Product Name: MES3500-24S
Product Model: 4.10(ABBR.1)_220916
Release Date: 2022/09/16

Changes:
WAS: V4.10(ABBR.1)C0_20220705
IS:  V4.10(ABBR.1)_220916
-----------------------------------------------------------------------------------------------
[Fix]
1.eITS#220800980, system crashed due to SNMP bulk set to classifier mib. 
2.eITS#220800806, system crashed after receiving abnormal dhcp packets.
3.eITS#220800152, broken arp table help page link.
4.eITS#220600144, system crashed due to long policy command









Product Name: MES3500-24S
Product Model: 4.10(ABBR.1)C0_20220705
Release Date: 2022/07/05

Changes:
WAS: V4.10(ABBR.1)C0_20210624
IS:  V4.10(ABBR.1)C0_20220705
-----------------------------------------------------------------------------------------------

[Change]
1. upgrade openssl from 1.0.2e to 1.1.1n for openssl [CVE-2020-1971] and [CVE-2022-0778]
  [CVE-2020-1971]:  A null pointer dereference flaw was found in OpenSSL package. An attacker is able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with OpenSSL to crash resulting in a denial of service
  [CVE-2022-0778]: A security flaw in OpenSSL, which could be used to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters

2.enhance exception debug info with stack backtrace


[Fix]
1.eITS<190900885>: mirror Configuration conflicts with current link aggregation settings [feature request]

2.eITS<21070105>: MAC flapping prevention [feature request]
[solution] 
(a)Add an extra broadcast loop-guard packet to avoid the multicast loop-guard packet ( 01:a0:c5:aa:aa:ab) dropped and cause the loop-guard function not work.
(b) Now the loop-guard control protocol will send the multicast and broadcast loop-guard packet to detect if the loop exist after the loop-guard is enabled.

3.eITS<211100491> erase running-config interface port-channel <port-list>, will not add the port back to the default vlan

4.eITS<211100495> After typing command “MAC-freeze” on the LACP port, the system doesn’t display the warning message and the command was not blocked
[Condition]
MGS3520(config)# trunk T1
MGS3520(config)# trunk T1 interface 1,2
MGS3520(config)# port-security 2 MAC-freeze  

5.eITS<211100497> The behavior of ARP inspection become strange when it working with the link aggregation (LAG/LAP) run on the downlink port.

6.eITS<220600144> [MAKSNET] How to set Classifier using SNMP.

7.eITS<22050109> [FAQ] Add RADIUS Privilege level 15 and map it to level 14










Product Name: MES3500-24S
Product Model: 4.10(ABBR.1)C0_20210624
Release Date: 2021/06/24

Changes:
WAS: V4.10(ABBR.1)C0_20200804
IS:  V4.10(ABBR.1)C0_20210624
-----------------------------------------------------------------------------------------------

[Fix]
1.ITS#210300256: All switch(3500,,3712,3520) reboots when trying to login using correct account with tacacs server IP and invalid tacacs key configured
2.ITS#200801847: 1G copper port with speed-duplex 1000-full cant linkup  
[Solution] add new speed-duplex mode 1000-full-neg
MES3500(config-interface)# speed-duplex ?
    10-100-1000-full-neg      10M / 100M / 1000M / Full Duplex / Negotiation
    1000-full                 1000M / Full Duplex
    1000-full-neg             1000M / Full Duplex / Negotiation
    auto                      Auto










Product Name: MES3500-24S
Product Model: 4.10(ABBR.1)C0_20200804
Release Date: 2020/08/04

Changes:
WAS: V4.10(ABBR.1)C0_20200309
IS:  V4.10(ABBR.1)C0_20200804
-----------------------------------------------------------------------------------------------
1) 
[New] Add BPDU guard
[Ticket] eITS#190300468
#Note1, After enabling this feature,If the interface receives STP packet, the port will enter the errdisable state.
#Note2, CLI example for enable bpduguard feature and set up errdisable recovery.

MES3500# configure
MES3500(config)# bpduguard
MES3500(config)# interface port-channel <port-list>
MES3500(config-interface)# bpduguard
MES3500(config-interface)# exit
MES3500(config)# errdisable recovery
MES3500(config)# errdisable recovery cause bpduguard
MES3500(config)# errdisable recovery cause bpduguard interval <30-2592000>
MES3500(config)# exit
MES3500#
-----------------------------------------------------------------------------------------------
2) 
[New] Automatically disconnect the port when link-flap
[Ticket] eITS#190300470
#Note1, After enabling this feature,If the physical interface on the switch goes up and down three or more times per second, the port will enter the errdisable state.
#Note2, CLI example for enable link-flap prevention feature and set up errdisable recovery.

MES3500# configure
MES3500(config)# link-flap prevention
MES3500(config)# interface port-channel <port-list>
MES3500(config-interface)# link-flap prevention
MES3500(config-interface)# exit
MES3500(config)# errdisable recovery
MES3500(config)# errdisable recovery cause linkflap
MES3500(config)# errdisable recovery cause linkflap interval <30-2592000>
MES3500(config)# exit
MES3500#
-----------------------------------------------------------------------------------------------
3)
[Fix] User account don't display in the configuration after typing the command "display user"
[Ticket] eITS#200400595

-----------------------------------------------------------------------------------------------
4) 
[Fix] LLDP SystemName column of remote devices are not shown completely
[Ticket] eITS#200500601
-----------------------------------------------------------------------------------------------
5) 
[Fix] "copy running config interface port-channel X Y" command copies MVR port tagging configuration incorrectly
[Ticket] eITS#200500604
#Note, the command "copy running config interface port-channel <port> <port-list>" is only used to copy the following settings in the switch configuration file.
1) Settings under the interface port channel <port>
2) MVR setting
-----------------------------------------------------------------------------------------------
6)
[Fix] "frame-type" and "vlan-stacking issue
[Ticket] ITS#200527315
#Note, In order to prevent the wrong "frame type" setting causing Switch loss management, the "frame type" feature on the MGS3520-28 series switches will not affect the CPU to send and receive ICMP packets.
       In other words, If the VLAN setting is correct, the CPU of the MGS3520-28 series switch will reply to the received ARP & ICMP packet


