Solutions

Access to certain sites result in tcp_error after upgrading to SGOS 6.2.7.1 and SG 6.2.8.1

Solutions ID:    KB5088
Version:    4.0
Status:    Published
Published date:    04/26/2012
Updated:    11/04/2013
 

Problem Description

Certains sites are inaccessible after upgrading to SGOS 6.2.7.1 and SG 6.2.8.1 and result in tcp_error. These sites are known to be accessible in SGOS 6.2.6.1 and earlier versions.

Packet capture shows that SG does not receive any SYN-ACK from the affected server.

No.     Time     Source               Destination           Protocol Src Port Dst Port Info
      8 2.522    10.10.10.65          10.10.13.4            HTTP     3633     8080     GET
http://www.rxguide.info/ HTTP/1.1
      9 2.559    10.10.13.4           199.199.215.119       TCP      1159     80       1159 > 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=0 SACK_PERM=1 TSV=115068 TSER=0
     23 5.555    10.10.13.4           199.199.215.119       TCP      1159     80       1159 > 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=0 SACK_PERM=1 TSV=118068 TSER=0
     30 8.756    10.10.13.4           199.199.215.119       TCP      1159     80       1159 > 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=0 SACK_PERM=1 TSV=121268 TSER=0
     34 11.955   10.10.13.4           199.199.215.119       TCP      1159     80       1159 > 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=0 SACK_PERM=1 TSV=124468 TSER=0
     43 15.157   10.10.13.4           199.199.215.119       TCP      1159     80       1159 > 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=0 SACK_PERM=1 TSV=127668 TSER=0
     55 18.357   10.10.13.4           199.199.215.119       TCP      1159     80       1159 > 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=0 SACK_PERM=1 TSV=130868 TSER=0

Resolution

This defect has been fixed in SG 6.2.9.1 (B#175607) and SG 6.3.3.1 (B#175691).

SG 6.4 and newer SG 6.x versions are not affected by this.

 

Workaround

Disable RFC-1323 :

SG210#config term
SG210#(config)tcp-ip no rfc-1323
SG210#(config)exit
SG210#disable


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
 
 
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.
 
 

Your response will be used to improve our document content.

Ask a Question