Fortinet opublikował właśnie aktualizację oprogramowania dla przełączników FortiSwitch oznaczoną numerem wersji 6.2.5. Aktualizacja dotyczy głownie opisu funkcji urządzeń FortiSwitch w tej wersji oprogramowania oraz rozwiązanych problemów z poprzednią wersją. W aktualizacji rozwiązano również problem połączenia poprzez HTTP i HTTPS z tej samej stacji klienta lub przez tą samą przeglądarkę, po aktualizacji problem nie występuje. Wyeliminowano również błąd, który podczas logowania po protokole HTTPS jako Administrator generował wewnętrzny błąd serwera.
When a new link is added to an MCLAG ring topology, too much traffic is dropped.
The network cannot be accessed because of an STP loop in a closed ring topology.
Rozwiązane problemy:
| Bug ID | Description |
|---|---|
| 619284 | The Zabbix SNMP server is not receiving output from the FortiSwitch unit. |
| 626017 | When a new link is added to an MCLAG ring topology, too much traffic is dropped. |
| 629721 | HTTP and HTTPS connections from the same client or from the same browser do not work. |
| 633433 | An internal server error occurs when logging in as admin with HTTPS. |
| 648046, 649564 |
The network cannot be accessed because of an STP loop in a closed ring topology |
| 653907 | After FortiSwitch units were replaced, three APC network management cards and a Zebra printer cannot be accessed. |
| 658968 | The syslog source IP address is a loopback IP address, but the interface is still sending syslog data. |
Znane problemy do rozwiązania:
| Bug ID | Description |
|---|---|
| 382518, 417024, 417073, 417099, 438441 |
DHCP snooping and dynamic ARP inspection (DAI) do not work with private VLANs (PVLANs). |
| 414972 | IGMP snooping might not work correctly when used with 802.1x Dynamic VLAN functionality. |
| 480605 | When DHCP snooping is enabled on the FSR-112D-POE, the switched virtual interface (SVI) cannot get the IP address from the DHCP server. |
| 510943 | The time-domain reflectometer (TDR) function (cable diagnostics feature) reports unexpected values. |
| 520954 | When a “FortiLink mode over a layer-3 network” topology has been configured, the FortiGate GUI does not always display the complete network. |
| 542031 | For the 5xx switches, the diagnose switch physical-ports led-flash command flashes only the SFP port LEDs, instead of all the port LEDs. |
| 548783 | Some models support setting the mirror destination to “internal.” This is intended only for debugging purposes and might prevent critical protocols from operating on ports being used as mirror sources. |
| 572052 | Backup files from FortiSwitchOS 3.x that have 16-character-long passwords fail when restored on FortiSwitchOS 6.x. In FortiSwitchOS 6.x, file backups fail with passwords longer than 15 characters.Workaround: Use passwords with a maximum of 15 characters for FortiSwitchOS 3.x and 6.x |
| 585550 | When packet sampling is enabled on an interface, packets that should be dropped by uRPF will be forwarded. |
Pozdrawiamy,
Zespół B&B
Bezpieczeństwo w biznesie