BCM50a Integrated Router Freezing

[glimma]

I have a BCM50a which connects to another BCM50 with a BSR, and we are able to call ext to ext over the VPN between both offices.

I'm receiving complaints that every couple of weeks the link goes down, and when they try to call ext to ext they get "No User Response" on the display of their sets.

I think the problem is with the BCM50a as I could not see this site remotely but could connect to the BCM and BSR via the internet.

I was onsite yesterday and had a look at the BCM50a's router, when I went into the Maintenance Section then had a look at the status of the WAN Port, the IP Address was 0.0.0.0.

I had to restart the router twice before I could get it to connect to the other site.

The BCM50a has the following patches installed on it:
BCM050.R200.SU.System.013
BCM050.R200.141-SOFTWARE-MANAGEMENT-PROVIDER
BCM050.R200.140-CORE

Has anybody every had a silimar issue with the BCM50a??

 

[curlycord]

Not sure of issue but its not patched to latest.

Latest patches:

Release 2:
Mar 18th 09 -
BCM050.R200.SU.SYSTEM.014_BCM50_2.0: BCM050.R200.SU.System.014-200903

Mar 24th 09 -
BCM050.R200.144_BCM50_2.0: BCM050.R200.144-CDR

=----(((((((((()----=
curlycord

http://www.curlycord.com

 

[Khosher]

Try installing the below patch. Patches regarding the integrated routers are not applied in the same way as geneal BCM patches, so therefore are not smart updates. They have to be appiled seperately. I have not encountered your specific problem but this patch was released in April 2008 and there has been nothing since.

TITLE
=====

BCM50.BCM50a.002 v2.6.0.0.008b1

========================
Release: 2.6 Issue: N/A
Category: GEN
Superceded By: NONE
Release Date: 20080429
Patch Conflict(s): N/A
Special Instructions: NO
Patch Version: N/A
========================

Software Update Name: BCM50.BCM50a.002

Applicable H/W Platforms: BCM50a R2 and BCM50a R3 Integrated Business Secure Routers

Applicable S/W Platforms: 2.6.0.0.006 and earlier

Category: GEN

Installation Recommendations:
This update should be applied to all new installations of BCM50a R2 and BCM50a R3
intergated Business Routers. Existing installations should have this update applied if
they are experiencing any of the issues that have been corrected.

Component & Version: BCM50.BCM50a.002 v2.6.0.0.008b1

Dependencies:
Required Updates - None
Product Dependencies - None

Size: 3.0 MB

System Impact: System requires a reboot after the firmware is uploaded.
Does update application force reboot: Yes
Other impacts: None

Limitations: None

Update Removable: Yes

Description:
-----------
The following issues are addressed:

Device freezes every few hours when a NAT enabled CVC Termination is active.
Q01803112


This update includes the content of the following superseded updates:

BCM50r2.BCM50a.001
--------------------------------

Some new Denial of Service attacks could disrupt data service.
Q01502213

Bandwidth management did not work reliably.
Q01524313

The router could reboot in some configurations with multiple tunnels.
Q01584155

When all traffic is routed through the Bandwidth Manager, reboots could occur.
Q01591900

Traffic outside of a split tunnel would not be sent if tunnel negotiation started, but failed.
Q01615393

The BSR252 would take a long time to get a new address, if a PC was disconnected from the BSR, connected
to another gateway, and then connected back to the BSR in a short period.
Q01647312

The Client Emulation fail-over list was being cleared when a fail-over connection was established. If
the fail-over connection failed before the primary server was back on line, service was lost.
Q01672454-01

Multi-proposal would not work if the other end of the Branch Office Tunnel used AES-192 or AES-256
encryption.
Q01365147

SIP and H.323 services are no longer shown in the services field in the bandwidth manager, since they cannot
be used.
Q01437232-01

Invalid or irrelevant settings were displayed in the configuration summary GUI.
Q01450524

Bandwidth Manager statistics were not being shown for LAN-to-WAN traffic over a Branch Office Tunnel.
Q01458914

No error log was generated when system time synchronization failed.
Q01474145

In the Firewall GUI, the message ‘Configuration updated successfully.’ is now displayed when a change is made.
Q01474760

Errors item was missing in the MAINTENANCE/Show Statistic GUI.
Q01484112

The error message was wrong when configuring the Dial Backup feature in some versions of BCM50a.
Q01491794

The Nortel contact information was updated.
Q01493182

Minor corrections were made to On-Line Help and GUI text.
Q01450624, Q01454393, Q01467346, Q01467652, Q01513494

In the System»General GUI page, entries made in the System Name and Domain Name would disappear when the DNS
Server pull-down menu was selected.
Q01641027

The third IP pool in VPN Contivity Client could not be selected.
Q01650984

The Content Filter ‘Access Denied’ message was not being displayed properly with Internet Explorer 7.
Q01664210


Enhancements Added in this Release


In the Traffic Redirect GUI, the Check WAN IP address would be set to 0.0.0.0 to indicate use of the default
IP address. It can now also be set blank.
Q01472944

VLAN tagged IP packets are now forwarded without changes to the VLAN tag.
Q01491894

The GUI for DST configuration is now preset to the North American DST configuration settings.
Q01540161

The GUI will now accept a blank PPPoE or PPPoA passwords. It will display a warning message if they are blank.
Q01578888 and Q01586066

The ‘Apply’ button in the Advanced VPN configuration was renamed to ‘Return’, because it doesn’t actually
apply the changes that are made.
Q01586160

The retry algorithm for Contivity Client Emulation connections was enhanced to address delays caused by an
overloaded server. The Contivity Client version reported by the BSR was changed from V2_50 to V2_60, so that
Contivity Client Servers can recognize this upgrade to the router firmware.
Q01665250

 

[glimma]

Khosher

You say the Integrated Router patches are not included in System Updates, is there a different method of installing these patches then??

 

[curlycord]

Same method, it's just a single patch is all.
Suggets to do the SU and Khoshers patch

=----(((((((((()----=
curlycord

http://www.curlycord.com

 

[Jephph]

Since the router in the Bcm 50a is essentially a BSR-222, you don't install the patch on the BCM side of things. As a matter of fact, it's really not a patch at all ... rather it's a firmware upgrade.
To install the upgrade, log into the router via Internet Explorer (or other browser). Then go the "maintenance" menu and you'll find a tab for firmware updates. Basically, you browse to the folder where the firmware file is located. You'll be prompted to let the update complete and the system will reboot and come back up on the new firmware release. All of your configuration should remain intact, but it would still be a wise idea to back up your router config before you update. The config can be backed up via the "maintenance" menu also.

 

[glimma]

OK. So I'm I better to update the integrated router firmware first and then install the latest SU, or install the latest SU and then the router firmware?

 

[Jephph]

I don't think that it matters. But if it were me, I'd probably update the router, then reboot and make sure that all is normal. After verifying normal operation, I'd proceed with the BCM PEPs.

 

[Khosher]

The router and and the BCM are two seperate entitiies. They are just in the same box and operate independently of each other. Any of the BCM50 SU's will not have any effect on the router. Apply the router patch, this will force a reboot of the router and should hopefully resolve your issue.