Printable version

Drivers & software

* RECOMMENDED * Switch Management Software for Mellanox Infiniband FDR 36-Port Managed Switch: HP Part # 670769-B21

By downloading, you agree to the terms and conditions of the Hewlett Packard Enterprise Software License Agreement.
Note:  Some software requires a valid warranty, current Hewlett Packard Enterprise support contract, or a license fee.

Type: Firmware - Network
Version: 3.6.8008(12 Sep 2018)
Operating System(s): Red Hat Enterprise Linux 6 Server (x86-64)
Red Hat Enterprise Linux 7 Server
SUSE Linux Enterprise Server 11 (AMD64/EM64T)
SUSE Linux Enterprise Server 12
File name: MLNX-OS_3.6.8008-670769-B21_Software_Image_HPE.zip (358 MB)
Switch Management Software for Mellanox Infiniband FDR 36-Port Managed Switch

Changes and New Features in version 3.6.8008:

  • Supporting for running 8 Border Gateway Protocol (BGP) instances in different Virtual Routing and firwarding's (VRF).
  • Included support for Address Resolution Protocol (ARP) responder.
  • JSON Commands.
  • Ability to start a container immediately as well as after system initialization with one Command Line Interface (CLI) command.
  • Limit docker containers CPU and memory usage.
  • Monitor container statistics.
  • Sending an Simple Network Management Protocol (SNMP) health trap upon container failure.
  • Enable default route origination to normal areas.
  • Enhanced default configuration for switches to be more secure so that, by default, HTTP is disabled, HTTPS is enabled, the lowest SSH version allowed is 2, and SSH security strict mode is enabled.
  • New SNMP notification to the MELLANOX-POWER-CYCLE MIB called mellanoxPowerCyclePlannedReload to support planned reload.
  • Support for scatter port.
  • Support for setting GUID order in routing table.
  • Support  for bulk application of SM configurations.
  • GA level support for Linux Dockers.
  • Support for SHARP reproducibility configuration on Switch-IB 2 based systems.
  • Alpha level support for Linux Docker configuration.

Prerequisites:

In order to upgrade to version 3.6.8008, the switch software should be at a minimum version of 3.6.5000.
Older versions of MLNX-OS may require upgrading to one or more intermediate versions prior to upgrading to the latest. Missing an intermediate step may lead to errors.

Supported Software Upgrades:

Target Version Verified Version From Which To Upgrade
3.6.8008 3.6.5000,3.6.6003,3.6.6106
3.6.6106 3.6.5000,3.6.6003
3.6.6003 3.6.5000
3.6.5000 3.6.4006
3.6.4006 3.6.2002; 3.6.3004
3.6.3004 3.6.2002; 3.6.1002; 3.5.1006
3.6.2002 3.6.1002; 3.5.1016; 3.5.1012; 3.5.1006; 3.5.1002; 3.5.1000
3.6.1002 3.5.1016; 3.5.1012; 3.5.1006; 3.5.1002; 3.5.1000; 3.4.3206
3.5.1016  3.5.1012; 3.5.1006; 3.5.1002; 3.5.1000; 3.4.3002; 3.4.2008
3.5.1012 3.5.1006; 3.5.1002; 3.5.1000; 3.4.3206; 3.4.3002; 3.4.2008
3.5.1006 3.5.1002; 3.5.1000; 3.4.3206; 3.4.3002; 3.4.2008
3.5.1002 3.5.1000; 3.4.3206; 3.4.3002; 3.4.2008

3.5.1000

3.4.3206; 3.4.3002; 3.4.2008

 3.4.3206

3.4.3002; 3.4.2008; 3.4.1120

3.4.3002

3.4.2008; 3.4.1120

3.4.2008

3.4.1954; 3.4.1950; 3.4.1804 ; 3.4.1120; 3.4.0012

3.4.1120

3.4.1110; 3.4.0012;

3.4.1110

3.4.0012

3.4.0012

3.3.5006; 3.3.4402

3.3.5006

3.3.4402; 3.3.4304

3.3.4402

3.3.4304; 3.3.4100

3.3.4304

3.3.4100; 3.3.3500

3.3.4100

3.3.3500; 3.3.3000


To ensure the integrity of your download, HPE recommends verifying your results with this SHA-256 Checksum value:

ea7ecaa4e4cb2072cbea598e30b82df9bb96d087f5b82855f2c71912b8d2eeed MLNX-OS_3.6.8008-670769-B21_Software_Image_HPE.zip

Reboot Requirement:
Reboot is required after installation for updates to take effect and hardware stability to be maintained.


Installation:

Upgrading MLNX-OS Software

  1. Download the file, MLNX-OS_3.6.8008-670769-B21_Software_Image_HPE.zip, to a Linux node reachable from the switch.
  2. Extract the file on the node by running the command:

#unzip MLNX-OS_3.6.8008-670769-B21_Software_Image_HPE.zip
This command unpacks the following files:

image-PPC_M460EX-3.6.8008.img            MLNX-OS_v3_6_8008_Documentation_Package_HPE_Bladesytem_InfiniBand.zip                 MLNX-OS 3.6.8008 Private MIBs.zip
"image-PPC_M460EX-3.6.8008.img" is the image file which needs to be uploaded to the switch.

  1. Do the following actions to upload the image file to the switch:1.Login to the switch as "admin" by opening a SSH session.
  2. Run the following commands

fdr-managed-switch[standalone: master] > enable
fdr-managed-switch[standalone: master] # image fetch scp://username:password@10.0.30.2:/home/admin/image-PPC_M460EX-3.6.8008.img

This command uses SCP to download the image file from /home/admin/image-PPC_M460EX-3.6.8008.img from node 10.0.30.2.

  1. Change to config mode.

fdr-managed-switch[standalone: master] # configure terminal

  1. If the switch is running a master or stand-by Subnet Manager, disable the SM before updating the switch software.

fdr-managed-switch[standalone: master]  (config) # show ib sm

This command shows if the SM is "enabled"  or "disabled" in the switch.

fdr-managed-switch[standalone: master]  (config) # no ib sm

This command will disable SM on the switch.

Note: Do not forget to enable the Subnet Manager once the upgrade is complete and the switch is rebooted.

  1. Check if the file is available for installation with following command:

fdr-managed-switch[standalone: master] (config) # image install ?
This command displays the installable files on the switch
image-PPC_M460EX-3.6.8008.img

  1. Run the following command to update the Switch Managment software on the switch.

fdr-managed-switch[standalone: master] (config) # image install image-PPC_M460EX-3.6.8008.img
Step 1 of 4: Verify Image
 100.0%  [#################################################################]
Step 2 of 4: Uncompress Image
 100.0%  [#################################################################]
Step 3 of 4: Create Filesystems
 100.0%  [#################################################################]
Step 4 of 4: Extract Image
 100.0%  [#################################################################]

  1. Make the new image active; that is, the next boot will use the new image.

fdr-managed-switch[standalone: master] (config) # image boot next

  1. Reload the switch by running the following command:

fdr-managed-switch[standalone: master] (config) # reload

Configuration has been modified; save first? [yes]:
Configuration changes saved.
Rebooting...

 

  1. After reboot, the software upgrade will also automatically upgrade the firmware version to 9.4.5070. Verify the Switch managment software and firmware version by running the following commands:

fdr-managed-switch[standalone: master] # show version

Product name:      MLNX-OS
Product release:   3.6.8008
Build ID:          #1-dev
Build date:        2018-07-03 20:32:10
Target arch:       ppc
Target hw:         m460ex
Built by:          jenkins@34bdac9e3eca
Version summary:   PPC_M460EX 3.6.8008 2018-07-03 20:32:10 ppc
Product model:     ppc
Host ID:           F45214E41B14

Uptime:            6d 23h 48m 43.072s
CPU load averages: 2.29 / 2.08 / 2.07
Number of CPUs:    1
System memory:     282 MB used / 1745 MB free / 2027 MB total
Swap:              0 MB used / 0 MB free / 0 MB total

fdr-managed-switch[standalone: master] # show asic-version

---------------------------------------------------
Module             Device              Version
---------------------------------------------------
MGMT               SX                  9.4.5070

  1. If the Subnet Manager was disabled during step 5, then enable the Subnet Manager back again by running the following command:

fdr-managed-switch[standalone: master] > enable
fdr-managed-switch[standalone: master] # configure terminal
fdr-managed-switch[standalone: master] (config) # show ib sm
fdr-managed-switch[standalone: master] (config) # ib sm


End User License Agreements:
HPE Software License Agreement v1


Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Important:

Refer the Release Notes document for detailed list of Known issues and Fixes in this release of switch managment software.
Release Notes and User Manual are bundled with the software image zip file.

  • unzip MLNX-OS_v3_6_8008_Documentation_Package_HPE_Generic_InfiniBand.zip

MLNX-OS_HP_Gen_IB_v3_6_8008_RN.pdf

MLNX-OS_HP_Gen_IB_v3_6_8008_UM.pdf


Notes:

Supported Infiniband EDR Cables:

  • EDR MCP1600-E001 / HP 834973-B22 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 1M
  • EDR MCP1600-E002 / HP 834973-B24 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 2M
  • EDR MCP1600-E003 / HP 834973-B25 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 3M
  • EDR MCP1600-E00A / HP 834973-B21 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 0.5M
  • EDR MFA1A00-E003 / HP 834972-B21 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 3m
  • EDR MFA1A00-E005 / HP 834972-B22 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 5m
  • EDR MFA1A00-E003 / HP 834972-B21 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 3m
  • EDR MFA1A00-E005 / HP 834972-B22 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 5m
  • EDR MFA1A00-E007 / HP 834972-B23 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 7m
  • EDR MFA1A00-E000 / HP 834972-B24 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 10m
  • EDR MFA1A00-E012 / HP 834972-B25 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 12m
  • EDR MFA1A00-E015 / HP 834972-B26 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 15m
  • EDR MFA1A00-E020 / HP 834972-B27 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 20m
  • EDR MFA1A00-E030 / HP 834972-B28 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 30m
  • EDR MCP1600-E00A / HP 834973-B21 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 0.5M
  • EDR MCP1600-E001 / HP 834973-B22 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 1M
  • EDR MCP1600-E01A / HP 834973-B23 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 1.5M
  • EDR MCP1600-E002 / HP 834973-B24 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 2M
  • EDR MCP1600-E003 / HP 834973-B25 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 3M

Supported Infiniband FDR Cables:

  • FDR HP 670760-B21 FDR InfiniBand QSFP active fiber cable, 3m
  • FDR HP 670760-B23 FDR InfiniBand QSFP active fiber cable, 7m
  • FDR MC2207128-003 / HP 670759-B25 FDR InfiniBand QSFP passive copper cable, 3m
  • FDR MC2207130-002 / HP 670759-B24 FDR InfiniBand QSFP passive copper cable, 2m
  • FDR MC2207130-001 / HP 670759-B23 FDR InfiniBand QSFP passive copper cable, 1.5m
  • FDR MC2207130-001 / HP 670759-B22 FDR InfiniBand QSFP passive copper cable, 1m
  • FDR MC2207130-00A / HP 670759-B21 FDR InfiniBand QSFP passive copper cable, 0.5m
  • FDR MC2207310-005 / HP 670760-B22 FDR InfiniBand QSFP active fiber cable, 5m
  • FDR MC2207310-010 / HP 670760-B24 FDR InfiniBand QSFP active fiber cable, 10m
  • FDR MC2207310-015 / HP 670760-B25 FDR InfiniBand QSFP active fiber cable, 12m
  • FDR MC2207310-015 / HP 670760-B26 FDR InfiniBand QSFP active fiber cable, 15m
  • FDR MC2207310-020 / HP 670760-B27 FDR InfiniBand QSFP active fiber cable, 20m
  • FDR MC2207310-030 / HP 670760-B28 FDR InfiniBand QSFP active fiber cable, 30m
  • FDR MC220731V-003 / HP 808722-B21 HP 3 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-005 / HP 808722-B22 HP 5 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-007 / HP 808722-B23 HP 7 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-010 / HP 808722-B24 HP 10 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-012 / HP 808722-B25 HP 12 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-015 / HP 808722-B26 HP 15 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-020 / HP 808722-B27 HP 20 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-030 / HP 808722-B28 HP 30 Meter InfiniBand FDR QSFP V-series Optical Cable

Supported InfiniBand FDR10 and QDR Cables:

  • QDR/FDR10 MC2206125-007 / HP 498385-B25 QDR/FDR10 InfiniBand QSFP copper cable, 7m
  • QDR/FDR10 MC2206128-005 / HP 498385-B24 QDR/FDR10 InfiniBand QSFP copper cable, 5m
  • QDR/FDR10 MC2206130-001 / HP 498385-B21 QDR/FDR10 InfiniBand QSFP copper cable, 1m
  • QDR/FDR10 MC2206130-002 / HP 498385-B22 QDR/FDR10 InfiniBand QSFP copper cable, 2m
  • QDR/FDR10 MC2206130-003 / HP 498385-B23 QDR/FDR10 InfiniBand QSFP copper cable, 3m
  • QDR/FDR10 MFS4R12CB-003 / HP 498386-B23 QDR/FDR10 InfiniBand QSFP active fiber cable, 3m
  • QDR/FDR10 MFS4R12CB-005 / HP 498386-B24 QDR/FDR10 InfiniBand QSFP active fiber cable, 5m
  • QDR/FDR10 MFS4R12CB-010 / HP 498386-B25 QDR/FDR10 InfiniBand QSFP active fiber cable, 10m
  • QDR/FDR10 MFS4R12CB-015 / HP 498386-B26 QDR/FDR10 InfiniBand QSFP active fiber cable, 15m
  • QDR/FDR10 MFS4R12CB-020 / HP 498386-B27 QDR/FDR10 InfiniBand QSFP active fiber cable, 20m
  • QDR/FDR10 MFS4R12CB-030 / HP 498386-B28 QDR/FDR10 InfiniBand QSFP active fiber cable, 30m

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.8008:

  • Commands were missing a new line when “paging disable” was configured on Command OLine Interface (CLI).
  • Configuration Management: Saving a running configuration (running “configuration write”) with more than 6000 CLI commands might fail.
  • If a local user was deleted, a Remote Authentication Dial-In User Service (RADIUS) server with the same name might be invalidated.
  • When running “show interfaces * transceiver diagnostics” for the first time since system boot, a false power alarm might appear for the cable.
  • If more than 400 Globally Unique Indentifier's (GUID) were configured on a partition, they were not reflected properly in “partitions.conf”.
  • When configuring the default partition IPoIB flag to “no” (which was not the default), it was not reflected in the running-config.
  • If a SX65xx switch system was overloaded by Simple Network Management Protocol(SNMP) requests and tries to generate a sysdump at the same time, a given process might crash.
  • If the values of the “InOctets” and “OutOctets” fields exceed their defined maximum allowed value, then they reset to zero.
  • The command “reset factory” clears the Universal Serial Bus(USB) flash drive.

Refer the Release Notes document for detailed list of Known issues and Fixes in this release of switch managment software.
Release Notes and User Manual are bundled with the software image zip file.

  • unzip MLNX-OS_v3_6_8008_Documentation_Package_HPE_Generic_InfiniBand.zip

MLNX-OS_HP_Gen_IB_v3_6_8008_RN.pdf

MLNX-OS_HP_Gen_IB_v3_6_8008_UM.pdf

Version:3.6.8010 (8 May 2019)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.8010:

  • When “paging disable” is configured, some show commands are missing a new line.
  • On 1U(Unmanaged) PPC(Power PC) systems, the command “show fan” indicates FAIL status when fan speed was actually valid.
  • Saving a running configuration (running “configuration write”) with more than 6000 CLI(Command Line Interface) commands may fail.
  • If a local user is deleted, a remote RADIUS(Remote Authentication Dial-In User Service) server with the same name may be invalidated.
  • When running “show interfaces * transceiver diagnostics” for the first time since system boot, a false power alarm may appear for the cable.
  • The command “docker save” does not work for image names containing “/” characters.
  • If more than 400 GUIDs (Globally Unique Identifier) are configured on a partition, they are not reflected properly in “partitions.conf”.
  • When configuring the default partition IPoIB(Internet Protocol Over InfiniBand) flag to “no” (which is not the default), it is not reflected in the running-config.
  • If a SX65xx switch system is overloaded by SNMP (Simple Network Management Protocol) requests and tries to generate a sysdump at the same time, a given process might crash.
  • If the values of the “InOctets” and “OutOctets” fields exceed their defined maximum allowed value, then they reset to zero.
  • Upgrading to 3.6.8008 from older versions does not work when “web http redirect” is configured.
  • The command “reset factory” clears the USB(Universal Serial Bus) flash drive.

 

Enhancements

Changes and New Features in version 3.6.8010:

  • Added support for 2K adaptive routing groups (instead of 256) for Switch-IB family based switch systems.

 


Version:3.6.8008 (12 Sep 2018)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.8008:

  • Commands were missing a new line when “paging disable” was configured on Command OLine Interface (CLI).
  • Configuration Management: Saving a running configuration (running “configuration write”) with more than 6000 CLI commands might fail.
  • If a local user was deleted, a Remote Authentication Dial-In User Service (RADIUS) server with the same name might be invalidated.
  • When running “show interfaces * transceiver diagnostics” for the first time since system boot, a false power alarm might appear for the cable.
  • If more than 400 Globally Unique Indentifier's (GUID) were configured on a partition, they were not reflected properly in “partitions.conf”.
  • When configuring the default partition IPoIB flag to “no” (which was not the default), it was not reflected in the running-config.
  • If a SX65xx switch system was overloaded by Simple Network Management Protocol(SNMP) requests and tries to generate a sysdump at the same time, a given process might crash.
  • If the values of the “InOctets” and “OutOctets” fields exceed their defined maximum allowed value, then they reset to zero.
  • The command “reset factory” clears the Universal Serial Bus(USB) flash drive.
Enhancements

Changes and New Features in version 3.6.8008:

  • Supporting for running 8 Border Gateway Protocol (BGP) instances in different Virtual Routing and firwarding's (VRF).
  • Included support for Address Resolution Protocol (ARP) responder.
  • JSON Commands.
  • Ability to start a container immediately as well as after system initialization with one Command Line Interface (CLI) command.
  • Limit docker containers CPU and memory usage.
  • Monitor container statistics.
  • Sending an Simple Network Management Protocol (SNMP) health trap upon container failure.
  • Enable default route origination to normal areas.
  • Enhanced default configuration for switches to be more secure so that, by default, HTTP is disabled, HTTPS is enabled, the lowest SSH version allowed is 2, and SSH security strict mode is enabled.
  • New SNMP notification to the MELLANOX-POWER-CYCLE MIB called mellanoxPowerCyclePlannedReload to support planned reload.
  • Support for scatter port.
  • Support for setting GUID order in routing table.
  • Support  for bulk application of SM configurations.
  • GA level support for Linux Dockers.
  • Support for SHARP reproducibility configuration on Switch-IB 2 based systems.
  • Alpha level support for Linux Docker configuration.

Version:3.6.6106 (18 May 2018)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.6106:

  • Interfaces: The command “show interfaces ib [] transceiver diagnostics” causes errors in the log and displays missing information when executed on a DDMI capable transceiver.’’
Enhancements

Changes and New Features in version 3.6.6106:

Added the following new features:

  • A GA level support for Switch-IB family 1U switch systems See section “Signal Degradation Monitoring” in the User Manual.
  • Cnfiguring default hop limit for AGUID Path Records See command “ib sm aguid_default_hop_limit” in the User Manual.
  • Resetting SNMP engine ID See section “Resetting SNMPv3 Engine ID” in the User Manual.
  • Alpha level support for Linux Docker configuration in WebUI Category
  • Beta level support for Top Talker in Telemetry Category.

Version:3.6.6003 (3 May 2018)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.6003:

  • In rare cases, link BER on Switch-IB family based systems exceeds 10^12 rate.

 

Enhancements

Changes and New Features in version 3.6.6003:

  • Added support for a rare case causing the link BER on Switch-IB family based systems exceeding 10^12 rate.

Version:3.6.5000 (20 Dec 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.5000:

  • On Director switch systems, health reports could not be cleared on slave management modules although they could be viewed.
  • In case of process failure, the switch system CLI was not accessible.
  • One of the OS processes would crash occassionally during deinitialization.
  • The CLI command “interface ib * width” was missing a “no” option.
  • JSON request made from WebUI caused an error in response.
  • Docker image name did not contain the character “/”.
  • NTP recurring error log message when NTP was enabled on the switch.
  • The message [mgmtd.WARNING]: Failure trying to run ntpdate: code 256 appeared on upgrades or reboots.
  • On x86 systems, incorrect value was displayed for MAX SM node capability.
  • After software upgrade to 3.6.4000, it was not possible to remove an SM node which was created on 3.6.3004 MLNX-OS version.
  • The command “show telemetry” displayed the wrong telemetry status.
  • In cases where there were more than 1000 thresholds in total for all ports, if the user ran “show threshold” for a range of interfaces, the events of those interfaces were displayed instead.
  • The command “show telemetry sampling <…>” supported up to 300 JSON samples only.
  • Unable to connect to virtual machine configured on the switch when IPv6 was disabled.
  • When the VM was enabled, the speed of mgmt0 was displayed as unknown.
  • Mellanox periodic GUI refresh wiped out current unapplied settings.

Fixes in version 3.6.4006:

  • Ethernet Interfaces : The transceiver’s diagnostic data displayed wrong output while using a 100G MMA1B00 transceiver in split mode.
  • Chassis Management :
    • On SX65xx based systems, inserting “mgmt” module in a slave role while software on master role does not match, module did not load properly.
    • On X86 based systems fan’s speed changed frequently
    • A mapping issue occured on x86 systems with variable expected voltage on AC-DC device.
  • WebUI : 
    • Lag load-balance is inconsistent with "port-channel load-balance ethernet" command.
    • Failed to execute “configuration switch-to” from WebUI.
    • Error displaying SX1012 and SX1012X switch type on “System Modules” page.
  • SM : After modifying host-name, removing “<orig-name> smnode” using "no ib smnode <orig-name>” fails.
  • Gateway : When host switches sides, resource counters decrement on source of origin, causing resources to be miscounted thus new ARPs cannot be learned.
  • VLAN : Fixed no traffic issue when configuring LAG/MLAG with these attributes:

•mode hybrid, allowed vlan all, PVID != default and When adding new member port to this laf with these attributes:
•mode hybrid, allowed vlan all, PVID != LAG PVID.

  • HTTPS : When setting switch to secure mode http needed to be disabled.
  • IB Router : On MSB7780 after running the command "no ib router" the following error appeared: [smad.ERR]: file descriptor is invalid.
  • MLAG : Fixed failure to run “interface ethernet 1/1/1 lacp rate fast” while “1/1/1” is a member of mlag-port-channel mode active.
  • IGMP Snooping : Removing and adding multicast entry to hardware during port list updating leads to traffic loss/flood.
  • VRF : Assigning interfaces to VRF using range command does not work.
  • IPv4 Routing :
    • Routing is not functional if mgmt interface has no default gateway.
    • Static route could not be removed while another one with the same destination (IP) is unable to reach next hop.
  • IP Routing :
    • If the routing entries configured on a system is over the permitted limit, the machine becomes overloaded and hangs.
    • If static route next-hop of a VLAN interface is configured before configuring its subnet, that configured route is not added to the interface and cannot be deleted later.
    • If there is a static ARP on top of a VLAN interface and ECMP route with its next-hop equal to the static ARP entry, and if the static ARP owner is not responding to ARP requests, then performing “shutdown” and “no shutdown” to the VLAN interface, within a minute, causes errors to appear on the log. These errors may be safely ignored.
    • Errors in the log appeared when using ECMP routes if next-hop belongs to a VLAN interface which lies on port-channel whose links operational state is toggling.
  • OpenFlow 1.3 :
    • A list action of output port and controller duplicated the traffic to the output port.
    • Running the following commands consecutively crashed the OpenFlow demon:

•interface port-channel 5 no openflow mode hybrid
•no interface port-channel 5

  • LLDP : When configuring LLDP with PFC on a LAG, after switch reload, the LLDP did not show the PFC configuration.
  • In-Band Management : In-band management ARPs are not taken into account in the command “show ip arp count”.
  • Configuration Management :Configuration of hostname “.” is invalid and can cause certification and web HTTPS (SSL) service issues.
  • BGP : 4-byte ASN is not supported.
  • OSPF : 
    • Default route advertise by ABR to NSSA area not installed by NSSA area router.
    • Changing administrative distance (the command “router ospf distance”) is not supported.
    • Interface configuration cannot be performed while OSPF is admin-disabled (shutdown).
    • Changing the IP address of an OSPF VLAN interface deletes the interface-OSPF attachment.
    • A loopback interface assigned to area 0 does not get redistributed as direct route after removal from the OSPF.
    • If an OSPF packet size is larger than physical interface MTU, the packet does not process and, therefore, the route is not learned.
    • A VLAN interface which is not member of any OSPF area but is set as OSPF passive, does not get redistributed.
  • MAGP : Traffic loss after ARP timeout when using MAGP.
  • Link : In rare cases Switch BER degradation detected when connected through QDR cables.

Refer section 5.2 of the "Release Notes", which is included in the downloadable zip file, for a list of security bug fixes in version 3.6.4006.

Enhancements

Changes and New Features in version 3.6.5000:

  • Set Diffie-Hellman default key size to 2048.
  • Added support for OpenSM 4.8.1
  • Added support for additional JSON commands.
  • Added support for JSON batch commands.
  • Added support for DHCP based Zero Touch Provisioning (ZTP).

Changes and New Features in version 3.6.4006:

  • General :
    • Added support for SN2740 Spectrum™ based Ethernet switch system.
    • Added beta support for Precision Time Protocol (IEEE-1588).
    • Added support for Link Diagnostic Per Port - Read Phy Debug Database.
  • WebUI : Added support for TLS1.2 on FireFox web browser.
  • Ethernet Switching :
    • Added support for Storm Control functionality.
    • Added port filter to show mac-address-table command.
  • Telemetry :
    • Added support for “show telemetry” command.
    • Added support for “link fail reason” command.
  • Infiniband Interfaces : Updated “speed” command to support force EDR.
  • JSON :
    • Added support for “async” command.
    • Added support for “bulk” command.
  • NTP : Added ability to configure NTP with host name.
  • Ethernet Interfaces : 
    • Added show interface status command.
    • Added bit units to show interfaces ethernet rates command
    • Added support for dBm units to transceiver diagnostics .
  • LLDP :
    • Added clear lldp counters command.
    • Added parent interface to show lldp remote command.
  • IP Routing :Added interface vlan “no autostate” support.
  • PIM SSM : Added beta support for PIM SSM.

Version:3.6.4006 (31 Jul 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.4006: 

  • Ethernet Interfaces : The transceiver’s diagnostic data displayed wrong output while using a 100G MMA1B00 transceiver in split mode.
  • Chassis Management :
    • On SX65xx based systems, inserting “mgmt” module in a slave role while software on master role does not match, module did not load properly.
    • On X86 based systems fan’s speed changed frequently
    • A mapping issue occured on x86 systems with variable expected voltage on AC-DC device.
  • WebUI : 
    • Lag load-balance is inconsistent with "port-channel load-balance ethernet" command.
    • Failed to execute “configuration switch-to” from WebUI.
    • Error displaying SX1012 and SX1012X switch type on “System Modules” page.
  • SM : After modifying host-name, removing “<orig-name> smnode” using "no ib smnode <orig-name>” fails.
  • Gateway : When host switches sides, resource counters decrement on source of origin, causing resources to be miscounted thus new ARPs cannot be learned.
  • VLAN : Fixed no traffic issue when configuring LAG/MLAG with these attributes:

•mode hybrid, allowed vlan all, PVID != default and When adding new member port to this laf with these attributes:
•mode hybrid, allowed vlan all, PVID != LAG PVID.

  • HTTPS : When setting switch to secure mode http needed to be disabled.
  • IB Router : On MSB7780 after running the command "no ib router" the following error appeared: [smad.ERR]: file descriptor is invalid.
  • MLAG : Fixed failure to run “interface ethernet 1/1/1 lacp rate fast” while “1/1/1” is a member of mlag-port-channel mode active.
  • IGMP Snooping : Removing and adding multicast entry to hardware during port list updating leads to traffic loss/flood.
  • VRF : Assigning interfaces to VRF using range command does not work.
  • IPv4 Routing :
    • Routing is not functional if mgmt interface has no default gateway.
    • Static route could not be removed while another one with the same destination (IP) is unable to reach next hop.
  • IP Routing :
    • If the routing entries configured on a system is over the permitted limit, the machine becomes overloaded and hangs.
    • If static route next-hop of a VLAN interface is configured before configuring its subnet, that configured route is not added to the interface and cannot be deleted later.
    • If there is a static ARP on top of a VLAN interface and ECMP route with its next-hop equal to the static ARP entry, and if the static ARP owner is not responding to ARP requests, then performing “shutdown” and “no shutdown” to the VLAN interface, within a minute, causes errors to appear on the log. These errors may be safely ignored.
    • Errors in the log appeared when using ECMP routes if next-hop belongs to a VLAN interface which lies on port-channel whose links operational state is toggling.
  • OpenFlow 1.3 :
    • A list action of output port and controller duplicated the traffic to the output port.
    • Running the following commands consecutively crashed the OpenFlow demon:

•interface port-channel 5 no openflow mode hybrid
•no interface port-channel 5

  • LLDP : When configuring LLDP with PFC on a LAG, after switch reload, the LLDP did not show the PFC configuration.
  • In-Band Management : In-band management ARPs are not taken into account in the command “show ip arp count”.
  • Configuration Management :Configuration of hostname “.” is invalid and can cause certification and web HTTPS (SSL) service issues.
  • BGP : 4-byte ASN is not supported.
  • OSPF : 
    • Default route advertise by ABR to NSSA area not installed by NSSA area router.
    • Changing administrative distance (the command “router ospf distance”) is not supported.
    • Interface configuration cannot be performed while OSPF is admin-disabled (shutdown).
    • Changing the IP address of an OSPF VLAN interface deletes the interface-OSPF attachment.
    • A loopback interface assigned to area 0 does not get redistributed as direct route after removal from the OSPF.
    • If an OSPF packet size is larger than physical interface MTU, the packet does not process and, therefore, the route is not learned.
    • A VLAN interface which is not member of any OSPF area but is set as OSPF passive, does not get redistributed.
  • MAGP : Traffic loss after ARP timeout when using MAGP.
  • Link : In rare cases Switch BER degradation detected when connected through QDR cables.

Refer section 5.2 of the "Release Notes", which is included in the downloadable zip file, for a list of security bug fixes in version 3.6.4006.

Enhancements

Changes and New Features in version 3.6.4006:

  • General :
    • Added support for SN2740 Spectrum™ based Ethernet switch system.
    • Added beta support for Precision Time Protocol (IEEE-1588).
    • Added support for Link Diagnostic Per Port - Read Phy Debug Database.
  • WebUI : Added support for TLS1.2 on FireFox web browser.
  • Ethernet Switching :
    • Added support for Storm Control functionality.
    • Added port filter to show mac-address-table command.
  • Telemetry :
    • Added support for “show telemetry” command.
    • Added support for “link fail reason” command.
  • Infiniband Interfaces : Updated “speed” command to support force EDR.
  • JSON :
    • Added support for “async” command.
    • Added support for “bulk” command.
  • NTP : Added ability to configure NTP with host name.
  • Ethernet Interfaces : 
    • Added show interface status command.
    • Added bit units to show interfaces ethernet rates command
    • Added support for dBm units to transceiver diagnostics .
  • LLDP :
    • Added clear lldp counters command.
    • Added parent interface to show lldp remote command.
  • IP Routing :Added interface vlan “no autostate” support.
  • PIM SSM : Added beta support for PIM SSM.

Version:3.6.3004 (21 Feb 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.3004:

  • Logging : Syslog is not sent to remote server.
  • MKEY : ON SX based system working with MKEY protection level 2 is not supported.
  • SM : Embedded Subnet Manager may not run after power cycle the switch.
  • SM : Upgrade fails due to "ib sm log-max-size 120" before the upgrade.
  • SM : Running embedded SM on PPC system with multiple join and leave requests to MC group may result in a higher CPU utilization.
  • Management Interfaces : On SX65xx based systems, IB internal notification settings are not replicated between two management modules.
  • Management Interfaces : On PPC based systems, the management interface does not come back up after reconnecting the management cable.
  • Chassis Management : High memory usage after low disk space notification.
  • Chassis Management : ASIC in CS75xx systems did not report high temperature.
  • Chassis Management : CS75x0 fan module status LED remains green even after fan failure.

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.6.3004.

Enhancements

Changes and New Features in version 3.6.3004:

  • Chassis Management : Improved temperature control algorithm
  • IB Utilities : Updated the embedded IB utilities to version 2-2.1.1-0.87
  • SNMP : Added support to disable a set of SNMPs per MIB (see “snmp-server enable set-permission” in User Manual)
  • SNMP : Added ifTable, ifXTable, ifVPITable support for IB Router
  • SNMP : Added support for the columns SubnetName, SubnetPrefix, and LocalIdentifier to ifVPITable in MELLANOX-IF-VPI-MIB
  • SNMP : Added support for viewing port module transmit/receive power sensor on entPhysicalTable
  • User Interface : Added support for JSON API
  • System Management : Added support for Telemetry

Version:3.6.2002 (19 Oct 2016)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.2002:

  • Management Interfaces : Management interface’s default gateway is not removed from routing table
    after disconnecting the cable from it.
  • Software Management : Upgrade from version 3.5.1000 or above fails if the system is configured to
    use no-adaptive-routing profile.
  • User Interfaces : When logging into director switch systems through SSH, the following
    typo appears in the login text output: “Modular HA informatione configured”.
  • Chassis Management : The command “show power” may show inaccurate data in the power column
    on 1U systems.
  • SNMP : Executing SNMP queries in high frequency may cause ifTable data to not
    get updated.
  • Adaptive Routing : Adaptive Routing settings are not preserved after failover on director
    switch systems.
  • SNMP : When executing SNMP queries every 1 second, status changes are not
    updated.

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.6.2002.

Enhancements

Changes and New Features in version 3.6.2002:

  • CLI : Added support for viewing a live feed of the progress of any “show” command. Also, Improved running-config output display
  • User Accounts : Added ability to disconnect users from systems,
  • Provided access to all clear, show, and image commands from outside of the configuration terminal
  • Logging : Added ability to set remote server destination port for log messages
  • Chassis Management : Added support for unit identification (UID) LED on director switch systems
  • Added support for a new trap (mellanoxEntStateChangeAlarm) for when a power supply is removed or inserted from switch system
  • Added support for MELLANOX-ENTITY-STATE-MIB for power supply insertion and extraction
  • Added ability to match ICMP through ACL
  • OpenFlow 1.3 : Added beta support for OpenFlow 1.3
  • InfiniBand Interfaces : Added ability to display cable channel monitoring and diagnostics info
  • SM : Added support to configure MKey in embedded SM
  • Added support for configuring virtualization option in embedded SM

Version:3.6.1002 (20 Jul 2016)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.1002:

  • Disabling "ib0" interface was not persistent across switch reboot.
  • On PPC switch systems, only one image was allowed to be copied into the system (using the “image fetch” command). Old image files must be removed prior to fetching a new one
  • PSU fan speed was set to a minimum of 60% on Switch-IB™ based switch systems
  • On SX65xx systems with an uptime of over a year, the master management module may stop responding to SM management packets and user interface activities (i.e. CLI/WebUI) response time may be slower. 
  • When changing multiple fans or power supply modules, the modules had to be changed one at a time instead of taking them all out at once. 
  • Switch system did not answer to SNMP when request route is not the same as the reply route. 

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.6.1002.

Enhancements

Changes and New Features in version 3.6.1002:

  • GA support for CS75xx switch systems based on Switch-IB™ 2
  • Added support for encryption and integrity verification of binary configuration files See section “BIN Configuration Files” in the User Manual
  • Added support for encryption of data at rest See section “System File Encryption” in the User Manual
  • Added support for unit identification (UID) LED on 1U switch systems See section “Unit Identification LED” in the User Manual
  • Added ability to view raw transceiver details on InfiniBand interfaces See commands “show interfaces ib transceiver raw”in the User Manual
  • Changed command output for “show temperature” and “show asic-version” on CS75x0 switch systems
  • Added support for SSH server configuration See page Security > SSH in the WebUI
  • Updated InfiniBand speed configuration in the WebUI Ports page and Expert Subnet Manager (SM) Configuration page
  • Added support to work with MKey congratulation by external SM for InfiniBand switch systems

Version:3.5.1006 (14 Mar 2016)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.5.1006:

  • A downloaded text configuration file does not work when uploaded back to the switch.
  • The command "show ntp" always lists the last configured NTP server even if it has been deleted. This output can be safely ignored.
  • InfiniBand menu tabs are grayed out when switch systems are connected through mgmt1 instead of mgmt0.

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.5.1006.

Enhancements

Changes and Major New Features in version 3.5.1006:

  • Security fix for GlibC CVE-2015-7547

Version:3.4.3002 (6 Nov 2015)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.4.3002:

  • mellanoxIfVPIIbPortGuid entry is missing for InfiniBand ports.
  • SNMP EntityTable does not refresh immediately after an event.
  • The command “show module” displays incorrect “Power” status.
  • Temperatures of SX65xx modules may rise when a spine module fails.
  • If management module 2 is inserted into the chassis, spine module 2 powers off and drops off of the fabric.
  • On director switches, in case of software mismatch between the 2 management modules, each management module reports the state of the other management module as fatal. These messages may be safely ignored.
  • Over-temperature alert on QSFP module is sent on wrong threshold.
  • Power supply may appear as not present but powered when extracted from the system.
  • The internalSpeedMismatch trap is raised only once the first time it is discovered.
  • Syslog messages, and trap messages for internal link speed mismatch do not include the ifName of the link which identify both ends of the connection.
  • On SX65xx switch systems, the slave management LED lights in amber instead of being turned off.
  • Setting AAA authorization mapping to remote-only does not work. Local credentials are still used.
  • ASCII based authentication using TACACS+ is not functional.
  • Received SysRq signals from serial connection (RS232) to USB adapter can cause switch to reboot.
  • The no command “no interface ib shutdown” appears in the running config.
  • After applying text-based configuration file the SM is not enabled automatically since the hostname is now different.
  • The CLI command “ib partition <partition-name> rate” does not support EDR speeds.

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.4.3002.

Enhancements

Changes and Major New Features in version 3.4.3002:

  • Improved logic of AAA authorization map order.
  • Added ability to receive trap and log notifications on internal link-speed mismatches.
  • Improved module configuration counter on director switches.
  • Added new System Health Monitor notification alert.
  • Improved module status display.
  • Improved XML interface.

Changes and Major New Features in version 3.4.2008:

  • Modified user interface for the commands "show guid", "show lids", and "show asic version".
  • Improved module hierarchy in the output of the commands "show power" and "show temperature".
  • Removed CPU component from the output of the command "show inventory".
  • Applied new index scheme for SNMP EntityTable.
  • Added SNMP support for reading director switch slave management module version.
  • Added support for VRF with static IPv4 and ECMP.
  • Added GA support for PIM Load-Sharing.
  • Added support for OpenSM 4.5.0.
  • Added ability to configure LLR64 on the internal interfaces of director switch systems.

Version:3.4.2008 (20 Jul 2015)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.4.2008:

  • No ability to view slave management software version (entPhysicalSoftwareRev) in entPhysicalTable in the Entity MIB.
  • Mismatch between CLI and SNMP ifXTable in interface addressing syntax.
  • MTU must be set before changing configuration of ib0 interface.
  • Running the command show asic version may fail after system reboot.
  • When taking out a master management on a dual management system, its locally attached spine may appear in the CLI as being off after a take-over.
  • Upon system init the following errors may appear in the log:

    • [ibd.ERR]: sa_is_master_sm_in_swid(), swidapi.c:1563, build 1: Sysapi func-tion called but madrpc was not initiated.
    • [ibd.WARNING]: get_is_sm_in_fabric: sa_is_master_sm_in_fabric() err=1(ERROR)
    • [ibd.ERR]: ibd_mon_handle_get(), ibd_main.c:1347, build 1: Error code 14000 (generic error) returned
    • [ibd.ERR]: mdc_dispatch_mon_request_nosend(), mdc_misc.c:1535, build 1: Get handler for '/ib/state/swid/1/is_sm_in_fabric'.

          These errors may be safely ignored.

  • Missing some types of parenthesis in various command help strings.
  • Unable to configure IfIndex (i.e bind ACL) when it is the monitor session destination using XML-GW.
  • Puppet agent restart after log rotation.
  • CVE-2015-0207  : The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.
  • CVE-2015-0208 : The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature.
  • CVE-2015-0290 : The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 plat-forms with AES NI support does not properly handle cer-tain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and applica-tion crash) via unspecified vectors.
  • CVE-2015-0291 : The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the Cli-entHello message during a renegotiation.
  • CVE-2015-1787 : The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (dae-mon crash) via a ClientKeyExchange message with a length of zero.
Enhancements

Changes and Major New Features in version 3.4.2008:

  • Modified user interface for the commands "show guid", "show lids", and "show asic version".
  • Improved module hierarchy in the output of the commands "show power" and "show temperature".
  • Removed CPU component from the output of the command "show inventory".
  • Applied new index scheme for SNMP EntityTable.
  • Added SNMP support for reading director switch slave management module version.
  • Added support for VRF with static IPv4 and ECMP.
  • Added GA support for PIM Load-Sharing.
  • Added support for OpenSM 4.5.0.
  • Added ability to configure LLR64 on the internal interfaces of director switch systems.

Changes and Major New Features in version 3.4.0012:

  • Changed the HTTPS default ciphers to TLS.
  • Added SwitchX-2 support.

Changes and Major New Features in version 3.4.0008:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added system identifier (MAC address) to test trap.
  • Added support for:
    • Embedded SM version 4.0.5.
    • Mellanox OFED 2.3 integration.
    • Security strict mode.
    • Mellanox configuration MIB.
    • Power MIB.
    • Setting hostname through SNMP.
    • Power cycling through SNMP.
    • Changing configuration through SNMP.
    • Internet Explorer 11 web browser.

Changes and Major New Features in version 3.3.5006:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added support for SNMP to trigger SNMP test trap via SNMP set command.
  • Added system identifier (MAC address) to test trap.

Version:3.4.1124 (2 Dec 2015)
Fixes

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.


Fixes in version 3.4.1124:

  • Updated SNMP fan and leaf health report trap verbiage.
  • Cannot map remote IP to remote host in lldpRemManAddrTable.
  • SNMP refresh configuration does not support value lower than 60 seconds.
  • QSFP sensor temperature warning threshold fix.
  • MLNX-OS management becomes unavailable after accessing XML tree at top level.

Refer section 5 of the "Release Notes" for list of security bug fixes in version 3.4.1124.

Fixes in version 3.4.0012:

  • Enhancements only.

Fixes in version 3.4.0008:

The following issues have been fixed in version 3.4.0008:

  • Inserting modules with FW versions older than 9.1.2010 was not supported on SX65xx switch systems.
  • If a leaf or spine module burned with a firmware older than 9.1.6516 was inserted into an SX65xx system with a new firmware, the leaf or spine module was not detected by the management software.
  • When modifying the hostname via WebUI CLI, or SNMP, the modification was not reflected in the Base SM submenu in the WebUI.
  • Running the command "no ha dns enable" caused slower login time to the switch system and printed "clusterd" error to the log.
  • Mismatch between entPhysicalTable, entPhySensorTable, and entStateTable when removing FRU from 1U systems.
  • Missing indexes were not consistent between entPhysicalTable, entPhySensorTable, and entStateTable.
  • ifTable, ifXtable, and mellanoxIfVPITable returned unexpected output “No Such Instance”.
  • Vulnerability to data injection across a session or a DoS (use-after-free and parsing error) via an SSL connection in a multi-threaded environment.
  • Buffer overflow through invalid DTLS fragment.
  • NULL pointer de-reference and application crash.
  • Vulnerability to a DoS via a DTLS hello message in an invalid DTLS handshake.
  • Client-side DoS when using anonymous ECDH.
  • Shellshock or Bashdoor security bug in Unix Bash shell.

 

Enhancements

Changes and Major New Features in version 3.4.1124:

  • Removed support for the following MIBs:
    • MELLANOX-CONFIG-DB
    • MELLANOX-POWER-CYCLE
    • MELLANOX-SW-UPDATE

Changes and Major New Features in version 3.4.0012:

  • Changed the HTTPS default ciphers to TLS.
  • Added SwitchX-2 support.

Changes and Major New Features in version 3.4.0008:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added system identifier (MAC address) to test trap.
  • Added support for:
    • Embedded SM version 4.0.5.
    • Mellanox OFED 2.3 integration.
    • Security strict mode.
    • Mellanox configuration MIB.
    • Power MIB.
    • Setting hostname through SNMP.
    • Power cycling through SNMP.
    • Changing configuration through SNMP.
    • Internet Explorer 11 web browser.

Version:3.4.0012 (17 Mar 2015)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.4.0012:

  • Enhancements only.

Fixes in version 3.4.0008:

The following issues have been fixed in version 3.4.0008:

  • Inserting modules with FW versions older than 9.1.2010 was not supported on SX65xx switch systems.
  • If a leaf or spine module burned with a firmware older than 9.1.6516 was inserted into an SX65xx system with a new firmware, the leaf or spine module was not detected by the management software.
  • When modifying the hostname via WebUI CLI, or SNMP, the modification was not reflected in the Base SM submenu in the WebUI.
  • Running the command "no ha dns enable" caused slower login time to the switch system and printed "clusterd" error to the log.
  • Mismatch between entPhysicalTable, entPhySensorTable, and entStateTable when removing FRU from 1U systems.
  • Missing indexes were not consistent between entPhysicalTable, entPhySensorTable, and entStateTable.
  • ifTable, ifXtable, and mellanoxIfVPITable returned unexpected output “No Such Instance”.
  • Vulnerability to data injection across a session or a DoS (use-after-free and parsing error) via an SSL connection in a multi-threaded environment.
  • Buffer overflow through invalid DTLS fragment.
  • NULL pointer de-reference and application crash.
  • Vulnerability to a DoS via a DTLS hello message in an invalid DTLS handshake.
  • Client-side DoS when using anonymous ECDH.
  • Shellshock or Bashdoor security bug in Unix Bash shell.

 

Enhancements

Changes and Major New Features in version 3.4.0012:

  • Changed the HTTPS default ciphers to TLS.
  • Added SwitchX-2 support.

Changes and Major New Features in version 3.4.0008:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added system identifier (MAC address) to test trap.
  • Added support for:
    • Embedded SM version 4.0.5.
    • Mellanox OFED 2.3 integration.
    • Security strict mode.
    • Mellanox configuration MIB.
    • Power MIB.
    • Setting hostname through SNMP.
    • Power cycling through SNMP.
    • Changing configuration through SNMP.
    • Internet Explorer 11 web browser.

Changes and Major New Features in version 3.3.5006:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added support for SNMP to trigger SNMP test trap via SNMP set command.
  • Added system identifier (MAC address) to test trap.

Version:3.4.0008 (27 Nov 2014)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.4.0008:

The following issues have been fixed in version 3.4.0008:

  • Inserting modules with FW versions older than 9.1.2010 was not supported on SX65xx switch systems.
  • If a leaf or spine module burned with a firmware older than 9.1.6516 was inserted into an SX65xx system with a new firmware, the leaf or spine module was not detected by the management software.
  • When modifying the hostname via WebUI CLI, or SNMP, the modification was not reflected in the Base SM submenu in the WebUI.
  • Running the command "no ha dns enable" caused slower login time to the switch system and printed "clusterd" error to the log.
  • Mismatch between entPhysicalTable, entPhySensorTable, and entStateTable when removing FRU from 1U systems.
  • Missing indexes were not consistent between entPhysicalTable, entPhySensorTable, and entStateTable.
  • ifTable, ifXtable, and mellanoxIfVPITable returned unexpected output “No Such Instance”.
  • Vulnerability to data injection across a session or a DoS (use-after-free and parsing error) via an SSL connection in a multi-threaded environment.
  • Buffer overflow through invalid DTLS fragment.
  • NULL pointer de-reference and application crash.
  • Vulnerability to a DoS via a DTLS hello message in an invalid DTLS handshake.
  • Client-side DoS when using anonymous ECDH.
  • Shellshock or Bashdoor security bug in Unix Bash shell.
Enhancements

Changes and Major New Features in version 3.4.0008:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added system identifier (MAC address) to test trap.
  • Added support for:
    • Embedded SM version 4.0.5.
    • Mellanox OFED 2.3 integration.
    • Security strict mode.
    • Mellanox configuration MIB.
    • Power MIB.
    • Setting hostname through SNMP.
    • Power cycling through SNMP.
    • Changing configuration through SNMP.
    • Internet Explorer 11 web browser.
Changes and Major New Features in version 3.3.5006:
  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added support for SNMP to trigger SNMP test trap via SNMP set command.
  • Added system identifier (MAC address) to test trap.

Version:3.3.5006 (17 Jun 2014)
Enhancements

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Changes and Major New Features in version 3.3.5006:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added support for SNMP to trigger SNMP test trap via SNMP set command.
  • Added system identifier (MAC address) to test trap.

Version:3.3.4402 (25 Mar 2014)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.3.4402:

  • When plugging out a spine fan, the Entity Physical Table still used to show the spine fan sensors.
Fixes in version 3.3.4304:
  • Power supply hardware revision was not shown with SNMP after extraction and insertion.
  • On FDR Director switches, inserting a leaf/spine with an old firmware version may result in the firmware version data not being updated in entity physical table.
  • The slave management entry in entity physical table may not have updated information after plug-out and plugin of slave management on FDR Director switches. 
  • Chassis Management User had to wait at least 40 seconds before inserting a new replacement FRU unit on FDR Director switches.
  • Fixed HA Database replication issues after double failover.
Fixes in version 3.3.4100:
  • Fixed an issue where in InfiniBand link may not come up after a link failure has occured.
Fixes in version 3.3.3000:
  • [ibd.ERR]: get_external_port_info(), ibd_main.c:3309, build 1: A problem occurred while getting port configuration 1 ERROR. This error can be safely ignored. Fixed this messages from logging.
  • Fixed “Permission denied” message when initial access to the USB flash drive.
  • Fixed an issues where disabling the ib0 interface may temporarily suspend the system.
  • When running the show ip arp command while an IP is configured over ib0, some errors may appear in the log. These errors can be safely ignored. Fixed the message log.
  • Fixed an issue where while using the WebUI with Windows Internet Explorer 9, several pages might not display correctly.
  • Fixed and issue with “Apply” button in the port configuration section that caused a port restart.
  • Fixed an issue where sending traffic to IPoIB management interface (ib0) with packet size greater than 1980 bytes is supported only when configuring MTU size to 1020 bytes on both switch and host sides.
  • Fixed an issue with NTP, when deleting an NTP entry and enabling it back may result in a wrong “show ntp” output (unsynchronized). This can be safely ignored.
Enhancements

Changes and Major New Features in version 3.3.4402

  • Added new certificate hashing algorithm (sha256).
  • The command “show configuration full” is no longer supported.
  • Added support for output filtering.
  • Added support for notification on internal link up/down state.
  • Added support for notification on internal link sub-optimal speed.
Changes and Major New Features in version 3.3.4304
  • Added End-User License Agreement See section “Getting Started” in the User Manual.
  • Improved configuration file format.
  • 3rd party FDR cables are allowed to raise link at FDR (56Gb/s).
  • Added support for link width reduction.
  • GA support for Puppet. See section “Puppet Agent” in the User Manual.
  • Added ability to display leaf/spine power state via SNMP.
Changes and Major New Features in version 3.3.4100
  • HP switch blade reset factory using OA.
  • HP switch blade restore admin password using OA.
  • Improved debug file upload mechanism.Refer to “file debug-dump” command in the CLI reference guide.
  • Added support for displaying system hardware revision. Refer to “show inventory” command in the CLI reference guide.
  • Added a MELLANOX-ENTITY-MIB as an extension to the standard ENTITY-MIB to represent system GUID.Refer to SNMP chapter in the User Manual. The new MIB can be found in Mellanox support website.
  • Added support for event notification to monitor. Refer to Event Notification chapter in the User Manual.
  • Improved login timeout mechanism.
  • Added ability to display SM log from user CLI.Refer to “show ib sm log” command in the CLI guide.
  • Added ability to control HA traffic. Refer to “ha dns enable” command in the CLI guide, and mDNS section in the User Manual.
  • Port up/down event notification to log or terminal. Refer to Event Notification chapter in the User Manual.
Changes and Major New Features in version 3.3.3000
  • New Linux kernel 2.6.32.
  • Updated u-boot - memory access optimization.
  • QoS: Enhancement to InfiniBand functionality.
  • Added ability to configure the SM partitions.
  • SNMP MIB enhancements. General MIBs: Entity-MIB, Entity-Sensor-MIB, Entity-State-MIB and Private MIB restructuring for InfiniBand systems.
  • Added Link Level Retry (LLR) support for InfiniBand interfaces.
  • Added support for the Mellanox LR4 module.
  • Added interface range support.By using the interface range configuration mode, a range of ports can be easily configured with the same parameters.

Version:3.3.4304 (28 Feb 2014)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.3.4304:

  • Power supply hardware revision was not shown with SNMP after extraction and insertion.
  • On FDR Director switches, inserting a leaf/spine with an old firmware version may result in the firmware version data not being updated in entity physical table.
  • The slave management entry in entity physical table may not have updated information after plug-out and plugin of slave management on FDR Director switches. 
  • Chassis Management User had to wait at least 40 seconds before inserting a new replacement FRU unit on FDR Director switches.
  • Fixed HA Database replication issues after double failover.
Fixes in version 3.3.4100:
  • Fixed an issue where in InfiniBand link may not come up after a link failure has occured.
Fixes in version 3.3.3000:
  • [ibd.ERR]: get_external_port_info(), ibd_main.c:3309, build 1: A problem occurred while getting port configuration 1 ERROR. This error can be safely ignored. Fixed this messages from logging.
  • Fixed “Permission denied” message when initial access to the USB flash drive.
  • Fixed an issues where disabling the ib0 interface may temporarily suspend the system.
  • When running the show ip arp command while an IP is configured over ib0, some errors may appear in the log. These errors can be safely ignored. Fixed the message log.
  • Fixed an issue where while using the WebUI with Windows Internet Explorer 9, several pages might not display correctly.
  • Fixed and issue with “Apply” button in the port configuration section that caused a port restart.
  • Fixed an issue where sending traffic to IPoIB management interface (ib0) with packet size greater than 1980 bytes is supported only when configuring MTU size to 1020 bytes on both switch and host sides.
  • Fixed an issue with NTP, when deleting an NTP entry and enabling it back may result in a wrong “show ntp” output (unsynchronized). This can be safely ignored.
Enhancements

Changes and Major New Features in version 3.3.4304

  • Added End-User License Agreement See section “Getting Started” in the User Manual.
  • Improved configuration file format.
  • 3rd party FDR cables are allowed to raise link at FDR (56Gb/s).
  • Added support for link width reduction.
  • GA support for Puppet. See section “Puppet Agent” in the User Manual.
  • Added ability to display leaf/spine power state via SNMP.
Changes and Major New Features in version 3.3.4100
  • HP switch blade reset factory using OA.
  • HP switch blade restore admin password using OA.
  • Improved debug file upload mechanism.Refer to “file debug-dump” command in the CLI reference guide.
  • Added support for displaying system hardware revision. Refer to “show inventory” command in the CLI reference guide.
  • Added a MELLANOX-ENTITY-MIB as an extension to the standard ENTITY-MIB to represent system GUID.Refer to SNMP chapter in the User Manual. The new MIB can be found in Mellanox support website.
  • Added support for event notification to monitor. Refer to Event Notification chapter in the User Manual.
  • Improved login timeout mechanism.
  • Added ability to display SM log from user CLI.Refer to “show ib sm log” command in the CLI guide.
  • Added ability to control HA traffic. Refer to “ha dns enable” command in the CLI guide, and mDNS section in the User Manual.
  • Port up/down event notification to log or terminal. Refer to Event Notification chapter in the User Manual.
Changes and Major New Features in version 3.3.3000
  • New Linux kernel 2.6.32.
  • Updated u-boot - memory access optimization.
  • QoS: Enhancement to InfiniBand functionality.
  • Added ability to configure the SM partitions.
  • SNMP MIB enhancements. General MIBs: Entity-MIB, Entity-Sensor-MIB, Entity-State-MIB and Private MIB restructuring for InfiniBand systems.
  • Added Link Level Retry (LLR) support for InfiniBand interfaces.
  • Added support for the Mellanox LR4 module, P/N MC2210511-LR4.
  • Added interface range support.By using the interface range configuration mode, a range of ports can be easily configured with the same parameters.

Version:3.3.4100 (2 Dec 2013)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.3.4100:

  • Fixed an issue where in InfiniBand link may not come up after a link failure has occured.
Fixes in version 3.3.3000:
  • [ibd.ERR]: get_external_port_info(), ibd_main.c:3309, build 1: A problem occurred while getting port configuration 1 ERROR. This error can be safely ignored. Fixed this messages from logging.
  • Fixed “Permission denied” message when initial access to the USB flash drive.
  • Fixed an issues where disabling the ib0 interface may temporarily suspend the system.
  • When running the show ip arp command while an IP is configured over ib0, some errors may appear in the log. These errors can be safely ignored. Fixed the message log.
  • Fixed an issue where while using the WebUI with Windows Internet Explorer 9, several pages might not display correctly.
  • Fixed and issue with “Apply” button in the port configuration section that caused a port restart.
  • Fixed an issue where sending traffic to IPoIB management interface (ib0) with packet size greater than 1980 bytes is supported only when configuring MTU size to 1020 bytes on both switch and host sides.
  • Fixed an issue with NTP, when deleting an NTP entry and enabling it back may result in a wrong “show ntp” output (unsynchronized). This can be safely ignored.
Enhancements

Changes and Major New Features in version 3.3.4100

  • HP switch blade reset factory using OA.
  • HP switch blade restore admin password using OA.
  • Improved debug file upload mechanism.Refer to “file debug-dump” command in the CLI reference guide.
  • Added support for displaying system hardware revision. Refer to “show inventory” command in the CLI reference guide.
  • Added a MELLANOX-ENTITY-MIB as an extension to the standard ENTITY-MIB to represent system GUID.Refer to SNMP chapter in the User Manual. The new MIB can be found in Mellanox support website.
  • Added support for event notification to monitor. Refer to Event Notification chapter in the User Manual.
  • Improved login timeout mechanism.
  • Added ability to display SM log from user CLI.Refer to “show ib sm log” command in the CLI guide.
  • Added ability to control HA traffic. Refer to “ha dns enable” command in the CLI guide, and mDNS section in the User Manual.
  • Port up/down event notification to log or terminal. Refer to Event Notification chapter in the User Manual.
Changes and Major New Features in version 3.3.3000
  • New Linux kernel 2.6.32.
  • Updated u-boot - memory access optimization.
  • QoS: Enhancement to InfiniBand functionality.
  • Added ability to configure the SM partitions.
  • SNMP MIB enhancements. General MIBs: Entity-MIB, Entity-Sensor-MIB, Entity-State-MIB and Private MIB restructuring for InfiniBand systems.
  • Added Link Level Retry (LLR) support for InfiniBand interfaces.
  • Added support for the Mellanox LR4 module, P/N MC2210511-LR4.
  • Added interface range support.By using the interface range configuration mode, a range of ports can be easily configured with the same parameters.

Version:3.3.3000 (19 Mar 2013)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.3.3000:

  • [ibd.ERR]: get_external_port_info(), ibd_main.c:3309, build 1: A problem occurred while getting port configuration 1 ERROR. This error can be safely ignored. Fixed this messages from logging.
  • Fixed “Permission denied” message when initial access to the USB flash drive.
  • Fixed an issues where disabling the ib0 interface may temporarily suspend the system.
  • When running the show ip arp command while an IP is configured over ib0, some errors may appear in the log. These errors can be safely ignored. Fixed the message log.
  • Fixed an issue where while using the WebUI with Windows Internet Explorer 9, several pages might not display correctly.
  • Fixed and issue with “Apply” button in the port configuration section that caused a port restart.
  • Fixed an issue where sending traffic to IPoIB management interface (ib0) with packet size greater than 1980 bytes is supported only when configuring MTU size to 1020 bytes on both switch and host sides.
  • Fixed an issue with NTP, when deleting an NTP entry and enabling it back may result in a wrong “show ntp” output (unsynchronized). This can be safely ignored.
Enhancements

Changes and Major New Features in Rev 3.3.3000

  • New Linux kernel 2.6.32.
  • Updated u-boot - memory access optimization.
  • QoS: Enhancement to InfiniBand functionality.
  • Added ability to configure the SM partitions.
  • SNMP MIB enhancements. General MIBs: Entity-MIB, Entity-Sensor-MIB, Entity-State-MIB and Private MIB restructuring for InfiniBand systems.
  • Added Link Level Retry (LLR) support for InfiniBand interfaces.
  • Added support for the Mellanox LR4 module, P/N MC2210511-LR4.
  • Added interface range support.By using the interface range configuration mode, a range of ports can be easily configured with the same parameters.
Changes and Major New Features in Rev 3.2.0330-82
  • Improved system health monitor process.
  • Updated u-boot-memory access optimization.
  • Added FDR10 support (up to 100m) for MFS4R12CB-XXX optics cables.
Changes and Major New Features in Rev 3.2.0330-70
  • Added support for SwitchX®-2 based edge switch system

Version:3.2.0330-82 (30 Jan 2013)
Fixes

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.


Fixes in version 3.2.0330-40:

  • IPV6 MC traffic may cause system instability.
  • Resiliency mechanism was added to MLNX-OS initialization phase.
Note: With this release, image install-chip-fw command is no longer supported.
Enhancements

Changes and Major New Features in Rev 3.2.0330-82

  • Improved system health monitor process.
  • Updated u-boot-memory access optimization.
  • Added FDR10 support (up to 100m) for MFS4R12CB-XXX optics cables.
Changes and Major New Features in Rev 3.2.0330-70
  • Added support for SwitchX®-2 based edge switch system
Changes and Major New Features in Rev  3.2.0330-62
  • Improved link reliability
  • Improved QDR signal integrity
  • Added support for MC2207312-XX FDR optics cables up to 300m

Version:3.2.0330-40 (7 Nov 2012)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.2.0330-40:

  • IPV6 MC traffic may cause system instability.
  • Resiliency mechanism was added to MLNX-OS initialization phase.
Note: With this release, image install-chip-fw command is no longer supported.
Enhancements

Changes and Major New Features in Rev 3.2.0330-40

  • Improved defect cable resiliency
  • Software downgrade process enhancement
  • Added support for Mellanox SX6506 Switch Director
  • Added MLPN (Mellanox Proprietary Link negotiation) support
  • Enable LLR by default
Changes and Major New Features in Rev 3.2.0330-15
  • Improved functionality for reload command
Changes and Major New Features in Rev 3.2.0330-4
  • Stability improvement
  • Optimization of upgrade process for SX65XX systems
  • Update u-boot
  • Enhancement of SNMP functionality
  • DHCPv4 enabled by default out of the box
Changes and Major New Features in Rev 3.2.0330
  • Improvement to fan control logic

Version:3.2.0330-15 (22 Aug 2012)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.2.0330-15:

  • On SX65XX systems, hot swapping a module (leaf/spine) may cause module link to stay down.
  • When connecting the switch systems to Grid Director 4036 switch family, the link may rise at SDR rate.

Enhancements

Changes and Major New Features in Rev 3.2.0330-15

  • Improved functionality for reload command
Changes and Major New Features in Rev 3.2.0330-4
  • Stability improvement
  • Optimization of upgrade process for SX65XX systems
  • Update u-boot
  • Enhancement of SNMP functionality
  • DHCPv4 enabled by default out of the box
Changes and Major New Features in Rev 3.2.0330
  • Improvement to fan control logic

Version:3.2.0300 (17 Jul 2012)
Enhancements

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Initial version


Version:3.2.0100 (28 Mar 2012)
Enhancements

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Initial release


Type: Firmware - Network
Version: 3.6.8008(12 Sep 2018)
Operating System(s):
Red Hat Enterprise Linux 6 Server (x86-64)
Red Hat Enterprise Linux 7 Server
SUSE Linux Enterprise Server 11 (AMD64/EM64T)
SUSE Linux Enterprise Server 12

Description

Switch Management Software for Mellanox Infiniband FDR 36-Port Managed Switch

Enhancements

Changes and New Features in version 3.6.8008:

  • Supporting for running 8 Border Gateway Protocol (BGP) instances in different Virtual Routing and firwarding's (VRF).
  • Included support for Address Resolution Protocol (ARP) responder.
  • JSON Commands.
  • Ability to start a container immediately as well as after system initialization with one Command Line Interface (CLI) command.
  • Limit docker containers CPU and memory usage.
  • Monitor container statistics.
  • Sending an Simple Network Management Protocol (SNMP) health trap upon container failure.
  • Enable default route origination to normal areas.
  • Enhanced default configuration for switches to be more secure so that, by default, HTTP is disabled, HTTPS is enabled, the lowest SSH version allowed is 2, and SSH security strict mode is enabled.
  • New SNMP notification to the MELLANOX-POWER-CYCLE MIB called mellanoxPowerCyclePlannedReload to support planned reload.
  • Support for scatter port.
  • Support for setting GUID order in routing table.
  • Support  for bulk application of SM configurations.
  • GA level support for Linux Dockers.
  • Support for SHARP reproducibility configuration on Switch-IB 2 based systems.
  • Alpha level support for Linux Docker configuration.

Installation Instructions

Prerequisites:

In order to upgrade to version 3.6.8008, the switch software should be at a minimum version of 3.6.5000.
Older versions of MLNX-OS may require upgrading to one or more intermediate versions prior to upgrading to the latest. Missing an intermediate step may lead to errors.

Supported Software Upgrades:

Target Version Verified Version From Which To Upgrade
3.6.8008 3.6.5000,3.6.6003,3.6.6106
3.6.6106 3.6.5000,3.6.6003
3.6.6003 3.6.5000
3.6.5000 3.6.4006
3.6.4006 3.6.2002; 3.6.3004
3.6.3004 3.6.2002; 3.6.1002; 3.5.1006
3.6.2002 3.6.1002; 3.5.1016; 3.5.1012; 3.5.1006; 3.5.1002; 3.5.1000
3.6.1002 3.5.1016; 3.5.1012; 3.5.1006; 3.5.1002; 3.5.1000; 3.4.3206
3.5.1016  3.5.1012; 3.5.1006; 3.5.1002; 3.5.1000; 3.4.3002; 3.4.2008
3.5.1012 3.5.1006; 3.5.1002; 3.5.1000; 3.4.3206; 3.4.3002; 3.4.2008
3.5.1006 3.5.1002; 3.5.1000; 3.4.3206; 3.4.3002; 3.4.2008
3.5.1002 3.5.1000; 3.4.3206; 3.4.3002; 3.4.2008

3.5.1000

3.4.3206; 3.4.3002; 3.4.2008

 3.4.3206

3.4.3002; 3.4.2008; 3.4.1120

3.4.3002

3.4.2008; 3.4.1120

3.4.2008

3.4.1954; 3.4.1950; 3.4.1804 ; 3.4.1120; 3.4.0012

3.4.1120

3.4.1110; 3.4.0012;

3.4.1110

3.4.0012

3.4.0012

3.3.5006; 3.3.4402

3.3.5006

3.3.4402; 3.3.4304

3.3.4402

3.3.4304; 3.3.4100

3.3.4304

3.3.4100; 3.3.3500

3.3.4100

3.3.3500; 3.3.3000


To ensure the integrity of your download, HPE recommends verifying your results with this SHA-256 Checksum value:

ea7ecaa4e4cb2072cbea598e30b82df9bb96d087f5b82855f2c71912b8d2eeed MLNX-OS_3.6.8008-670769-B21_Software_Image_HPE.zip

Reboot Requirement:
Reboot is required after installation for updates to take effect and hardware stability to be maintained.


Installation:

Upgrading MLNX-OS Software

  1. Download the file, MLNX-OS_3.6.8008-670769-B21_Software_Image_HPE.zip, to a Linux node reachable from the switch.
  2. Extract the file on the node by running the command:

#unzip MLNX-OS_3.6.8008-670769-B21_Software_Image_HPE.zip
This command unpacks the following files:

image-PPC_M460EX-3.6.8008.img            MLNX-OS_v3_6_8008_Documentation_Package_HPE_Bladesytem_InfiniBand.zip                 MLNX-OS 3.6.8008 Private MIBs.zip
"image-PPC_M460EX-3.6.8008.img" is the image file which needs to be uploaded to the switch.

  1. Do the following actions to upload the image file to the switch:1.Login to the switch as "admin" by opening a SSH session.
  2. Run the following commands

fdr-managed-switch[standalone: master] > enable
fdr-managed-switch[standalone: master] # image fetch scp://username:password@10.0.30.2:/home/admin/image-PPC_M460EX-3.6.8008.img

This command uses SCP to download the image file from /home/admin/image-PPC_M460EX-3.6.8008.img from node 10.0.30.2.

  1. Change to config mode.

fdr-managed-switch[standalone: master] # configure terminal

  1. If the switch is running a master or stand-by Subnet Manager, disable the SM before updating the switch software.

fdr-managed-switch[standalone: master]  (config) # show ib sm

This command shows if the SM is "enabled"  or "disabled" in the switch.

fdr-managed-switch[standalone: master]  (config) # no ib sm

This command will disable SM on the switch.

Note: Do not forget to enable the Subnet Manager once the upgrade is complete and the switch is rebooted.

  1. Check if the file is available for installation with following command:

fdr-managed-switch[standalone: master] (config) # image install ?
This command displays the installable files on the switch
image-PPC_M460EX-3.6.8008.img

  1. Run the following command to update the Switch Managment software on the switch.

fdr-managed-switch[standalone: master] (config) # image install image-PPC_M460EX-3.6.8008.img
Step 1 of 4: Verify Image
 100.0%  [#################################################################]
Step 2 of 4: Uncompress Image
 100.0%  [#################################################################]
Step 3 of 4: Create Filesystems
 100.0%  [#################################################################]
Step 4 of 4: Extract Image
 100.0%  [#################################################################]

  1. Make the new image active; that is, the next boot will use the new image.

fdr-managed-switch[standalone: master] (config) # image boot next

  1. Reload the switch by running the following command:

fdr-managed-switch[standalone: master] (config) # reload

Configuration has been modified; save first? [yes]:
Configuration changes saved.
Rebooting...

 

  1. After reboot, the software upgrade will also automatically upgrade the firmware version to 9.4.5070. Verify the Switch managment software and firmware version by running the following commands:

fdr-managed-switch[standalone: master] # show version

Product name:      MLNX-OS
Product release:   3.6.8008
Build ID:          #1-dev
Build date:        2018-07-03 20:32:10
Target arch:       ppc
Target hw:         m460ex
Built by:          jenkins@34bdac9e3eca
Version summary:   PPC_M460EX 3.6.8008 2018-07-03 20:32:10 ppc
Product model:     ppc
Host ID:           F45214E41B14

Uptime:            6d 23h 48m 43.072s
CPU load averages: 2.29 / 2.08 / 2.07
Number of CPUs:    1
System memory:     282 MB used / 1745 MB free / 2027 MB total
Swap:              0 MB used / 0 MB free / 0 MB total

fdr-managed-switch[standalone: master] # show asic-version

---------------------------------------------------
Module             Device              Version
---------------------------------------------------
MGMT               SX                  9.4.5070

  1. If the Subnet Manager was disabled during step 5, then enable the Subnet Manager back again by running the following command:

fdr-managed-switch[standalone: master] > enable
fdr-managed-switch[standalone: master] # configure terminal
fdr-managed-switch[standalone: master] (config) # show ib sm
fdr-managed-switch[standalone: master] (config) # ib sm


Release Notes

End User License Agreements:
HPE Software License Agreement v1


Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Important:

Refer the Release Notes document for detailed list of Known issues and Fixes in this release of switch managment software.
Release Notes and User Manual are bundled with the software image zip file.

  • unzip MLNX-OS_v3_6_8008_Documentation_Package_HPE_Generic_InfiniBand.zip

MLNX-OS_HP_Gen_IB_v3_6_8008_RN.pdf

MLNX-OS_HP_Gen_IB_v3_6_8008_UM.pdf


Notes:

Supported Infiniband EDR Cables:

  • EDR MCP1600-E001 / HP 834973-B22 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 1M
  • EDR MCP1600-E002 / HP 834973-B24 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 2M
  • EDR MCP1600-E003 / HP 834973-B25 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 3M
  • EDR MCP1600-E00A / HP 834973-B21 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 0.5M
  • EDR MFA1A00-E003 / HP 834972-B21 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 3m
  • EDR MFA1A00-E005 / HP 834972-B22 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 5m
  • EDR MFA1A00-E003 / HP 834972-B21 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 3m
  • EDR MFA1A00-E005 / HP 834972-B22 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 5m
  • EDR MFA1A00-E007 / HP 834972-B23 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 7m
  • EDR MFA1A00-E000 / HP 834972-B24 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 10m
  • EDR MFA1A00-E012 / HP 834972-B25 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 12m
  • EDR MFA1A00-E015 / HP 834972-B26 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 15m
  • EDR MFA1A00-E020 / HP 834972-B27 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 20m
  • EDR MFA1A00-E030 / HP 834972-B28 MELLANOX active fiber cable, VPI, up to 100Gb/s, QSFP, 30m
  • EDR MCP1600-E00A / HP 834973-B21 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 0.5M
  • EDR MCP1600-E001 / HP 834973-B22 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 1M
  • EDR MCP1600-E01A / HP 834973-B23 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 1.5M
  • EDR MCP1600-E002 / HP 834973-B24 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 2M
  • EDR MCP1600-E003 / HP 834973-B25 MELLANOX PASSIVE COPPER CABLE VPI 100GB/S QSFP LSZH 3M

Supported Infiniband FDR Cables:

  • FDR HP 670760-B21 FDR InfiniBand QSFP active fiber cable, 3m
  • FDR HP 670760-B23 FDR InfiniBand QSFP active fiber cable, 7m
  • FDR MC2207128-003 / HP 670759-B25 FDR InfiniBand QSFP passive copper cable, 3m
  • FDR MC2207130-002 / HP 670759-B24 FDR InfiniBand QSFP passive copper cable, 2m
  • FDR MC2207130-001 / HP 670759-B23 FDR InfiniBand QSFP passive copper cable, 1.5m
  • FDR MC2207130-001 / HP 670759-B22 FDR InfiniBand QSFP passive copper cable, 1m
  • FDR MC2207130-00A / HP 670759-B21 FDR InfiniBand QSFP passive copper cable, 0.5m
  • FDR MC2207310-005 / HP 670760-B22 FDR InfiniBand QSFP active fiber cable, 5m
  • FDR MC2207310-010 / HP 670760-B24 FDR InfiniBand QSFP active fiber cable, 10m
  • FDR MC2207310-015 / HP 670760-B25 FDR InfiniBand QSFP active fiber cable, 12m
  • FDR MC2207310-015 / HP 670760-B26 FDR InfiniBand QSFP active fiber cable, 15m
  • FDR MC2207310-020 / HP 670760-B27 FDR InfiniBand QSFP active fiber cable, 20m
  • FDR MC2207310-030 / HP 670760-B28 FDR InfiniBand QSFP active fiber cable, 30m
  • FDR MC220731V-003 / HP 808722-B21 HP 3 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-005 / HP 808722-B22 HP 5 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-007 / HP 808722-B23 HP 7 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-010 / HP 808722-B24 HP 10 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-012 / HP 808722-B25 HP 12 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-015 / HP 808722-B26 HP 15 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-020 / HP 808722-B27 HP 20 Meter InfiniBand FDR QSFP V-series Optical Cable
  • FDR MC220731V-030 / HP 808722-B28 HP 30 Meter InfiniBand FDR QSFP V-series Optical Cable

Supported InfiniBand FDR10 and QDR Cables:

  • QDR/FDR10 MC2206125-007 / HP 498385-B25 QDR/FDR10 InfiniBand QSFP copper cable, 7m
  • QDR/FDR10 MC2206128-005 / HP 498385-B24 QDR/FDR10 InfiniBand QSFP copper cable, 5m
  • QDR/FDR10 MC2206130-001 / HP 498385-B21 QDR/FDR10 InfiniBand QSFP copper cable, 1m
  • QDR/FDR10 MC2206130-002 / HP 498385-B22 QDR/FDR10 InfiniBand QSFP copper cable, 2m
  • QDR/FDR10 MC2206130-003 / HP 498385-B23 QDR/FDR10 InfiniBand QSFP copper cable, 3m
  • QDR/FDR10 MFS4R12CB-003 / HP 498386-B23 QDR/FDR10 InfiniBand QSFP active fiber cable, 3m
  • QDR/FDR10 MFS4R12CB-005 / HP 498386-B24 QDR/FDR10 InfiniBand QSFP active fiber cable, 5m
  • QDR/FDR10 MFS4R12CB-010 / HP 498386-B25 QDR/FDR10 InfiniBand QSFP active fiber cable, 10m
  • QDR/FDR10 MFS4R12CB-015 / HP 498386-B26 QDR/FDR10 InfiniBand QSFP active fiber cable, 15m
  • QDR/FDR10 MFS4R12CB-020 / HP 498386-B27 QDR/FDR10 InfiniBand QSFP active fiber cable, 20m
  • QDR/FDR10 MFS4R12CB-030 / HP 498386-B28 QDR/FDR10 InfiniBand QSFP active fiber cable, 30m

Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.8008:

  • Commands were missing a new line when “paging disable” was configured on Command OLine Interface (CLI).
  • Configuration Management: Saving a running configuration (running “configuration write”) with more than 6000 CLI commands might fail.
  • If a local user was deleted, a Remote Authentication Dial-In User Service (RADIUS) server with the same name might be invalidated.
  • When running “show interfaces * transceiver diagnostics” for the first time since system boot, a false power alarm might appear for the cable.
  • If more than 400 Globally Unique Indentifier's (GUID) were configured on a partition, they were not reflected properly in “partitions.conf”.
  • When configuring the default partition IPoIB flag to “no” (which was not the default), it was not reflected in the running-config.
  • If a SX65xx switch system was overloaded by Simple Network Management Protocol(SNMP) requests and tries to generate a sysdump at the same time, a given process might crash.
  • If the values of the “InOctets” and “OutOctets” fields exceed their defined maximum allowed value, then they reset to zero.
  • The command “reset factory” clears the Universal Serial Bus(USB) flash drive.

Important

Refer the Release Notes document for detailed list of Known issues and Fixes in this release of switch managment software.
Release Notes and User Manual are bundled with the software image zip file.

  • unzip MLNX-OS_v3_6_8008_Documentation_Package_HPE_Generic_InfiniBand.zip

MLNX-OS_HP_Gen_IB_v3_6_8008_RN.pdf

MLNX-OS_HP_Gen_IB_v3_6_8008_UM.pdf

Revision History

Version:3.6.8010 (8 May 2019)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.8010:

  • When “paging disable” is configured, some show commands are missing a new line.
  • On 1U(Unmanaged) PPC(Power PC) systems, the command “show fan” indicates FAIL status when fan speed was actually valid.
  • Saving a running configuration (running “configuration write”) with more than 6000 CLI(Command Line Interface) commands may fail.
  • If a local user is deleted, a remote RADIUS(Remote Authentication Dial-In User Service) server with the same name may be invalidated.
  • When running “show interfaces * transceiver diagnostics” for the first time since system boot, a false power alarm may appear for the cable.
  • The command “docker save” does not work for image names containing “/” characters.
  • If more than 400 GUIDs (Globally Unique Identifier) are configured on a partition, they are not reflected properly in “partitions.conf”.
  • When configuring the default partition IPoIB(Internet Protocol Over InfiniBand) flag to “no” (which is not the default), it is not reflected in the running-config.
  • If a SX65xx switch system is overloaded by SNMP (Simple Network Management Protocol) requests and tries to generate a sysdump at the same time, a given process might crash.
  • If the values of the “InOctets” and “OutOctets” fields exceed their defined maximum allowed value, then they reset to zero.
  • Upgrading to 3.6.8008 from older versions does not work when “web http redirect” is configured.
  • The command “reset factory” clears the USB(Universal Serial Bus) flash drive.

 

Enhancements

Changes and New Features in version 3.6.8010:

  • Added support for 2K adaptive routing groups (instead of 256) for Switch-IB family based switch systems.

 


Version:3.6.8008 (12 Sep 2018)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.8008:

  • Commands were missing a new line when “paging disable” was configured on Command OLine Interface (CLI).
  • Configuration Management: Saving a running configuration (running “configuration write”) with more than 6000 CLI commands might fail.
  • If a local user was deleted, a Remote Authentication Dial-In User Service (RADIUS) server with the same name might be invalidated.
  • When running “show interfaces * transceiver diagnostics” for the first time since system boot, a false power alarm might appear for the cable.
  • If more than 400 Globally Unique Indentifier's (GUID) were configured on a partition, they were not reflected properly in “partitions.conf”.
  • When configuring the default partition IPoIB flag to “no” (which was not the default), it was not reflected in the running-config.
  • If a SX65xx switch system was overloaded by Simple Network Management Protocol(SNMP) requests and tries to generate a sysdump at the same time, a given process might crash.
  • If the values of the “InOctets” and “OutOctets” fields exceed their defined maximum allowed value, then they reset to zero.
  • The command “reset factory” clears the Universal Serial Bus(USB) flash drive.
Enhancements

Changes and New Features in version 3.6.8008:

  • Supporting for running 8 Border Gateway Protocol (BGP) instances in different Virtual Routing and firwarding's (VRF).
  • Included support for Address Resolution Protocol (ARP) responder.
  • JSON Commands.
  • Ability to start a container immediately as well as after system initialization with one Command Line Interface (CLI) command.
  • Limit docker containers CPU and memory usage.
  • Monitor container statistics.
  • Sending an Simple Network Management Protocol (SNMP) health trap upon container failure.
  • Enable default route origination to normal areas.
  • Enhanced default configuration for switches to be more secure so that, by default, HTTP is disabled, HTTPS is enabled, the lowest SSH version allowed is 2, and SSH security strict mode is enabled.
  • New SNMP notification to the MELLANOX-POWER-CYCLE MIB called mellanoxPowerCyclePlannedReload to support planned reload.
  • Support for scatter port.
  • Support for setting GUID order in routing table.
  • Support  for bulk application of SM configurations.
  • GA level support for Linux Dockers.
  • Support for SHARP reproducibility configuration on Switch-IB 2 based systems.
  • Alpha level support for Linux Docker configuration.

Version:3.6.6106 (18 May 2018)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.6106:

  • Interfaces: The command “show interfaces ib [] transceiver diagnostics” causes errors in the log and displays missing information when executed on a DDMI capable transceiver.’’
Enhancements

Changes and New Features in version 3.6.6106:

Added the following new features:

  • A GA level support for Switch-IB family 1U switch systems See section “Signal Degradation Monitoring” in the User Manual.
  • Cnfiguring default hop limit for AGUID Path Records See command “ib sm aguid_default_hop_limit” in the User Manual.
  • Resetting SNMP engine ID See section “Resetting SNMPv3 Engine ID” in the User Manual.
  • Alpha level support for Linux Docker configuration in WebUI Category
  • Beta level support for Top Talker in Telemetry Category.

Version:3.6.6003 (3 May 2018)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.6003:

  • In rare cases, link BER on Switch-IB family based systems exceeds 10^12 rate.

 

Enhancements

Changes and New Features in version 3.6.6003:

  • Added support for a rare case causing the link BER on Switch-IB family based systems exceeding 10^12 rate.

Version:3.6.5000 (20 Dec 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.5000:

  • On Director switch systems, health reports could not be cleared on slave management modules although they could be viewed.
  • In case of process failure, the switch system CLI was not accessible.
  • One of the OS processes would crash occassionally during deinitialization.
  • The CLI command “interface ib * width” was missing a “no” option.
  • JSON request made from WebUI caused an error in response.
  • Docker image name did not contain the character “/”.
  • NTP recurring error log message when NTP was enabled on the switch.
  • The message [mgmtd.WARNING]: Failure trying to run ntpdate: code 256 appeared on upgrades or reboots.
  • On x86 systems, incorrect value was displayed for MAX SM node capability.
  • After software upgrade to 3.6.4000, it was not possible to remove an SM node which was created on 3.6.3004 MLNX-OS version.
  • The command “show telemetry” displayed the wrong telemetry status.
  • In cases where there were more than 1000 thresholds in total for all ports, if the user ran “show threshold” for a range of interfaces, the events of those interfaces were displayed instead.
  • The command “show telemetry sampling <…>” supported up to 300 JSON samples only.
  • Unable to connect to virtual machine configured on the switch when IPv6 was disabled.
  • When the VM was enabled, the speed of mgmt0 was displayed as unknown.
  • Mellanox periodic GUI refresh wiped out current unapplied settings.

Fixes in version 3.6.4006:

  • Ethernet Interfaces : The transceiver’s diagnostic data displayed wrong output while using a 100G MMA1B00 transceiver in split mode.
  • Chassis Management :
    • On SX65xx based systems, inserting “mgmt” module in a slave role while software on master role does not match, module did not load properly.
    • On X86 based systems fan’s speed changed frequently
    • A mapping issue occured on x86 systems with variable expected voltage on AC-DC device.
  • WebUI : 
    • Lag load-balance is inconsistent with "port-channel load-balance ethernet" command.
    • Failed to execute “configuration switch-to” from WebUI.
    • Error displaying SX1012 and SX1012X switch type on “System Modules” page.
  • SM : After modifying host-name, removing “<orig-name> smnode” using "no ib smnode <orig-name>” fails.
  • Gateway : When host switches sides, resource counters decrement on source of origin, causing resources to be miscounted thus new ARPs cannot be learned.
  • VLAN : Fixed no traffic issue when configuring LAG/MLAG with these attributes:

•mode hybrid, allowed vlan all, PVID != default and When adding new member port to this laf with these attributes:
•mode hybrid, allowed vlan all, PVID != LAG PVID.

  • HTTPS : When setting switch to secure mode http needed to be disabled.
  • IB Router : On MSB7780 after running the command "no ib router" the following error appeared: [smad.ERR]: file descriptor is invalid.
  • MLAG : Fixed failure to run “interface ethernet 1/1/1 lacp rate fast” while “1/1/1” is a member of mlag-port-channel mode active.
  • IGMP Snooping : Removing and adding multicast entry to hardware during port list updating leads to traffic loss/flood.
  • VRF : Assigning interfaces to VRF using range command does not work.
  • IPv4 Routing :
    • Routing is not functional if mgmt interface has no default gateway.
    • Static route could not be removed while another one with the same destination (IP) is unable to reach next hop.
  • IP Routing :
    • If the routing entries configured on a system is over the permitted limit, the machine becomes overloaded and hangs.
    • If static route next-hop of a VLAN interface is configured before configuring its subnet, that configured route is not added to the interface and cannot be deleted later.
    • If there is a static ARP on top of a VLAN interface and ECMP route with its next-hop equal to the static ARP entry, and if the static ARP owner is not responding to ARP requests, then performing “shutdown” and “no shutdown” to the VLAN interface, within a minute, causes errors to appear on the log. These errors may be safely ignored.
    • Errors in the log appeared when using ECMP routes if next-hop belongs to a VLAN interface which lies on port-channel whose links operational state is toggling.
  • OpenFlow 1.3 :
    • A list action of output port and controller duplicated the traffic to the output port.
    • Running the following commands consecutively crashed the OpenFlow demon:

•interface port-channel 5 no openflow mode hybrid
•no interface port-channel 5

  • LLDP : When configuring LLDP with PFC on a LAG, after switch reload, the LLDP did not show the PFC configuration.
  • In-Band Management : In-band management ARPs are not taken into account in the command “show ip arp count”.
  • Configuration Management :Configuration of hostname “.” is invalid and can cause certification and web HTTPS (SSL) service issues.
  • BGP : 4-byte ASN is not supported.
  • OSPF : 
    • Default route advertise by ABR to NSSA area not installed by NSSA area router.
    • Changing administrative distance (the command “router ospf distance”) is not supported.
    • Interface configuration cannot be performed while OSPF is admin-disabled (shutdown).
    • Changing the IP address of an OSPF VLAN interface deletes the interface-OSPF attachment.
    • A loopback interface assigned to area 0 does not get redistributed as direct route after removal from the OSPF.
    • If an OSPF packet size is larger than physical interface MTU, the packet does not process and, therefore, the route is not learned.
    • A VLAN interface which is not member of any OSPF area but is set as OSPF passive, does not get redistributed.
  • MAGP : Traffic loss after ARP timeout when using MAGP.
  • Link : In rare cases Switch BER degradation detected when connected through QDR cables.

Refer section 5.2 of the "Release Notes", which is included in the downloadable zip file, for a list of security bug fixes in version 3.6.4006.

Enhancements

Changes and New Features in version 3.6.5000:

  • Set Diffie-Hellman default key size to 2048.
  • Added support for OpenSM 4.8.1
  • Added support for additional JSON commands.
  • Added support for JSON batch commands.
  • Added support for DHCP based Zero Touch Provisioning (ZTP).

Changes and New Features in version 3.6.4006:

  • General :
    • Added support for SN2740 Spectrum™ based Ethernet switch system.
    • Added beta support for Precision Time Protocol (IEEE-1588).
    • Added support for Link Diagnostic Per Port - Read Phy Debug Database.
  • WebUI : Added support for TLS1.2 on FireFox web browser.
  • Ethernet Switching :
    • Added support for Storm Control functionality.
    • Added port filter to show mac-address-table command.
  • Telemetry :
    • Added support for “show telemetry” command.
    • Added support for “link fail reason” command.
  • Infiniband Interfaces : Updated “speed” command to support force EDR.
  • JSON :
    • Added support for “async” command.
    • Added support for “bulk” command.
  • NTP : Added ability to configure NTP with host name.
  • Ethernet Interfaces : 
    • Added show interface status command.
    • Added bit units to show interfaces ethernet rates command
    • Added support for dBm units to transceiver diagnostics .
  • LLDP :
    • Added clear lldp counters command.
    • Added parent interface to show lldp remote command.
  • IP Routing :Added interface vlan “no autostate” support.
  • PIM SSM : Added beta support for PIM SSM.

Version:3.6.4006 (31 Jul 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.4006: 

  • Ethernet Interfaces : The transceiver’s diagnostic data displayed wrong output while using a 100G MMA1B00 transceiver in split mode.
  • Chassis Management :
    • On SX65xx based systems, inserting “mgmt” module in a slave role while software on master role does not match, module did not load properly.
    • On X86 based systems fan’s speed changed frequently
    • A mapping issue occured on x86 systems with variable expected voltage on AC-DC device.
  • WebUI : 
    • Lag load-balance is inconsistent with "port-channel load-balance ethernet" command.
    • Failed to execute “configuration switch-to” from WebUI.
    • Error displaying SX1012 and SX1012X switch type on “System Modules” page.
  • SM : After modifying host-name, removing “<orig-name> smnode” using "no ib smnode <orig-name>” fails.
  • Gateway : When host switches sides, resource counters decrement on source of origin, causing resources to be miscounted thus new ARPs cannot be learned.
  • VLAN : Fixed no traffic issue when configuring LAG/MLAG with these attributes:

•mode hybrid, allowed vlan all, PVID != default and When adding new member port to this laf with these attributes:
•mode hybrid, allowed vlan all, PVID != LAG PVID.

  • HTTPS : When setting switch to secure mode http needed to be disabled.
  • IB Router : On MSB7780 after running the command "no ib router" the following error appeared: [smad.ERR]: file descriptor is invalid.
  • MLAG : Fixed failure to run “interface ethernet 1/1/1 lacp rate fast” while “1/1/1” is a member of mlag-port-channel mode active.
  • IGMP Snooping : Removing and adding multicast entry to hardware during port list updating leads to traffic loss/flood.
  • VRF : Assigning interfaces to VRF using range command does not work.
  • IPv4 Routing :
    • Routing is not functional if mgmt interface has no default gateway.
    • Static route could not be removed while another one with the same destination (IP) is unable to reach next hop.
  • IP Routing :
    • If the routing entries configured on a system is over the permitted limit, the machine becomes overloaded and hangs.
    • If static route next-hop of a VLAN interface is configured before configuring its subnet, that configured route is not added to the interface and cannot be deleted later.
    • If there is a static ARP on top of a VLAN interface and ECMP route with its next-hop equal to the static ARP entry, and if the static ARP owner is not responding to ARP requests, then performing “shutdown” and “no shutdown” to the VLAN interface, within a minute, causes errors to appear on the log. These errors may be safely ignored.
    • Errors in the log appeared when using ECMP routes if next-hop belongs to a VLAN interface which lies on port-channel whose links operational state is toggling.
  • OpenFlow 1.3 :
    • A list action of output port and controller duplicated the traffic to the output port.
    • Running the following commands consecutively crashed the OpenFlow demon:

•interface port-channel 5 no openflow mode hybrid
•no interface port-channel 5

  • LLDP : When configuring LLDP with PFC on a LAG, after switch reload, the LLDP did not show the PFC configuration.
  • In-Band Management : In-band management ARPs are not taken into account in the command “show ip arp count”.
  • Configuration Management :Configuration of hostname “.” is invalid and can cause certification and web HTTPS (SSL) service issues.
  • BGP : 4-byte ASN is not supported.
  • OSPF : 
    • Default route advertise by ABR to NSSA area not installed by NSSA area router.
    • Changing administrative distance (the command “router ospf distance”) is not supported.
    • Interface configuration cannot be performed while OSPF is admin-disabled (shutdown).
    • Changing the IP address of an OSPF VLAN interface deletes the interface-OSPF attachment.
    • A loopback interface assigned to area 0 does not get redistributed as direct route after removal from the OSPF.
    • If an OSPF packet size is larger than physical interface MTU, the packet does not process and, therefore, the route is not learned.
    • A VLAN interface which is not member of any OSPF area but is set as OSPF passive, does not get redistributed.
  • MAGP : Traffic loss after ARP timeout when using MAGP.
  • Link : In rare cases Switch BER degradation detected when connected through QDR cables.

Refer section 5.2 of the "Release Notes", which is included in the downloadable zip file, for a list of security bug fixes in version 3.6.4006.

Enhancements

Changes and New Features in version 3.6.4006:

  • General :
    • Added support for SN2740 Spectrum™ based Ethernet switch system.
    • Added beta support for Precision Time Protocol (IEEE-1588).
    • Added support for Link Diagnostic Per Port - Read Phy Debug Database.
  • WebUI : Added support for TLS1.2 on FireFox web browser.
  • Ethernet Switching :
    • Added support for Storm Control functionality.
    • Added port filter to show mac-address-table command.
  • Telemetry :
    • Added support for “show telemetry” command.
    • Added support for “link fail reason” command.
  • Infiniband Interfaces : Updated “speed” command to support force EDR.
  • JSON :
    • Added support for “async” command.
    • Added support for “bulk” command.
  • NTP : Added ability to configure NTP with host name.
  • Ethernet Interfaces : 
    • Added show interface status command.
    • Added bit units to show interfaces ethernet rates command
    • Added support for dBm units to transceiver diagnostics .
  • LLDP :
    • Added clear lldp counters command.
    • Added parent interface to show lldp remote command.
  • IP Routing :Added interface vlan “no autostate” support.
  • PIM SSM : Added beta support for PIM SSM.

Version:3.6.3004 (21 Feb 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.3004:

  • Logging : Syslog is not sent to remote server.
  • MKEY : ON SX based system working with MKEY protection level 2 is not supported.
  • SM : Embedded Subnet Manager may not run after power cycle the switch.
  • SM : Upgrade fails due to "ib sm log-max-size 120" before the upgrade.
  • SM : Running embedded SM on PPC system with multiple join and leave requests to MC group may result in a higher CPU utilization.
  • Management Interfaces : On SX65xx based systems, IB internal notification settings are not replicated between two management modules.
  • Management Interfaces : On PPC based systems, the management interface does not come back up after reconnecting the management cable.
  • Chassis Management : High memory usage after low disk space notification.
  • Chassis Management : ASIC in CS75xx systems did not report high temperature.
  • Chassis Management : CS75x0 fan module status LED remains green even after fan failure.

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.6.3004.

Enhancements

Changes and New Features in version 3.6.3004:

  • Chassis Management : Improved temperature control algorithm
  • IB Utilities : Updated the embedded IB utilities to version 2-2.1.1-0.87
  • SNMP : Added support to disable a set of SNMPs per MIB (see “snmp-server enable set-permission” in User Manual)
  • SNMP : Added ifTable, ifXTable, ifVPITable support for IB Router
  • SNMP : Added support for the columns SubnetName, SubnetPrefix, and LocalIdentifier to ifVPITable in MELLANOX-IF-VPI-MIB
  • SNMP : Added support for viewing port module transmit/receive power sensor on entPhysicalTable
  • User Interface : Added support for JSON API
  • System Management : Added support for Telemetry

Version:3.6.2002 (19 Oct 2016)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.2002:

  • Management Interfaces : Management interface’s default gateway is not removed from routing table
    after disconnecting the cable from it.
  • Software Management : Upgrade from version 3.5.1000 or above fails if the system is configured to
    use no-adaptive-routing profile.
  • User Interfaces : When logging into director switch systems through SSH, the following
    typo appears in the login text output: “Modular HA informatione configured”.
  • Chassis Management : The command “show power” may show inaccurate data in the power column
    on 1U systems.
  • SNMP : Executing SNMP queries in high frequency may cause ifTable data to not
    get updated.
  • Adaptive Routing : Adaptive Routing settings are not preserved after failover on director
    switch systems.
  • SNMP : When executing SNMP queries every 1 second, status changes are not
    updated.

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.6.2002.

Enhancements

Changes and New Features in version 3.6.2002:

  • CLI : Added support for viewing a live feed of the progress of any “show” command. Also, Improved running-config output display
  • User Accounts : Added ability to disconnect users from systems,
  • Provided access to all clear, show, and image commands from outside of the configuration terminal
  • Logging : Added ability to set remote server destination port for log messages
  • Chassis Management : Added support for unit identification (UID) LED on director switch systems
  • Added support for a new trap (mellanoxEntStateChangeAlarm) for when a power supply is removed or inserted from switch system
  • Added support for MELLANOX-ENTITY-STATE-MIB for power supply insertion and extraction
  • Added ability to match ICMP through ACL
  • OpenFlow 1.3 : Added beta support for OpenFlow 1.3
  • InfiniBand Interfaces : Added ability to display cable channel monitoring and diagnostics info
  • SM : Added support to configure MKey in embedded SM
  • Added support for configuring virtualization option in embedded SM

Version:3.6.1002 (20 Jul 2016)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.6.1002:

  • Disabling "ib0" interface was not persistent across switch reboot.
  • On PPC switch systems, only one image was allowed to be copied into the system (using the “image fetch” command). Old image files must be removed prior to fetching a new one
  • PSU fan speed was set to a minimum of 60% on Switch-IB™ based switch systems
  • On SX65xx systems with an uptime of over a year, the master management module may stop responding to SM management packets and user interface activities (i.e. CLI/WebUI) response time may be slower. 
  • When changing multiple fans or power supply modules, the modules had to be changed one at a time instead of taking them all out at once. 
  • Switch system did not answer to SNMP when request route is not the same as the reply route. 

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.6.1002.

Enhancements

Changes and New Features in version 3.6.1002:

  • GA support for CS75xx switch systems based on Switch-IB™ 2
  • Added support for encryption and integrity verification of binary configuration files See section “BIN Configuration Files” in the User Manual
  • Added support for encryption of data at rest See section “System File Encryption” in the User Manual
  • Added support for unit identification (UID) LED on 1U switch systems See section “Unit Identification LED” in the User Manual
  • Added ability to view raw transceiver details on InfiniBand interfaces See commands “show interfaces ib transceiver raw”in the User Manual
  • Changed command output for “show temperature” and “show asic-version” on CS75x0 switch systems
  • Added support for SSH server configuration See page Security > SSH in the WebUI
  • Updated InfiniBand speed configuration in the WebUI Ports page and Expert Subnet Manager (SM) Configuration page
  • Added support to work with MKey congratulation by external SM for InfiniBand switch systems

Version:3.5.1006 (14 Mar 2016)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.5.1006:

  • A downloaded text configuration file does not work when uploaded back to the switch.
  • The command "show ntp" always lists the last configured NTP server even if it has been deleted. This output can be safely ignored.
  • InfiniBand menu tabs are grayed out when switch systems are connected through mgmt1 instead of mgmt0.

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.5.1006.

Enhancements

Changes and Major New Features in version 3.5.1006:

  • Security fix for GlibC CVE-2015-7547

Version:3.4.3002 (6 Nov 2015)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.4.3002:

  • mellanoxIfVPIIbPortGuid entry is missing for InfiniBand ports.
  • SNMP EntityTable does not refresh immediately after an event.
  • The command “show module” displays incorrect “Power” status.
  • Temperatures of SX65xx modules may rise when a spine module fails.
  • If management module 2 is inserted into the chassis, spine module 2 powers off and drops off of the fabric.
  • On director switches, in case of software mismatch between the 2 management modules, each management module reports the state of the other management module as fatal. These messages may be safely ignored.
  • Over-temperature alert on QSFP module is sent on wrong threshold.
  • Power supply may appear as not present but powered when extracted from the system.
  • The internalSpeedMismatch trap is raised only once the first time it is discovered.
  • Syslog messages, and trap messages for internal link speed mismatch do not include the ifName of the link which identify both ends of the connection.
  • On SX65xx switch systems, the slave management LED lights in amber instead of being turned off.
  • Setting AAA authorization mapping to remote-only does not work. Local credentials are still used.
  • ASCII based authentication using TACACS+ is not functional.
  • Received SysRq signals from serial connection (RS232) to USB adapter can cause switch to reboot.
  • The no command “no interface ib shutdown” appears in the running config.
  • After applying text-based configuration file the SM is not enabled automatically since the hostname is now different.
  • The CLI command “ib partition <partition-name> rate” does not support EDR speeds.

Refer section 5.2 of the "Release Notes" for list of security bug fixes in version 3.4.3002.

Enhancements

Changes and Major New Features in version 3.4.3002:

  • Improved logic of AAA authorization map order.
  • Added ability to receive trap and log notifications on internal link-speed mismatches.
  • Improved module configuration counter on director switches.
  • Added new System Health Monitor notification alert.
  • Improved module status display.
  • Improved XML interface.

Changes and Major New Features in version 3.4.2008:

  • Modified user interface for the commands "show guid", "show lids", and "show asic version".
  • Improved module hierarchy in the output of the commands "show power" and "show temperature".
  • Removed CPU component from the output of the command "show inventory".
  • Applied new index scheme for SNMP EntityTable.
  • Added SNMP support for reading director switch slave management module version.
  • Added support for VRF with static IPv4 and ECMP.
  • Added GA support for PIM Load-Sharing.
  • Added support for OpenSM 4.5.0.
  • Added ability to configure LLR64 on the internal interfaces of director switch systems.

Version:3.4.2008 (20 Jul 2015)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.4.2008:

  • No ability to view slave management software version (entPhysicalSoftwareRev) in entPhysicalTable in the Entity MIB.
  • Mismatch between CLI and SNMP ifXTable in interface addressing syntax.
  • MTU must be set before changing configuration of ib0 interface.
  • Running the command show asic version may fail after system reboot.
  • When taking out a master management on a dual management system, its locally attached spine may appear in the CLI as being off after a take-over.
  • Upon system init the following errors may appear in the log:

    • [ibd.ERR]: sa_is_master_sm_in_swid(), swidapi.c:1563, build 1: Sysapi func-tion called but madrpc was not initiated.
    • [ibd.WARNING]: get_is_sm_in_fabric: sa_is_master_sm_in_fabric() err=1(ERROR)
    • [ibd.ERR]: ibd_mon_handle_get(), ibd_main.c:1347, build 1: Error code 14000 (generic error) returned
    • [ibd.ERR]: mdc_dispatch_mon_request_nosend(), mdc_misc.c:1535, build 1: Get handler for '/ib/state/swid/1/is_sm_in_fabric'.

          These errors may be safely ignored.

  • Missing some types of parenthesis in various command help strings.
  • Unable to configure IfIndex (i.e bind ACL) when it is the monitor session destination using XML-GW.
  • Puppet agent restart after log rotation.
  • CVE-2015-0207  : The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.
  • CVE-2015-0208 : The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature.
  • CVE-2015-0290 : The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 plat-forms with AES NI support does not properly handle cer-tain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and applica-tion crash) via unspecified vectors.
  • CVE-2015-0291 : The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the Cli-entHello message during a renegotiation.
  • CVE-2015-1787 : The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (dae-mon crash) via a ClientKeyExchange message with a length of zero.
Enhancements

Changes and Major New Features in version 3.4.2008:

  • Modified user interface for the commands "show guid", "show lids", and "show asic version".
  • Improved module hierarchy in the output of the commands "show power" and "show temperature".
  • Removed CPU component from the output of the command "show inventory".
  • Applied new index scheme for SNMP EntityTable.
  • Added SNMP support for reading director switch slave management module version.
  • Added support for VRF with static IPv4 and ECMP.
  • Added GA support for PIM Load-Sharing.
  • Added support for OpenSM 4.5.0.
  • Added ability to configure LLR64 on the internal interfaces of director switch systems.

Changes and Major New Features in version 3.4.0012:

  • Changed the HTTPS default ciphers to TLS.
  • Added SwitchX-2 support.

Changes and Major New Features in version 3.4.0008:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added system identifier (MAC address) to test trap.
  • Added support for:
    • Embedded SM version 4.0.5.
    • Mellanox OFED 2.3 integration.
    • Security strict mode.
    • Mellanox configuration MIB.
    • Power MIB.
    • Setting hostname through SNMP.
    • Power cycling through SNMP.
    • Changing configuration through SNMP.
    • Internet Explorer 11 web browser.

Changes and Major New Features in version 3.3.5006:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added support for SNMP to trigger SNMP test trap via SNMP set command.
  • Added system identifier (MAC address) to test trap.

Version:3.4.1124 (2 Dec 2015)
Fixes

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.


Fixes in version 3.4.1124:

  • Updated SNMP fan and leaf health report trap verbiage.
  • Cannot map remote IP to remote host in lldpRemManAddrTable.
  • SNMP refresh configuration does not support value lower than 60 seconds.
  • QSFP sensor temperature warning threshold fix.
  • MLNX-OS management becomes unavailable after accessing XML tree at top level.

Refer section 5 of the "Release Notes" for list of security bug fixes in version 3.4.1124.

Fixes in version 3.4.0012:

  • Enhancements only.

Fixes in version 3.4.0008:

The following issues have been fixed in version 3.4.0008:

  • Inserting modules with FW versions older than 9.1.2010 was not supported on SX65xx switch systems.
  • If a leaf or spine module burned with a firmware older than 9.1.6516 was inserted into an SX65xx system with a new firmware, the leaf or spine module was not detected by the management software.
  • When modifying the hostname via WebUI CLI, or SNMP, the modification was not reflected in the Base SM submenu in the WebUI.
  • Running the command "no ha dns enable" caused slower login time to the switch system and printed "clusterd" error to the log.
  • Mismatch between entPhysicalTable, entPhySensorTable, and entStateTable when removing FRU from 1U systems.
  • Missing indexes were not consistent between entPhysicalTable, entPhySensorTable, and entStateTable.
  • ifTable, ifXtable, and mellanoxIfVPITable returned unexpected output “No Such Instance”.
  • Vulnerability to data injection across a session or a DoS (use-after-free and parsing error) via an SSL connection in a multi-threaded environment.
  • Buffer overflow through invalid DTLS fragment.
  • NULL pointer de-reference and application crash.
  • Vulnerability to a DoS via a DTLS hello message in an invalid DTLS handshake.
  • Client-side DoS when using anonymous ECDH.
  • Shellshock or Bashdoor security bug in Unix Bash shell.

 

Enhancements

Changes and Major New Features in version 3.4.1124:

  • Removed support for the following MIBs:
    • MELLANOX-CONFIG-DB
    • MELLANOX-POWER-CYCLE
    • MELLANOX-SW-UPDATE

Changes and Major New Features in version 3.4.0012:

  • Changed the HTTPS default ciphers to TLS.
  • Added SwitchX-2 support.

Changes and Major New Features in version 3.4.0008:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added system identifier (MAC address) to test trap.
  • Added support for:
    • Embedded SM version 4.0.5.
    • Mellanox OFED 2.3 integration.
    • Security strict mode.
    • Mellanox configuration MIB.
    • Power MIB.
    • Setting hostname through SNMP.
    • Power cycling through SNMP.
    • Changing configuration through SNMP.
    • Internet Explorer 11 web browser.

Version:3.4.0012 (17 Mar 2015)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.4.0012:

  • Enhancements only.

Fixes in version 3.4.0008:

The following issues have been fixed in version 3.4.0008:

  • Inserting modules with FW versions older than 9.1.2010 was not supported on SX65xx switch systems.
  • If a leaf or spine module burned with a firmware older than 9.1.6516 was inserted into an SX65xx system with a new firmware, the leaf or spine module was not detected by the management software.
  • When modifying the hostname via WebUI CLI, or SNMP, the modification was not reflected in the Base SM submenu in the WebUI.
  • Running the command "no ha dns enable" caused slower login time to the switch system and printed "clusterd" error to the log.
  • Mismatch between entPhysicalTable, entPhySensorTable, and entStateTable when removing FRU from 1U systems.
  • Missing indexes were not consistent between entPhysicalTable, entPhySensorTable, and entStateTable.
  • ifTable, ifXtable, and mellanoxIfVPITable returned unexpected output “No Such Instance”.
  • Vulnerability to data injection across a session or a DoS (use-after-free and parsing error) via an SSL connection in a multi-threaded environment.
  • Buffer overflow through invalid DTLS fragment.
  • NULL pointer de-reference and application crash.
  • Vulnerability to a DoS via a DTLS hello message in an invalid DTLS handshake.
  • Client-side DoS when using anonymous ECDH.
  • Shellshock or Bashdoor security bug in Unix Bash shell.

 

Enhancements

Changes and Major New Features in version 3.4.0012:

  • Changed the HTTPS default ciphers to TLS.
  • Added SwitchX-2 support.

Changes and Major New Features in version 3.4.0008:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added system identifier (MAC address) to test trap.
  • Added support for:
    • Embedded SM version 4.0.5.
    • Mellanox OFED 2.3 integration.
    • Security strict mode.
    • Mellanox configuration MIB.
    • Power MIB.
    • Setting hostname through SNMP.
    • Power cycling through SNMP.
    • Changing configuration through SNMP.
    • Internet Explorer 11 web browser.

Changes and Major New Features in version 3.3.5006:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added support for SNMP to trigger SNMP test trap via SNMP set command.
  • Added system identifier (MAC address) to test trap.

Version:3.4.0008 (27 Nov 2014)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in version 3.4.0008:

The following issues have been fixed in version 3.4.0008:

  • Inserting modules with FW versions older than 9.1.2010 was not supported on SX65xx switch systems.
  • If a leaf or spine module burned with a firmware older than 9.1.6516 was inserted into an SX65xx system with a new firmware, the leaf or spine module was not detected by the management software.
  • When modifying the hostname via WebUI CLI, or SNMP, the modification was not reflected in the Base SM submenu in the WebUI.
  • Running the command "no ha dns enable" caused slower login time to the switch system and printed "clusterd" error to the log.
  • Mismatch between entPhysicalTable, entPhySensorTable, and entStateTable when removing FRU from 1U systems.
  • Missing indexes were not consistent between entPhysicalTable, entPhySensorTable, and entStateTable.
  • ifTable, ifXtable, and mellanoxIfVPITable returned unexpected output “No Such Instance”.
  • Vulnerability to data injection across a session or a DoS (use-after-free and parsing error) via an SSL connection in a multi-threaded environment.
  • Buffer overflow through invalid DTLS fragment.
  • NULL pointer de-reference and application crash.
  • Vulnerability to a DoS via a DTLS hello message in an invalid DTLS handshake.
  • Client-side DoS when using anonymous ECDH.
  • Shellshock or Bashdoor security bug in Unix Bash shell.
Enhancements

Changes and Major New Features in version 3.4.0008:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added system identifier (MAC address) to test trap.
  • Added support for:
    • Embedded SM version 4.0.5.
    • Mellanox OFED 2.3 integration.
    • Security strict mode.
    • Mellanox configuration MIB.
    • Power MIB.
    • Setting hostname through SNMP.
    • Power cycling through SNMP.
    • Changing configuration through SNMP.
    • Internet Explorer 11 web browser.
Changes and Major New Features in version 3.3.5006:
  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added support for SNMP to trigger SNMP test trap via SNMP set command.
  • Added system identifier (MAC address) to test trap.

Version:3.3.5006 (17 Jun 2014)
Enhancements

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Changes and Major New Features in version 3.3.5006:

  • Improved cable info read response time.
  • Added cable info entries to entPhysicalTable.
  • Added support for SNMP to trigger SNMP test trap via SNMP set command.
  • Added system identifier (MAC address) to test trap.

Version:3.3.4402 (25 Mar 2014)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.3.4402:

  • When plugging out a spine fan, the Entity Physical Table still used to show the spine fan sensors.
Fixes in version 3.3.4304:
  • Power supply hardware revision was not shown with SNMP after extraction and insertion.
  • On FDR Director switches, inserting a leaf/spine with an old firmware version may result in the firmware version data not being updated in entity physical table.
  • The slave management entry in entity physical table may not have updated information after plug-out and plugin of slave management on FDR Director switches. 
  • Chassis Management User had to wait at least 40 seconds before inserting a new replacement FRU unit on FDR Director switches.
  • Fixed HA Database replication issues after double failover.
Fixes in version 3.3.4100:
  • Fixed an issue where in InfiniBand link may not come up after a link failure has occured.
Fixes in version 3.3.3000:
  • [ibd.ERR]: get_external_port_info(), ibd_main.c:3309, build 1: A problem occurred while getting port configuration 1 ERROR. This error can be safely ignored. Fixed this messages from logging.
  • Fixed “Permission denied” message when initial access to the USB flash drive.
  • Fixed an issues where disabling the ib0 interface may temporarily suspend the system.
  • When running the show ip arp command while an IP is configured over ib0, some errors may appear in the log. These errors can be safely ignored. Fixed the message log.
  • Fixed an issue where while using the WebUI with Windows Internet Explorer 9, several pages might not display correctly.
  • Fixed and issue with “Apply” button in the port configuration section that caused a port restart.
  • Fixed an issue where sending traffic to IPoIB management interface (ib0) with packet size greater than 1980 bytes is supported only when configuring MTU size to 1020 bytes on both switch and host sides.
  • Fixed an issue with NTP, when deleting an NTP entry and enabling it back may result in a wrong “show ntp” output (unsynchronized). This can be safely ignored.
Enhancements

Changes and Major New Features in version 3.3.4402

  • Added new certificate hashing algorithm (sha256).
  • The command “show configuration full” is no longer supported.
  • Added support for output filtering.
  • Added support for notification on internal link up/down state.
  • Added support for notification on internal link sub-optimal speed.
Changes and Major New Features in version 3.3.4304
  • Added End-User License Agreement See section “Getting Started” in the User Manual.
  • Improved configuration file format.
  • 3rd party FDR cables are allowed to raise link at FDR (56Gb/s).
  • Added support for link width reduction.
  • GA support for Puppet. See section “Puppet Agent” in the User Manual.
  • Added ability to display leaf/spine power state via SNMP.
Changes and Major New Features in version 3.3.4100
  • HP switch blade reset factory using OA.
  • HP switch blade restore admin password using OA.
  • Improved debug file upload mechanism.Refer to “file debug-dump” command in the CLI reference guide.
  • Added support for displaying system hardware revision. Refer to “show inventory” command in the CLI reference guide.
  • Added a MELLANOX-ENTITY-MIB as an extension to the standard ENTITY-MIB to represent system GUID.Refer to SNMP chapter in the User Manual. The new MIB can be found in Mellanox support website.
  • Added support for event notification to monitor. Refer to Event Notification chapter in the User Manual.
  • Improved login timeout mechanism.
  • Added ability to display SM log from user CLI.Refer to “show ib sm log” command in the CLI guide.
  • Added ability to control HA traffic. Refer to “ha dns enable” command in the CLI guide, and mDNS section in the User Manual.
  • Port up/down event notification to log or terminal. Refer to Event Notification chapter in the User Manual.
Changes and Major New Features in version 3.3.3000
  • New Linux kernel 2.6.32.
  • Updated u-boot - memory access optimization.
  • QoS: Enhancement to InfiniBand functionality.
  • Added ability to configure the SM partitions.
  • SNMP MIB enhancements. General MIBs: Entity-MIB, Entity-Sensor-MIB, Entity-State-MIB and Private MIB restructuring for InfiniBand systems.
  • Added Link Level Retry (LLR) support for InfiniBand interfaces.
  • Added support for the Mellanox LR4 module.
  • Added interface range support.By using the interface range configuration mode, a range of ports can be easily configured with the same parameters.

Version:3.3.4304 (28 Feb 2014)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.3.4304:

  • Power supply hardware revision was not shown with SNMP after extraction and insertion.
  • On FDR Director switches, inserting a leaf/spine with an old firmware version may result in the firmware version data not being updated in entity physical table.
  • The slave management entry in entity physical table may not have updated information after plug-out and plugin of slave management on FDR Director switches. 
  • Chassis Management User had to wait at least 40 seconds before inserting a new replacement FRU unit on FDR Director switches.
  • Fixed HA Database replication issues after double failover.
Fixes in version 3.3.4100:
  • Fixed an issue where in InfiniBand link may not come up after a link failure has occured.
Fixes in version 3.3.3000:
  • [ibd.ERR]: get_external_port_info(), ibd_main.c:3309, build 1: A problem occurred while getting port configuration 1 ERROR. This error can be safely ignored. Fixed this messages from logging.
  • Fixed “Permission denied” message when initial access to the USB flash drive.
  • Fixed an issues where disabling the ib0 interface may temporarily suspend the system.
  • When running the show ip arp command while an IP is configured over ib0, some errors may appear in the log. These errors can be safely ignored. Fixed the message log.
  • Fixed an issue where while using the WebUI with Windows Internet Explorer 9, several pages might not display correctly.
  • Fixed and issue with “Apply” button in the port configuration section that caused a port restart.
  • Fixed an issue where sending traffic to IPoIB management interface (ib0) with packet size greater than 1980 bytes is supported only when configuring MTU size to 1020 bytes on both switch and host sides.
  • Fixed an issue with NTP, when deleting an NTP entry and enabling it back may result in a wrong “show ntp” output (unsynchronized). This can be safely ignored.
Enhancements

Changes and Major New Features in version 3.3.4304

  • Added End-User License Agreement See section “Getting Started” in the User Manual.
  • Improved configuration file format.
  • 3rd party FDR cables are allowed to raise link at FDR (56Gb/s).
  • Added support for link width reduction.
  • GA support for Puppet. See section “Puppet Agent” in the User Manual.
  • Added ability to display leaf/spine power state via SNMP.
Changes and Major New Features in version 3.3.4100
  • HP switch blade reset factory using OA.
  • HP switch blade restore admin password using OA.
  • Improved debug file upload mechanism.Refer to “file debug-dump” command in the CLI reference guide.
  • Added support for displaying system hardware revision. Refer to “show inventory” command in the CLI reference guide.
  • Added a MELLANOX-ENTITY-MIB as an extension to the standard ENTITY-MIB to represent system GUID.Refer to SNMP chapter in the User Manual. The new MIB can be found in Mellanox support website.
  • Added support for event notification to monitor. Refer to Event Notification chapter in the User Manual.
  • Improved login timeout mechanism.
  • Added ability to display SM log from user CLI.Refer to “show ib sm log” command in the CLI guide.
  • Added ability to control HA traffic. Refer to “ha dns enable” command in the CLI guide, and mDNS section in the User Manual.
  • Port up/down event notification to log or terminal. Refer to Event Notification chapter in the User Manual.
Changes and Major New Features in version 3.3.3000
  • New Linux kernel 2.6.32.
  • Updated u-boot - memory access optimization.
  • QoS: Enhancement to InfiniBand functionality.
  • Added ability to configure the SM partitions.
  • SNMP MIB enhancements. General MIBs: Entity-MIB, Entity-Sensor-MIB, Entity-State-MIB and Private MIB restructuring for InfiniBand systems.
  • Added Link Level Retry (LLR) support for InfiniBand interfaces.
  • Added support for the Mellanox LR4 module, P/N MC2210511-LR4.
  • Added interface range support.By using the interface range configuration mode, a range of ports can be easily configured with the same parameters.

Version:3.3.4100 (2 Dec 2013)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.3.4100:

  • Fixed an issue where in InfiniBand link may not come up after a link failure has occured.
Fixes in version 3.3.3000:
  • [ibd.ERR]: get_external_port_info(), ibd_main.c:3309, build 1: A problem occurred while getting port configuration 1 ERROR. This error can be safely ignored. Fixed this messages from logging.
  • Fixed “Permission denied” message when initial access to the USB flash drive.
  • Fixed an issues where disabling the ib0 interface may temporarily suspend the system.
  • When running the show ip arp command while an IP is configured over ib0, some errors may appear in the log. These errors can be safely ignored. Fixed the message log.
  • Fixed an issue where while using the WebUI with Windows Internet Explorer 9, several pages might not display correctly.
  • Fixed and issue with “Apply” button in the port configuration section that caused a port restart.
  • Fixed an issue where sending traffic to IPoIB management interface (ib0) with packet size greater than 1980 bytes is supported only when configuring MTU size to 1020 bytes on both switch and host sides.
  • Fixed an issue with NTP, when deleting an NTP entry and enabling it back may result in a wrong “show ntp” output (unsynchronized). This can be safely ignored.
Enhancements

Changes and Major New Features in version 3.3.4100

  • HP switch blade reset factory using OA.
  • HP switch blade restore admin password using OA.
  • Improved debug file upload mechanism.Refer to “file debug-dump” command in the CLI reference guide.
  • Added support for displaying system hardware revision. Refer to “show inventory” command in the CLI reference guide.
  • Added a MELLANOX-ENTITY-MIB as an extension to the standard ENTITY-MIB to represent system GUID.Refer to SNMP chapter in the User Manual. The new MIB can be found in Mellanox support website.
  • Added support for event notification to monitor. Refer to Event Notification chapter in the User Manual.
  • Improved login timeout mechanism.
  • Added ability to display SM log from user CLI.Refer to “show ib sm log” command in the CLI guide.
  • Added ability to control HA traffic. Refer to “ha dns enable” command in the CLI guide, and mDNS section in the User Manual.
  • Port up/down event notification to log or terminal. Refer to Event Notification chapter in the User Manual.
Changes and Major New Features in version 3.3.3000
  • New Linux kernel 2.6.32.
  • Updated u-boot - memory access optimization.
  • QoS: Enhancement to InfiniBand functionality.
  • Added ability to configure the SM partitions.
  • SNMP MIB enhancements. General MIBs: Entity-MIB, Entity-Sensor-MIB, Entity-State-MIB and Private MIB restructuring for InfiniBand systems.
  • Added Link Level Retry (LLR) support for InfiniBand interfaces.
  • Added support for the Mellanox LR4 module, P/N MC2210511-LR4.
  • Added interface range support.By using the interface range configuration mode, a range of ports can be easily configured with the same parameters.

Version:3.3.3000 (19 Mar 2013)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.3.3000:

  • [ibd.ERR]: get_external_port_info(), ibd_main.c:3309, build 1: A problem occurred while getting port configuration 1 ERROR. This error can be safely ignored. Fixed this messages from logging.
  • Fixed “Permission denied” message when initial access to the USB flash drive.
  • Fixed an issues where disabling the ib0 interface may temporarily suspend the system.
  • When running the show ip arp command while an IP is configured over ib0, some errors may appear in the log. These errors can be safely ignored. Fixed the message log.
  • Fixed an issue where while using the WebUI with Windows Internet Explorer 9, several pages might not display correctly.
  • Fixed and issue with “Apply” button in the port configuration section that caused a port restart.
  • Fixed an issue where sending traffic to IPoIB management interface (ib0) with packet size greater than 1980 bytes is supported only when configuring MTU size to 1020 bytes on both switch and host sides.
  • Fixed an issue with NTP, when deleting an NTP entry and enabling it back may result in a wrong “show ntp” output (unsynchronized). This can be safely ignored.
Enhancements

Changes and Major New Features in Rev 3.3.3000

  • New Linux kernel 2.6.32.
  • Updated u-boot - memory access optimization.
  • QoS: Enhancement to InfiniBand functionality.
  • Added ability to configure the SM partitions.
  • SNMP MIB enhancements. General MIBs: Entity-MIB, Entity-Sensor-MIB, Entity-State-MIB and Private MIB restructuring for InfiniBand systems.
  • Added Link Level Retry (LLR) support for InfiniBand interfaces.
  • Added support for the Mellanox LR4 module, P/N MC2210511-LR4.
  • Added interface range support.By using the interface range configuration mode, a range of ports can be easily configured with the same parameters.
Changes and Major New Features in Rev 3.2.0330-82
  • Improved system health monitor process.
  • Updated u-boot-memory access optimization.
  • Added FDR10 support (up to 100m) for MFS4R12CB-XXX optics cables.
Changes and Major New Features in Rev 3.2.0330-70
  • Added support for SwitchX®-2 based edge switch system

Version:3.2.0330-82 (30 Jan 2013)
Fixes

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.


Fixes in version 3.2.0330-40:

  • IPV6 MC traffic may cause system instability.
  • Resiliency mechanism was added to MLNX-OS initialization phase.
Note: With this release, image install-chip-fw command is no longer supported.
Enhancements

Changes and Major New Features in Rev 3.2.0330-82

  • Improved system health monitor process.
  • Updated u-boot-memory access optimization.
  • Added FDR10 support (up to 100m) for MFS4R12CB-XXX optics cables.
Changes and Major New Features in Rev 3.2.0330-70
  • Added support for SwitchX®-2 based edge switch system
Changes and Major New Features in Rev  3.2.0330-62
  • Improved link reliability
  • Improved QDR signal integrity
  • Added support for MC2207312-XX FDR optics cables up to 300m

Version:3.2.0330-40 (7 Nov 2012)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.2.0330-40:

  • IPV6 MC traffic may cause system instability.
  • Resiliency mechanism was added to MLNX-OS initialization phase.
Note: With this release, image install-chip-fw command is no longer supported.
Enhancements

Changes and Major New Features in Rev 3.2.0330-40

  • Improved defect cable resiliency
  • Software downgrade process enhancement
  • Added support for Mellanox SX6506 Switch Director
  • Added MLPN (Mellanox Proprietary Link negotiation) support
  • Enable LLR by default
Changes and Major New Features in Rev 3.2.0330-15
  • Improved functionality for reload command
Changes and Major New Features in Rev 3.2.0330-4
  • Stability improvement
  • Optimization of upgrade process for SX65XX systems
  • Update u-boot
  • Enhancement of SNMP functionality
  • DHCPv4 enabled by default out of the box
Changes and Major New Features in Rev 3.2.0330
  • Improvement to fan control logic

Version:3.2.0330-15 (22 Aug 2012)
Fixes

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Fixes in version 3.2.0330-15:

  • On SX65XX systems, hot swapping a module (leaf/spine) may cause module link to stay down.
  • When connecting the switch systems to Grid Director 4036 switch family, the link may rise at SDR rate.

Enhancements

Changes and Major New Features in Rev 3.2.0330-15

  • Improved functionality for reload command
Changes and Major New Features in Rev 3.2.0330-4
  • Stability improvement
  • Optimization of upgrade process for SX65XX systems
  • Update u-boot
  • Enhancement of SNMP functionality
  • DHCPv4 enabled by default out of the box
Changes and Major New Features in Rev 3.2.0330
  • Improvement to fan control logic

Version:3.2.0300 (17 Jul 2012)
Enhancements

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Initial version


Version:3.2.0100 (28 Mar 2012)
Enhancements

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.


Initial release


Legal Disclaimer: Products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may have older product names and model numbers that differ from current models.