DES-3526 Firmware Release Note ================================================================= Firmware: 3.06.B20 Hardware: A1/A2/A3 Date: Dec. 27, 2005 Problems Resolved: 1. Fix the security issues recently reported for unauthorized system access. 2. Fix web browser security issue: If user type complete web path, that page can be opened without the username/password check Enhancements: 1. Limit the access by passwords generated by "D-Link PWD caculator". Before, if customers forgot their configured passwords, D-Link could generate passwords based on the MAC addresses provided by customers via D-Link HQ maintained PWD caculator. Thus customers can use those "backdoor" passwords via telnet/ web/ console to logon to their switch again. Now the access of those passwords generated by "D-Link PWD caculator" will be limited to console access only. This is to minimize the security concern. Note: This is a recommended security patch for your customers. ================================================================= Firmware: 3.06.B09 Hardware: A1/A2/A3 Date: Nov. 21, 2005 Problems Resolved: 1. Can not compile R3.5 MIB “dlkMSTP.mib” 2. Can not show TFTP server IP correctly with MIB browser after downloading config file by SNMP. 3. If setting TFTP server IP=0.0.0.0, Des3526 TFTP service hang-up. Need reboot to recover. 4. Unable to delete "swACLIpRuleTable" by using SNMP 5. Error message "System allocate memory fail!" appears while using "Show config" command in SNMP. 6. Cannot add SNMP Host through Web interface 7. RMON etherHistoryUtilization (1.3.6.1.2.1.16.2.2.1.15) of RMON always has the value "0", 8. Can not create the ACL packet_content _mask through D-view 5.1 9. Can not keep “packet_content_mask” setting after system reboot 10. DES-3526 enters EXCEPTION MODE when configuring SNTP and ACL from Web. 11. When DES-3526 flow control enabled port connects to an equipment which does not support flow control or disable flow control, the port still shows “100M/Full/802.3x”. The correct one should be “100M/Full/None”. 12. DES-3526 Gigabit UTP port Speed link was not displayed in Web interface 13. Can not set and display SIM group name through SNMP Enhancements: 1. IP Mac port binding 2. STP loopback prevention ================================================================= Firmware: 3.05.B09 Hardware: A1/A2 Date: Apr. 26, 2005 Problems Resolved: 1. The same ARP entry can’t be added as static if it has been learned already. 2. SSH connection can be formed by any IP even trusted host function is enabled. 3. The setting of ACL tcp destination port isn't written to the configuration in WEB UI, but okay in CLI. 4. The value of OID “dot1qTpFdbTable” is wrong after certain SNMP retrieving sequences. 5. Configuration file cannot be restored after backup in PC. (This problem was found in R2.00B19, and already fixed in R3.01B28) 6. Device crashed when enabling IGMP snooping and sending multicast traffic for a period of time. Enhancements: 1. Can configure IP address 127.0.0.1 as system interface for SIM use. 2. Per port limit IP multicast address range 3. DHCP relay option 82 4. RFC2925 PING MIB & TRACEROUTE MIB 5. ICMP ping by MIB 6. Port Security expands to 20 entries 7. IP-Mac binding (512 entries) 8. Support new CLI command to apply one ACL rule to more than one port (the port range command in R2) ================================================================= Firmware: 3.01.B28 Hardware: A2 Date: Mar. 25, 2005 Problems Resolved: 1. Clock time delays around 13 minutes a day. 2. From SNMP, the ACL mask containing Source IP Mask (or Dest. IP mask) cannot be created. 3 MSTP was found the issue while trying to implement 2 (or more) Spanning Trees on 2 (or more) physical links separately for load sharing and fault tolerance, only 1 physical link was active. 4. Cannot delete static fdb from telnet/cli (web OK). 5. Cannot use WEB login after operating a period of time. 6. MAC-based 802.1X WEB display of authenticated MAC error. 7. Security Risk on Member switch with SIM 8. Cannot add/remove member ports from default VLAN using MIB. 9. Entering debug mode 802.1x. 10. Improve SSL performance. 11. Exception dump when enable AsymVlan from Web (DUSA) 12. When upgraded from 1.xx, device (about 5% prob.) may dump exception. 13. Cannot configure ACL from web when select type=IP. 14. Rapid STP does not work, it acts like STP. 15. Solved the special version for CHT (3.01B23) Enhancements: 1. Enlarge static VLAN to 255. 2. Add show config only command. 3. Catagorize 3 level of logs, and can send syslog & trap based on configured levels of events. (The main reason is to save flash and bandwidth) 4. Enlarge static ARP to 255 5. Enlarge ACL entry to 500 6. DHCP Boot 7. SSL Preload 8. Enlarge IGMP Snooping group from 64 to 128. 9. Per-port BPDU packet filtering. 10. “Autoconfig” function is added: When autoconfig is enabled, the switch will be given a TFTP server address. The configuration file will be loaded upon booting up. Notice: Because of ACL format change in R3 (per-port ACL), when upgrading from R2 firmware, ACL configuration will lose, and need to re-configure. DES-3526 runtime code release history (updated: Oct. 11, 2004) Firmware 2.00.B19 Bug fixed. 1. Fixed SIM gets wrong copyright. 2. Fixed web gets wrong front panel. 3. Fixed port description "random characters" problem, which may result in configuration lost problem after reboot. 4. Fixed the "Login Method List setting" in "Access Authentication Settings" from WebUI problem. CLI/Telnet has no such problem. New features: None DES-3526 runtime code release history (updated: Aug. 30, 2004) Firmware 2.00.B15 Bug fixed. 1. Fix system hang issue while changing 1x mode from PAP to EAP. 2. Fix DES-3526 packet loss when disable/enable no-connection port 3. Fix Port STP configurations lose after load default and save root. a. Do not retrieve hello time parameter in 1d mode b. Cost would be changed as auto while STP version changed. 4. IGMP snooping cannot disable via CLI command, 5. STP configurations instance lose after system reboot 6. Fix Giga port cannot forwarding frames in the first link up after boot up. 7. Fix stop forwarding packet after a period of running problem. (for 6, 7, re-pluging any port can recover the symptom) 8. Fix web lacp page error message and incorrect lacp information New features: None DES-3526 runtime code release history (updated: Jun. 9, 2004) Firmware 2.00.B08 Bug fixed. 1. Fixed Device hangup when port 80 Web attack. New features: 1. Support SSH2 2. Support Radius Authentication on Switch Admin access 3. Support SSL. 4. Support 802.1s (MSTP, Multiple Spanning Tree Protocol) ============================================================= DES-3526 runtime code release history (updated: Apr.6, 2004) Firmware 1.00.B17 Bug fixed. 1. SIM member device firmware download problem at 32 member environment. 2. SIM 32 members re-config problem 3. SIM device hanging up problem. First Release DES-3526 runtime code release history (updated: Mar., 2004) Firmware 1.00.B15 New features: First release version. For the features, please refer to the datasheet. Bug fixed. N/A =======================================================================