HP Cisco Nexus 5000 Cisco MDS 9000 Family Release Notes for Cisco MDS NX-OS Re - Page 42

VRRP Availability, Using a RSA Version 1 Key for SSH Following an Upgrade, CFS Cannot Distribute All

Page 42 highlights

Limitations and Restrictions Send documentation comments to mdsfeedback-doc.com. VRRP Availability The Virtual Router Redundancy Protocol (VRRP) is not available on the Gigabit Ethernet interfaces on the MSM-18/4 module or module 1 of the MDS 9222i switch, even though it is visible on these modules. The feature is not implemented in the current release. Using a RSA Version 1 Key for SSH Following an Upgrade For security reasons, NX-OS Release 4.1(3a) does not support RSA version 1 keys. As a result, if you upgrade to NX-OS Release 4.1(3a) from an earlier version that did support RSA version 1 keys, and you had configured a RSA version 1 key for SSH, then you will not be able to log in through SSH following the upgrade. If you have a RSA version 1 key configured for SSH, before upgrading to NX-OS Release 4.1(3a), follow these steps: Step 1 Step 2 Step 3 Disable SSH. Create RSA version 2 DSA keys. Enable SSH. Proceed with the upgrade to NX-OS Release 4.1(3a). If you upgrade before disabling SSH and creating RSA version 2 keys, follow these steps: Step 1 Step 2 Step 3 Step 4 Open a Telnet session and log in through the console. Issue the no feature ssh command to disable SSH. Issue the ssh key rsa 1024 command to create RSA version 2 keys. Issue the feature ssh command to enable SSH. CFS Cannot Distribute All CallHome Information In MDS NX-OS Release 4.1(3a), CFS cannot distribute the following CallHome commands that can be configured with the destination-profile command: • destination-profile profile_name transport-method • destination-profile profile_name http The output of the show running-config callhome command shows configured CallHome commands: switch# show running-config callhome > version 4.1(3) > callhome > email-contact [email protected] > phone-contact +14087994089 > streetaddress xyxxyx > distribute > destination-profile testProfile > destination-profile testProfile format XML Cisco MDS 9000 Family Release Notes for Cisco MDS NX-OS Release 4.1(3a) 42 OL-17675-05

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54

Send documentation comments to mdsfeedback-doc.com.
42
Cisco MDS 9000 Family Release Notes for Cisco MDS NX-OS Release 4.1(3a)
OL-17675-05
Limitations and Restrictions
VRRP Availability
The Virtual Router Redundancy Protocol (VRRP) is not available on the Gigabit Ethernet interfaces on
the MSM-18/4 module or module 1 of the MDS 9222i switch, even though it is visible on these modules.
The feature is not implemented in the current release.
Using a RSA Version 1 Key for SSH Following an Upgrade
For security reasons, NX-OS Release 4.1(3a) does not support RSA version 1 keys. As a result, if you
upgrade to NX-OS Release 4.1(3a) from an earlier version that did support RSA version 1 keys, and you
had configured a RSA version 1 key for SSH, then you will not be able to log in through SSH following
the upgrade.
If you have a RSA version 1 key configured for SSH, before upgrading to NX-OS Release 4.1(3a), follow
these steps:
Step 1
Disable SSH.
Step 2
Create RSA version 2 DSA keys.
Step 3
Enable SSH.
Proceed with the upgrade to NX-OS Release 4.1(3a).
If you upgrade before disabling SSH and creating RSA version 2 keys, follow these steps:
Step 1
Open a Telnet session and log in through the console.
Step 2
Issue the
no feature ssh
command to disable SSH.
Step 3
Issue the
ssh key rsa 1024
command to create RSA version 2 keys.
Step 4
Issue the
feature ssh
command to enable SSH.
CFS Cannot Distribute All CallHome Information
In MDS NX-OS Release 4.1(3a), CFS cannot distribute the following CallHome commands that can be
configured with the
destination-profile
command:
destination-profile
profile_name
transport-method
destination-profile
profile_name
http
The output of the
show running-config callhome
command shows configured CallHome commands:
switch#
show running-config callhome
> version 4.1(3)
> callhome
>
email-contact [email protected] <mailto:[email protected]>
>
phone-contact +14087994089
>
streetaddress xyxxyx
>
distribute
>
destination-profile testProfile
>
destination-profile testProfile format XML