Release Notes for Cisco 1800 Series Routers with Cisco IOS Release 12.4(22)YB
Available Languages
Table Of Contents
Release Notes for Cisco 1800 Series Routers with Cisco IOS Release 12.4(22)YB
Determining the Software Version
Upgrading to a New Software Release
New Hardware Features in Cisco IOS Release 12.4(22)YB8
New Software Features in Cisco IOS Release 12.4(22)YB8
New Hardware Features in Cisco IOS Release 12.4(22)YB7
New Software Features in Cisco IOS Release 12.4(22)YB7
New Hardware Features in Cisco IOS Release 12.4(22)YB6
New Software Features in Cisco IOS Release 12.4(22)YB6
New Hardware Features in Cisco IOS Release 12.4(22)YB5
New Software Features in Cisco IOS Release 12.4(22)YB5
New Hardware Features in Cisco IOS Release 12.4(22)YB4
New Software Features in Cisco IOS Release 12.4(22)YB4
New Hardware Features in Cisco IOS Release 12.4(22)YB3
New Software Features in Cisco IOS Release 12.4(22)YB3
New Hardware Features in Cisco IOS Release 12.4(22)YB2
New Software Features in Cisco IOS Release 12.4(22)YB2
New Hardware Features in Cisco IOS Release 12.4(22)YB1
Third Generation (3G) Wireless High-Speed WAN Interface Card
New Software Features in Cisco IOS Release 12.4(22)YB1
New Hardware Features in Cisco IOS Release 12.4(22)YB
New Software Features in Cisco IOS Release 12.4(22)YB
Support for PAI, PPI, Privacy, PCPID and PAURI headers on Cisco Unified Border Element
Selectively Using sip: URI or tel: URL Formats on Individual SIP Headers
Support for Preloaded Routes in Outgoing INVITE Messages based on REGISTER information
Cisco Unified Border Element Support for SRTP-RTP Internetworking
Adjustable Timer for REGISTRATION Retries
Out-of-dialog Options Ping to Monitor Dial-peers to Specified SIP Servers
Configuring Selective Filtering of Outgoing Provisional Response on the
Cisco Unified Border ElementConfiguring Cisco Unified Border Element for Unsupported Content Pass-through
Configurable SIP Parameters via DHCP
Forced Update to SIP Parameters via DHCP
Open Caveats - Cisco IOS Release 12.4(22)YB8
Resolved Caveats - Cisco IOS Release 12.4(22)YB8
Open Caveats - Cisco IOS Release 12.4(22)YB7
Resolved Caveats - Cisco IOS Release 12.4(22)YB7
Open Caveats - Cisco IOS Release 12.4(22)YB6
Resolved Caveats - Cisco IOS Release 12.4(22)YB6
Open Caveats - Cisco IOS Release 12.4(22)YB5
Resolved Caveats - Cisco IOS Release 12.4(22)YB5
Open Caveats - Cisco IOS Release 12.4(22)YB4
Resolved Caveats - Cisco IOS Release 12.4(22)YB4
Open Caveats - Cisco IOS Release 12.4(22)YB3
Resolved Caveats - Cisco IOS Release 12.4(22)YB3
Open Caveats - Cisco IOS Release 12.4(22)YB2
Resolved Caveats - Cisco IOS Release 12.4(22)YB2
Open Caveats - Cisco IOS Release 12.4(22)YB1
Resolved Caveats - Cisco IOS Release 12.4(22)YB1
Open Caveats - Cisco IOS Release 12.4(22)YB
Resolved Caveats - Cisco IOS Release 12.4(22)YB
Cisco IOS Software Documentation Set
Release Notes for Cisco 1800 Series Routers with Cisco IOS Release 12.4(22)YB
First Released: January 27, 2009Last Revised: October 28, 2010Cisco IOS Release 12.4(22)YB8OL-19009-09 Nineth ReleaseThese release notes describe new features and significant software components for the Cisco 1800 series routers that support Cisco IOS Release 12.4(22)YB releases. These release notes are updated as needed. Use these release notes with the Cross-Platform Release Notes for Cisco IOS Release 12.4T and About Cisco IOS Release Notes.
For a list of the software caveats that apply to the Release 12.4(22)YB releases, see the "Caveats" section, and see the online Caveats for Cisco IOS Release 12.4(22)T document. The caveats document is updated for every 12.4T maintenance release.
Contents
System Requirements
This section describes the system requirements for Cisco IOS Release 12.4(22)YB and includes the following sections:
•
Determining the Software Version
•
Memory Requirements
Table 1 lists the memory requirements for the Cisco IOS feature sets that are supported by Cisco IOS Release 12.4(22)YB on the Cisco 1800 series routers.
Hardware Supported
Cisco IOS Release 12.4(22)YB supports the following routers:
•
•
For detailed descriptions of new hardware features and which features are supported on each router, see the "New and Changed Information" section. For descriptions of existing hardware features and supported modules, see the hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 1800 series routers, which are at:
http://www.cisco.com/en/US/products/ps5853/tsd_products_support_series_home.html
Determining the Software Version
To determine the version of Cisco IOS software currently running on your Cisco 1800 series router, see About Cisco IOS Release Notes located at: http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
Upgrading to a New Software Release
For general information about upgrading to a new software release, see About Cisco IOS Release Notes located at:
http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
Feature Set Tables
For information about feature set tables, see About Cisco IOS Release Notes located at: http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
New and Changed Information
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
New Hardware Features in Cisco IOS Release 12.4(22)YB8
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 12.4(22)YB8
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 12.4(22)YB7
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 12.4(22)YB7
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 12.4(22)YB6
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 12.4(22)YB6
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 12.4(22)YB5
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 12.4(22)YB5
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 12.4(22)YB4
AIM2-CUE-K9
The AIM2-CUE-K9 provides support for Cisco Unity Express voice mail, auto attendant, and interactive voice response (IVR) features. The AIM2-CUE-K9 is the next generation of AIM-CUE. The AIM2-CUE-K9 provides higher scalability than the AIM-CUE.
The AIM-CUE is supported on the Cisco 890, Cisco 1841, Cisco 2801, Cisco 2811, Cisco 2821, Cisco 2851, Cisco 3825, and Cisco 3845 series routers on an AIM form factor. For detailed information about this feature, see the documents at:
http://www.cisco.com/en/US/products/sw/voicesw/ps5520/
AIM2-APPRE-104-K9
The AIM2-APPRE-104-K9 is an Application eXtension Platform (AXP). Cisco AXP allows third parties such as system integrators, managed service providers, and large enterprise customers to extend the functionality of Cisco ISRs by providing their own value-added integrated services. On the service module, Cisco AXP hosts applications in a separate runtime environment with dedicated resources. In addition, Cisco AXP provides Application Programming Interfaces (APIs) that enable functions such as packet analysis, event notification, and network management to be utilized by hosted applications.
The AIM2-APPRE-104-K9 is supported on the Cisco 890, Cisco 1841, Cisco 2801, Cisco 2811, Cisco 2821, Cisco 2851, Cisco 3825, and Cisco 3845 series routers on an AIM form factor. For detailed information about this feature, see the documents at:
http://www.cisco.com/en/US/products/ps9701/index.html
New Software Features in Cisco IOS Release 12.4(22)YB4
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 12.4(22)YB3
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 12.4(22)YB3
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 12.4(22)YB2
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 12.4(22)YB2
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 12.4(22)YB1
Third Generation (3G) Wireless High-Speed WAN Interface Card
The Third Generation (3G) Wireless High-Speed WAN Interface Card (HWIC-3G-CDMA) is a multiband, multiservice WAN card for use over CDMA Radio Access Networks (RAN). It is used as the primary WAN connectivity and as a backup for critical applications. The 3G HWIC can also be used as the primary WAN connection.
The Cisco 3G Wireless HWIC provides the following new functionality:
•
•
•
The Third Generation (3G) Wireless High-Speed WAN Interface Card (HWIC-3G-GSM and HWIC-3G-HSPA) is a multiband, multiservice WAN card for use over WCDMA Radio Access Networks (RAN). It is used as the primary WAN connectivity and as a backup for critical applications. The 3G HWIC can also be used as the primary WAN connection.
It is supported on the following Cisco integrated services routers (Cisco ISRs):
•
•
•
•
The Cisco 3G Wireless HWIC provides the following new functionality:
•
•
•
New Software Features in Cisco IOS Release 12.4(22)YB1
There are no new software features in this release.
New Hardware Features in Cisco IOS Release 12.4(22)YB
There are no new hardware features in this release.
New Software Features in Cisco IOS Release 12.4(22)YB
Support for PAI, PPI, Privacy, PCPID and PAURI headers on Cisco Unified Border Element
•
•
•
For more information, see:
Selectively Using sip: URI or tel: URL Formats on Individual SIP Headers
The Cisco Unified Border Element supports the construction of request URIs in tel: format. The system supports this format for both the To: header and the Request-Line. The system also supports appending the phone-context to the tel: URL. For more information, see:
Support for Preloaded Routes in Outgoing INVITE Messages based on REGISTER information
The Cisco Unified Border Element supports the use of preloaded routes for outgoing INVITE messages. The system routes INVITE messages based on REGISTER message information, such as the path: and Service-Route values. For more information, see:
Cisco Unified Border Element Support for SRTP-RTP Internetworking
This feature allows secure enterprise to enterprise calls. The feature also provides operational enhancements for session initiation protocol (SIP) trunks from Cisco Unified Communications Manager and Cisco Unified Communications Manager Express. Support for SRTP-RTP internetworking between one or multiple Cisco Unified Border Elements is enabled for SIP-SIP audio calls. For more information, see:
Adjustable Timer for REGISTRATION Retries
•
•
•
For more information, see:
http://www.cisco.com/en/US/docs/ios/voice/cube/configuration/guide/vb-gw-sipsip.html
Out-of-dialog Options Ping to Monitor Dial-peers to Specified SIP Servers
The out-of-dialog (OOD) Options Ping feature provides a keepalive mechanism at the SIP level between many destinations. A generic heartbeat mechanism allows Cisco Unified Border Element to monitor the status of SIP servers or endpoints and provide the option of busying-out associated dial-peer on total heartbeat failure. For more information, see:
http://www.cisco.com/en/US/docs/ios/voice/cube/configuration/guide/vb-gw-sipsip.html
Configuring Selective Filtering of Outgoing Provisional Response on the
Cisco Unified Border ElementThis feature adds support on Cisco Unified Border Element (Cisco UBE) for selective filtering of outgoing provisional responses, including 180 - Alerting, and 183-Session In Progress responses. Selective filtering can be further based on the availability of media information in the received provisional response. For more information, see:
http://www.cisco.com/en/US/docs/ios/voice/cube/configuration/guide/vb-gw-sipsip.html
Configuring Cisco Unified Border Element for Unsupported Content Pass-through
This feature introduces the ability to configure the Cisco UBE to pass through end to end headers at a global or dial-peer level, that are not processed or understood in a SIP trunk to SIP trunk scenario. The pass-through functionality includes all or only a configured list of unsupported or optional SIP headers, and all unsupported content/MIME types. For more information, see:
http://www.cisco.com/en/US/docs/ios/voice/cube/configuration/guide/vb-gw-sipsip.html
Configurable SIP Parameters via DHCP
The Configurable SIP Parameters via DHCP feature allows a DHCP server to provide SIP parameters via a DHCP Client. These parameters are used for user registration and call routing.
Forced Update to SIP Parameters via DHCP
The Forced Update to SIP Parameters via DHCP feature allows a DHCP server to add or change SIP parameters for user registration and call routing via a DHCPFORCERENEW message. The DHCP client in Cisco IOS software is required to restart REGISTRATION and use the updated SIP parameters for subsequent SIP sessions.
DHCP FORCERENEW
This feature provides entity authentication and message authentication.
Cisco Unified CME 7.1
Cisco Unified CME 7.1 includes the following new features:
•
•
•
•
•
•
For more information see:
http://www.cisco.com/en/US/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm.html
Cisco Unified SRST 7.1
Cisco Unified SRST 7.1 adds support for:
•
•
For more information, see:
http://www.cisco.com/en/US/docs/voice_ip_comm/cusrst/feature/guide/srst71ft.html
New Features in Release 12.4T
For information regarding the features supported in Cisco IOS Release 12.4T, see the Cross-Platform Release Notes links at:
http://www.cisco.com/en/US/products/ps6441/prod_release_notes_list.html
Caveats
For general information on caveats and the bug toolkit, see About Cisco IOS Release Notes located at: http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html.
This section contains the following caveat information:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Open Caveats - Cisco IOS Release 12.4(22)YB8
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(22)YB8
CSCtj62596 Mismatched codecs cause one-way audio.Symptom One-way audio on certain call flows with SRTP.
Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(22)YB7
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(22)YB7
CSCtj15884 One way voice/incorrect SRTP key handling.Symptom One way voice when SRTP is used.
Conditions
Workaround
CSCsz72591 Router configured as a DHCP client crashes with crafted DHCP packet.Symptom A router crashes with an Address Error (load or instruction fetch) exception.
Conditions
Workaround
CSCsu47486 Cisco IOS Software configured with MGCP may reload.Symptom Cisco IOS Software configured with MGCP may reload.
Conditions
Workaround
CSCsw64971 NAT-Entry deletion fails in SNAT backup router for H.323 RAS traffic.Symptom NAT-Entry deletion fails in SNAT backup router for H.323 RAS traffic. Standby router also crashes if the Active interface is brought up.
Conditions
Workaround
CSCtb73450 L2TPv3: SCCRQ packets causes tunnel to reset after digest failure.Symptom Start-Control-Connection-Request (SCCRQ) packets may cause tunnel to reset after digest failure.
Conditions
Workaround
CSCtg41733 Memory leak on SIP UDP REGISTER Call Paths during fuzzing.Symptom Certain crafted packets may cause memory leak in the device in very rare circumstances.
Conditions
Workaround
CSCti79442 Mismatched RTP payload type causes one way audio.Symptom One way voice
Conditions
Workaround
mgcp codec g711ulaw packetization-period 20CSCsz43987 IOS coredump when sending crafted packets.Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds for devices that must run SIP; however, mitigations are available to limit exposure to the vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-sip.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
Cisco Unified Communications Manager (CUCM) is affected by the vulnerabilities described in this advisory. Two separate Cisco Security Advisories have been published to disclose the vulnerabilities that affect the Cisco Unified Communications Manager at the following locations:
http://www.cisco.com/warp/public/707/cisco-sa-20090826-cucm.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20100922-cucmsip.shtml
CSCtc73759 H323 gatekeeper crashing upon receipt of specific traffic.The H.323 implementation in Cisco IOS Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds to mitigate these vulnerabilities other than disabling H.323 on the vulnerable device.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-h323.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCtd33567 Traceback seen when receiving crafted H.323 packets.The H.323 implementation in Cisco IOS Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds to mitigate these vulnerabilities other than disabling H.323 on the vulnerable device.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-h323.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCtd86472 NAT H.225.0 DoS Vulnerability.The Cisco IOS Software Network Address Translation functionality contains three denial of service (DoS) vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol (SIP)
packets, the second vulnerability in the translation of H.323 packets and the third vulnerability is in
the translation of H.225.0 call signaling for H.323 packets.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-nat.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one
advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the
releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the
following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published
on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security
Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCtf17624 NAT SIP: Crash at ipnat_clear_sd.The Cisco IOS Software Network Address Translation functionality contains three denial of service (DoS) vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol (SIP)
packets, the second vulnerability in the translation of H.323 packets and the third vulnerability is in
the translation of H.225.0 call signaling for H.323 packets.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-nat.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one
advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the
releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the
following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published
on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security
Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCtf72678 IOS Coredump Generated when sending crafted packets.Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds for devices that must run SIP; however, mitigations are available to limit exposure to the vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-sip.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
Cisco Unified Communications Manager (CUCM) is affected by the vulnerabilities described in this advisory. Two separate Cisco Security Advisories have been published to disclose the vulnerabilities that affect the Cisco Unified Communications Manager at the following locations:
http://www.cisco.com/warp/public/707/cisco-sa-20090826-cucm.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20100922-cucmsip.shtml
CSCtf91428 NAT H.323: router crashes in IP Input [in LL_Get ].The Cisco IOS Software Network Address Translation functionality contains three denial of service (DoS) vulnerabilities. The first vulnerability is in the translation of Session Initiation Protocol (SIP) packets, the second vulnerability in the translation of H.323 packets and the third vulnerability is in the translation of H.225.0 call signaling for H.323 packets.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-nat.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security
Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
Open Caveats - Cisco IOS Release 12.4(22)YB6
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(22)YB6
CSCte14603A vulnerability in the Internet Group Management Protocol (IGMP) version 3 implementation of Cisco IOS Software and Cisco IOS XE Software allows a remote unauthenticated attacker to cause a reload of an affected device. Repeated attempts to exploit this vulnerability could result in a sustained denial of service (DoS) condition. Cisco has released free software updates that address this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100922-igmp.shtml.
Note: The September 22, 2010, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. Five of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses vulnerabilities in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. The table at the following URL lists releases that correct all Cisco IOS Software vulnerabilities that have been published on September 22, 2010, or earlier:
http://www.cisco.com/warp/public/707/cisco-sa-20100922-bundle.shtml
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html
CSCta45116 Eap-fast authentication fails between router and client.Symptom EAP-FAST authentication fails between router and client (PC or laptop running ADU).
Conditions
Workaround
CSCsz45567 Cisco IOS Software Crafted LDP Packet Vulnerability.A device running Cisco IOS Software, Cisco IOS XE Software, or Cisco IOS XR
Software is vulnerable to a remote denial of service condition if it is
configured for Multiprotocol Label Switching (MPLS) and has support for Label
Distribution Protocol (LDP).
A crafted LDP UDP packet can cause an affected device running Cisco IOSSoftware or Cisco IOS XE Software to reload. On devices running affected
versions of Cisco IOS XR Software, such packets can cause the device to restart
the mpls_ldp process.
A system is vulnerable if configured with either LDP or Tag DistributionProtocol (TDP).
Cisco has released free software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are available.
This advisory is posted at Cisco Security Advisory: Cisco IOS Software Multiprotocol Label Switching Packet Vulnerability.CSCsq86120 Scheme CLI Option is missing after selecting Random cantact under sip-ua.Symptom Not able to use "scheme" sub cli under "sip-ua" registrar CLI, if any other option is selected first.
Conditions
Workaround
CSCsy09250 Bus error and crash when crafted packet is sent to device.Skinny Client Control Protocol (SCCP) crafted messages may cause a Cisco IOS device that is configured with the Network Address Translation (NAT) SCCP Fragmentation Support feature to reload.
Cisco has released free software updates that address this vulnerability. A workaround that mitigates this vulnerability is available.
This advisory is posted at Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability.
CSCsz45567 Cisco IOS Software Crafted LDP Packet Vulnerability.A device running Cisco IOS Software, Cisco IOS XE Software, or Cisco IOS XR
Software is vulnerable to a remote denial of service condition if it is
configured for Multiprotocol Label Switching (MPLS) and has support for Label
Distribution Protocol (LDP).
A crafted LDP UDP packet can cause an affected device running Cisco IOS
Software or Cisco IOS XE Software to reload. On devices running affected
versions of Cisco IOS XR Software, such packets can cause the device to restart
the mpls_ldp process.
A system is vulnerable if configured with either LDP or Tag Distribution
Protocol (TDP).
Cisco has released free software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are available.
This advisory is posted at Cisco Security Advisory: Cisco IOS Software Multiprotocol Label Switching Packet Vulnerability.
CSCta45116 Eap-fast authentication fails between router and client.Symptom EAP-FAST authentication fails between router and client (PC or laptop running ADU).
Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(22)YB5
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(22)YB5
CSCsz75186Cisco IOS Software is affected by a denial of service vulnerability that may allow a remote unauthenticated attacker to cause an affected device to reload or hang. The vulnerability may be triggered by a TCP segment containing crafted TCP options that is received during the TCP session establishment phase. In addition to specific, crafted TCP options, the device must have a special configuration to be affected by this vulnerability.
Cisco has released free software updates that address this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-tcp.shtml.
CSCsz48680Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled. Remote code execution may also be possible.
Cisco has released free software updates that address these vulnerabilities. For devices that must run SIP there are no workarounds; however, mitigations are available to limit exposure of the vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-sip.shtml.
CSCta19962The H.323 implementation in Cisco IOS Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds to mitigate these vulnerabilities other than disabling H.323 on the vulnerable device if H.323 is not required.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-h323.shtml
CSCtb93855The H.323 implementation in Cisco IOS Software contains two vulnerabilities that may be exploited remotely to cause a denial of service (DoS) condition on a device that is running a vulnerable version of Cisco IOS Software.
Cisco has released free software updates that address these vulnerabilities. There are no workarounds to mitigate these vulnerabilities other than disabling H.323 on the vulnerable device if H.323 is not required.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-h323.shtml
CSCsz48614Devices running Cisco IOS Software and configured for Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) operation are affected by two denial of service vulnerabilities that may result in a device reload if successfully exploited. The vulnerabilities are triggered when the Cisco IOS device processes specific, malformed Skinny Call Control Protocol (SCCP) messages.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-cucme.shtml.
CSCtd63474 MGCP GW ACK in G729 codec but streaming in G711.Symptom GW is streaming with the wrong codec g711 and IP phone is expecting g729.
Workaround
CSCsh70718 RIP is not sending or processing updates via the interface.Symptom RIP is not sending or processing updates via the interface.
Conditions
shut the interface -> remove ip address from the interface -> no shut --> remove the network from rip --> reconfigure the ip address on the interface --> no shut -> reconfigure the network under router rip.
Workaround
CSCsm47881 "CCE match" string not seen in the debug messages.Symptom "CCE match" string is not found in the debug messages.
Conditions
Workaround
CSCsu45780 "dsxpnm_gt96k_abort_tx_mpsc:Aborting Tx mpsc failed" error with NM-1T3/E3.Symptom The following error message is displayed if the DSU bandwidth is configured with a value other than the default of 44210 for T3 on an NM-1T3/E3 module:
dsxpnm_gt96k_abort_tx_mpsc:Aborting Tx mpsc failedConditions
Workaround
CSCsv01474 ip rip advertise command lost after interface flap/clear ip route.Symptom The ip rip advertise command might be lost from the interface.
Conditions
•
•
•
Workaround
CSCsv12067 "fax protocol t38" CLI displays twice in sh run under "dial-peer".Symptom Configuring "fax protocol t38" under "dial-peer" displays the entry twice in sh run.
Conditions
Workaround
CSCsv36769 CUBE/ GK cannot handle multiple BRQ/BCF when HD video is enabled.Symptom When HD video is enabled through Codium conferencing bridge, Codium sends multiple BRQ/BCF, CUBE is not able to handle it and is not able to open H245 channels subsequently.
HD polycom =====CUBE/GK======Codium===HD Polycom
Workaround
CSCsv62323 UC520, C880, VG202, VG204, IAD2435-8FXS, and C1861 routers vulnerability.Symptom The Fast Ethernet driver code may cause several errors. The observed symptoms of this issue include:
•
•
Conditions
•
interface BVI1 ip address 192.168.0.1 255.255.255.0
•
pseudowire-class l2tpv3 encapsulation l2tpv3 ip local interface Loopback0 ! interface Loopback0 ip address 192.168.10.1 255.255.255.255 ! interface FastEthernet0 no ip address xconnect 192.168.0.1 1 pw-class l2tpv3
Workaround
Further Problem Description: The issue is caused by an underlying driver vulnerability that exists in the UC520, Cisco 880 series, Cisco VG202, Cisco VG204, IAD2435-8FXS, and Cisco 1861 routers. No other model of Cisco routers or switches are known to be affected by this issue. The symptoms can be triggered with specific TCP sequences.
CSCsw67252 T.38 re-invite using rtp-nte when t38 and rtp-nte are both enabled.Symptom When RTP-NTE and T.38 are both enabled, the re-invite for T.38 incorrectly includes Session Description Protocol (SDP) with RTP-NTE.
Conditions
Workaround
CSCsx20984 Router reloads with bus error and no stack trace.Symptom Router reloads with a bus error and no tracebacks.
Conditions
Workaround
CSCsx97093 AAA Fails to parse RADIUS callback string ending in =.Symptom When trying to parse a callback string attribute in an ACCESS-ACCEPT, which has no callback value, RADIUS/DECODE fails:
*Feb 24 16:04:22.252: RADIUS: Received from id 1645/68 10.48.88.121:19645, Access-Accept, len 52 *Feb 24 16:04:22.252: RADIUS: authenticator 49 7C 52 33 F8 BF 21 49 - 6C EF EC 2C 6D 09 92 BD *Feb 24 16:04:22.252: RADIUS: Vendor, Cisco [26] 32 *Feb 24 16:04:22.252: RADIUS: Cisco AVpair [1] 26 "lcp:callback-dialstring=" *Feb 24 16:04:22.252: RADIUS(00000000): Received from id 1645/68 *Feb 24 16:04:22.252: RADIUS/DECODE: convert VSA string; FAIL *Feb 24 16:04:22.252: RADIUS/DECODE: cisco VSA type 1; FAIL *Feb 24 16:04:22.252: RADIUS/DECODE: VSA; FAIL *Feb 24 16:04:22.252: RADIUS/DECODE: decoder; FAIL *Feb 24 16:04:22.252: RADIUS/DECODE: attribute Vendor-Specific; FAIL *Feb 24 16:04:22.252: RADIUS/DECODE: parse response op decode; FAILConditions
Workaround
CSCsz69033 SIP DO-DO Video calls are failing on CUBE.See CSCtc82324.
CSCta22394 ip rip initial-delay doesnt work as expected.Symptom When RIP is configured between Cisco and third party devices, the RIP process ignores delay and keeps sending messages out even though the ip rip initial-delay xx command is configured.
Conditions
Workaround
CSCta26716 Fix stdarg.h/stddef.h.CSCta63555 CME crash after submitting SNR number change menu from EM phone.Symptom Router crashes when running with Cisco IOS Release 12.4(24)T or later.
Conditions
Workaround
CSCtb16522 DDNS HTTP packet has password limited to 15 characters.Symptom DDNS password is limited to 15 characters when using HTTP.
Conditions
Workaround
CSCtb34444 RTP to SRTP call fails via CUBE.Symptom Non-secure to secure call fails via CUBE.
Conditions
Workaround
CSCtb66963 Comma in CC-Diversion/Diversion/CC-Redirect Header causes 400 Bad RequestSymptom SIP call from a call forwarded phone to a Cisco IOS VoIP gateway is rejected when INVITE contains a comma in the Diversion Header.
Conditions
---- Received: INVITE sip:15551111111@10.1.134.116:5070 SIP/2.0 Via: SIP/2.0/UDP 172.27.128.130:5070;branch=z9hG4bK1432a4c26c3 Remote-Party-ID: <sip:5555555555@172.27.128.130>;party=calling;screen=yes;privacy=off From: <sip:5555555555@172.27.128.130>;tag=c565ee9d-7f0b-49dd-a1d9-3843c1b221cc-53184879? To: <sip:15551111111@10.1.134.116> Date: Sat, 29 Aug 2009 08:06:56 GMT Call-ID: e9edd580-a981e1a0-109-82801bac@172.27.128.130 Supported: timer,replaces Min-SE: 1800 User-Agent: Cisco-CCM5.1 Allow: INVITE, OPTIONS, INFO, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY CSeq: 101 INVITE Contact: <sip:5555555555@172.27.128.130:5070> Expires: 180 Allow-Events: presence Session-Expires: 1800 Diversion: "Smith, John" <sip:87007@172.27.128.130>;reason=unconditional;privacy=off;screen=no Max-Forwards: 7 Content-Type: application/sdp Content-Length: 214 ----The IOS gateway responds back with a:
---- Sent: SIP/2.0 400 Bad Request - 'Malformed CC-Diversion/Diversion/CC-Redirect Header' Reason: Q.850;cause=100 From: <sip:5555555555@172.27.128.130>;tag=c565ee9d-7f0b-49dd-a1d9-3843c1b221cc-53184879 Content-Length: 0 To: <sip:15551111111@10.1.134.116>;tag=B8C0430-6C Call-ID: e9edd580-a981e1a0-109-82801bac@172.27.128.130 Via: SIP/2.0/UDP 172.27.128.130:5070;branch=z9hG4bK1432a4c26c3 CSeq: 101 INVITE ----Workaround
CSCtb70547 SIP GW signaling over TLS transport is unavailable.Symptom The "Cisco IOS SIP Gateway Signaling Support Over TLS Transport" feature introduced in IOS 12.4(6)T is not configurable on the VG224 or IAD2430 platforms.
Conditions
The affected feature sets are:
VG224: IP SUBSET/IPSEC 64 BIT/VOICE (vg224-i6k9s-mz) IAD2430: IP SUBSET/IPSEC 64BIT/FW/VOICE (c2430-i6k9o3s-mz)
The IAD2431 and IAD2432 are not affected by this issue, and use the following IOS feature set:
IAD2431/IAD2432: IP PLUS/IPSEC 64BIT/FW/VOICE (c2430-ik9o3s-mz)
Workaround
CSCtb74251 On hook dialing did not work on 7911 SCCP Phone.Symptom
1.
2.
3.
Workaround
CSCtb78700 % Line 4 not available for clearing [OK].CSCtc42058 SIP headers generated by TclIVR are not included in outgoing SIP INVITE.Symptom SIP header AVList pairs passed from the Tcl/IVR layer are ignored in SIP-SIP configuration.
Conditions
Workaround
CSCtc76889 Fix for CSCsv36769 not integrated in 12.4(22)T1 and 12.4(22)YB4 IOS.Symptom CUBE/GK is not able to handle multiple BRQ/BCF requests/responses in 12.4(22)T1 and 12.4(22)YB4 IOS. The fix for CSCsv36769 was supposed to be integrated in these releases but this integration with the above IOS did not take place.
Conditions
Workaround
CSCtc80306 CME system message disappears from 7940 7960 display.Symptom A Cisco 7940 or a 7960 IP Phone registered to a Cisco Unified Callmanager Express system may lose its "system message" (default is "Your current options") intermittently for a period of 5 seconds to 45 seconds.
Conditions
1.
2.
3.
4.
5.
Workaround
CSCtd03857 Called Name (Forward To) incorrect for call to CFA phone, at alerting.Symptom Called Name (Forward to) is incorrect for call to CFA phone, at alerting stage of call.
Conditions
A--Calls-->B--CFA-->C
Workaround
CSCtd33994 Consult Transfer Scenario is Failing.Symptom Consult transfer fails across SIP trunk.
Conditions
Workaround
CSCtd48917 http_get on filesystem fails for files greater than 2048 bytes.Open Caveats - Cisco IOS Release 12.4(22)YB4
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(22)YB4
CSCsz89904Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device when SIP operation is enabled. Remote code execution may also be possible.
Cisco has released free software updates that address these vulnerabilities. For devices that must run SIP there are no workarounds; however, mitigations are available to limit exposure of the vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-sip.shtml.
CSCsz49741Devices running Cisco IOS Software and configured for Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) operation are affected by two denial of service vulnerabilities that may result in a device reload if successfully exploited. The vulnerabilities are triggered when the Cisco IOS device processes specific, malformed Skinny Call Control Protocol (SCCP) messages.
Cisco has released free software updates that address these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20100324-cucme.shtml
CSCsu70214A vulnerability exists in Cisco IOS software where an unauthenticated attacker could bypass access control policies when the Object Groups for Access Control Lists (ACLs) feature is used. Cisco has released free software updates that address this vulnerability. There are no workarounds for this vulnerability other than disabling the Object Groups for ACLs feature. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-acl.shtml.
CSCsv48603A vulnerability exists in Cisco IOS software where an unauthenticated attacker could bypass access control policies when the Object Groups for Access Control Lists (ACLs) feature is used. Cisco has released free software updates that address this vulnerability. There are no workarounds for this vulnerability other than disabling the Object Groups for ACLs feature. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-acl.shtml.
CSCsx07114A vulnerability exists in Cisco IOS software where an unauthenticated attacker could bypass access control policies when the Object Groups for Access Control Lists (ACLs) feature is used. Cisco has released free software updates that address this vulnerability. There are no workarounds for this vulnerability other than disabling the Object Groups for ACLs feature. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-acl.shtml.
CSCsu50252A vulnerability exists in Cisco IOS software where an unauthenticated attacker could bypass access control policies when the Object Groups for Access Control Lists (ACLs) feature is used. Cisco has released free software updates that address this vulnerability. There are no workarounds for this vulnerability other than disabling the Object Groups for ACLs feature. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-acl.shtml.
CSCsy54122A vulnerability exists in Cisco IOS software where an unauthenticated attacker could bypass access control policies when the Object Groups for Access Control Lists (ACLs) feature is used. Cisco has released free software updates that address this vulnerability. There are no workarounds for this vulnerability other than disabling the Object Groups for ACLs feature. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-acl.shtml.
CSCsy15227Cisco IOS Software configured with Authentication Proxy for HTTP(S), Web Authentication or the consent feature, contains a vulnerability that may allow an unauthenticated session to bypass the authentication proxy server or bypass the consent webpage.
There are no workarounds that mitigate this vulnerability.
This advisory is posted at the following link:
http://www.cisco.com/warp/public/707/cisco-sa-20090923-auth-proxy.shtml
CSCsz38104The H.323 implementation in Cisco IOS Software contains a vulnerability that can be exploited remotely to cause a device that is running Cisco IOS Software to reload. Cisco has released free software updates that address this vulnerability. There are no workarounds to mitigate the vulnerability apart from disabling H.323 if the device that is running Cisco IOS Software does not need to run H.323 for VoIP services. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-h323.shtml.
CSCsr18691Cisco IOS devices that are configured with Cisco IOS Zone-Based Policy Firewall Session Initiation Protocol (SIP) inspection are vulnerable to denial of service (DoS) attacks when processing a specific SIP transit packet. Exploitation of the vulnerability could result in a reload of the affected device.
Cisco has released free software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are available within the workarounds section of the posted advisory.
This advisory is posted at the following link:
http://www.cisco.com/warp/public/707/cisco-sa-20090923-ios-fw.shtml
CSCsx70889Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding.
Cisco has released free software updates that address this vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-tunnels.shtml.
CSCsq01966 FAX with G711 RE-INVITE fails.Symptom Fax call initiated as T.38 and attempts to fallback G711 fails.
Conditions
Note: if CUBE is configured for T.38 call fax is successful.
CSCsr41631 SSLVPN does not interoperate with IP features - FW, NAT, and PBR.Symptom Any Connect client connecting to a Cisco ISR router that is running Cisco IOS Release 12.4(20)T with hardware encryption and CEF enabled, is unable to reach the inside interface IP address but can communicate with devices behind the router.
Conditions
Workaround
CSCsr88058 Multicast stops when ingress netflow is configured.Symptom Multicast stops flowing through the dot1q enabled interfaces on the router. This is also seen for non dot1q interfaces with 12.4(20)T.
Conditions
This is also seen in 12.4(20)T Advanced IP Services feature set when the incoming interface for (S,G) has IP flow ingress configured on it.
Workaround
1.
2.
CSCsu00313 SIP SRTP call flow fails through IP-IP GW.Symptom SRTP call fails through the IP-IP gateway with SIP end points.
Conditions
Workaround
CSCsu42156 Call threshold command behaves differently when GK is used.Symptom The call threshold command behaves differently when GK is used. It allows more calls then expected.
Conditions
Workaround
•
Symptom Agent goes reserve, caller hears ringback, and does not get connected to agent.
Conditions
Record-Route in CUPS is turned off.
Workaround
CSCsu78975 Crash seen @adj_switch_ipv4_generic_les on 38xx router.Symptom Crash seen @adj_switch_ipv4_generic_les on 38xx router.
Conditions
Workaround
CSCsv36769 CUBE/GK cannot handle multiple BRQ/BCF when HD video is enabled.Symptom When HD video is enabled through Codium conferencing bridge, Codium sends multiple BRQ/BCF, the CUBE is not able to handle it and subsequently is not able to open H245 channels.
Conditions
Workaround
CSCsv47202 CUBE up-speed to G711 fax fails when codec filtering is applied.Symptom Codec filtering is configured on the CUBE for SIP-SIP call flows. After the initial call is established with G729 codec and fax tone is detected, upspeed to G711 codec does not work and the fax call fails.
Conditions
Workaround
CSCsv52332 Deleting FW and then NAT causes UC500 to crash.Symptom IOS router may reload when deleting QoS policy from a router with NAT configured on the same interface and in the same direction.
Conditions
Workaround
CSCsw51214 Basic SRTP call fails through IPIPGW.Symptom A Secure Real-Time Transfer Protocol (SRTP) call might fail through a Cisco Multiservice IP-to-IP Gateway (IPIPGW).
Conditions
Workaround
CSCsw64933 "&" amp sign in VXML script cause TTS to stop working.Symptom VXML gateway might stop providing audio prompts to caller.
Conditions
Workaround
CSCsw65430 Basic call is failing for G726 codec for DO-->SS.Symptom Calls fail when G726 codec is used in SS-DO-SS call scenario.
Conditions
Workaround
CSCsw87515 No media in Alert Transfer with two CUBEs.Symptom Consult Transfer/Alert Transfer fails.
Conditions
Workaround
CSCsx55878 PVC goes to inactive status when vbr-nrt traffic class is applied in an 878.Symptom In an 878 router, the PVC remains in inactive state when VBR-NRT is applied for that particular PVC. The IOS version where this is seen is 12.4(22)T.
Conditions
Workaround
CSCsx72423 After upgrade, mgcp_parse_v110_asynch_parms is seen in the log.Symptom Logging buffer is overloaded with mgcp_parse_v110_asynch_parms messages. No calls are failed.
Conditions
Workaround
CSCsy15926 Unsupported features should be removed from the 860 and 880 series.Symptom Some unsupported features might be available for configuration on the 860 and 880 platforms. See the product datasheets for a list of supported features on the 860 and 880 platforms.
860 datasheet: http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_461543.html
880 datasheet: http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_459542.html
Workaround
CSCsy29940 Unable to inspect any protocol in self zone.Symptom Unable to configure inspect for any protocol in self zone.
Conditions
Workaround
CSCsy84474 OLC-ACK is not forwarded when Connect is received between OLC and OLC-ACK.Symptom In an H323 IP-to-IP Gateway (IPIPGW), during call setup when the OLC-ACK is received after the connect message, the call is not completed and the return OLC-ACK is not forwarded by the IPIPGW. The issue is sporadic and does not occur all the time.
Conditions
Workaround
CSCsz17680 G/W Crashes when an in-dialog Refer is sent in a 3PCC OOD-R CallFlow.Symptom Crash is seen in 3PCC OOD-R CallFlow when an in-dialog Refer is sent.
Conditions
Workaround
CSCsz24692 c881 and c89x Wan FE stops pinging when Tx Ring becomes full.Symptom The FE wan might stop transmission.
Conditions
Workaround
Further Problem Description: The transmission (tx) stops since the tx buffer descriptor (bd) ring is full. When it occurs, show controller ... will show that the tx bd ring has 64 used entries and there are no free entries for new frames.
CSCsz29066 BGP is not supported with the 880 Advanced Security Feature set.Symptom BGP is not supported by the Cisco 880 Advanced Security Feature set as per the datasheet at http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_459542.html
This feature is configurable using the Advanced Security Feature set.
Conditions
Workaround
CSCsz33415 Display-logout message stays on the phone after removing it from the config.Symptom Display-logout messages stay on the screen of the phone after removing it from the configuration of the hunt group (ephone-hunt).
Conditions
Workaround
Further Problem Description: Even though the messages stay on the screen, the hunt group works fine and phones are able to log in and log out of the hunt-group. Also, this issue is not seen when the display-logout message is removed when the phones are still logged into the hunt-group.
CSCsz45855 CUBE not responding to reINVITES received while call transfer is in progress.Symptom Cisco Unified Border Element (CUBE) ignores reINVITEs from Cisco Customer Voice Portal (CVP).
Conditions
Workaround
CSCsz45898 SIP-SIP CUBE does not forward 200ok for session refresh.Symptom SIP Provider -[sip]- CUBE -[sip]- CUCM
CUBE does not respond to the second reINVITE to refresh the session causing the session refresher to timeout and drop the call.
Conditions
Workaround
CSCsz48286 Crash due to memory block overrun of 1 byte.Symptom A router configured for VOIP might crash due to memory corruption when performing a consultation transfer. A call transfer is considered consultative when the transferring parties either connect the caller to a ringing phone (ringback heard) or speak with the third party before connecting the caller to the third party.
Conditions
Workaround
Further Problem Description: The space in memory is allocated incorrectly. When a large number is stored, memory corruption occurs and the device crashes.
CSCsz58813 UC500: %PQII_PRO_FE-4-QUEUE_FULL - IP traffic stops working.Symptom Cisco UC500 console displays the following log(s) constantly:
%PQII_PRO_FE-4-QUEUE_FULL: Ethernet Switch Module transmit queue is full.
Phones and hosts connected to the UC can not retrieve IP addresses via DHCP.
Conditions
Workaround
CSCsz63400 Memory allocated on a CUBE leaks on receiving a REFER message.Symptom Memory leaks are found on a CUBE when it receives a REFER message.
Conditions
Workaround
CSCsz74629 Delay in propagation of interface link state is down.Symptom Delay in propagation of interface link state down can be observed. Link failure can be detected with huge delay once the other end of the link gets disconnected.
Conditions
Workaround
CSCsz81308 c800 router hangs with 'TLB Miss exception' error on send break.Symptom Using send break causes router to display `TLB Miss exception' error and hang indefinitely.
Conditions
Workaround
CSCsz84392 UC500 does not report FRU information for certain VIC modules.Symptom When certain VIC modules are installed in a UC500, the UC500 does not correctly report the Product (FRU) Number in the show diag output. If the UC500 is managed using the command line, this problem is cosmetic in nature, but if it is managed by CCA, then the VIC module is not detected.
Conditions
Workaround
CSCsz89904 CUBE crashes after codenomicon runs with Replaces header tests.Symptom Crash after invalid Replaces header is received.
Conditions
Workaround
CSCta14362 Only one notification was sent after multiple OMA-DM sessions completed.Symptom Only one notification is received when multiple OMA-DM sessions are completed.
Conditions
CSCta24094 Unsupported features should be removed from advipservice of 880 series.Symptom Some unsupported features may be available for configuration on advipservices image of 880 platforms.
Workaround
860 datasheet: http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_461543.html
880 datasheet: http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_459542.html
CSCta30800 On issuing clear int atm 0 Rx path goes down, but Tx path works fine.Symptom Rx path hangs (i.e no Rx traffic) on C88x with ADSL interface.
Conditions
1.
2.
3.
Workaround
CSCsz71348 Port MIrroring Session stops working after a while.Symptom UC500 port mirroring stops forwarding traffic to the destination port after a period of time.
Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(22)YB3
There are no no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(22)YB3
CSCta78314 C887, C867, and C886 platforms minimum rommon version for boot up.Symptom C887, C867, and C886 platforms require minimum rommon version 12.4(22r)YB3. Platforms shipped from manufacturing might be running with upgrade rommon with this version. If this platform is booted with read-only rommon, the unit will not function properly.
Conditions
Workaround
CSCsz85550 license requested when entering card type T1 (VWIC-2/MFT1-T1/E1) uc520.Symptom A UC500 running 12.4(22)YB1 (IOS in Early Adopter package 7.1.1) and with a T1/E1 VIC installed, will experience the following problem when trying to configure the Voice Card:
UC520(config)#card type t1 0 2
To configure card type command install HWIC T1E1 license first.
Please use:license install <filename>Workaround
http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
CSCsz53057 Alignment errors seen with l2tpv3 and HWIC-3G.Symptom The following syslogs may be seen reported by a router:
May 5 18:54:22: %ALIGN-3-CORRECT: Alignment correction made at 0x4093A698 read
ing 0x3D2E2AAF
May 5 18:54:22: %ALIGN-3-TRACE: -Traceback= 0x4093A698 0x4092F3A8 0x40930EE8 0x41D0821C 0x41D09228 0x41D08310 0x41D09228 0x41D09940Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(22)YB2
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(22)YB2
CSCsk41593 PAK_SUBBLOCK error found when pinging with >1500-byte over cellular inter.Symptom The following error occurs when a ping packet is sent or received:
PAK_SUBBLOCK_ALREADY: 2 -Process= "IP Input"Conditions
Workaround
CSCsl66558 Traceback occurred in the AS5400 @ ccsip_call_setup_request.Symptom Traceback is seen in the AS5400 @ ccsip_call_setup_request.
Conditions
Workaround
CSCsm21604 Backward compatibility for codec g726r32 not working.Symptom MGCP gateway does not allow backward compatibility with g726r32 to use static payload and the call is negotiating to doec g711ulaw.
Conditions
Workaround
CSCso59961 c3825 encounters traceback @ ipsendnet_internal.Symptom Traceback seen when testing with ipip gateway supplementary services.
Conditions
Workaround
CSCsq44101 Policy with match protocol and pass action cannot attach to self-zone.Symptom When applying service-policy to firewall zone-pair containing self-zone, the following error is seen:
%Protocol configured in class-map <class name> cannot be configured for the self zone. Please remove the protocol and retryConditions
Workaround
CSCsu10610 Path confirmation fails after testing mgcp caller id feature.Symptom Path confirmation may fail after testing mgcp caller id feature on gateways running with Cisco IOS version 12.4(21.13) or later.
Conditions
Workaround
CSCsu32069 7200 router crash after call-home config to send HTTPS request.Symptom The router crashes when call-home tries to establish a secure HTTP connection to a server.
Conditions
–
Example:destination address httphttps://172.17.46.17/its/service/oddce/services/DDCEService–
Workaround
CSCsu36827 CUE clock does not sync up with CME using NTPSymptom The CUE clock does not synch up with CME using NTP.
Conditions
Workaround
CSCsu72242 ccm registration fails with mgcp srtp package-capability configured.Symptom With the mgcp package-capability srst-package command configured on a CallManager/CUCM-controlled gateway, the gateway will download its configuration but will be unable to successfully register any analog or digital trunks.
Adding the command after the gateway has successfully registered to the CUCM will keep the trunks registered but all calls to the gateway will fail.
Conditions
Workaround
Further Problem Description:
When registering its capabilities with the CUCM, the MGCP sends the following:
09/22/2008 12:53:45.436 CCM|MGCPHandler received msg from: 192.168.1.2 200 47 X+SRTP/A: "AE, a: PCMU;PCMA;G.729;G.729a |<CLID::StandAloneCluster><NID::192.168.1.15><CT::1,100,134,1.78><IP::192.168.1.2><DEV::><LVL::Significant><MASK::2000> 09/22/2008 12:53:45.436 CCM|MGCPHandler PARSE errorCode=0 for buffer: 200 47 X+SRTP/A: "AE, a: PCMU;PCMA;G.729;G.729aA successful/correct syntax of the message should look like:
03/08/2005 11:52:54.792 CCM|MGCPHandler send msg SUCCESSFULLY to: 192.168.1.2 AUEP 50 AALN/S1/SU0/0@nw046b-1-2621xm.xyz.com MGCP 0.1 F: X+SRTP/A |<CLID::DSL2-CM126-CM1-Cluster><NID::10.89.79.2><CT::1,100,67,1.92987><IP::192.168.1.2><DEV::AALN/S1/SU0@nw046b-1-2621xm.xyz.com> 03/08/2005 11:52:54.792 CCM|MGCPHandler received msg from: 192.168.1.2 200 50 X+SRTP/A: "AES_CM_128_HMAC_SHA1_32", a: PCMU;PCMA;G.729a;G.729CSCsu93802 792X displaying wrong priority CME night service notify messages.Symptom The 7921 and 7925 do not always display the
Night Service XXXXnotify message when night service is being triggered on CME. InsteadNight Service Activemay always be displayed or displayed for a long period of time.Conditions
Workaround
CSCsv13562 Router crashes due to double free of ccb->call_info.origRedirectNumber.Symptom The router crashes because of double free scenarios. While handling a 302 response, ccb->call_info.origRedirectNumber attempts a double free because of signaling forking. The following message appears in the crashinfo file:
%SYS-3-CPUHOG: Task is running for (2004)msecs, more than (2000)msecs (2/1),process = CCSIP_SPI_CONTROL.Conditions
Workaround
CSCsv55838 system crash after inserting bad modem.Symptom System crash after show cellular 0 for a bad modem.
Conditions
Workaround
CSCsv76110 Attaching service policy of self-zone policy-map failure to the zone-pair.Symptom Attaching service policy of self-zone policy-map failure to the zone-pair.
Conditions
Workaround
CSCsv96709 CME Join softkey does not conference on overlay DN with huntstop channel.Symptom Unable to join 2 calls using the Join softkey - get
Can not complete conference.Conditions
Workaround
CSCsv96757 steelers uut crashing while pumping traffic after config random detect.Symptom After configuring random detect (WRED) on the ATM interface on a Cisco 888 Integrated Services router and traffic is sent through the VLAN input interface to the ATM interface, the router will display a continuous maclloc error. Additionally, the router crashes within 10-20 seconds after the traffic is stopped.
Conditions
Workaround
CSCsw19872 Anonymous from header translated when translation rules are used.Symptom Translation rules wrongly translate SIP from header when it is set to Anonymous in the incoming INVITE to the CUBE.
Conditions
Workaround
CSCsw24542 Crash after DATACORRUPTION-1-DATAINCONSISTENCY + ALIGN-1-FATAL to isdnSymptom A router may crash due to a bus error after displaying the following error messages:
%DATACORRUPTION-1-DATAINCONSISTENCY: copy error, %ALIGN-1-FATAL: Illegal access to a low address < isdn function decoded>Conditions
Workaround
Further Problem Description: When copying the ISDN incoming call number for an incoming call from Layer2, the length of the call number was somehow exceeding the maximum allocated buffer size (80). PBX has pumped a Layer2 information frame with call number exceeding the maximum number length limit. It leads to memory corruption and a crash.
CSCsw49855 Ping stops working during speed/duplex testing.Symptom IP connectivity fails for the interface following extended pings from FastEthernet interface.
show interface will indicate that the Output queue is wedged:
Output queue: 40/40 (size/max)No more packets are switched out of the interface until the interface is cleared with the clear interface fast<#> command.
Conditions
Workaround
CSCsw50802 Smart Init Fails to recognize HWICs with smart cookie.Symptom No extra I/O memory is allocated for some HWICs.
Conditions
Workaround
CSCsw51322 Polish locale does not work on 7906.Symptom Polish locale doesn't work on CME.
Conditions
Workaround
CSCsw75178 error.noresource event received while testing grammar scope in menu.Symptom Media forking request to dsp fails. The media forking feature used to send stream to ASR server will fail.
Conditions
CSCsw95072 CUCME: Blank Hlog button with Dutch locale,Symptom IP phone gets a blank HLOG button with Dutch locale on CallManager Express. The issue is not seen with the US locale.
Conditions
Workaround
CSCsx03096 CME non-system-defined user locale config ignored after reload.Symptom CME 7.0 configured with non-system-defined user locale via the user-locale command under telephony-service. The command takes effect when issued, however, it is ignored after the router is rebooted and has to be issued again.
Conditions
Workaround
Further Problem Description: The issue can be noticed after the router is reloaded and new phones are installed. They do not download the locale files. On the CME, the user locales configured can be verified via show telephony-service command. For example, if we have Polish locale configured in the following way:
telephony-service cnf-file location flash: cnf-file perphone user-locale 1 U1 load CME-locale-pl_PL-Polish-7.0.1.1.tarThe correct show telephony-service output related to user locale should be:
user-locale[0] US (This is the default user locale for this box) user-locale[1] U1 language Code pl_PL user-locale[2] US user-locale[3] US user-locale[4] USHowever, after the reboot we can see the following output:
user-locale[0] US (This is the default user locale for this box) user-locale[1] U1 language Code en user-locale[2] US user-locale[3] US user-locale[4] USCSCsx26736 Traceback with SNMPWalk on a sysDescr MIB Object.Symptom Traceback seen while accessing a MIB Object using SNMPwalk.
Conditions
Workaround
CSCsx33278 CFA being reenabled accidentally after turning on and off night service.Symptom Call forward all is being re-enabled on a dn after being removed.
Conditions
Workaround
CSCsx42387 Answer softkey dropping calls with CME on TNP phones with disableSpeaker.Symptom Hitting the "answer" soft key drops an incoming call.
Conditions
Workaround
CSCsx55861 C880: uut crashing while pvc comes up with auto qos voip configured.Symptom C880: uut crashing while pvc comes up with auto qos voip configured.
Conditions
Workaround
CSCsx66982 Router crashing when multiple pvcs are configured while pumping traffic.Symptom Router crashing when multiple pvcs are configured while pumping traffic.
Workaround
CSCsx67352 %DSLSAR-3-FAILSETUPVC: Interface ATM0, Failed to setup vc 23 (Cause: VCSymptom %DSLSAR-3-FAILSETUPVC: Interface ATM0, Failed to setup vc 23 (Cause: VC
Conditions
Workaround
•
Symptom Drop through option used to forward call to IP Phone from B-ACD script. If the IP Phone does not answer and the call is forward to VM, the call is dropped with recover on timer expiry.
Conditions
Workaround
CSCsy01207 CME 7975 shows only 34 speed dials for two 7915.Symptom The 7915 has page 1 and page 2 button so total 24 speed dials can be configured on each 7915. The first 7915 expansion module displays the 24 users, 12 on page 1 and 12 on page 2. The second 7915 expansion module displays only 10 on page 1 and none on page 2.
Conditions
Workaround
CSCsy03098 Remove unnecessary start media in whisper intercom setup.Symptom Internally, one extra startmedia was sent out by CME.
Conditions
Workaround
CSCsy05895 IPSEC performance drops when PoE card is installed on 890.Symptom c890 IPSEC performance drops when PoE card is installed in the router.
Conditions
Workaround
CSCsy13055 Cannot connect to DM with speed 920kbps.Symptom DM communication cannot be setup when configure speed is 920000.
Conditions
Workaround
CSCsy14411 Chunk Memory Leak at config_voice_register_dn_sharedln.Symptom Chunk Memory Leak is seen while unconfiguring SIP shared lines.
Conditions
Workaround
•
Acctinstead ofTransfer recallin 12.4(24)T.Symptom After a transfer recall, phones registered to CME will display
Acctinstead ofTransfer recall.Conditions
Workaround
CSCsy20149 VG224: Voice-port goes to transient unregister under SRST mode.Symptom STCAPP voice-port becomes transiently unregistered for approximately one minute in SRST mode.
Conditions
Workaround
CSCsy22826 VG224 sending incorrect ssType in 1+ node CUCM cluster.Symptom VG224 endpoint does not connect to callback destination, once the callback destination is idle.
Conditions
Workaround
Further Problem Description:
The activation of the callback is successful. What fails is when the callback destination becomes idle again and the VG224 endpoint gets notified (ring). After the VG224 endpoint goes offhook, the system should automatically connect to the Callback destination. This does not happen and VG224 endpoint gets silence.
CSCsy28087 STCAPP Dev Cntl type is not reset after no sccp / sccp and switchback.Symptom VG224 voice-ports have their device controller types stuck at SRST even after switchback to UCM.
Conditions
Workaround
Further Problem Description:
Normally, users in troubleshooting should perform no sccp/sccp as well as shut/no shut some voice-ports to resolve some serviceability issues. However, if only no sccp/sccp was used but shut/no shut voice-ports was not, then there will be state-mismatch between stcapp and sccpapp, and can result in stcapp voice-ports' device-controller-type stuck in SRST even after having successfully switchbacked to UCM/CCM.
CSCsy28758 Hlog softkey does not work properly with EM.Symptom HLog softkey stops working.
Conditions
–
–
Workaround
CSCsy32411 CME 7.x On hook transfer fails when call comes in ISDN.Workaround
CSCsy43948 Crash when mtu is 64 under atm int and ping ping <ip addr> is issued.Symptom When underlying exit interface of tunnel has a very low MTU, the tunnel's IP MTU gets set to a value less than IP header length. This causes a crash in fragmentation code.
Conditions
Workaround
CSCsy61209 Incorrect token found in H323 Connect message.Symptom An IP-to-IP gateway (IPIPGW), also called CUBE, is adding an incorrect token in the H225 connect message.
Conditions
Workaround
CSCsy72468 CME 7.x: SCCP IP phones display showsITSinstead of system message.Symptom IP phone display shows
ITSinstead of configured system message.Conditions
Workaround
CSCsy74664 CME with SNR does not generate ringback.Symptom No ringback heard by calling party when calling through ISDN trunk into Cisco Unified Communications Manager Express (CUCME).
Conditions
Call completes without issue but the ringback may not be heard by the calling party during the alerting stage.
Workaround
CSCsy75735 SNMP is not working with 5727 CDMA modem.Symptom Unable to query 3g MIB with the latest PI11 image.
Conditions
Workaround
CSCsy78634 Bad double commit happens for CSCsuxxxxx in some of the throttles.Symptom Traceback observed while configuring rel1xx require CLI.
Conditions
Workaround
CSCsy79893 The HLog out messages should not be overridden by system prompt.Symptom The system prompt may be shown during Hlog out.
Conditions
Workaround
CSCsy88059 Octo line: Second call gets dropped when the first call is put on hold.Symptom Calls drop when answering the second call on Octo lines with the `Hold' softkey.
Conditions
Workaround
CSCsy90652 SNR enabled ephone-dn does not provide ringback (and no voice path).Symptom Call from CCM phone via H323 trunk to CME ephone with SNR enabled does not provide ringback to CCM phone.
Conditions
Workaround
CSCsy96789 Lost DM connection at 920K with short packet traffic (200-300pps) on GSM.Symptom Lost DM connection a few minutes after bidirectional traffic started.
Conditions
Workaround
CSCsz01236 UBR+ pvc goes inactive when the MCR value is >0kbps but <32kbps.Symptom Failing to setup a vc with UBR+ service using MCR values less than the granularity used by an ATM driver.
Conditions
ubr+ 100 30Workaround
ubr+ 100 32CSCsz17418 IP SLA ethernet-monitor is missing in Steelers.Symptom Configuration command ip sla ethernet-monitor <number> is not supported.
Conditions
Workaround
CSCsq40088 3845 router reloads at rt_walktree_ap while unconfiguring ipv6.Symptom A Cisco 3845 router may crash when unconfiguring IPv6 nodes.
Conditions
Workaround
CSCsr25788 Output Drops on Gig/FE Interface when multicast traffic and NAT are enabled.Symptom Output drops can be observed on GE/FE interface on a Cisco 2800 router.
Conditions
Workaround
CSCsw82267 entPhysicalVendorType & entPhysicalSerialNum returns wrong SNMP value.Symptom entityMIB query for entPhysicalVendorType & entPhysicalSerialNum on c86x & c88x platforms returns wrong SNMP value.
Conditions
Workaround
PCB Serial Numbervalue of show diag output.CSCsw97262 NAM does not replicate packets coming from IP phone.Symptom CLI command analysis-module not replicating packets routed from IP Phone.
Conditions
Workaround
CSCsz17846 Tracebacks when pppoe-client is configured along with encap aal5ciscoppp.Symptom Tracebacks @ pppoa_vc_up seen, when pppoe-client is configured with aal5ciscoppp virtual-template 1 encapsulation already configured.
Conditions
Workaround
CSCsr62645 Software-forced reload while accessing swidbList_next.Symptom Software-forced reload occurs on Cisco 870 router.
Conditions
Workaround
CSCsu30540 HWIC-4SHDSL: 4Wire annex F coding 16-TCPAM link down after shut/no shut.Symptom HWIC-4SHDSL: 4Wire annex F with coding 16-TCPAM link goes down after the <CmdBold>shut<noCmdBold> command followed by the <CmdBold>no shut<noCmdBold> command.
Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(22)YB1
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(22)YB1
CSCsx25880A vulnerability exists in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software that could allow an unauthenticated attacker to cause a denial of service (DoS) condition on an affected device when the Cisco Unified Border Element feature is enabled. Cisco has released free software updates that address this vulnerability. For devices that must run SIP there are no workarounds; however, mitigations are available to limit exposure of the vulnerability. This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090923-sip.shtml.
CSCsv38166Symptom The server side of the Secure Copy (SCP) implementation in Cisco IOS software contains a vulnerability that could allow authenticated users with an attached command-line interface (CLI) view to transfer files to and from a Cisco IOS device that is configured to be an SCP server, regardless of what users are authorized to do, per the CLI view configuration. This vulnerability could allow valid users to retrieve or write to any file on the device's file system, including the device's saved configuration and Cisco IOS image files, even if the CLI view attached to the user does not allow it. This configuration file may include passwords or other sensitive information.
The Cisco IOS SCP server is an optional service that is disabled by default. CLI views are a fundamental component of the Cisco IOS Role-Based CLI Access feature, which is also disabled by default. Devices that are not specifically configured to enable the Cisco IOS SCP server, or that are configured to use it but do not use role-based CLI access, are not affected by this vulnerability.
This vulnerability does not apply to the Cisco IOS SCP client feature.
Cisco has released free software updates that address this vulnerability.Workaround
This advisory is posted at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20090325-scp.shtml.CSCsu11522A vulnerability exists in the Session Initiation Protocol (SIP) implementation in Cisco IOS software that can be exploited remotely to cause a reload of the Cisco IOS device.
Cisco has released free software updates that address this vulnerability. There are no workarounds available to mitigate the vulnerability apart from disabling SIP, if the Cisco IOS device does not need to run SIP for VoIP services. However, mitigation techniques are available to help limit exposure to the vulnerability.
This advisory is posted at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20090325-sip.shtml.CSCsy22826 VG224 sending incorrect ssType in 1+ node CUCM cluster.Symptom VG224 endpoint does not connect to callback destination, once the callback destination is idle.
Conditions
Workaround
Further Problem Description: The activation of the callback is successful. What fails is when the callback destination becomes idle again and the VG224 endpoint gets notified (ring). After the VG224 endpoint goes offhook, the system should automatically connect to the Callback destination.This does not happen and VG224 endpoint gets silence.
CSCin93614 Wrong Packetization value is show for G723ar63 codec on IPIPGW.CSCsm92992 nvram is not recovered if primary and backup nvram get corrupted.Symptom Brand new NVRAM chips will not have the magic numbers written for the primary, backup, and secondary backup NVRAM. This will cause error messages when trying to read/write to the NVRAM:
Router# write erase
Erasing the nvram filesystem will remove all configuration files! Continue?
[confirm]
[OK]
Erase of nvram: complete
Router#
*Dec 17 23:08:52.319: %SYS-7-NV_BLOCK_INIT: Initialized the geometry of
nvramwr
Building configuration...
[OK]
Bad configuration memory structure -- try rewriting
Bad configuration memory structure -- try rewriting
Router#
Router#
Router# wr
Bad configuration memory structure -- try rewriting
Bad configuration memory structure -- try rewriting
Building configuration...
[OK]
Bad configuration memory structure -- try rewriting
Bad configuration memory structure -- try rewriting
Router#
Workaround
CSCso92572 Call Transfer fails when XOR and XTO are on same side.Symptom Call Transfer fails when XOR and XTO are on the same side.
Conditions
Workaround
CSCsq83713 Memory leaks chunks at "gk process".Symptom Memory leaks are observed in "gk process" when memory lite is disabled.
Conditions
Conditions
CSCsu27559 FW upgrade failed from 1.2.3.10 to 1.2.3.15.Symptom During the firmware upgrade on 880E modem using microcode reload command, it is found that the modem upgrade process will stop.
Conditions
Workaround
Further Problem Description: There are two issues associated with the failures:
•
•
CSCsv01869 VPN LED is not on in ISR fixed platform when the crypto session is up.Conditions
Workaround
CSCsv06649 GW sends 200OK, without waiting for PRACK for the previous 18x response.Symptom IOS SIP Gateways send 200OK for INVITE before PRACK is received for reliable 18x response.
Conditions
Workaround
CSCsv11142 SIP-H323 hold-resume invoked from SIP leg fails.Symptom A call is disconnected during call resume in a sip-h323 call.
Conditions
4.
5.
6.
7.
8.
Workaround
CSCsv85817 CUBE: show call active voice displays incorrect codecbytes.Symptom show call active voice command may display incorrect value for codecbytes.
Conditions
Workaround
CSCsw19548 DO-SS call not established in 2 ipipgw scenario.Symptom Basic DO (Delayed Offer) to SS (Slow Start) call is not getting established in a 2 IPIP Gw scenario.
Topo-
OGW==IPIP1==IPIP2==TGW
SS==SS<->DO==DO<->SS==SS
Here the basic call is not getting established and SIP leg between IPIP1 and IPIP2 is getting into a loop with 200OK and ACK messages.
Conditions
Workaround
CSCsw36207 Call disconnected due to DSP battery reversal.Symptom Outgoing of router FXO loop-start call randomly disconnected after far-end answered the call.
Conditions
Workaround
CSCsw36750 Basic SS-DO call is failing for 2 IPIPGWs case.Symptom Call will be disconnected with 2 ipipgws.
Conditions
Workaround
CSCsw43903 leg_remote_media_ip_address TCL infotag does not work for SIP Calls.Symptom TCL Infotag "leg_remote_media_ip_address" may not work for SIP calls.
Workaround
CSCsw75178 error.noresource Event received while testing Grammar scope in Menu.Symptom Media forking request to dsp fails.
Conditions
Workaround
CSCsw79696 Call disconnected due to DSP detects fxols_rvs_battery.Symptom Call over the FXO loop-start cannot be established since gateway's dsp detects reverse-battery signal.
Conditions
Workaround
CSCsx15347 CME as SRST needs reboot to apply G729r8 codec to ephones using template.Symptom CME version 7.0(1) when used as SRST and configured with auto provisioning requires reboot of the router to apply codec g729r8 if mentioned in the ephone-template
Conditions
CUCM Version - 7.0.1.11001-8
CME version 7.0(1) - 12.4(22)T
When configuring CCME as SRST mode with auto provisioning utilizing the ephone-template for soft key and codec g729r8 for the phones as following:
ephone-template 1
softkeys idle Newcall Cfwdall Pickup ConfList Join
softkeys seized Endcall Cfwdall Pickup
softkeys alerting Endcall
softkeys connected Endcall Hold Park Trnsfer Confrn ConfList Join Select
codec g729r8
Ephones register after the initial fail over to SRST and configuration is provisioned by the system, but the preferred codec used is G711ulaw instead of G729r8. However if the system is rebooted after the initial fail over, the phones register with correct codec. and "codecg729r8" shows up under the ephone in addition to ephone-template commands.
Workaround
CSCsx23053 DO--SS calls are failing with fax protocol T38.Symptom DO--SS call involving two IPIPGWs fails.
Conditions
Workaround
CSCsx36327 "pass-thru content sdp" causes single connection ip address in sdp.Symptom Telepresence calls from CTS to CTS through the CUBE connect but no video or audio is seen. If the calls are to a CTMS the call is disconnected by the CTMS with an error of "media timeout".
Show voip rtp connection shows one single ip address as the local address in the cube.
Conditions
This occurs only when the CTS resides in a different subnet than the interfaces on the cube and the configuration pass- thru content sdp is used in the voice service voip sip menu.
This occurs in CUBE flow through mode.
Workaround
Further Problem Description: This issue does not affect the signalling side, just the media.
The command pass-thru content sdp was introduced in YB to allow flows that require a G711 codec such as music on hold. Removing this command can cause disconnects on Hold and Resume.
CSCsx47948 CME: SNR cannot be enabled on ephone-DN's with mwi sip.Symptom Attempting to configure SNR on CME under an ephone-DN with mwi sip configured will generate the following error:
Can't configure SNR on mwi DN
As a result, SNR cannot be configured on the DN.
Conditions
Workaround
Directions for CME:
Directions for CUE:
http://www.cisco.com/en/US/docs/voice_ip_comm/unity_exp/rel2_3/cliadmin/ch3sys.html#wp1115186
If using third party voicemail, or using a multiple CME + Unity integration with MWI relay, there is no workaround.
CSCsx59972 intermittent call failure for xfer call to sharedline through sip trunk.Symptom Consult transfer to SIP shared-line as a transfer-target from other CME over SIP trunk may fail.
Conditions
Workaround
CSCsx69249 SIP phones would hang after pressing hold/resume on Initiator/other-party.Symptom When call is disconnected, shared-line resource is not released.
Conditions
Workaround
CSCsx76246 Need a new deviceID for 5x5 phones.Symptom Phone type 501G, 502G, 504G, 508G, and 509G missing. They cannot register with CME.
Conditions
Workaround
CSCsx76903 slow mem leak in mem_mgr_malloc_buf when doing REFER based transfer.Symptom A slow memory leak occurs when a voice gateway processes a SIP REFER message that has no user portion in the Contact: and/or Referred-By: headers.
Workaround
CSCsy09902 Received invalid SDP pointer from application, traceback seen.Symptom For a call, traceback will be seen on CUBE with SDP pass-thru.
Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(22)YB
CSCsw30737 NTP does not synchronize if both ntp master and ntp server configured.Symptom NTPv4 does not synchronize with IOS 12.4(20)T and later releases. The router does not even synchronize with its own internal clock.
Conditions
Workaround
CSCsw88646 SCCP FXS port shared line to CCM may fail to ring or get dialtone.Symptom With SCCP (STCAPP) FXS ports registered to CCM and assigned a shared line to SCCP IP phones, one of the following issues may occur:
•
•
STCAPP:stcapp_get_active_call_ccb:ERROR:There is no ACTIVE call's ccb in lcb (0x645952A4) stcapp_error_handling.
Conditions
Workaround
Further Problem Description: Note that the second scenario is not a support solution. The max call/busy trigger should be set to 1 when not enabling hold/resume under STCAPP, which is considered a classic shared-line scenario.
To configure hold/resume on the SCCP FXS port, use:
stcapp supplementary-service
port <port>
hold-resume
CSCsw69730 %SIP-3-BADPAIR: Unexpected event 25 (SIPSPI_EV_CC_CALL_RESUME) shown.Symptom One SIP phone originated call to another cme sccp phone, call connected, made multiple transfer back to a sccp endpoint of original cme, then observed %SIP-3-BADPAIR: Unexpected event 25 (SIPSPI_EV_CC_CALL_RESUME) shown on cme router. The call connected but audio path did not established.
Conditions
Workaround
Resolved Caveats - Cisco IOS Release 12.4(22)YB
CSCsu24505Cisco IOS Software with support for Network Time Protocol (NTP) version (v4) contains a vulnerability processing specific NTP packets that will result in a reload of the device. This results in a remote denial of service (DoS) condition on the affected device.
Cisco has released free software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are available and are documented in the workarounds section of the posted advisory.
This advisory is posted at the following link:
http://www.cisco.com/warp/public/707/cisco-sa-20090923-ntp.shtml
CSCsv75948Cisco IOS Software with support for Network Time Protocol (NTP) version (v4) contains a vulnerability processing specific NTP packets that will result in a reload of the device. This results in a remote denial of service (DoS) condition on the affected device.
Cisco has released free software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are available and are documented in the workarounds section of the posted advisory.
This advisory is posted at the following link:
http://www.cisco.com/warp/public/707/cisco-sa-20090923-ntp.shtml
CSCsv04836Multiple Cisco products are affected by denial of service (DoS) vulnerabilities that manipulate the state of Transmission Control Protocol (TCP) connections. By manipulating the state of a TCP connection, an attacker could force the TCP connection to remain in a long-lived state, possibly indefinitely. If enough TCP connections are forced into a long-lived or indefinite state, resources on a system under attack may be consumed, preventing new TCP connections from being accepted. In some cases, a system reboot may be necessary to recover normal system operation. To exploit these vulnerabilities, an attacker must be able to complete a TCP three-way handshake with a vulnerable system.
In addition to these vulnerabilities, Cisco Nexus 5000 devices contain a TCP DoS vulnerability that may result in a system crash. This additional vulnerability was found as a result of testing the TCP state manipulation vulnerabilities.
Cisco has released free software updates for download from the Cisco website that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20090908-tcp24.shtml.
CSCeg87070 Crash at igmp_send_init_query.Symptom During 7xi2b monitoring c10k crashed at igmp-process.
CSCse37273 Need Voice Translation Profile for SIP SRST Phones.Symptom Voice Translation Profiles cannot be applied to SIP SRST phones.
Workaround
CSCsg39977 Router crashes when attempt to use Dialer interface for MLP.Symptom When dialer interfaces are used in conjunction with Multilink PPP (MLP), a router may crash because of a corrupted program counter.
Conditions
Workaround
CSCsh51297 No voice path after connected if CME receives 183 with sdp and then 180.CSCsj14623 SIP Phones configured with DNs with"+" sign will not failover to SRST.Symptom SIP phone cannot be registered if number configured by leading '+' sign.
Workaround
CSCsk52143 police cir percent uses incorrect baseline bandwidth.Conditions
Workaround
Alternate Workaround: Use a different child-policy (with the same
configuration). Example:
Define a second policy-map, say "cbwfq-sip1", with the same configuration
as "cbwfq-sip" and change the cbwfq-ip as below:
policy-map cbwfq-ip
class tunnel13601
shape average 80000000
service-policy cbwfq-sip
class tunnel13603
shape average 20000000
service-policy cbwfq-sip1
(shows a different child-policy with the same configuration as "cbwfq-sip").
CSCso24954 Implement correct restrictions for queuing features with the move to HQF.Symptom A policy with unsupported queuing features is allowed to attach to sessions. It may cause potential issues that require a reload to recover.
Workaround
CSCso44189 SCCP (stcapp) fxs port on CME with station-id configured may hang.Symptom A Cisco IOS VoIP gateway configured as a Cisco Unified Communications Manager Express (CME) with SCCP (stcapp) controlled FXS ports may intermittently be getting into a state where further calls fail through the FXS voice port.
Conditions
Jan 8 18:21:17.969: TDM: guido_port_dsp_connect: vic connect failed!
Jan 8 18:21:17.969: %FLEXDSPRM-3-TDM_CONNECT: failed to connect voice-port (1/1/3) to
dsp_channel(1/0/1)guido_disconnect_local_local, slot=1, connection 5/0 to 3/17 is not in
use
guido_disconnect_local_local, slot=1, connection 3/17 to 5/0 is not in use
guido_disconnect_local_local, slot=1, connection 5/0 to 3/17 is not in use
guido_disconnect_local_local, slot=1, connection 3/17 to 5/0 is not in use
Workaround
CSCsq42799 Only 1.5MB to 2MB downstream, when using two PA-MC-2T3-EC cards (MLPPP).Symptom Downstream line rates of 98% or more are only being observed when using the new PA in "hardware enabled mode", meaning the MLPPP member links are on the same PA. However, when the "software mode"is used, meaning when the two member links (2 T1s) are across two different PSs, then the downstream line rate drops down to 2 Megs the most.
Workaround
CSCsq73501 session and ACLs are not able to create while testing with DACL.Symptom Unable to create sessions and ACLs.
Conditions
Workaround
CSCsq92019 SCCP conference controller is not working.Symptom SCCP phone can't act as conferencing controller.
Conditions
Workaround
CSCsr84713 error message whenever show crypto session detail issued.Symptom Trace back is shown when show crypto session is issued.
Workaround
CSCsr94511 %SYS-6-STACKLOW: Stack for process Call Manager Application Manager.Symptom Crash with the following message:
%SYS-6-STACKLOW: Stack for process Call Manager Application Manager running low, 0/9000
Workaround
CSCsu02176 Router reloads on switching off one of the redundant power supplies.Symptom A router reloads continuously on switching off one of the redundant power supplies.
Workaround
CSCsu20411 Router is getting crashed while unconfiguring source template test.Symptom Router may crash while unconfiguring "source template test" in interface configuration mode.
Conditions
Workaround
CSCsu24505 Intermittent crash when NTP Service is configured.Symptom Router may crash and reload intermittently with TLB (load or instruction fetch) exception.
Conditions
Workaround
no ntp server x.y.z.w
no ntp peer a.b.c.d
Further Problem Description: Upgrade to a version indicated in Cisco Bug ID CSCsv75948 in the Cisco bug toolkit as "fixed in". Cisco bug ID CSCsv75948 is required for a full fix.
CSCsu31042 Memory leak at pppoe_client_int_cmd.Symptom A small memory leak may occur.
Conditions
Workaround
CSCsu32154 MGCP controlled fxs port intermittently gets into unusable state.Symptom Calls through an MGCP-controlled FXS may fail to complete. The user will hear fast-busy signal when attempting to make inbound or outbound calls from or to that port. Outbound calls to the port in this state may return a 400 error "Previous message in-progress" in response to the CRCX.
Conditions
Workaround
Alternate Workaround: Use of H323/SIP signaling instead of MGCP will prevent ports from getting into this state.
Further Problem Description: Changes applied through CSCsq97697 have been found to greatly reduce the instances of this issue from occurring. If using H323/SIP instead of MGCP is not an option, it is recommended to use a Cisco IOS Release that contains the changes in CSCsq97697 (for example, Cisco IOS Release 12.4(15)T7).
The changes applied to CSCsu32154 introduce a new MGCP CLI command which is not enabled by default. If upgrading to obtain a fix for this issue, configure <CmdBold>mgcp disconnect-delay<noCmdBold>.
CSCsu33399 HWIC-4SHDSL:4Wire annex F/G with coding 16/32 TCPAM link on CO side down.Symptom HWIC-4SHDSL:4Wire annex F/G with coding 16/32 TCPAM link on central office (CO) side is going down.
Conditions
Issue is seen with F/G annex; the issue is not seen with A/B annex.
CO side link goes down, but the CPE comes up.
Workaround
CSCsu46871 Unable to attach policy to VT with bandwidth configured in class-default.Symptom Unable to attach service policy to VT when bandwidth is configured in class default.
Conditions
Workaround
CSCsu49132 Router getting crashed @ rt_walktree_ap while unconguring ipv6.Symptom A router may crash when unconfiguring IPv6.
Conditions
Workaround
CSCsu51668 Box Crash- Reattach Fr Map-class/access Time-slot-hqf_centralized_pak_de.Symptom A router may crash when reattaching a map-class or accessing the time-slots in controller mode or a router may crash when doing an OIR or flapping the peer interface.
Conditions
Workaround
CSCsu56748 Spurious memory seen @ ipflow_drop_punt_input_feature.Symptom Spurious memory seen in unit test while pinging from generator to reflector.
Conditions
Workaround
CSCsu56806 HSRPv6 configuration reappears after deleting/configuring SVI.Symptom If HSRP IPv6 is configure on a vlan interface, and the vlan interface is deleted, then the HSRP IPv6 config will reappear on the vlan if the vlan is later recreated. Once this occurs there is no way to remove the HSRP config.
Workaround
CSCsu62921 %SYS-2-BADSHARE tracebacks and traffic fails with xDSL.Symptom %SYS-2-BADSHARE tracebacks are reported. Eventually the router will stop passing all traffic over the interface.
Conditions
Workaround
CSCsu64215 ip tcp adjust-mss command results in packet loss for non-TCP traffic.Symptom Router may incorrectly drop non TCP traffic. TFTP and EIGRP traffic can be impacted as seen in CSCsv89579.
Conditions
Workaround
CSCsu64851 ILBC codec enabled FPT call is failing.Symptom ILBC codec enabled Fax passthrough and modem passthrough call is failing.
Conditions
Workaround
CSCsu67461 Router crashes when "show track brief" entered.Symptom Router may crash when show tracking brief is entered, if one or more tracking objects have been created using the Hot Standby Routing Protocol (HSRP) cli, such as <CmdBold>standby 1 track Ethernet1/0<noCmdBold>.
Conditions
<CmdBold>track 1 interface Ethernet1/0 line-protocol<noCmdBold>
interface Ethernet 0/0
standby 1 track 1
Workaround
CSCsu72026 OER MC reports max report limit reach when request all exit links report.Symptom OER master controller reports an error 22 (OER_API_MAX_REPORT_LIMIT_REACHED) when PfR Manager tries to request ALL EXIT LINK REPORTS more than 2 times.
CSCsu84383 Router crashes with mlppp configs and on attaching/removing qos policy.Symptom When policy from mlp vaccess is removed, router crashes in queuing enqueue.
Conditions
Workaround
CSCsu95319 IGMP report was not sent to helper address.Symptom Igmp-proxy reports for some of the groups are not forwarded to the helper. This causes members not to receive the multicast traffic for those groups.
Conditions
Workaround
CSCsu98428 Crash with extraneous group-name configured on dial peer.Symptom A router running Cisco IOS may reload unexpectedly.
Conditions
dial-peer voice 2 pots
group-name test
destination-pattern 9T
port 0/3/0:23
forward-digits all
Workaround
Further Problem Description: When configuring the group-name, a warning will appear if the config is incomplete:
Router(config-dial-peer)# group-name test
Warning: group test is not defined
but the configuration will still be accepted.
CSCsv00168 strange chars on CLIs.Symptom Junk values are being displayed on the router when characters/commands are inputted. For example, enter "enable", it shows "na^@^@"; enter "show version", it shows "h ^v^@e^@^r^@^@^@^@^@".
Conditions
Workaround
Further Problem Description: The CLI function is not affected by the junk
values.
CSCsv17687 Repeater client is not associated to root AP.Conditions
Workaround
CSCsv20058 CUBE - duplicate H245-alphanumeric at digit_end on rfc2833 to h245-alpha.Symptom Upon digit_end on the RFC 2833 side, the IPIP GW detects misinterprets this and sends out h245-alphanumeric which is duplicate. Typically, IPIPGW should ignore all the tone packets after the digit_begin is detected till the digit_end.
Conditions
Workaround
CSCsv22171 wrong callerID on CME phone after put into conf by CM phone.Symptom A CME phone may display it's own directory number after being put into a conference by a Communications Manager phone.
Conditions
ph1---CME----sip.Trunk-----CM-----ph2,ph3
ph2 puts ph1 into conference with ph2, and ph3.
Workaround
CSCsv24862 GPickUp soft-key not working on xfer from CUE to parallel hunt group.Symptom In CME 7.0 (12.4(20)T, transferring out of CUE Auto Attendant to a parallel hunt group on CME, and trying to pick up that call using the GPickUp soft-key doesn't work.
Workaround
CSCsv35663 TrnsfVM using speed-dial, watched or monitored lines doesn't work.Symptom Unable to transfer calls directly to voice-mail using the "TrnsfVM" soft-key followed by a speed dial, "watch" or "monitor" button on CCME running 12.4(20)T IOS.
Conditions
Workaround
CSCsv42721 Association failure between client and UUT configured for EAP-TLS.Symptom UUT configured as AP with EAP-FAST configurations fails to associate with the PC client (with appropriate profiles in place). The 'sh dot11 assoc' output shows that STateis struck at "AAA_Auth".
Symptom Association fails between with UUT/AP and PC clietn with EAP-TLS configurations.
Workaround
CSCsv43444 Memory leak in ccsip_new_scb.Symptom A router will run out of memory when SIP phones register.
Conditions
Workaround
CSCsv49500 INVITE with + is converted to type international and + is stripped.Symptom SIP INVITE messages sent to a router where the SIP URI and To header contain a number that begins with the plus sign (+) (e.g. +19195551234), do not match valid dial peers that have a + (e.g. destination-pattern +1919.......).
Conditions
Workaround
An alternative is to create an inbound dial peer with a voice translation rule that
matches on the international number and adds the + back on.
CSCsv51150 Stalled phone sockets are not cleaned up, SCCP process memory increase.Symptom Skinny Msg Server process increases its memory usage eventually crashing the router.
Conditions
CSCsv53235 3911 type missing in voice register global load types.Symptom 3911 is not a valid phone type under voice register global load commands.
Conditions
Workaround
CSCsv58300 qos pre-classify not working in a DMVPN with tunnel prtected with IPSEC.Symptom Classification is not done correctly, it is matching the IPSEC header instead of matching parameters in the original header despite qos pre-classify configuration.
Conditions
Workaround
CSCsv60866 ringing pickup failing from dn's with "A." secondary numbers.Symptom Picking up a ringing call fails and the original caller gets stuck afterwards.
Conditions
Workaround
CSCsv75948 NTP crashes after fix of CSCsu24505.Symptom Sending control packets to read the associations and peer, system variable from the router would crash the router.
Conditions
Workaround
CSCsv90212 SNR: Disable SCCP auto hold while SNR feature is not active.Symptom After X + Y timer expires, the phone will stay in hold state.
Conditions
Both SNR and mobile phones are SNR enabled.
Workaround
CSCsv95576 CME should translate #DEVICENAME# in XML URL reply for phones.Symptom Phones on older firmware versions and non third-generation phones may not properly send their devicename if #DEVICENAME# is in the CME <cmdBold>services url</cmdBold> command.
Conditions
<servicesURL>http://<IP>:80/CMEserverForPhone/serviceurl</servicesURL>
This indicates that the phones will rely on CME to properly parse the #DEVICENAME# field for them, which it does not do in 12.4(20)T.
Workaround
CSCsv99326 Unfragmented pings slightly larger than the configured MTU shouldn't pass.Symptom FE and GE ports not dropping packets of size slightly bigger than the MTU configured. This range is upto 10 bytes for WAN ports and 14 bytes for Switch Ports. WAN issue can be seen on both 890 and 1812, whereas for Switch Ports, issue is seen only for 890.
Conditions
Further Problem Description: Maximum packet size to be received by an interface is getting calculated 10 bytes more than the actual value. As the MTU enabling function for 890 & 1812 are platform specific, similar fix needs to be introduced for 1812 platforms.
CSCsv99411 create-cnf file with 250 phones freezes console for 2 minutes.Symptom Router appears to be hung when creating cnf-file for 250 phones with perphone configuration.
Conditions
Workaround
CSCsw20408 SNR: hw conf did not work properly when mobile first answer the call.Symptom After resuming the call from SNR phone, no voice path between conference parties.
Conditions
•
•
•
Workaround
CSCsw25514 7914 fails to re-register after 'reset' is issued on CME 4.3.Symptom On CME 4.3/7.0, when issuing a 'reset' for a 7960 with a 7914 sidecar, the 7914 will fail to re-register to CME and will stay with all buttons red.
Conditions
Workaround
CME#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
CME(config)#telephony-service
CME(config-telephony)#no create cnf-files
CNF files deleted
CME(config-telephony)#create cnf-files
Creating CNF files
CSCsw26371 park-system application * pickup conflicting with night-service codes.Symptom pickup + '*' to retrieve the last parked call needs to be followed by # to work.
Conditions
Workaround
CSCsw28593 Intermittent Memory Block overrun and core after Hold and Resume.CSCsw29421 cme crashed after cbarge/park the call.Symptom image crash.
Conditions
Workaround
CSCsw38175 Can't both calling/called sides cbarge into the call for SIP sharedline.Symptom Unable to cbarge into sip shared line call that is already part of another cbarge conference created on another shared line.
Workaround
CSCsw98091 Incoming SIP call with prefix dialing, always busy.Symptom Call to SIP phone may return SIP 404 message.
Conditions
Workaround
Additional References
Use this release note with the documents and websites in this release note and the documents listed in the following sections:
Release-Specific Documents
The following documents are specific to Release 12.4 and apply to Release 12.4(22)YB.
•
•
•
Platform-Specific Documents
Hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 1800 series routers are at:
http://www.cisco.com/en/US/products/ps5853/tsd_products_support_series_home.html
Cisco IOS Software Documentation Set
The Cisco IOS software documentation set consists of the Cisco IOS configuration guides, Cisco IOS command references, and other supporting documents.
Documentation Modules
Each module in the Cisco IOS documentation set consists of one or more configuration guides and one or more corresponding command references. Chapters in a configuration guide describe protocols, configuration tasks, and Cisco IOS software functionality, and contain comprehensive configuration examples. Chapters in a command reference provide complete command syntax information. Use each configuration guide with its corresponding command reference. Cisco IOS Software Documentation is available in html or pdf form.
Select your release and click the command references, configuration guides, or any other Cisco IOS documentation you need.
Notices
See the "Notices" section in About Cisco IOS Release Notes located at:
http://www.cisco.com/en/US/docs/ios/12_4/12_4x/12_4xy15/ReleaseNote.html
Use this document in conjunction with the documents listed in the "Additional References" section.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
© 2009-2010 Cisco Systems, Inc. All rights reserved.
Feedback