Juniper Networks CTPOS Release 7.0R1 Software Release Notes

Transcription

1 Juniper Networks CTPOS Release 7.0R1 Software Release Notes Release 7.0R1 September 2014 Revision 2 These release notes accompany Release 7.0R1 of the CTPOS software. They describe device documentation and known problems with the software. You can also find these release notes on the Juniper Networks CTP software documentation webpage, which is located at Contents New Features Support for Analog CESoPSN Bundles Over T1E1 on CTP2000 Devices Legacy (Non- analog) CESoPSN Bundle Configuration Limits on CTP2000 Devices Support for Y-Cable Redundancy on T1E1 Ports on CTP Enhancements to CESoPSN Bundle Query Output Configuring Bundle and Port Description Without Disabling the Bundle Support for NTP Time Zones Unlocking a User from the CTP Menu Support for VLAN Switching during Ethernet Failover Upgrade Information Upgrading from CTPOS Release 4.x, 5.x, 6.0x or 6.1x to CTPOS Release 7.x with an Upgrade Kit Upgrading from CTPOS Release 6.2x or Later to CTPOS Release 7.0R Manually Upgrading from CTPOS Release 6.6R3 to 7.0R Upgrading the Winmon Archive in Interactive Mode Upgrading the acorn_429_111121_dcardpld_t1e1_3_4wto_4.tgz Archive in Interactive Mode Upgrading the OpenSSL Archive in Interactive Mode Upgrading the Open SSH Archive in Interactive Mode Upgrading the NTP Archive in Interactive Mode Upgrading the FPGA Archive in Interactive Mode Upgrading the Boot FPGA Archive in Interactive Mode

2 CTPOS Release 7.0R1 Software Release Notes Upgrading the KIS Archive in Interactive Mode Upgrading the Bash Archive in Interactive Mode Upgrading the acorn_429_7.0r1_ tgz Archive in Interactive Mode Upgrading the acorn_429_111021_em9c_fxo61_fxs50_voice.tgz Archive in Interactive Mode Resolved Issues in CTPOS Release 7.0R Known Issues in CTPOS Release 7.0R CVEs Addressed in CTPOS Release 7.0R CTP Documentation and Release Notes Requesting Technical Support Self-Help Online Tools and Resources Opening a Case with JTAC Revision History

3 New Features New Features The following features have been added to CTPOS Release 7.0R1. Support for Analog CESoPSN Bundles Over T1E1 on CTP2000 Devices Starting from CTPOS Release 7.0R1, CTP2000 system supports analog CESoPSN bundles over T1E1, even if no VComp card is installed. To create an analog CESoPSN bundle, the T1E1 card must be installed in slot 0. If T1E1 card is not installed in slot 0, the system displays the message Analog Port CESoPSN Bundle will be created only when there is a T1E1 card present on slot 0. The CTP2000 device supports a maximum of 16 analog CESoPSN bundles. [PR/947204]. Legacy (Non- analog) CESoPSN Bundle Configuration Limits on CTP2000 Devices Starting from CTPOS Release 7.0R1, CTP2000 device supports a maximum of 16 CESoPSN Bundles on T1E1 Ports[0:3] and an additional 16 CESoPSN bundles on T1E1 Port[4:7]. CESoPSN bundles over T1E1 supports a maximum of 32 bundles per T1E1 card. Thus, the device supports a total of 64 bundles, which could be CTP, SAToP, CESoPSN, or VCOMP bundles. Support for Y-Cable Redundancy on T1E1 Ports on CTP2000 Starting from CTPOS Release 7.0R1, CTP2000 devices support Y-cable redundancy on both serial and T1E1 interfaces. CTPOS Release 6.6 and earlier support Y-cable redundancy only on serial interfaces. T1E1 ports support Y-cable redundancy by means of a software link. A software link does not require a Y cable. Y-cable port pairs maintain contact with each other by using the OAM packets that port pairs use to communicate with each other. [PR/947210] Enhancements to CESoPSN Bundle Query Output CESoPSN bundle query output has been enhanced by including fields such as Last counter clear and Checked out PPS. [PR/ ] Configuring Bundle and Port Description Without Disabling the Bundle Starting from CTPOS Release 7.0R1, you can add or modify a bundle description or a port description without disabling the bundle. [PR/ ] Support for NTP Time Zones Starting with CTPOS Release 7.0R1, you can change the time zone on the basis of your location. We recommend that you configure the same time zone for both CTPView server and CTPOS to enable the system to correctly display the statistics graphs. Conflicting time zones causes the plot values to be offset from their correct positions on the time axes. [PR/980288] 3

4 CTPOS Release 7.0R1 Software Release Notes Unlocking a User from the CTP Menu Starting with CTPOS Release 7.0R1, you can unlock a user from the CTP Menu interface. Every user created in the CTP system expires after a specified time limit. If there is no user activity for a specified number of days after the expiry of the password, the user is locked out of the system. Such users can access the system only after a system administrator unlocks their account. The menu option, Unlock user account is displayed only if you log in as a system administrator. [PR/969805] Support for VLAN Switching during Ethernet Failover Starting with CTPOS release 7.0R1, switching of VLAN configuration is supported during Ethernet failover. [PR/971882] Upgrade Information You upgrade to CTPOS 7.x as follows: If you are upgrading to CTPOS Release 7.x from software releases 4.x, 5.x, 6.0x or 6.1x, you use upgrade kits to upgrade your CTP device to CTPOS Release 7.x If you are upgrading to CTPOS Release 7.0x from software releases 6.2Rx, 6.3Rx, 6.4Rx, 6.5Rx, or 6.6Rx, you can use software files for the upgrade. Upgrading from CTPOS Release 4.x, 5.x, 6.0x or 6.1x to CTPOS Release 7.x with an Upgrade Kit Because of the new features and hardware supported in CTPOS Release 7.0x, a direct code upgrade from earlier versions of CTPOS by using an upgrade archive is not supported. You must perform the upgrade to CTPOS Release 7.0x by using an upgrade kit. There are two upgrade kits, the use of which depends on whether you are using a PP310 or PP332 processor in your CTP2000 Series device. If the CompactFlash card contains CTPOS 6.1R7 or earlier and you want to upgrade directly to CTPOS Release 7.0R1, you need to reburn the CompactFlash card with the CTPOS Release 7.0 code before you perform the upgrade. Upgrading from CTPOS Release 6.2x or Later to CTPOS Release 7.0R1 To upgrade from CTPOS Release 6.2R1 or later, use the following files: CTPOS Upgrade Archive File: acorn_429_7.0r1_ tgz Flash Archive: flash_7.0r1.img Required only when you are creating a new flash card. CTP Complete Package File: ctp_complete_7.0r1_ tgz Required only when you use CTPView. Migration Flash Archive File: acorn_xxx_7.0r1_141028_migration_flash.tgz Required only when you create a migration flash card. CTP2000 BIOS Archive File: acorn_429_110915_bios_v221.tgz Required only during migration. This file is not required for the CTPOS upgrade. 4

5 Upgrade Information Voice Card Archive File: acorn_429_111021_em9c_fxo61_fxs50_voice.tgz NTP: acorn_429_ntp4.2.6p5_ tgz This archive file is added to resolve PR FPGA Archive File: acorn_429_140915_fpga_150_s27_t1c_2000_s1b_t2c.tgz Boot FPGA Archive File: acorn_xxx_boot_fpga_s25_t1b_ tgz Required only for CTP 150 devices. CTP2000 Winmon Archive File: acorn_429_111115_winmon_210.tgz Dcard Archive File: acorn_429_111121_dcardpld_t1e1_3_4wto_4.tgz KIS Archive File: acorn_xxx_140326_kis.tgz Bash Archive File: acorn_429_bash _ tgz OpenSSL Archive File: acorn_429_openssl_0.9.8za_ tgz OpenSSH Archive File: acorn_429_openssh_6.6p1_ tgz NOTE: The version of the Winmon support file (210) is the same as that in the CTPOS Release 6.2R1 Winmon version. However, the date portion of the file name is modified ( vs ). Only the installation file is modified. There is no change in the Winmon code, hence the change in date and not the version. The voice daughter card support files are also affected by this. Make sure you disable all ports and bundles before starting the upgrade process. CAUTION: When you upgrade CTPOS by using the Boot FPGA archive file, you must ensure that there is no power fluctuation or interruption during the upgrade processes. Any fluctuation or interruption of power during the upgrade can make the device unusable and the device will have to be returned to the factory. The CTP device must not be used until the upgrade process is complete. Manually Upgrading from CTPOS Release 6.6R3 to 7.0R1 BEST PRACTICE: Before you start the upgrade process, you must ensure that only the required archive files are present in the /tmp directory. You can manually upgrade any package in noninteractive or interactive mode. You can use the upgrade y command to upgrade a package in noninteractive mode. 5

6 CTPOS Release 7.0R1 Software Release Notes NOTE: The Winmon file is used to upgrade CTP2000-IM-8P-T1E1 Cards. The FPGA file is used to upgrade both CTP2000-IM-8P-T1E1 and CTP2000-IM-8P-xx cards. In the CTP2000 Series, you may have to upgrade the voice support files if they are present. When you upgrade the archive in interactive mode, you have to select the following two options after issuing the upgrade command from the CLI: Upgrading the Winmon Archive in Interactive Mode To upgrade the Winmon archive: Loading Micro Winmon image to SCC0. Same version of Micro Winmon is already programmed, skip...! Upgrading the acorn_429_111121_dcardpld_t1e1_3_4wto_4.tgz Archive in Interactive Mode To upgrade the acorn_429_111121_dcardpld_t1e1_3_4wto_4.tgz archive: Do you want to program all PLDs in range without asking? y[n]: Do you want to program unrecognized (unprogrammed?) PLDs? y[n]: y Enter the PLD type (4wto,t1e1): t1e1 Do you want to force PLD programming (regardless of revision)? y[n]: y Port se-1/0 may have a DCARD with an empty PLD Port se-1/7 may have a DCARD with an empty PLD Port se-2/0 has upgradable t1e1 PLD rev 1 Port se-2/7 has upgradable t1e1 PLD rev 1 All ports on this system will be disabled Do you want to continue? y[n]: y ===== Deleting all ports and waiting for packet flow to stop ===== Checking card 0, got type te with 8 ports. Checking card 1, got type se with 8 ports. Found port se-1/0 empty DCARD. Will program with T1E1 PLD Do you want to upgrade this PLD? y[n]: n

7 Upgrade Information Found port se-1/7 empty DCARD. Will program with T1E1 PLD Do you want to upgrade this PLD? y[n]: n Checking card 2, got type se with 8 ports. Found port se-2/0 T1E1 DCARD with PLD rev 1 Do you want to upgrade this PLD? y[n]: y Programing PLD on port se-2/0 with PLD rev 3 DONE Found port se-2/7 T1E1 DCARD with PLD rev 1 Do you want to upgrade this PLD? y[n]: y Programing PLD on port se-2/7 with PLD rev 3 DONE ===== Restoring system database ===== ===== Completed install script execution ===== ===== Archive Cleanup ===== Upgrading the OpenSSL Archive in Interactive Mode To upgrade the acorn_429_openssl_0.9.8za_ tgz archive: Continuing... ===== Uncompressing and Extracting Archive ===== Archive file: acorn_429_openssl_0.9.8za_ tgz acorn_install/ acorn_install/gui_instr acorn_install/install acorn_install/openssl-0.9.8za_ tgz Running install interactively ******************************************************************* This installation script will update openssl version to 0.9.8za ******************************************************************* Would you like to continue? y[n]: y. done. Upgrading the Open SSH Archive in Interactive Mode To upgrade the acorn_429_openssh_6.6p1_ tgz archive: CTP system software upgrade utility - Version Found kernel version , setting KVER to 429 Checking for active menu sessions. Do you want to install the newest archive in quick mode (no questions)? y[n]: y Continuing OpenSSH 6.6p1 already installed, did not reinstall! ===== Archive Cleanup ===== Done... 7

8 CTPOS Release 7.0R1 Software Release Notes Upgrading the NTP Archive in Interactive Mode To upgrade the acorn_429_ntp4.2.6p5_ tgz archive: ****************************************************************** NOTE: CTPOS code upgrades will interrupt data on running circuits. Say "no" to run more interactive or install a different archive) ****************************************************************** Continuing... ******************************************************************* This installation script will update NTP on this system to version 4.2.6p5. After installation, the box MUST be rebooted. ******************************************************************* Would you like to continue? y[n]: y Done... Upgrading the FPGA Archive in Interactive Mode To upgrade the acorn_429_140915_fpga_150_s27_t1c_2000_s1b_t2c.tgz archive: ****************************************************************** NOTE: CTPOS code upgrades will interrupt data on running circuits. Say "no" to run more interactive or install a different archive) ****************************************************************** Continuing... ===== Uncompressing and Extracting Archive ===== Archive file: acorn_429_140915_fpga_150_s27_t1c_2000_s1b_t2c.tgz acorn_install/ acorn_install/install acorn_install/nova.rbf acorn_install/gluon_t1e1.rpd acorn_install/nova_2.rbf acorn_install/epcs acorn_install/gluon.rpd acorn_install/load_fpga Running install interactively Do you want to upgrade the FPGAs on all cards? n[y]: y Do you want to upgrade the runtime FPGA image? n[y]: y Do you want to upgrade only FPGA images that need upgrading? n[y]: y Do you want to be asked before upgrading each FPGA? y[n]:.. Upgrading FPGA.. Upgrading the Boot FPGA Archive in Interactive Mode To upgrade the acorn_xxx_boot_fpga_s25_t1b_ tgz archive: 8

9 Upgrade Information NOTE: After you upgrade the FPGA archive, you need to upgrade the main archive and restart the system. NOTE: Boot FPGA is applicable to CTP150 systems only. ****************************************************************** NOTE: CTPOS code upgrades will interrupt data on running circuits. Say "no" to run more interactive or install a different archive) ****************************************************************** Continuing... ===== Uncompressing and Extracting Archive ===== Archive file: acorn_xxx_boot_fpga_s25_t1b_ tgz acorn_install/ acorn_install/gluon_t1e1.rpd acorn_install/load_fpga acorn_install/install acorn_install/nova_2.rbf acorn_install/epcs acorn_install/gui_instr acorn_install/gluon.rpd acorn_install/nova.rbf Running install interactively ***** CTP150 Boot upgrade archives are not for CTP-2000! *****.. ManageFlashVersions: Skip... This is a Boot archive... Upgrading the KIS Archive in Interactive Mode To upgrade the acorn_xxx_140326_kis.tgz archive: Do you want to install the newest archive in quick mode (no questions)? y[n]: Continuing... ===== Uncompressing and Extracting Archive ===== Archive file: acorn_xxx_140326_kis.tgz acorn_install/ acorn_install/install acorn_install/kern_ipmi_snmp.md5sums acorn_install/kern_ipmi_snmp.tgz Running install interactively ===== Archive Cleanup ===== Done... Upgrading the Bash Archive in Interactive Mode To upgrade the acorn_429_bash _ tgz archive: Continuing... 9

10 CTPOS Release 7.0R1 Software Release Notes Would you like to continue? y[n]: y ===== BASH installed! ===== Done... Upgrading the acorn_429_7.0r1_ tgz Archive in Interactive Mode To upgrade the acorn_429_7.0r1_ tgz archive: Would you like to continue? y[n]: y Would you like to continue? y[n]: y Upgrading the acorn_429_111021_em9c_fxo61_fxs50_voice.tgz Archive in Interactive Mode To upgrade the acorn_429_111021_em9c_fxo61_fxs50_voice.tgz archive: Card 3 is a 4W-E&M card with correct firmware (version c). Do you want to force download firmware version c to this card? [y] n Card 3 (4W-E&M) s/n firmware actual (req) c (452059c) download 0 Card 4 (FXS) s/n firmware actual (req) ( ) download 0 Card 5 (FXO) s/n firmware actual (req) ( ) download 0 Card 6 is not a voice card. Skipping card 3 type 4W-E&M, not needing firmware upgrade. Skipping card 4 type FXS, not needing firmware upgrade. Skipping card 5 type FXO, not needing firmware upgrade. Restart the system. NOTE: For information about upgrading CTPOS Release 6.1 and earlier, refer to the Juniper Networks Technical Support Knowledge Base article KB Resolved Issues in CTPOS Release 7.0R1 The following issues have been resolved in CTPOS Release 7.0R1. System log files must provide sufficient information that is helpful for troubleshooting in the event of a system crash. [PR/855242] The CTP system must prompt the user to upgrade the version of the newly installed T1E1 card to the required version. [PR/855254] When secondary revert is disabled, the AAS bundle keeps waiting for the secondary route instead of connecting to the primary route. [PR/925363] 10

11 Known Issues in CTPOS Release 7.0R1 RMR removes only the first static route defined on each interface when the next hop is unreachable. [PR/925482] The SSH session becomes unresponsive after the system is upgraded to CTPOS Release 5.4R12. [PR/933799] CTP150 device is reset because of excessive utilization of memory caused by the loading of SNMP cache. The SNMP cache is now loaded only if you issue SNMP commands such as snmpwalk, get, or getnext. In addition, to avoid any possible memory leak due to syslog, a new log file named script_log has been created at /var/log directory to log all entries related to Perl script files of CTP. [PR/942495] CTPOS Release 6.2x does not allow configuration of static routes when RMR is enabled. [PR/943025] When a CTP150 system is manually upgraded from release CTPOS Release 6.2R1 to CTPOS Release 6.6R1, the the system was unable to perform MIB walk for Acorn MIBs. [PR/948935] CTPOS must support more VIP ports. CTPOS currently supports only 56 VIP ports. [PR/986759] The CTP system displays the error message unknown key when performing a VLAN-enabled Ethernet failover. [PR/997158] Known Issues in CTPOS Release 7.0R1 This section lists the known issues in CTPOS Release 7.0R1. Serial inband signaling does not work properly when multiple output signals are configured to carry inband signals. [PR/733075] PBS does not work when configured with PPP encapsulation on CTP 150 devices. [PR/784778] CVEs Addressed in CTPOS Release 7.0R1 The following tables lists the CVEs that have been addressed in CTPOS Release 7.0R1. For more information about the individual CVEs, see Table 1: Critical or Important CVEs Included in ntp Critical or Important CVEs Included in ntp CVE CVE

12 CTPOS Release 7.0R1 Software Release Notes Table 2: Critical or Important CVEs Included in OpenSSH 6.6 Critical or Important CVEs Included in OpenSSH 6.6 CVE Table 3: Critical or Important CVEs Included in OpenSSL 0.9.8za Critical or Important CVEs Included in OpenSSL 0.9.8za CVE CVE CVE CVE CVE CVE Table 4: Critical or Important CVEs Included in BASH Version Critical or Important CVEs Included in BASH Version CVE CTP Documentation and Release Notes Requesting Technical Support For a list of related CTP documentation, see If the information in the latest release notes differs from the information in the documentation, follow the CTPOS Release Notes and the CTPView Server Release Notes. To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at Technical product support is available through the Juniper Networks Technical Assistance Center (JTAC). If you are a customer with an active J-Care or JNASC support contract, or are covered under warranty, and need post-sales technical support, you can access our tools and resources online or open a case with JTAC. JTAC policies For a complete understanding of our JTAC procedures and policies, review the JTAC User Guide located at Product warranties For product warranty information, visit JTAC hours of operation The JTAC centers have resources available 24 hours a day, 7 days a week, 365 days a year. 12

13 Requesting Technical Support Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: Find CSC offerings: Search for known bugs: Find product documentation: Find solutions and answer questions using our Knowledge Base: Download the latest versions of software and review release notes: Search technical bulletins for relevant hardware and software notifications: Join and participate in the Juniper Networks Community Forum: Open a case online in the CSC Case Management tool: To verify service entitlement by product serial number, use our Serial Number Entitlement (SNE) Tool: Opening a Case with JTAC You can open a case with JTAC on the Web or by telephone. Use the Case Management tool in the CSC at Call JTAC ( toll-free in the USA, Canada, and Mexico). For international or direct-dial options in countries without toll-free numbers, see 13

14 CTPOS Release 7.0R1 Software Release Notes Revision History September 2014 Revision 1, CTPOS Release 7.0R1 All rights reserved. Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. 14