R 1 4 8 6 RN
R 1 4 8 6 RN
R 1 4 8 6 RN
August 3, 2017
These Release Notes describe the recommended practices and known issues
that apply to software version 1.4.8.6 for the products listed in the table below.
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6 1
Release Notes
2 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 3
Release Notes
4 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 5
Release Notes
NOTE *For the Sx500 Series, each combo mini-GBIC port has one 10/100/1000 copper
Ethernet port and one mini-GBIC/SFP Gigabit Ethernet slot, with one port active at
a time.
TIP As with any firmware release, please read these release notes before upgrading
the firmware. Cisco also recommends backing up your configuration before any
firmware upgrade.
Contents
Hardware Versions, page 7
6 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
Hardware Versions
This firmware runs on two different versions of hardware for the 200 Series Smart
Switches, and the 300 Series Managed Switches. There is a single version of
hardware for the 500 and ESW2 series switches. The number of supported MAC
Addresses, Active VLANs, and Multicast Groups will be different depending on
which version of hardware you are using. Refer to the following table for details:
Sx500, SG500X and ESW2 switches have a single version of HW, see the
admin guide for details.
To determine which version of hardware you are using, click Status > System
Summary. Look at the lower portion of the screen under the graphic
representation of the switch for the PID VID. The descriptor will end in the VID
number. The version information is also shown on the product label on the back of
the switch. The PID VID is located at the bottom of the label.
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 7
Release Notes
• For Sx200/Sx300 models, first upgrade the device image to image version
1.3.5.x and upgrade the boot file to 1.3.5.06
• For Sx500 models, first upgrade the device image to image version 1.3.7.x
and upgrade the boot file to 1.3.7.01
During the first bootup of the new image version (1.3.5.x or 1.3.7.x), the flash file
system is upgraded and:
• This process takes a few minutes. “…” progress in the console is displayed
during this process (not relevant to Sx200).
• The original image file is deleted. The two images on the Flash after the
upgrade will have the same version (1.3.5.x/1.3.7.x).
After the device is running version 1.3.5.x/1.3.7.x, you can upgrade the device to
version 1.4.0.48 or 1.4.1.3
• SG300-52P, SG300-52MP
• SF500-24MP, SF500-48MP
• SG500X-24MP, SG500X-48MP
8 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
Software version 1.4.0.x includes upgraded firmware to the PoE controller. The PoE
controller is upgraded automatically when the device is first booted, which makes
the boot time longer (~7 minutes). During this time, the device is not responsive;
however if a terminal is connected to the console port, the upgrade progress in
percentage is displayed. If the upgrade process is interrupted (for example,
device is shut down during this process), the upgrade restarts when the device is
booted next.
When a stacking system is downgraded, only the master is downgraded, and after
the master comes up again, it loads the image to the other stack members.
Powering off the device during this process might damage the file system. In such
cases, booting might require connecting to the device using the console cable (not
relevant to Sx200) and loading the image file using XMODEM.
After the downgrade, only downloaded image file will remain on the Flash (the
1.4.0.x/1.4.1.x image is deleted during this process). There is no need to
downgrade the boot file because the boot file supports both file systems. The
boot file cannot be downgraded while version 1.4.0.x/1.4.1.x is active.
• Security Enhancements:
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 9
Release Notes
Creation—2K
Import—1K through 2K
- Creation—1K
- Import—512B through 1K
• Mirror config settings and file—The “mirror config” (a config file saved
automatically to flash if unchanged for 24 hours) is no longer supported on
the Sx200 and Sx300 products. It is supported on the Sx500 product lines.
Relevant CLI commands and GUI settings were removed from the Sx200
and Sx300 products. The “mirror config” file on flash is erased when
upgrading a device to version 1.4.8. If this file is needed, back it up to an
external TFTP or HTTP server.
• When using large key/SSL certificate, import via GUI fails and truncates
private key and certificate. (CSCuz14693)
10 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
• 3rd-party certificate loaded in Web GUI, but not seen in CLI. (CSCvc35198)
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 11
Release Notes
Problem: Port Settings page is not displayed correctly when using IE version 11
browser, in compatibility mode view.
Problem: SNTP Authentication, Remote Log Servers, and Port and VLAN
Mirroring pages cannot be configured when using IE version 11 browser.
Problem: Vlan interface setting web page is not displayed correctly when using
IE version 11 browser.
Problem: Using Chrome on MAC OS, for example, version 39.0.2171.71 (64-bit),
in WEB GUI change configuration but not save, the WEB page will shakes.
Solution: Save configuration or use other browser, for example Firefox, IE.
Problem: MLD snooping does not work for Source Specific Multicast, if IPv6 is
enabled on the VLAN interface. (CSCuq13229)
Problem: DHCP relay stops working if the DHCP relay interface IP address is
reassigned. (CSCuq13199)
12 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
Problem: On Sx500 devices, the ISATAP tunnel type changes to Manual after the
firmware upgraded to version 1.4.0, if the tunnel source is IP address or a physical
port. (CSCuq01297)
Problem: LAG member port flaps if more than 4000 VLANs are added to the LAG
at a time. (CSCuq00892)
Problem: The ISATAP client can send RS packets only after the tunnel interface
is restarted. (CSCuq03628)
Problem: Users are unable to set loop back interface IPv4 address as 192.168.1.x
/24.
Problem: When using the 1G SFP module for the 5G or 10G stack port, such as
the stack port of the SG500XG-8F8T, SG500X or Sx500 series switch, sometimes
the stacking may have issues due to the limited bandwidth (1G), including packet
loss and stack failure. (CSCur58273, CSCur58298)
Solution: Use the 10G SFP+ module for both 5G and 10G stack ports.
Problem: When using the 1G SFP module for the 5G or 10G stack port, such as
the stack port of the SG500XG-8F8T, SG500X or Sx500 series switch, sometimes
the stacking may have issues due to the limited bandwidth (1G), including packet
loss and stack failure. (CSCur58273, CSCur58298)
Solution: When you first remove all telephony OUI items, and then save your
settings and reboot the switch, the predefined telephony OUI items cannot be
deleted and all telephony OUI items will be added automatically after boot up.
(CSCuq92215)
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 13
Release Notes
Solution: Leave at least one telephony OUI item in the table so that all other
telephony OUI items can be deleted successfully.
Solution: None.
Problem: When setting a new key chain for RIP using the WEB GUI, if it does not
include an accept-lifetime, it does not take effect, and only Key 1 takes effect with
accept-lifetime. (CQ148403, CSCuh54765)
Solution: Use the CLI for entering the key chain, or enter both accept-lifetime and
send-lifetime. Only use Key 1 with accept-lifetime.
Problem: WRR will lose efficacy after it is configured to egress shaping rate.
(CQ146677, CSCuf82588)
Problem: When user tries to Telnet some other devices from switch, it takes a
long time to logout. The user either needs to double click enter button or wait a long
time to logout from the device and return to the switch. (CQ146113, CSCuj46177)
Solution: The only option is to either double click enter key or wait for a long time
to logout.
14 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
Problem: When the switch is used as a DHCP server, it always assigns its IP
address as default router option (option 3), even if this option is not configured in
the DHCP pool. Even if any other IP address is configured, the switch will still
continue to provide option 3 as the configured IP to the client. (CQ149277,
CSCui34225)
Problem: When the firmware is downgraded from 1.3.5.39 to 1.3.0.62, only the
image for 1.3.0 exists in flash. This happens on all platforms. (CQ148803,
CSCuj46205)
Problem: On stacking, some WEB GUI pages respond slowly. If 8 switches are
stacked and 200 devices are connected, some WEB GUI pages take more than 10
seconds to respond. (CQ137261, CSCuj46218)
Some examples of such WEB GUI pages are:
Solution: Wait until the web GUI pages respond or use CLI commands.
Problem: For SX500 stacking, when the stack mode is changed from native to
basic hybrid using the command: stack basic-hybrid auto unit-id-auto reboot, and
the stack is reloaded then restarted with the default configuration, the startup
configuration file is removed. (CQ150131, CSCuj37279)
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 15
Release Notes
Problem: When the Chinese localization file is installed on the SX500 stack
master from TFTP on the web GUI, and the stack cable between master and
backup unit is removed, the localization file is not installed on the backup unit. If CLI
is used, or if the file is copied through http, this issue is not observed. (CQ150000,
CSCuj46533)
Problem: When the firmware is upgraded from 1.3.0 to 1.3.5, both firmware
images (active and non active) are saved as 1.3.5 in the flash memory. (CQ148800,
CSCuj46557)
Problem: The Stack Port LED on the System Summary page of the web GUI is
inconsistent with front panel of SG500XG-8F8T. (CQ150109, CSCuj46594)
Problem: Users are unable to open IPv6 HTTP/HTTPS sessions on Apple Safari.
(CQ147760, CSCuj46288)
Solution: When modifying the default gateway through CLI, delete the old one
first.
Problem: Some of the pages in the web-based interface require the Java
Runtime Environment (JRE) to be installed, otherwise they may display incorrectly.
Problem: Granularity of traffic shaping on the following uplink ports starts with
2Mbps and not with 64Kbps. When configuring traffic shaping on these ports to
rates lower than 2Mbps, the actual traffic shaping rate will be 2Mbps. (CQ123397,
CQ130715, CQ133170)
• Sx200/Sx300 HW 1.0
16 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
Solution: Use the specified ports when traffic shaping is not required (for
example. uplink or stack ports), or when the required traffic shaping rate is at least
2Mbps.
Problem: When the link on the SG500X ports XG1 - XG4 uplink ports comes up,
the link may go up and down a few times then stabilize on the up state. (CQ135073)
Problem: After frequent changes of the stack topology from ring to chain and vice
versa, one of the stack links might become non-operational (stuck in a state where
even if the stack topology is ring, it will function as a chain). If the remaining
operational stack link goes down, the stack might become non-operational.
(CQ135108)
Solution: Wait for the stack to stabilize before changing its topology.
Problem: Copper SFP MGBT1 is not supported as stack port due to packet loss
and bad CRC. (CQ135473)
Problem: When a PoE switch is connected to another PoE switch, one of the
switches overcomes the internal power supply of the other PoE switch, so the other
PoE switch cannot provide PoE power to powered devices. If the connection
between these switches is removed, the switch that received power from the other
switch will momentarily lose its power and reboot. (CQ135360, CQ138875)
Solution: Disable PoE on the ports connecting the two PoE switches.
Problem: Given a stack configuration with the stack master as unit #2. On the Port
Vlan Membership page of the web-based interface, changing the value on the
Interface Type drop-down, the drop-down returns to unit #1. The information
displayed on the rest of the page belongs to the ports of the unit that was selected
using the drop-down. (CQ141909)
Problem: The routing resource “Used number of hosts” is not displayed correctly.
This is just a display issue, there is no user impact. (CQ133802)
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 17
Release Notes
Problem: In Layer 3 mode, SNTP Broadcast can only be operated from the CLI.
Problem: The EEE operational status should become disabled when Auto
Negotiation is disabled. (CQ132106)
Solution: When the speed on a port is 1 Gigabit, auto negotiation has no effect on
the EEE functioning state.
Problem: The Voice VLAN should be prevented from being set as Guest VLAN,
and the user should receive a warning. This is not happening. (CQ132684)
Solution: Avoid setting the Voice VLAN as guest VLAN and vice-versa.
Problem: When the Mrouter learning mode is changed between “user defined” to
“auto” and vice-versa, the IGMP Querier election process does not start.
(CQ132805)
Solution: Disable IGMP Snooping and re-enable again, every time the Mrouter
learning mode is changed to start the Querier election process.
Problem: Some WEB GUI pages require full version compatibility of JRE, Browser
and JRE-Browser applets. For XML compatibility reasons, MSXML DLL Version 6 is
required for IE browser users.
Solution: For download and installation information, refer to the following link:
www.microsoft.com/downloads/details.aspx?FamilyID=993C0BCF-3BCF-
4009-BE21-27E85E1857B1&displaylang=en
Solution: There will be an asterisk by any values for a table entry which are
incorrect. This can be caused by the deletion of users, views, etc. If any of these
values are incorrect, then the entry will be uneditable. First add the missing user,
view, and so on, in order to edit the entry. The delete button still works regardless
of whether the values are correct or not.
Problem: The result of cable length test for 100 meters is incorrect. It will show
between 110 to 140 meters. (CQ132941)
Problem: The maximum number of IPv6 ACEs that can be applied on an interface
is 244, not 512 as documented. The user receives the message “Cannot apply
because of a lack of hardware resources.” (CQ130161)
18 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
Problem: If changing the active image with the menu CLI, the active image after
reboot field is not updated. If you change the image number and reboot, then the
image does change, but the display in the menu CLI is incorrect. (CQ132211)
Problem: When using the CLI, any time that DNS is used, the user is blocked from
interacting with the CLI until the DNS lookup has completed. (CQ133234)
Solution: The user must wait until the DNS lookup has completed before issuing
another command.
Problem: Egress rate shaping does not work as expected. Configuring egress
shape on Gigabit ports or on Combo ports between 64k to 5000k, will always
result in 2 Million Bits. This is resolved with the new hardware release 1.1.1.8. It still
exists on HW V01. It also does not work on SG300-52/52P & SG200-52/52P
switches and all uplink ports of Sx500 and SG500X. (CQ123397 and CQ130715)
Problem: PoE ports on certain Nikola switches might not power the connected
powered devices (PD) when used along with Cisco IP Phone 7960 with PID=68-
0808-xx. This issue impacts the following switch models:
Switch SKUs: SG200-26P, SG200-50P, SG300-28P, SG500-28P, SG500-52P,
SG500X-24P and SG500X-48P.
Problem: When configuring egress shaping rates on port 1, and enable flow
control on port2, the whole vlan port egress rates will be the same. Flow control
uses the whole buffer management scheme. When one port is configured to FC
ALL ports are applied by the new scheme. QoS function on other ports will be
effected also. (CQ144583)
Problem: When managing a switch through the web-based interface, the loading
time on some of the web pages can take a long time, approximately 3-10 seconds
depending on the content in the tab. (CQ143850)
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 19
Release Notes
• Port Management
• VLAN Management
• Access Control
• Quality of Service
Problem: If you modify an IPv6 tunnel configuration, the change will not take
effect until you perform a shut then no shut on the tunnel interface. (CQ146071)
Solution: You must perform a shut then no shut the tunnel interface for it to take
effect.
Problem: When a 10G DAC (Direct Attached Cable) is connected to the copper
port of the SG500 using the last two ports (combo ports), the fiber link status
display might be up even when the link is not active.
Problem: When enabling IPv6 unicast-routing, the interface cannot get an ipv6
address via auto-config. (CQ146156)
• Japanese language files version 1.1.1.6 and older are forward compatible
up to Firmware version 1.1.2.0. For example: loading a version 1.1.1.6
language file onto a device running firmware version 1.2.7.76 and up will fail.
• Japanese language files version 1.1.1.10 and newer are only compatible
with firmware version 1.2.7.76 and newer.
20 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6
Release Notes
www.cisco.com/cisco/web/solutions/small_business/products/
routers_switches/500_series_switches/index.html
www.cisco.com/cisco/web/solutions/small_business/products/
routers_switches/300_series_switches/index.html
www.cisco.com/cisco/web/solutions/small_business/products/
routers_switches/200_series_switches/index.html
www.cisco.com/go/smallbizsupport
Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.7.06 21
Release Notes
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the
U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/
trademarks. Third-party trademarks mentioned are the property of their respective owners. The use
of the word partner does not imply a partnership relationship between Cisco and any other
company. (1110R)
22 Release Notes for 200, 300, 500, and ESW2 Series Switches Firmware Version 1.4.8.6