1

•Resolved Caveats - Cisco IOS Release 12.4(20)YA1

•Open Caveats - Cisco IOS Release 12.4(20)YA

•Resolved Caveats - Cisco IOS Release 12.4(20)YA

Open Caveats - Cisco IOS Release 12.4(20)YA3

There are no open caveats in this release.

Resolved Caveats - Cisco IOS Release 12.4(20)YA3

CSCsu84868 c3845: Error mesg %SYS-2-BADSHARE: Bad refcount in datagram_done.

Symptom    Cisco 3845 experiences trackback error:

Aug 14 12:34:55.960: %SYS-2-BADSHARE: Bad refcount in datagram_done, ptr=7006C010, count=0, -Traceback= 0x61816650 0x60641BD0 0x60C27A80 Aug 17 16:51:45.739: %SYS-2-BADSHARE: Bad refcount in datagram_done, ptr=705985A4, count=0, -Traceback= 0x61816650 0x60641BD0 0x60C27A80

Conditions   The error message occurs on a router running the c3845-adventerprisek9_ivs_li-mz.124-15.T5 image.

Workaround   None.

CSCsy22826 VG224 sending incorrect ssType in 1+ node CUCM cluster.

Symptom    VG224 endpoint does not connect to callback destination, once the callback destination is idle.

Conditions   Multi node cluster and VG224 endpoint is registered with node other then the first node in the cluster.

Workaround   Have VG224 endpoints registered with first node.

Further Problem Description: The activation of the callback is successful. What fails is when the callback destination becomes idle again and the VG224 endpoint gets notified (ring). After the VG224 endpoint goes offhook, the system should automatically connect to the Callback destination.This does not happen and VG224 endpoint gets silence.

Open Caveats - Cisco IOS Release 12.4(20)YA2

There are no open caveats in this release.

Resolved Caveats - Cisco IOS Release 12.4(20)YA2

CSCsr16693

A series of TCP packets may cause a denial of service (DoS) condition on Cisco IOS devices that are configured as Easy VPN servers with the Cisco Tunneling Control Protocol (cTCP) encapsulation feature. Cisco has released free software updates that address this vulnerability. No workarounds are available; however, the IPSec NAT traversal (NAT-T) feature can be used as an alternative.

This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090325-ctcp.shtml.

Note: The March 25, 2009, Cisco IOS Security Advisory bundled publication includes eight Security Advisories. All of the advisories address vulnerabilities in Cisco IOS Software. Each advisory lists the releases that correct the vulnerability or vulnerabilities in the advisory. The following table lists releases that correct all Cisco IOS Software vulnerabilities that have been published in Cisco Security Advisories on March 25, 2009, or earlier.

http://www.cisco.com/warp/public/707/cisco-sa-20090325-bundle.shtml

CSCsu21828

A series of TCP packets may cause a denial of service (DoS) condition on Cisco IOS devices that are configured as Easy VPN servers with the Cisco Tunneling Control Protocol (cTCP) encapsulation feature. Cisco has released free software updates that address this vulnerability. No workarounds are available; however, the IPSec NAT traversal (NAT-T) feature can be used as an alternative.

This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090325-ctcp.shtml.

Note: The March 25, 2009, Cisco IOS Security Advisory bundled publication includes eight Security Advisories. All of the advisories address vulnerabilities in Cisco IOS Software. Each advisory lists the releases that correct the vulnerability or vulnerabilities in the advisory. The following table lists releases that correct all Cisco IOS Software vulnerabilities that have been published in Cisco Security Advisories on March 25, 2009, or earlier.

http://www.cisco.com/warp/public/707/cisco-sa-20090325-bundle.shtml

CSCsv38166

The server side of the Secure Copy (SCP) implementation in Cisco IOS software contains a vulnerability that could allow authenticated users with an attached command-line interface (CLI) view to transfer files to and from a Cisco IOS device that is configured to be an SCP server, regardless of what users are authorized to do, per the CLI view configuration. This vulnerability could allow valid users to retrieve or write to any file on the device's file system, including the device's saved configuration and Cisco IOS image files, even if the CLI view attached to the user does not allow it. This configuration file may include passwords or other sensitive information.

The Cisco IOS SCP server is an optional service that is disabled by default. CLI views are a fundamental component of the Cisco IOS Role-Based CLI Access feature, which is also disabled by default. Devices that are not specifically configured to enable the Cisco IOS SCP server, or that are configured to use it but do not use role-based CLI access, are not affected by this vulnerability.

This vulnerability does not apply to the Cisco IOS SCP client feature.

Cisco has released free software updates that address this vulnerability.

There are no workarounds available for this vulnerability apart from disabling either the SCP server or the CLI view feature if these services are not required by administrators.

This advisory is posted at the following link:

http://www.cisco.com/warp/public/707/cisco-sa-20090325-scp.shtml.

CSCsu11522

A vulnerability exists in the Session Initiation Protocol (SIP) implementation in Cisco IOS software that can be exploited remotely to cause a reload of the Cisco IOS device.

Cisco has released free software updates that address this vulnerability. There are no workarounds available to mitigate the vulnerability apart from disabling SIP, if the Cisco IOS device does not need to run SIP for VoIP services. However, mitigation techniques are available to help limit exposure to the vulnerability.

This advisory is posted at the following link:

http://www.cisco.com/warp/public/707/cisco-sa-20090325-sip.shtml.

CSCsk64158

Symptom    Several features within Cisco IOS software are affected by a crafted UDP packet vulnerability. If any of the affected features are enabled, a successful attack will result in a blocked input queue on the inbound interface. Only crafted UDP packets destined for the device could result in the interface being blocked, transit traffic will not block the interface.

Conditions   Cisco has released free software updates that address this vulnerability.

Workaround   Workarounds that mitigate this vulnerability are available in the workarounds section of the advisory. This advisory is posted at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20090325-udp.shtml.

CSCsj27458 IOS display "Using -1 out of xx bytes" after "erase nvram"/"show start"

Symptom    The following message is seen when giving the command <CmdBold> show startup-config <noCmdBold>
"Using -1 out of xxxxx bytes"
This error message is misleading. This caveat does not affect the functionality.

Conditions   startup-config was not present in NVRAM. That is, nvram configs were previously erased by <CmdBold> write erase <noCmdBold> command. This behavior is seen only in the c2400, c2691, c2800, c3631, c3725, c3745, c3825, c3845, and as5400 platforms.

Workaround   Issuing <CmdBold> write memory <noCmdBold> command restores the config.

CSCsk41593 PAK_SUBBLOCK error found when ping with >1500-byte over cellular inter.

Symptom    The following error occurs when a ping packet is sent or received:
PAK_SUBBLOCK_ALREADY: 2 -Process= "IP Input"

Conditions   Occurs when large ping packets (greater than 1500 bytes) are sent to back-to-back cellular interfaces with GRE tunneling enabled.

Workaround   Disable the <CmdBold>ip virtual-reassembly<noCmdBold> command on the cellular interface.

CSCso30142 Traceback due to channel-group configuration.

Symptom    Traceback is generated during boot up.

Conditions   This is caused when the channel-group serial interface is configured with ip-address or np- ip-address. This is specific to T1/E1 HWIC.

Workaround   None.

CSCso38104 voice-port is not becoming up without reload when ISDN PRI is 
configured.

Symptom    When we configure ISDN PRI on 5400, voice-port is not getting enabled without reloading the router.

Conditions   The following steps can be used to reproduce the issue:
Remove the PRI configuration for the particular controller. Configure the PRI again for that controller. Ensure ISDN status for that interface is up. Check whether the voice-port is enabled or not.

Workaround   Save the configuration and reload the router. The voice port will get enabled.

CSCso39750 router crashes at socket_inherit_fd after no ccm sccp.

CSCso39964 QoS:router hangs while removing class-map.

Symptom    The router hangs when attempts are made to modify pure ACL configuration while traffic is still flowing.

Conditions   Occurs on routers running Cisco IOS Release 12.4(15)T4. The router returns back to normal if the traffic is stopped.

Workaround   There is no workaround.

CSCso41513 helper-address triggers ARP for non directly connected server.

Symptom    When using the <CmdBold>ip helper-address<noCmdBold> command to forward directed broadcast, an incomplete ARP entry will be created for the helper-address configured even if it is not a directly connected subnet. This may break BOOTP forwarding to the DHCP server.

Conditions   The symptoms are observed in Cisco IOS Release 12.4(19) only. Cisco IOS Release 12.4(18) does not have this issue.

Workaround   Configure proxy-arp on the next hop device on the path to the DHCP server.

Alternate Workaround: Configure static ARP on the router for the helper-address pointing towards the next hop.

CSCso52548 parser breakage in crypto isakmp key <> CLI.

Symptom    crypto isakmp key cli parser mode breakage.

Conditions   crypto isakmp key <> cli.

Workaround   None.

Further information: Not service impacting. Only that, crypto isakmp key <0/6> ? option gives "% Ambiguous command" instead of WORD for (UNENCRYPTED/ENCRYPTED) password.

CSCso61743 Router crashes@stcapp_free_supported_codec_list when stop/start 
stcapp.

Symptom    Router crashes when stcapp is disabled, stcapp ccm-group is removed from configuration, and then stcapp is re-enabled.

Conditions   Occurs on Cisco 2691 and Cisco 3745 routers running Cisco IOS Release 12.4(15)T05. Can also occur on other platforms running this Cisco IOS release. Can also occur if stcapp is disabled and the user attempts to enable stcapp but stcapp fails to start for any reason.

Workaround   None.

CSCsq20970 ATM option missing, while configuring T1 controller for mode atm.

Symptom    On the 2432 platform UUT, the 'atm' option is missing in the 'mode' CLI when the T1 controller is being configured for ATM.

Conditions   The symptom is observed on the 2432 platform with a T1 controller.

Workaround   There is no workaround.

CSCsq33229 Traceback seen in 5400 @ extract_r2_groupB_from_gtd.

Symptom    Trace back seen on loading the configuration at the gateway.

Workaround   None.

CSCsq91960 failed to delete vrf when it is 32 characters long.

Symptom    VRF may not get deleted if the VRF NAME size is 32 characters on a dual RP HA/SSO router.

Conditions   This symptom occurs when adding a VRF with 32 characters on a DUAL RP HA router. (In some releases a VRF name with more than 32 characters will get truncated to 32.) The following may occur:

•There may be a DATA CORRUPTION ERRMSG.

•While deleting this 32 character length VRF, VRF will fail to get deleted completely with an ERRMSG on active.

Workaround   There is no workaround.

CSCsq97697 No dialtone is heard when an outgoing call is made right after call 
disc.

Symptom    Sometimes dialtone is not heard when user disconnects the existing call and immediately makes another outgoing call via hookflash.

Conditions   Is seen when hookflash is used to disconnect the existing call and make an outgoing call.

Workaround   Do not use the hookflash button. Go onhook to disconnect the call, wait for a few seconds then go offhook to make a new outgoing call.

CSCsr06625 telephony-service command throws % Invalid input detected.

CSCsr27960 Traceback observed after configuring credential under sip-ua.

Symptom    Traceback observed when configuring credentials CLI under sip-ua.

Conditions   This happens when user configures credentials CLI with username length more than 32 characters.

Workaround   There is no workaround.

CSCsr68545 Error %DATACORRUPTION-1-DATAINCONSISTENCY when running ipsla with rtt.

Symptom    Error message occurs:
000302: Jul 24 13:00:13.575 CDT: %DATACORRUPTION-1-DATAINCONSISTENCY: copyerror -Traceback= 0x410FD1A4 0x41119DB0 0x41138324 0x41DE5714

Conditions   IP SLA configured with RTT.

Workaround   There is no workaround.

CSCsr74835 incorrect uses of sprintf() in tcp/telnet.c.

Symptom    Certain sprintf() calls in tcp/telnet.c are incorrect.

Conditions   They have the potential to overflow the destination buffers.

Workaround   snprintf() should be used with a bounding length of the size of the destination buffer.

CSCsr78883 Router console displays messages "Data corruption Data Inconsistency.

Symptom    There will be traceback on configuring mls qos cos pass-through dscp in supporting interface mode.

Conditions   Configuring mls qos cos pass-through dscp in the interface that supports the functionality.

Workaround   Currently the CLI is not supported in most network modules, and thus, is invisible to the users. If the CLI is supported, configure it as mls qos cos override | cos-value.

Further Problem Description: Due to the buffer overflow, there will be traceback when configuring the QoS in the supporting interface. Currently the CLI is not supported in most network modules, and is thus, invisible to the users.

CSCsr92741 TCP packets with zero fields misbehavior.

Symptom    When a TCP packet with all fields set to "zero" (at a tcp level) is sent to a remote router (whether using ipv4 and IPv6). The destination router (to which the destination IP belongs), will send a ACK/RST flag set TCP packet back to the source.

Workaround   CoPP, FPM and other mechanisms can be used to mitigate and protect against these packets.

CSCsu24050 Multiple PRC_NON_COMPLIANCE tracebacks found on configuring stcapp FAC.

CSCsu58305 c880 build breaks due to stricter compiler flags in the throttle branch.

CSCsu64215 ip tcp adjust-mss command results in packet loss for non-TCP traffic.

Symptom    Router may incorrectly drop non TCP traffic. TFTP and EIGRP traffic can be impacted as seen in CSCsv89579.

Conditions   Occurs when the <CmdBold>ip tcp adjust-mss<NoCmdBold> command is configured on the device.

Workaround   Disable <CmdBold>ip tcp adjust-mss<NoCmdBold> on all interfaces. Note that this may cause higher CPU due to fragmentation and reassembly in certain tunnel environments where the command is intended to be used.

CSCsv13562 Router crashes due to double free of ccb->call_info.origRedirectNumber.

Symptom    The router crashes due to double free scenarios. While handling 302 response, "ccb->call_info.origRedirectNumber" attempts a double free due to signaling forking.

Conditions   Running Call Manager Express.

Workaround   There is no workaround.

CSCsv54651 Crafted VTP packet could cause a crash.

Cisco's VTP protocol implementation in some versions of Cisco IOS and CatOS may be vulnerable to a DoS attack via a specially crafted VTP packet sent from the local network segment when operating in either server or client VTP mode. When the device receives the specially crafted VTP packet, the switch may crash (and reload/hang). The crafted packet must be received on a switch interface configured to operate as a trunk port.

Workaround   None.

This response is posted at http://www.cisco.com/warp/public/707/cisco-sr-20081105-vtp.shtml

CSCsv84605 When phone is onhook, media shouldn't be handled.

Symptom    Reporting port hang. The symptom is that when the port is blocked, the underlying low layer (VPM, VTSP) is already in clean IDLE state, but STCAPP keeps itself in the REM_ONHOOK_PEND -> CONNECTING -> ACTIVE_PENDING -> ONHOOK_PEND -> REM_ONHOOK_PEND loop.

Conditions   When STCAPP is used for analog phones through CCM control. CCM is 6.1.1. STCAPP version is 12.4(20)YA1. The fix will go into 12.4(22)T.

Workaround   None.

Open Caveats - Cisco IOS Release 12.4(20)YA1

There are no open caveats in this release.

Resolved Caveats - Cisco IOS Release 12.4(20)YA1

CSCsq13348

The Cisco IOS Intrusion Prevention System (IPS) feature contains a vulnerability in the processing of certain IPS signatures that use the SERVICE.DNS engine. This vulnerability may cause a router to crash or hang, resulting in a denial of service condition.

Cisco has released free software updates that address this vulnerability. There is a workaround for this vulnerability.

---

Note This vulnerability is not related in any way to CVE-2008-1447 - Cache poisoning attacks. Cisco Systems has published a Cisco Security Advisory for that vulnerability, which can be found at http://www.cisco.com/en/US/products/products_security_advisory09186a00809c2168.shtml.

---

This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-iosips.shtml.

CSCsr56699 CME router crashes when invoking call features while AIM-IPS-K9 is 
enabled.

Symptom    Router crashes.

Conditions   Invoke call transfer on CME router where ids monitoring inline is configured to monitor voice traffic.e

Workaround   There is no workaround.

CSCej70453 Unable to control application: OER Route Map Failure.

Symptom    OER Application Aware Routing will not work on 2600.

Workaround   There is no workaround.

CSCso56129 %SYS-2-BADSHARE: Bad refcount in datagram_done monitoring cme/cue 
calls.

Symptom    Bad Refcount with tracebacks seen.

Conditions   Use AIM-IPS-K9 to monitor interfaces with ephones registered to the CME on the same router and have ephone check voice mail. This is in a branch in a box setup. UUT serves as a CME and also has the voice mail AIM in the same router.

Workaround   There is no workaround.

CSCsq19144 AAA downloaded PBR not getting installed.

Symptom    User-specific policy-based routes that are downloaded from the AAA server using Attribute 104 may not be installed.

Conditions   This symptom is seen if the policy-based routes are downloaded from the AAA server.

Workaround   Configure the policy-based routes locally.

CSCsr16050 Ping fails from Service-Module-Engine to networks not directly 
connected.

Open Caveats - Cisco IOS Release 12.4(20)YA

There are no open caveats in this release.

Resolved Caveats - Cisco IOS Release 12.4(20)YA

There are no resolved caveats in this release.

Additional References

Use this release note with the documents and websites in this release note and the documents listed in the following sections:

•Release-Specific Documents

•Platform-Specific Documents

Release-Specific Documents

The following documents are specific to Release 12.4 and apply to Release 12.4(20)YA.

•Cross-Platform Release Notes for Cisco IOS Release 12.4T

•Cisco IOS Software Releases 12.4 Special and Early Deployments

•Caveats for Cisco IOS Release 12.4(20)T

Platform-Specific Documents

Hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco AS5350XM universal gateways are at:

http://www.cisco.com/en/US/products/hw/univgate/ps501/tsd_products_support_series_home.html

Hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco AS5400XM universal gateways are at:

http://www.cisco.com/en/US/products/hw/univgate/ps505/tsd_products_support_series_home.html

Cisco IOS Software Documentation Set

The Cisco IOS software documentation set consists of the Cisco IOS configuration guides, Cisco IOS command references, and other supporting documents.

Documentation Modules

Each module in the Cisco IOS documentation set consists of one or more configuration guides and one or more corresponding command references. Chapters in a configuration guide describe protocols, configuration tasks, and Cisco IOS software functionality, and contain comprehensive configuration examples. Chapters in a command reference provide complete command syntax information. Use each configuration guide with its corresponding command reference. Cisco IOS Software Documentation is available in html or pdf form.

Select your release and click the command references, configuration guides, or any other Cisco IOS documentation you need.

Notices

See the "Notices" section in About Cisco IOS Release Notes located at: http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.

Use this document in conjunction with the documents listed in the "Additional References" section.

CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2008-2009 Cisco Systems, Inc. All rights reserved.