Release Notes for the Cisco 1800 Series Routers (Fixed) for Cisco IOS Release 12.4(4)XC
Available Languages
Table Of Contents
Release Notes for the Cisco 1800 Series Routers (Fixed) for Cisco IOS Release 12.4(4)XC
Determining the Software Version
Upgrading to a New Software Release
New Features in Cisco IOS Release 12.4(4)XC5
New Hardware Features in Release 12.4(4)XC5
New Software Features in Release 12.4(4)XC5
New Features in Cisco IOS Release 12.4(4)XC4
New Hardware Features in Release 12.4(4)XC4
New Software Features in Release 12.4(4)XC4
New Features in Cisco IOS Release 12.4(4)XC3
New Hardware Features in Release 12.4(4)XC3
New Software Features in Release 12.4(4)XC3
New Features in Cisco IOS Release 12.4(4)XC2
New Hardware Features in Release 12.4(4)XC2
New Software Features in Release 12.4(4)XC2
New Features in Cisco IOS Release 12.4(4)XC1
New Hardware Features in Release 12.4(4)XC1
New Software Features in Release 12.4(4)XC1
New Features in Cisco IOS Release 12.4(4)XC
New Hardware Features in Release 12.4(4)XC
New Software Features in Release 12.4(4)XC
Resolved Caveats - Cisco IOS Release 12.4(4)XC7
Open Caveats - Cisco IOS Release 12.4(4)XC7
Resolved Caveats - Cisco IOS Release 12.4(4)XC6
Open Caveats - Cisco IOS Release 12.4(4)XC6
Resolved Caveats - Release 12.4(4)XC5
Open Caveats - Release 12.4(4)XC5
Resolved Caveats - Release 12.4(4)XC4
Open Caveats - Release 12.4(4)XC4
Resolved Caveats - Release 12.4(4)XC3
Open Caveats - Release 12.4(4)XC3
Resolved Caveats - Release 12.4(4)XC2
Open Caveats - Release 12.4(4)XC2
Resolved Caveats - Release 12.4(4)XC1
Open Caveats - Release 12.4(4)XC1
Resolved Caveats - Release 12.4(4)XC
Open Caveats - Release 12.4(4)XC
Obtaining Documentation, Obtaining Support, and Security Guidelines
Open Source License Acknowledgements
Release Notes for the Cisco 1800 Series Routers (Fixed) for Cisco IOS Release 12.4(4)XC
March 26, 2008Cisco IOS Release 12.4(4)XC7OL-12737-02 Seventh ReleaseLast Revised: September 24, 2008These release notes describe new features and significant software components for the Cisco 1800 series routers (fixed) that support Cisco IOS Release 12.4(4)XC. These release notes are updated as needed to describe new memory requirements, new features, new hardware support, software platform deferrals, microcode or modem code changes, related document changes, and any other important changes. Use these release notes with the Cross-Platform Release Notes for Cisco IOS Release 12.4T located on Cisco.com.
For a list of applicable software caveats that apply to the Release 12.4(4)XC releases, see the "Caveats" section, and see the online Caveats for Cisco IOS Release 12.4(4)T document. The caveats document is updated for every 12.4T maintenance release.
We recommend that you view the field notices for this release to see if your software or hardware platforms are affected. If you have an account on Cisco.com, you can find field notices at http://www.cisco.com/warp/customer/tech_tips/index/fn.html. If you do not have a Cisco.com login account, you can find field notices at http://www.cisco.com/warp/public/tech_tips/index/fn.html.
Contents
•
Obtaining Documentation, Obtaining Support, and Security Guidelines
•
System Requirements
This section describes the system requirements for Cisco IOS Release 12.4(4)XC and includes the following sections:
•
•
Memory Requirements
Table 1 lists the memory requirements for the Cisco IOS feature sets that are supported by Cisco IOS Release 12.4(4)XC on the Cisco 1800 series routers (fixed).
Table 1
Cisco 1801
IP Broadband
c180x-ipbroaband-mz
32 MB
128 MB
Advanced IP Services
c180x-advipservicesk9-mz
32 MB
128 MB
Advanced Enterprise Services
c180x-adventerprisek9-mz
32 MB
128 MB
Cisco 1802
Advanced IP Services
c180x-advipservicesk9-mz
32 MB
128 MB
Advanced Enterprise Services
c180x-adventerprisek9-mz
32 MB
128 MB
Cisco 1803
Advanced IP Services
c180x-advipservicesk9-mz
32 MB
128 MB
Cisco 1811
Advanced IP Services
c181x-advipservicesk9-mz
32 MB
128 MB
Advanced Enterprise Services
c181x-adventerprisek9-mz
32 MB
128 MB
Cisco 1812
Advanced IP Services
c181x-advipservicesk9-mz
32 MB
128 MB
Advanced Enterprise Services
c181x-adventerprisek9-mz
32 MB
128 MB
1 Recommended memory is the memory required considering future expansions.
Memory Requirements for the Cisco 1800 Series Routers (Fixed)
Hardware Supported
Cisco IOS Release 12.4(4)XC supports the following routers:
•
•
•
•
•
For detailed descriptions of new hardware features and which features are supported on each router, see the "New and Changed Information" section. For descriptions of existing hardware features and supported modules, see the hardware installation guides, configuration and command reference guides, and additional documents specific to the Cisco 1800 series routers (fixed), which are available on Cisco.com at the following location:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/1800fix/index.htm
Determining the Software Version
To determine which version of the Cisco IOS software is currently running on your Cisco 1800 series (fixed) routers, log in to the router, and enter the show version privileged EXEC command. The following sample output from the show version command indicates the version number on the second output line.
Router>show version Cisco IOS Software, C870 Software (C870-ADVENTERPRISEK9-M), Version 12.4(4)XC, EARLY DEPLOYMENT RELEASE SOFTWARE Copyright (c) 1986-2006 by Cisco Systems, IncUpgrading to a New Software Release
For general information about upgrading to a new software release, see the Software Installation and Upgrade Procedures, which are located on Cisco.com.
Feature Set Tables
Cisco IOS software is packaged in feature sets that consist of software images that support specific platforms. The feature sets available for a specific platform depend on which Cisco IOS software images are included in a release. Each feature set contains a specific set of Cisco IOS features.
Caution
The feature set tables have been removed from the Cisco IOS Release 12.4 release notes to improve the usability of the release notes documentation. The feature-to-image mapping that was provided by the feature set tables is available through Cisco Feature Navigator.
Cisco Feature Navigator is a web-based tool that enables you to determine which Cisco IOS software images support a specific set of features and which features are supported in a specific Cisco IOS image. You can search by feature or by feature set (software image). Under the release section, you can compare Cisco IOS software releases side by side to display both the features unique to each software release and the features that the releases have in common.
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology releases occur. For the most current information, go to the Cisco Feature Navigator home page at the following URL:
For frequently asked questions about Cisco Feature Navigator, see the FAQs at the following URL:
http://www.cisco.com/support/FeatureNav/FNFAQ.html
Determining Which Software Images (Feature Sets) Support a Specific Feature
To determine which software images (feature sets) in Cisco IOS Release 12.4 support a specific feature, go to the Cisco Feature Navigator home page, enter your Cisco.com login, and perform the following steps.
Step 1
Step 2
Step 3
Note
Repeat this step to add additional features. A maximum of 20 features can be chosen for a single search.
Step 4
Step 5
Step 6
Step 7
Determining Which Features Are Supported in a Specific Software Image (Feature Set)
To determine which features are supported in a specific software image (feature set) in Cisco IOS Release 12.4, go to the Cisco Feature Navigator home page and perform the following steps.
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Table 2 lists the features and feature sets that are supported in Cisco IOS Cisco IOS Release 12.4(4)XC.
The table uses the following conventions:
•
•
Note
Table 2 Feature List for Cisco 1800 Series Routers
802.1x Basic Authentication
Yes
All. See Table 1 for images
802.1x with Guest VLAN
802.1x with VLAN Assignment
Extensible Authentication Protocol
New and Changed Information
•
•
•
•
•
•
•
New Features in Cisco IOS Release 12.4(4)XC5
•
•
New Hardware Features in Release 12.4(4)XC5
There are no new hardware features in this release.
New Software Features in Release 12.4(4)XC5
There are no new software features in this release.
New Features in Cisco IOS Release 12.4(4)XC4
•
•
New Hardware Features in Release 12.4(4)XC4
There are no new hardware features in this release.
New Software Features in Release 12.4(4)XC4
The following section describes the new software features supported by the Cisco 1800 series routers (fixed) for Cisco IOS Cisco IOS Release 12.4(4)XC.
•
Cisco Unified CME 4.0(4) Extension Assigner
The Cisco Unified CallManager Express (CME) feature enables installation technicians to assign extension numbers to Cisco Unified CME phones without accessing the server. For more information, see the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/voice/its/cme40/cme403/extasgnr.html
New Features in Cisco IOS Release 12.4(4)XC3
•
•
New Hardware Features in Release 12.4(4)XC3
There are no new hardware features in this release.
New Software Features in Release 12.4(4)XC3
There are no new software features in this release.
New Features in Cisco IOS Release 12.4(4)XC2
•
•
New Hardware Features in Release 12.4(4)XC2
There are no new hardware features in this release.
New Software Features in Release 12.4(4)XC2
There are no new software features in this release.
New Features in Cisco IOS Release 12.4(4)XC1
•
•
New Hardware Features in Release 12.4(4)XC1
There are no new hardware features in this release.
New Software Features in Release 12.4(4)XC1
There are no new software features in this release.
New Features in Cisco IOS Release 12.4(4)XC
•
•
New Hardware Features in Release 12.4(4)XC
There are no new hardware features in this release.
New Software Features in Release 12.4(4)XC
The following sections describe the new software features supported by the Cisco 1800 series routers (fixed) for Cisco IOS Cisco IOS Release 12.4(4)XC:
•
802.1x Basic Authentication
The IEEE 802.1x standard defines a client-server-based access control and authentication protocol that prevents unauthorized clients from connecting to a LAN through publicly accessible ports unless they are properly authenticated. The authentication server authenticates the first client connected to the port before it opens the port up to the public and making available any services offered by the router or the LAN.
For more information about this feature, see the following URL at:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12225sed/scg/sw8021x.htm#wp1025060
802.1x with Guest VLAN
When you configure a guest VLAN, clients that are not IEEE 802.1x-capable are put into the guest VLAN when the server does not receive a response to its EAP request/identity frame. Clients that are IEEE 802.1x-capable but that fail authentication are not granted network access. The switch supports guest VLANs in single-host or multiple-host mode.
For more information about this feature, see the following URL at:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12225sed/scg/sw8021x.htm#wp1026004
802.1x with VLAN Assignment
You can limit network access for certain users by using VLAN assignment. After successful 802.1x authentication of a port, the RADIUS server sends the VLAN assignment to configure the port. The RADIUS server database maintains the username-to-VLAN mappings, which assigns the VLAN based on the user name of the client connected to the port.
For more information about this feature, see the following URL at:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12225sed/scg/sw8021x.htm#wp1062632
Extensible Authentication Protocol
Extensible Authentication Protocol (EAP) and TLS are both IETF RFC standards. The EAP protocol carries initial authentication information, specifically EAPOL (the encapsulation of EAP over LANs as established b y IEEE 802.1x)is an authentication protocol for the 802.1x framework for mutual authentication between the client and a RADIUS server.
For more information about this feature, see the following URL at:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacsapp/csapp33/user/sau.htm#wp9
New Features in Release 12.4T
For information regarding the features supported in Cisco IOS Release 12.4T, see the Cross-Platform Release Notes and New Feature Documentation links at the following location on Cisco.com: http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124relnt/xprn124/index.htm
Caveats
Caveats describe unexpected behavior or defects in Cisco IOS software releases. Severity 1 caveats are the most serious caveats, severity 2 caveats are less serious, and severity 3 caveats are the least serious of these three severity levels.
Caveats in Cisco IOS Release 12.4(4)T are also in Cisco IOS Release 12.4(4)XC. For information on caveats in Cisco IOS Release 12.4T, see the Caveats for Cisco IOS Release 12.4(4)T document. This document lists severity 1 and 2 caveats; the documents are located on Cisco.com.
Note
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Resolved Caveats - Cisco IOS Release 12.4(4)XC7
•
Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching (MPLS) Virtual Private Networks (VPNs) or VPN Routing and Forwarding Lite (VRF Lite) and using Border Gateway Protocol (BGP) between Customer Edge (CE) and Provider Edge (PE) devices may permit information to propagate between VPNs.
Workarounds are available to help mitigate this vulnerability.
This issue is triggered by a logic error when processing extended communities on the PE device.
This issue cannot be deterministically exploited by an attacker.
Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-vpn.shtml.
•
A device running Cisco IOS software that has Internet Protocol version 6 (IPv6) enabled may be subject to a denial of service (DoS) attack. For the device to be affected by this vulnerability the device also has to have certain Internet Protocol version 4 (IPv4) User Datagram Protocol (UDP) services enabled. To exploit this vulnerability an offending IPv6 packet must be targeted to the device. Packets that are routed throughout the router can not trigger this vulnerability. Successful exploitation will prevent the interface from receiving any additional traffic. The only exception is Resource Reservation Protocol (RSVP) service, which if exploited, will cause the device to crash. Only the interface on which the vulnerability was exploited will be affected.
Cisco is providing fixed software to address this issue. There are workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-IPv4IPv6.shtml
•
A vulnerability in the Cisco implementation of Multicast Virtual Private Network (MVPN) is subject to exploitation that can allow a malicious user to create extra multicast states on the core routers or receive multicast traffic from other Multiprotocol Label Switching (MPLS) based Virtual Private Networks (VPN) by sending specially crafted messages.
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsg96319 reverse ssh eliminated telnet authention on VTYSymptom When a reverse SSH session is established with valid authentication credentials, anyone can obtain unprivileged Telnet access to a system without being authenticated. This situation affects only reverse SSH sessions when a connection is made with the
ssh -l userid :number ip-address command.
Conditions
http://www.cisco.com/en/US/docs/ios/12_3t/12_3t11/feature/guide/gt_rssh.html
Workaround
http://www.cisco.com/en/US/tech/tk583/tk617/technologies_q_and_a_item09186a0080267e0f.shtml#newq1
CSCsg40567 Memory leak found with malformed tls/ssl packets in http core processSymptom Malformed SSL packets may cause a router to leak multiple memory blocks.
Conditions
Workaround
CSCsg03449 Etherswitch module VLAN Trunking Protocol VulnerabilitiesSymptom
•
•
•
Conditions
Further Information: On the 13th September 2006, Phenoelit Group posted an advisory containing three vulnerabilities:
–
–
–
These vulnerabilities are addressed by Cisco IDs:
•
•
•
•
CSCsj44099 Router crashes if DSPFARM profile description is 128 characters long.Symptom A cisco c3800 router can experience a memory corruption resulting in a crash if the description field under the "dspfarm profile" configuration matches the maximum of 128 characters.
Conditions
Workaround
CSCse05736 A router running RCP can be reloaded with a specific packetSymptom A router that is running RCP can be reloaded by a specific packet.
Conditions
–
–
–
Workaround
CSCec12299 Corruption of ext communities when receiving over ipv4 EBGP sessionSymptom EIGRP-specific Extended Community 0x8800 is corrupted and shown as 0x0:0:0.
Conditions
ASBR/PE-1 <----> VRF-to-VRF <----> ASBR/PE-2
Workaround
router bgp 1address-family ipv4 vrf oneneighbor 1.0.0.1 remote-as 100neighbor 1.0.0.1 activateneighbor 1.0.0.1 route-map FILTER inexit-address-family!ip extcommunity-list 100 permit _RT.*_!!route-map FILTER permit 10set extcomm-list 100 delete!CSCse24889 Malformed SSH version 2 packets may cause processor memory depletionSymptom Malformed SSH version 2 packets may cause a memory leak, causing the platform to operate under a degraded condition. Under rare circumstances, the platform may reload to recover itself.
Conditions
Workaround
config tip ssh version 1endAlternate Workaround: Permit only known trusted hosts and/or networks to connect to the router by creating a vty access list, as in the following example:
Workaround
10.1.1.0/24 is a trusted network thatis permitted access to the router, allother access is deniedaccess-list 99 permit 10.1.1.0 0.0.0.255access-list 99 deny anyline vty 0 4access-class 99 inendFurther Problem Description For information about configuring vty access lists, see the Controlling Access to a Virtual Terminal Line document.
For information about SSH, see the Configuring Secure Shell on Routers and Switches Running Cisco IOS document: http://www.cisco.com/warp/public/707/ssh.shtml
CSCsc40493 Lengthy PADR frame could crash PPPoE BRAS
Symptom A PPPoE aggregation server (BRAS) may reset when receiving a malformed PPPoE message.
Conditions
Workaround
CSCsh53643 mbar/isync compiler automation (No RNE available)
CSCsh77241 Reverting the compiler back to c2.95.3-p11b (No RNE available)
Open Caveats - Cisco IOS Release 12.4(4)XC7
There are no open caveats in this release.
Resolved Caveats - Cisco IOS Release 12.4(4)XC6
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsb40304Cisco IOS device may crash while processing malformed Secure Sockets Layer (SSL) packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device.
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
Cisco IOS is affected by the following vulnerabilities:
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. There are workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-SSL.shtml.
Note
A combined software table for Cisco IOS is available to aid customers in choosing a software releases that fixes all security vulnerabilities published as of May 22, 2007. This software table is available at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20070522-cry-bundle.shtml.
CSCsd85587A vulnerability has been discovered in a third party cryptographic library which is used by a number of Cisco products. This vulnerability may be triggered when a malformed Abstract Syntax Notation One (ASN.1) object is parsed. Due to the nature of the vulnerability it may be possible, in some cases, to trigger this vulnerability without a valid certificate or valid application-layer credentials (such as a valid username or password).
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
The vulnerable cryptographic library is used in the following Cisco products:
–
–
–
–
–
This vulnerability is also being tracked by CERT/CC as VU#754281.
Cisco has made free software available to address this vulnerability for affected customers. There are no workarounds available to mitigate the effects of the vulnerability.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml.
Note
CSCsd92405Cisco IOS device may crash while processing malformed Secure Sockets Layer (SSL) packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device.
Successful repeated exploitation of any of these vulnerabilities may lead to a sustained Denial-of-Service (DoS); however, vulnerabilities are not known to compromise either the confidentiality or integrity of the data or the device. These vulnerabilities are not believed to allow an attacker will not be able to decrypt any previously encrypted information.
Cisco IOS is affected by the following vulnerabilities:
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. There are workarounds available to mitigate the effects of these vulnerabilities.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070522-SSL.shtml.
Note
A combined software table for Cisco IOS is available to aid customers in choosing a software releases that fixes all security vulnerabilities published as of May 22, 2007. This software table is available at the following link: http://www.cisco.com/warp/public/707/cisco-sa-20070522-cry-bundle.shtml
CSCek48162: TDM cross connects before last call disconnect and assertionsSymptom : Under heavy stress few tdm assertion failures are seen
Conditions
Workaround: There is no workaround
CSCek51075: Assertion failures at tdm_local_endpoints_connect CSCek61570 Trunk dn stuck in seize/seize state and does not recover.Symptom : Few assertions may be seen during bootup and for the first set of calls. This does not have any effect on the system.
Conditions
Workaround
CSCsb25337:Unnecessary tcp ports opened in default router config Cisco devices running IOS that support voice and are not configured for Session Initiated Protocol (SIP), are vulnerable to a crash. However, these devices are isolated to traffic destined to User Datagram Protocol (UDP) 5060. Devices which are properly configured for SIP processing are not vulnerable to this issue.Workaround
CSCsc72722: CBAC-firewall resets TCP idle timer upon receiving invalid TCP packetsSymptom : TCP connections that are opened through a Cisco IOS Firewall (CBAC) may not timeout.
Conditions
Workaround
CSCsd91454: One way voice traffic due to incorrect IPHC(UDP) Di0: CS 1 IPCRCSymptom : Voice traffic is dropped in one direction due to IPHC IPCRC error.
Conditions
Workaround
CSCsd92405: Router crashes on receipt of repeated SSL connection with malformed finished messageSymptom : A router crashes when receiving multiple malformed TLS and/or SSL3 finished messages. A valid username and password are not required for the crash to occur.
Conditions
Workaround
CSCse58397: ISDN BRI Dialer Interface is always in up stateSymptom : ISDN B channels are in UP state
Conditions
Workaround
CSCsf28515: Crashes at mars_default_port_dsp_connectSymptom : Router crashes at mars_default_port_dsp_connect after call passes through the digital voice-port.
Workaround
CSCsf28711: 5850 reloads unexpectedly on making a single call CSCsf28840 crash due to configured peer type control vectorSymptom : Active eRSC reloads with traceback when first (PRI/SS7)call is made.
Conditions
Workaround
CSCsg16908: IOS FTP Server DeprecationCSCsg46546: Erroneous alerting during pickup with CSCek58324. Call focus is wrong after picking up a trunk dnSymptom : After an attempt to pick up an onhold trunk dn, the call display on the ephone which puts this DN to onhold is messed up. The call can not be picked up successfully by other phone and it becomes the focus one on the phone. The connected trunk dn can not be displayed and other incoming call can not be put on hold.
Conditions
Workaround
CSCsg47834: NACK is observed for Open Voice Channel commandSymptom : NACK message may be received from 5510 DSP in response to Open Voice Channel command sent by the IOS.
Conditions
Workaround
2) Make sure that the Trans coding and Voice Termination are on different DSP(s). This can be performed by configuring the maximum number of trans coding sessions to a value such that it would require a multiple of 240 DSP credits. Example 1:
In the following configuration each trans coding session (complexity=high) will require 40 DSP credits. In order to use a multiple of 240 credits, we need to set the maximum trans coding sessions to 6 (6 * 40 = 240) or any multiple of 6.dspfarm profile 1 trans codecodec g711ulawcodec g729r8associate application SCCPRouter(conf-t)#dspfarm profile 1 transcodeRouter(config-dspfarm-profile)#maximum sessions 6Example 2:
In the following configuration each transcoding session (complexity=medium) will require 30 DSP credits. In order to use a multiple of 240 credits, we need to set the maximum trans coding sessions to 8 (8 * 30 = 240) or any multiple of 8.dspfarm profile 2 trans codecodec g711ulawcodec g711alawcodec g729ar8codec g729abr8associate application SCCPRouter(conf-t)#dspfarm profile 2 transcodeRouter(config-dspfarm-profile)#maximum sessions 8Use "show voice dsp group all" command to verify DSP resource allocation.Note: Each 5510 DSP has 240 Credits. This work-around cannot be implemented if the router has only one PVDM2-16 which has only one DSP.
CSCsg59037: 85x/87x cannot upgrade rommon from IOSSymptom : Cisco 851 and 871 routers have no way to remotely upgrade the ROMMON firmware image.
Conditions
Workaround
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcr/tcf_r/cf_13ht.htm#wp1032550
CSCsg66096: Privacy ON: call onhold can be intercepted by directed pickup operationCSCsg66846: TNP phones opening new call when selecting shared transferring lineCSCsg68199: Trunk DN offhook is not propagated to a phone already in dial out modeSymptom : Two IP Phones A and B are registered with Cisco CallManager Express; these phones share two trunk DNs 1 & 2. If Phone-A goes offhook on DN-1 and Phone-B immediately goes offhook on DN-2. This condition should show the DN-2 button on Phone-A as busy which is not happening.
Conditions
Workaround
CSCsg68711: Incoming call in background does not ring after transfer commitSymptom : Phone does not ring for the second incoming call after committing transfer at alert for the first call.
Conditions
Workaround
CSCsg70221: DTMF through the hairpin of a trunk DN does not workSymptom : DTMF tones are being suppressed to prevent duplicate DTMF tones from being extended to an SCCP controlled VG224 port. This problem is a direct result of a fix implemented for correct CSCsf98754. The lack of DTMF prevents IVR devices from working correctly.
Conditions
Workaround
CSCsg70355: New default day light savings summer-time rules from Energy Policy Act of 2005 may cause Cisco IOS to generate timestamps that are off by one hourSymptom : Starting in the calendar year 2007, daylight savings summer-time rules may cause Cisco IOS to generate timestamps (such as in syslog messages) that are off by one hour.
Conditions
Workaround
clock summer-time PDT
recurring 2 Sun Mar 2:00 1 Sun Nov 2:00 (This example is for the US/Pacific time zone.)
CSCsg75035: Async Interface not showing up in the IfIndex from a remote NMS machineSymptom : The interface is indexed on the router but the snmpwalk/snmpget keywords do not seem to return the value when the sh snmp mib ifmib ifindex command is used.
Conditions
Workaround
Open Caveats - Cisco IOS Release 12.4(4)XC6
There are no open caveats in this release.
Resolved Caveats - Release 12.4(4)XC5
•
Multiple vulnerabilities exist in the Session Initiation Protocol (SIP) implementation in Cisco IOS that can be exploited remotely to trigger a memory leak or to cause a reload of the Cisco IOS device.
Cisco has released free software updates that address these vulnerabilities. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities addressed in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself, if administrators do not require the Cisco IOS device to provide voice over IP services.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20080924-sip.shtml.
•
Multiple Cisco products contain either of two authentication vulnerabilities in the Simple Network Management Protocol version 3 (SNMPv3) feature. These vulnerabilities can be exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the disclosure of network information or may enable an attacker to perform configuration changes to vulnerable devices. The SNMP server is an optional service that is disabled by default. Only SNMPv3 is impacted by these vulnerabilities. Workarounds are available for mitigating the impact of the vulnerabilities described in this document.
The United States Computer Emergency Response Team (US-CERT) has assigned Vulnerability Note VU#878044 to these vulnerabilities.
Common Vulnerabilities and Exposures (CVE) identifier CVE-2008-0960 has been assigned to these vulnerabilities.
This advisory will be posted at http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCek26492Symptom : A router may crash if it receives a packet with a specific crafted IP option as detailed in Cisco Security Advisory: Crafted IP Option Vulnerability:
http://www.cisco.com/warp/public/707/cisco-sa-20070124-crafted-ip-option.shtml
Conditions
Workaround
http://www.cisco.com/warp/public/707/cisco-sa-20070124-crafted-ip-option.shtml
CSCsd40334: Processing a specially crafted IPv6 Type 0 Routing header can crash a device running Cisco IOS software. This vulnerability does not affect IPv6 Type 2 Routing header which is used in mobile IPv6. IPv6 is not enabled by default in Cisco IOS.Workaround
CSCsd58381: Processing a specially crafted IPv6 Type 0 Routing header can crash a device running Cisco IOS software. This vulnerability does not affect IPv6 Type 2 Routing header which is used in mobile IPv6. IPv6 is not enabled by default in Cisco IOS.Workaround
CSCek56688: Change after-hours login timer to 1 min.Symptom : The minimum after-hours login timer is 5 minutes. It is too long. Customer wants to be able to deactivate the login in 1 min.
Conditions
Workaround
CSCek58324: Call focus is wrong after picking up a trunk dnSymptom : The call display does not work correctly when attempting to pick up an onhold trunk DN. The call cannot be picked up successfully by any other phone and it becomes the focus one on the single phone. The connected trunk DN cannot be displayed and other incoming calls cannot be put on hold.
Conditions
Workaround
CSCsc74157: Pings fails with using ISDN switch-type primary-qsigSymptom : A ping failed when using ISDN switch-type QSIG.
Conditions
Workaround
CSCsd47303: Ephone template for ringing stateSymptom : With Cisco CME 4.0, an Ephone-template has states for alerting, seized, connected and idle states. The softkey template needs to be defined for the ringing state (of an incoming call).
Workaround
CSCsd48251: Held call on shared line shows From Unknown NumberSymptom : After a certain amount of time, some calls that have been received on a shared line and placed on hold will show From Unknown Number.
Workaround
CSCse04642: Cisco Unified CME GUI can not change ringtype for sidecar lines when log in as userSymptom : When you log in as a user in CME GUI, you cannot change the ringtype for sidecar lines. You can change the lines on the ip phone but not the lines that belong to the sidecar. If a user is logged in the Cisco CME GUI (log in as user) and changes the ringtype via GUI for the sidecar line and then hits save, the action will save successfully but when you go to the line again the previous ringtype still shows.
Conditions
Workaround
CSCse05642: I/O memory corruption crash on AS5850Symptom : A redzone violation causes a Cisco AS5850 to crash.
Conditions
Workaround
CSCse56800: SIP-3-BADPAIR register timer expiry causes slow memory leakSymptom : SIP Processes causing slow memory leak when there are no active calls on a Cisco 3725. Specifically, the SIP register timer expiry messages are causing this behavior. Reloading the router does not resolve the issue.
Conditions
007042: Jun 17 15:18:45.024 EDT: %SIP-3-BADPAIR: Unexpected timer 23(SIP_TIMER_REMOVE_TRANSACTION) in state 27 (SIP_STATE_OPTIONS_WAIT) substate 0 (SUBSTATE_NONE)Workaround
CSCse68138: Handle fragmented packets in VOIP RTP LibSymptom : Router may reload due to fragmented RTP packets. This is a platform independent problem.
Conditions
Workaround
CSCse71162: Change minimum Ephone keepalive timer from 10 to 1 secondSymptom : Request to reduce the minimum configurable keepalive timer from 10 to 1 second in CME for SCCP phones.
Workaround
CSCse82300: Getting Undefined Tone when we enter a invalid FACSymptom : The CFA feature in the Cisco VG224 is enabled and we are dialing an invalid FAC code via callgen. We expect to get a reorder tone immediately but we are getting only the Undefined_tone.
Workaround
CSCse83674: FXS port cannot be recovered when offhook with howler tone at end of callSymptom : Analog FXS port on a Cisco 2800/3800 ISR does not go back to idle if it has been offhook for more than a minute at the end of a call.
Conditions
Workaround
CSCse87446: Extension assigner defaults provision-tags to 0Symptom : Extension assigner will chose wrong extension if the provision-tag input is zero.
Workaround
CSCsf02737: Memory Corruption Crash at chunk_free_callerSymptom : A Cisco 3825 running Cisco IOS 12.4-9.T crashed. The decoded tracebacks is as follows:
abortcrashdumpchunk_free_callerfree_lite_internal__freefreeskinny_send_msg_internalskinny_server_processr4k_process_dispatchConditions
Workaround
CSCsf07990: CME Dynamic Hunt-Group Login failsSymptom : Ephone-1 has extension 88, which is also added as a monitor line on a 7914. The Ephone-2, which is connected to the 7914 is in DND state. Now when you try to login to a hunt-group on Ephone-1, it fails because the Ephone with the monitor lines is in DND state.
Aug 14 08:36:07: SkinnyHGJoinByDn: dn(88), join_code(80), join(1)Aug 14 08:36:07: Cannot join 88 to hunt group list with dnd on.Aug 14 08:36:07: Ephone-1[13]:SkinnyHGJoinByPhone phone-[7] join 80 failed.Workaround
CSCsf21007: Ephone hunt-group does NOT present calls to monitored DNsSymptom : When an Ephone hunt-group is configured with present-call idle-phone, the Ephone hunt-group skips over certain members of the hunt group.
Conditions
Workaround
CSCsf21458: SRST Reuses sockets causing phones unregisterSymptom : Registered Ephones in SRST mode may unregister and then re register
Conditions
Workaround
CSCsf98754: Inband DTMF should be squelched for calls from POTS to SkinnySymptom : The following scenario is seen:
PSTN === Analog or T1 CAS FXO === CME ------ VG224 ---- Phone or IVRThe analog ports on the Cisco VG224 are SCCP controlled by Cisco CME.
For a call between PSTN and a Cisco VG224 port (or an IP Phone), the DTMF detection is turned ON on the FXO port. Along with this, the DSP channel associated with the FXO port is programmed to pass through the DTMF tone in the RTP path instead of suppressing it.
The above manifests into a double DTMF digit scenario and is very well pronounced when the Cisco VG224 port is connected to an IVR system looking for digits. For the endpoints controlled by Cisco CME via SCCP, the DTMF relay happens through out of band SCCP messages. Since the original DTMF digit coming from PSTN is not suppressed, we see two digits reaching the IVR system - one from the SCCP message from Cisco CME to the Cisco VG224 port and the second one embedded in the RTP path.
Conditions
Phone----FXS=CME----- IP Phone or VG224Make a call from phone on the left to a CME controlled endpoint. Press a digit button on the left phone and hold it for a long time. The user on the CME controlled endpoint on the right can hear: digit beep, silence and continuous digit beep. If the squelching flag was set on the FXS DSP channel, the user would have heard digit beep, silence and back to voice path.
Workaround
CSCsf99737: SRST Locale fail over soft keys still display EnglishSymptom : SRST fails over from Cisco Unified CallManager still displays English languages in softkey regardless of the languages that is configured in Cisco Unified CallManager.
Workaround
Open Caveats - Release 12.4(4)XC5
There are no open caveats in this release.
Resolved Caveats - Release 12.4(4)XC4
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
CSCsc74783Symptom : Intrusion Prevention System (IPS) signatures that require inspection of TCP flows below port 550 may not be triggered on a Cisco IOS IPS device.
Conditions
Workaround
Further Information: On a Cisco IOS router with IPS (Intrusion Prevention System) enabled, all TCP flows should be subject to TCP stateful inspection until the TCP 3-way handshake is complete. This does not work for TCP sessions with a destination port that is less than 550, if it does not match a predefined signature on the router.
CSCek47681: Backplane TDM loss and assertion failuresSymptom : Under heavy stress, time division backplane timeslots may be lost over time.
Conditions
Workaround
CSCse06975: Traceback at pak_copy_contiguous_to_contiguous when testing multicastSymptom : The VoIP LMR multicast does not function properly with E&M on the NM-HD-2V network module.
Workaround
CSCse16973: show controller call-counters displays negative valuesSymptom : The show controller t1 call-counters command displays negative values for the DSO Active counter.
Conditions
Workaround
CSCse18940: Memory depletes when VoAAL2 traffic is passed.Workaround
CSCse27845: One way voice after ringing pickup of transferred at-alert callSymptom : The called party may not be able to hear the caller.
Conditions
Workaround
CSCse47728: Path confirmation failures are observed with VoATMSymptom : Path confirmation failures seen with Voice over ATM traffic.
Conditions
Workaround
CSCse50167: Speed dial line buttons disappear from CME phones after the router reloads.Conditions
Workaround
CSCse56129: Cisco VG224 erroneously triggers hookflash during CME call pickup interactionSymptom : On the Cisco VG224, a voice port registered to CallManager Express running. 12.4(4)XC may falsely detect a hookflash in the call pickup case.
Conditions
Workaround
CSCse56660: Inbound calls to FXO port fail (no audio) when caller-id enabledSymptom : Inbound calls to Foreign Exchange Office (FXO) ports on Cisco IOS VoIP gateways connect, but audio is not present.
Conditions
Jun 20 01:41:15.855: mbrd_e1t1_vic_connect: setup failedJun 20 01:41:15.855: flex_dsprm_tdm_xconn: voice-port(0/0/1), dsp_channel(/0/2/0)Workaround
CSCse59347: CME/SRST IP phone unregister does not down the virtual pots peersSymptom : Using SRST 4.0 with Cisco Unified CallManager Express, calls may fail with a "user busy" signal.
Conditions
Workaround
CSCse69235: 871 XC - S&K interface forwarding results in hung interfaceSymptom : VLAN interfaces on Cisco 870 series routers may cease to function under heavy loads.
Conditions
Workaround
CSCse70333: CFwdAll erroneously reconfigured after disabling night serviceSymptom : CFwdAll incorrectly appears after night service is disabled.
Conditions
Workaround
CSCsc42589: Reset msg to TAPI client when phone reset restart by CME.CSCsc72502: The TAPI client may not show the call lines in ringing or connected state for the controlled Ephone.Conditions
Workaround
CSCse06975: Traceback at pak_copy_contiguous_to_contiguous when testing multicastSymptom : VoIP LMR multicast capability does not work on network module NM-HD-2V with E&M.
Workaround
CSCse15025:Intermittent analog/CAS voice port lockup or robotic voiceSymptom : An analog or digital CAS port enters a state in which inbound or outbound calls, or both, may no longer function through the port.
Conditions
When this problem occurs, it impacts multiple ports that share the same signaling DSP. The output of the show voice dsp signaling EXEC command shows which DSP is used by a port for signaling. The symptom may occur more often for ports that use DSP 1 on the PVDM2 module for signaling.
Because this issue impacts the signaling channels, it has been seen that calls either will not connect at all through impacted ports or in some cases when multiple simultaneous calls are present on adjacent voice ports/timeslots, the call may connect momentarily before being disconnected.
If a problem occurs only on a single voice port, there is another problem, not this caveat (CSCse15025). PRI/BRI calls are not affected because PRI/BRI does not utilize the DSP for signaling purposes.
When the symptom occurs with either a VIC2-xFXO or EVM DID/FXS module, enter the terminal monitor command followed by the test voice port port- number si-reg-read 39 1 command for one of the affected ports. The output typically should be a single octet value for register 39. When the symptom occurs, information for Registers 40, 41, and 42 is presented and some of the registers show double- octet information. See the example output (2) below.
When the symptom occurs with FXS or analog E&M modules, enter the terminal monitor command followed by the test voice port port- number codec-debug 10 1 command for one of the affected ports. The output typically should be a single octet value for each register. See the example output (4) below.
Workaround
CSCse47338: H245-signal DTMF relay requires signal update to end digitsSymptom : A third party device sends DTMF-relay using a h.245-signal, which includes duration of the digit. The CME gateway sends the digit to CUE, but the digit is not considered done unless another digit is received. This results in %SIP-3-DIGITEND: Missing digit end event messages.
Workaround
CSCse60250: Support Localization for the Cisco IP Phone 7906 on Cisco Unified CME.CSCse66125: Call-waiting ring in Ephone-dn-template fails to hold configurationSymptom : When trying to configure call-waiting ring on an Ephone-dn x, the configuration is accepted, but cannot be seen in the configuration.
CSCse75014: CME/SRST not able to make calls to Unity VMSymptom : With CME/SRST, you are able to make calls to Unity VM.VM port DN is not coming to "Idle" state after restarting Unity.
CSCeh69448: SCCP CME need to clean up TFTP binding.CSCek43094: Add TNP compatible Network locale tags to configure file.CSCsc82351:Device ID for the Goped phone is incorrectSymptom : The device ID for the Goped phone is incorrect.
Workaround
CSCsc85575: Subsequent call following a conference call by TNP Ph results in 1-way audioSymptom : No audio is received from a Cisco 7931 IP phone.
Conditions
Workaround
CSCsc99639: CME unable to make call on 2nd line using line button when 1 line busySymptom : The CME is unable to make call on a second line using line button when line 1is busy
Conditions
Workaround
CSCsd13066: No caller ID displayed for a forwarded call on IP Phone running 7.xSymptom : When release 7.x phoneload is used on a forwarding phone, the forward-to party does not see the forwarded party number on the display.
Workaround
CSCsd73435: The button-layout help CLI is unclear.CSCsd86966: Not able to create CTL file for 7906 phone.CSCsd90419: Cisco IP Phone 7941/61/11 does not support localization in SRSTSymptom : The Cisco 7941/61/11 phones display change to English in SRST mode.
Conditions
Workaround
CSCse05698: CME 12 build in locales support on 7941/61/11.CSCse08865: Enhance CME locale installer to support 7941/61/11/70/71CSCse16210: 7920 locale support enhancement.CSCse29308: CCME extension assigner extraCSCse35293: CCME extension assigner need to update CNF file.CSCse36127: If a Phone is viewed on the GUI the extensions are marked as normal ring even if they are monitored lines. So every time a change is made all lines have to be corrected via the CLI.Workaround
CSCse39419: Some phones XML file does not have correct m_vendorSymptom : Cannot configure the phone through the vendorConfig in the XML file
Further Problem Description: The VendorConfig is missing in the XML file.
Workaround
CSCse41295: MOH debugs flood the console when MOH file is unconfiguredSymptom : The console is flooded with MOH error debugs when the MOH source file is unconfigued.
Workaround
CSCse65819: Reset needed after extension assignment of 7914 attached phoneSymptom : Using the extension assigner to assign an Ephone will do a simple restart. If that phone has a Cisco IP Phone 7914 attached, the 7914 will not register. A reset is required. The extension assigner should detect the presence of a 7914 and issue a reset instead of a restart for that case.
Conditions
Workaround
Open Caveats - Release 12.4(4)XC4
There are no open caveats in this release.
Resolved Caveats - Release 12.4(4)XC3
CSCek37177: The Cisco IOS Transmission Control Protocol (TCP) listener in certain versions of Cisco IOS software is vulnerable to a remotely-exploitable memory leak that may lead to a denial of service condition.Symptom : This vulnerability only applies to traffic destined to the Cisco IOS device. Traffic transiting the Cisco IOS device will not trigger this vulnerability.
Workaround
CSCse37580: Router crashes using the @ppc_process_dispatch command.Symptom : A Cisco router crashes while making a call using the command test voice port detector ring-trip.
Workaround
Open Caveats - Release 12.4(4)XC3
There are no open caveats in this release.
Resolved Caveats - Release 12.4(4)XC2
CSCek24468: Dangling sessions at the end of stress testSymptom : Dangling bearer channels or voice DSP channels seen after stress test.
Conditions
Workaround
CSCek35185: Alignment errors dsp_stream_mgr_stop_featureSymptom : Traceback is observed.
Conditions
Workaround
CSCek38822: no-reg command does not work on SRSTSymptom : Not able to configure no-reg under SRST.
Conditions
Workaround
CSCek40136: The no-reg command on Ephone-dn should not apply to dialplan-patternSymptom : The dialplan-pattern can not register to SIP proxy or H323 gatekeeper although no no-reg configured for it.
Conditions
Workaround
CSCsc11833: Intermittent analog or digital CAS port lock up - in/out calls failSymptom : An analog or digital CAS port gets into a state where inbound and/or outbound calls coming through the port may not work.
Conditions
Workaround
CSCsc46528: Sub entry polling: number of rows returned inconsistently from Speedbird MIBSymptom : The ccmeEphoneActTable from CISCO-CCME-MIB provides inconsistent results.
Conditions
Workaround
CSCsc94215: Fix indexing in various tables in CISCO-SRST-MIB & related componentsSymptom : The index may not come out correctly if performing a get next for an item in a table.
Conditions
Workaround
CSCsd08105: 7960 speaker phone light does not turn off after pressing holdSymptom : When a call is put on hold on a 7960 phone and the call was placed on speaker phone mode, resuming the call on another phone does not clear the speakerphone light.
Workaround
CSCsd14203: MOH play using media play verb does not workSymptom : BACD AA script crashes while trying to play Music on Hold (MoH)
Conditions
Workaround
The sample below has Ephone-dn config for "dummy" MoH livefeed:
Ephone-dn 20 number <dummy-number> moh out-call BCDA! dial-peer voice 7 pots destination-pattern BCDA!Also enable debug ephone moh. Having dummy MoH Livefeed allows the MoH server to get started.
CSCsd27683: Cisco IOS gateway does not make H.245 TCP connection after it gets the addressSymptom : A Cisco IOS H.323 gateway running Cisco IOS Release 12.4(7) is not initiating the H.245 TCP connection.
Conditions
address and PI=1,2,8 in response to a fastStart Setup sent from the originating GW.Workaround
CSCsd35389: Deleted Ephone-dns never unregister with Gatekeeper unless GW reloadedSymptom : Cisco Unified CallManager Express registers "gatekeeper all" for the Ephone-dn are automatically registered, but when a Ephone-dn is deleted, it never unregisters with the gatekeeper.
Conditions
Workaround
CSCsd46933: New calls fail at next free DSP channelSymptom : Under stress with less intercall delay TDM backplane Ds0 may leak on Cisco AS5400XM using a Cisco 5510 DSP.
Conditions
Workaround
CSCsd54232: Qsig Call Forward shows AFW memories leakSymptom : Certain QSIG Call Forward Busy and Call Transfer operations might result in memory leakage.
Workaround
CSCsd71081: CME 4 Crashing & Tracebacks when DND button pressed on 7970 with 7914Symptom : Cisco Unified CallManager Express 4 reloads after the DND button is pressed.
Conditions
Workaround
CSCsd71195: Path confirmation failed for MGCP callsSymptom : Path confirmation fails for MGCP calls.
Conditions
Workaround
CSCsd78806: Cannot add ATA through GUISymptom : While trying to add "ATA" through the GUI for Cisco Unified CallManager Express, an error occurs on page when you try to save the information after configuring the ATA and its not possible to add the ATA.
Conditions
Workaround
CSCsd85687: Secondary number is not considered while parking to reserved-for slotSymptom : When a call is being parked from a phone whose primary DN is 8001, it does not get parked to 6101 since we fail to check and match the secondary number of the primary DN.
CSCsd91095: 7936 registration blocked by CLI: no auto-reg-EphoneSymptom : The command no auto-reg-Ephone should not block the 7936 phone from getting registered to Cisco Unified Call Manager Express.
Conditions
Workaround
Open Caveats - Release 12.4(4)XC2
There are no open caveats in this release.
Resolved Caveats - Release 12.4(4)XC1
CSCsd02098: SRTP for IOS-H323 is broken in 12.4(5.13)T2 $TSSymptom : There is no voice path. Packets are not encrypted or decrypted.
Conditions
Workaround
CSCed28266: Software forced crash when adding SIP call headersSymptom : A Cisco gateway may unexpectedly reload because of a software-forced crash when it builds a SIP ACK (acknowledgement) or BYE message.
Conditions
Workaround
CSCej73716: Dot1x configurations on L2 and L3 ports should be mutually exclusiveSymptom : To minimize the confusion may occur among customers and TAC, and to make the codebase easy to maintain, this caveat is raised to address the need to make the dot1x configuration applicable to only one layer at any time.
Workaround
CSCek26750: ogw(h323,slow start)--ipip1(sip)--ipip2(sip)--TGW not workingSymptom : This symptom occurs when the voice call fails in the following scenario example:
ogw (h323, slow start) -- ipipgw1(sip)---(sip)ipipgw2--tgw(sip)Conditions
Workaround
CSCek27525: 802.1x unable to authenticate once VLAN is bridgedSymptom : 802.1x clients are unable to authenticate when the vlan configured for these clients has the dot1x configuration and bridged to BVI interface.
Workaround
CSCek27755: Device authorize type for Cisco IP phone does not work.Symptom : Some 802.1x client options are not authorizing.
Workaround
CSCek29149: Flow-around broken with post-sync image to software releaseSymptom : With TNP phones, there is no voice-path when flow-around is enabled with the new sync image.
Workaround
CSCek32225: VTSP leak seen in SS7 scenarioSymptom : Memory leak seen in VTSP after stress test.
Conditions
Workaround
CSCek33537: Codec negotiation failed when SIP EP had mix-codec configuredSymptom : SIP EP with different codecs may not able to establish a stable call among them.
Conditions
Workaround
Further Problem Description: A basic call may be established among the SIP EP. But it was not proper setup with correct codec selection. So the subsequent action on the SIP EP, like transfer/forward/conference, etc. may fail.
CSCek34540: show csm call rate indicates double the actual rate for incoming CASSymptom : The command show csm call rate indicate double the actual rate for incoming CAS calls.
Conditions
Workaround
CSCek34673: Memory leak after overnight SS7 NI2+ loopback COT stressSymptom : There is a memory leak in ISDN and VTSP processes.
Conditions
Workaround
CSCsb23025: Locale installer does not include CME spec phrasesSymptom : User locale files are not available on Cisco Unified CME with 7911 phone.
Workaround
CSCsb72082: Memory corruption while ending a callSymptom : A Cisco router acting as a SIP gateway crashes when a call is placed from the SIP phone to a PBX phone.
Workaround
CSCsc37763: session_type and chan_type variables of FS OLCs are not updated initiallySymptom : When Fast Start calls are made, the following variables are not updated with the correct values:
ccb->h245.olc.chan_typeccb->h245.olc.session_typeConditions
Workaround
CSCsc57684: Internal Error and tracebacks on Cisco 5400Symptom : Internal Errors and tracebacks messages may be seen on 5400 router during normal use.
Workaround
CSCsc60509: Memory leak in CCSIP_UDP_SOCKETSymptom : Low memory is caused by a leak in CCSIP_SPI_UDP.
Conditions
Workaround
CSCsc87596: nramp fax fails with DMSP - no routeSymptom : All T.37 on-ramp fax calls fail with a "with DMSP - no route" error.
Conditions
Workaround
CSCsd16947: Spurious memory access traceback seen from 7914 button smashingSymptom : Spurious memory access is observed on a Cisco Unified CallManager Express when multiple DN buttons configured on an IP phone are pressed repeatedly and randomly.
Workaround
CSCsd36869: Cisco Unified CME does not put transferred number digits in line focusSymptom : Status line changes to "show from xxxx" instead of "reading transfer xxxx."
Conditions
Workaround
CSCsd36943: CME sends incorrect language code to phoneSymptom : Phone in services mode displays english text when the user-locale is set to Denmark. If the user-locale of the phone is set to Denmark, the phone sends in "dk" as the accepted language in the HTTP headers for IP phone services.
Conditions
Workaround
CSCsd39342: Call hung when 487 is not received after CancelSymptom : Call legs are hung and there is a memory leak in the stack.
Conditions
Workaround
CSCsd46569: Cisco Unified CME delayed call-waiting ring/beepSymptom : Call-waiting ring or beep does not give initial tone, and is delayed 10 seconds.
Conditions
Workaround
CSCsd47013: 2nd call caller-id not correct with shared linesSymptom : There is no call information for the second call displayed on the shared DN for other phones after the first call is terminated.
Conditions
Workaround
CSCsd54414: Ringing persists after 1st of 2 shared line calls is answered on anotherSymptom : The Ephone may continually ring.
Conditions
Workaround
CSCsd57802: Voice register CLI is not available for Cisco 2801 adventerpriceSymptom : The voice register global command is not accepted.
Conditions
Workaround
CSCsd58220: Cisco AS5400 does not disconnect call after rxing IDLESymptom : The recipients' phone rings continuously even after the caller goes on-hook.
Conditions
Workaround
CSCsd60182: The wrong DN may be chosen for SetCallState on a shared lineSymptom : The Ephone may keep ringing and the display may be incorrect.
Conditions
Workaround
CSCsd60412: SS7 NI2 COT fails with transponder mode in outgoing call with AS5X-FCSymptom : COT failure when making an outbound voice call in GW.
Conditions
Workaround
CSCsd67460: Cisco 7970/71 has erroneous acct, login and flash softkeysSymptom : This symptom occurs with Cisco 7970s and 7971 firmware running on Cisco Unified CME 4.0, the "Acct", "Login", and "Flash" softkeys are wrongly labeled as "No Park", "Service is", and "CallPark".
Conditions
Workaround
CSCek34759: Based on call ref call_id to be provided in COT REQ to TSPSymptom : COT fails for outgoing calls. Changes made to the platform resulted in this requirement. Unless the real call-id is passed, TSP will not be able to complete the COT and call for outgoing calls. This is because TSP must allocate and use the same DSP for COT and the call for outgoing calls.
Conditions
Workaround
Open Caveats - Release 12.4(4)XC1
There are no open caveats in this release.
Resolved Caveats - Release 12.4(4)XC
CSCsd28570:tclsh command bypass of AAA authorization commandsSymptom : A vulnerability exists within the Cisco IOS Authentication, Authorization, and Accounting (AAA) command authorization feature, where command authorization checks are not performed on commands executed from the Tool Command Language (Tcl) exec shell. This may allow authenticated users to bypass command authorization checks in some configurations resulting in unauthorized privilege escalation.
Conditions
Workaround
Further Problem Description: This particular vulnerability only affected Cisco IOS versions 12.3(4)T trains and onwards. (12.3 Mainline is not affected) Please refer to the Advisories "Software Versions and Fixes" table for the first fixed release of Cisco IOS software.
CSCsd17124: Router crashed due to Illegal Opcode exceptionSymptom : The Cisco 1812J router could crash due to one of the following:
1.
2.
3.
Conditions
Workaround
Open Caveats - Release 12.4(4)XC
There are no open caveats in this release.
Additional References
Use these release notes with:
Cisco CME:
http://www.cisco.com/en/US/products/sw/voicesw/ps4625/index.html
Cisco IP Phones:
http://www.cisco.com/univercd/cc/td/doc/product/ipcvoice.htm
Cisco SIP Configuration Guide:
Cisco Proxy Server Docs:
http://www.cisco.com/univercd/cc/td/doc/product/voice/sipproxy/index.htm
Cisco SRST:
Cisco 12.4 Voice:
http:www.cisco.com/univercd/cc/td/doc/product/software/ios123/124tcg/vcl.htm
Obtaining Documentation, Obtaining Support, and Security Guidelines
For information on obtaining documentation, obtaining support, providing documentation feed-back, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Open Source License Acknowledgements
The following notices pertain to this software license.
OpenSSL/Open SSL Project
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
License Issues
The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.
OpenSSL License:
Copyright © 1998-2007 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
4.
5.
6.
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).
Original SSLeay License:
Copyright © 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".
The word `cryptographic' can be left out if the routines from the library being used are not cryptography-related.
4.
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].
Use this document in conjunction with the documents listed in the "Additional References" section.
CCVP, the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar, Packet, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0705R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
© 2007, Cisco Systems, Inc. All rights reserved.
FeedbackContact Cisco
- Open a Support Case
- (Requires a Cisco Service Contract)