RIVERBED PRODUCT RELEASE NOTES

PRODUCT: CENTRAL MANAGEMENT CONSOLE (CMC)

RELEASE DATE: AUGUST 29, 2012
VERSION: 7.0.0

CONTENTS
1)
2)
3)
4)
5)
6)
7)

New Features in Version 7.0.0

Supported RiOS versions
Riverbed Product Compatibility
Fixed Problems
Upgrading
Hardware and Software Requirements
Contacting Riverbed Support

1) NEW FEATURES IN VERSION 7.0.0

Configuration parity for RiOS version 7.0.0 and EX version 1.0
All of the features in RiOS 7.0.0 and EX 1.0 can be configured and managed by CMC version 7.0.

Flexible Policies
Flexible policies is an enhancement to the way policies are created and assigned. With the new
scheme, you can create policies with configuration from any of the 5 types in them, which
allows you to consolidate all common configuration into a single policy, and create appliancespecific overrides as required.

Automatic licensing
Supports automatically fetching and retrieving licenses for supported hardware from the
Riverbed Licensing server (feature was added in RiOS 7.0.x for CX appliances)

Cascade Shark Integration

Allows control of the shark service on applicable RiOS versions to allow further control and
management by Cascade Pilot.

RBM enhancement
This provides a greatly simplified view and assignment of Role Based permissions for users of
the CMC.

Backup/Restore enhancement
The CMC now makes a distinction between the CMC's own configuration and nightly appliance
backups (now called Appliance configuration snapshots) when backing up to or restoring from
an external location. Additionally, nightly backups are only copied incrementally if CMC external
appliance backups have a recurrence defined.
The appliance configuration snapshots can be configured with two different backup policies:

Age -limited (present in prior releases)

Deduplicated where the nightly configuration snapshot is saved only if it's
different from the prior day's snapshot.

Alarms improvements
Added a whitelist capability for the unmanaged peer alarm to prevent known appliances (or IP
blocks) from triggering the unmanaged peer alarm.

Connect to Steelhead Appliances as Non-Admin

Added the ability for the CMC to connect to (and perform read-only operations on) appliances
using an account that does not map to admin on the remote appliance. On the Steelhead, this
requires RiOS 7.0.1, EX 1.0 or later.

2) SUPPORTED RIOS VERSIONS

CMC version 7.0.0 can manage and configure Steelhead appliances running RiOS versions

6.1.x and later

7.0.x and later

Version 7.0.0 can monitor but not configure earlier RiOS versions.
Virtual Steelheads and ESX-based Cloud Steelheads running version 7.0.3-cloud and later are
also supported.

3) RIVERBED PRODUCT COMPATIBILITY

CMC 7.0.0 is compatible with the following Riverbed products and versions:

Riverbed Discovery Agent version 1.2 and later

Steelhead Mobile version 3.1.2 and later
Interceptor version 3.0.0 and later

NOTES:

CMC 7.0.0 does not support CMC model 8000 appliances.

The 32-bit version of CMC 7.0.0 supports 32-bit versions of CMC-VE (Virtual Edition).

4) FIXED PROBLEMS

54361 When there were no health notes to be reported, doing an snmpget on the
healthNotes OID would return a nosuchInstance error. The fix prevents this error
message.

72841 Fixed an issue with the CMC configuration restore where the licenses and
interface configuration in the backup were preserved if the original backup file name
ended with ".bak", even if the user doesn't select the "Restore Primary and Aux network
interfaces" during restore.

75783 Fixed an issue that prevented the CMC from installing the latest RSP 6.1 image
(6.1.5) along with RiOS 6.1.5.

76609 Fixed an issue where Internet Explorer and Firefox would not load the Manage >
Appliances table if a comment for any group contained extended characters (ISO 88591, e.g. , , etc).

77694 Fixed an issue that caused the licenses policy page to not load for certain RBM
users.

78823 Fixed an inadvertent change in behavior with RBM group permissions. Now, a
user continues to have permissions for a group if they have permissions for that group
or any of its ancestor group(s).

80405 Fixed the SNMP Trap Test to report the CMC's Trap Test OID, rather than an
invalid OID.

80707 Fixed the problem where deleting a group parent with a child group or appliances
would cause an Alarmd to log an error and Statsd to log a warning. This is a normal
happening and should not cause concern.

80840 Fixed an XSS problem in the /mgmt/xmldata URL related to the

p=sslSelfSignedPeers parameter.

80892 Fixed an issue where adding an expired web UI certificate to a CMC would result
in an error message indicating the certificate was still valid, but about to expire soon.

81098 If the proxy file system (PFS) is enabled on a Steelhead, then we won't try
installing either an RSP image or an RSP package on that Steelhead.

81156 Internet Explorer (IE7 and IE8) may alert you that a script is causing your browser
to run slowly on the CMC homepage with more than 1000 registered appliances, or may
alert you that a script is causing your browser to run slowly on the CMC homepage with
a large number of registered appliances when many of them have comments.

81413 Fixed an issue where a malicious URL could be used to add JavaScript on the
Home page through the mechanism that saves the table that user wishes to view on
that page.

81619 Enforce a secure vault password length of 47 characters for both the CMC's own
secure vault, as well as the vault of managed appliances.

82419 Fixed an issue when performing a restore of legacy (CMC 5.5) statistics from a
backup server that causes it to fail with the error "Fatal error importing stats from <type
'file'>".

82455 Fixed an issue that could cause statsd to consume a large amount of memory
with a lot of appliances when the home page is reloaded repeatedly.

82568 Reduced the startup time of CMC's that have SSL certificates for SSL acceleration.

82679 Fixed an issue where the home page summary table would show "0" values for
managed appliance counts when you logged in to the CMC for the first time after
reboot.

82691 Fixed an issue where a password mismatch between the Password and Confirm
Password fields when changing appliance passwords did not prevent the password
specified in the Password field from being set.

82822 Mgmtd can run out of file descriptors after a about 1000 email events (e.g.
managed appliance health changes) are sent out.

82999 Fixed an issue where using Internet Explorer on the CMC home page caused 404
page not found errors when navigating the tabs.

83110 Fixed an issue which prevented licenses for managed appliances from being
added via the CMC.

86019 Fixed an issue where a RBM user with Read-Only permissions to all groups could
access the "New Group" and "New Appliance" forms on the Manage > Appliances page.

86140 Fix the appliance report export to show the full model of SH

86247 Fixed an issue where mgmtd became unresponsive on startup due to a large
number of events generated by alarmd.

86716 Fixed an issue where the appliance configuration alarm would trigger when a
secure peer gets automatically added to the white list with a self-signed certificate.

86808 Fixed an issue which prevented the backup for a managed appliance from being
loaded correctly (or at all, in some instances) on the Manage > Appliance
Backup/Restore page.

87504 Fix the case where the CMC Time Drift alarm for an appliance triggers if the
appliance is slow to respond

87637 Fixed an issue that caused the "show cmc groups detail" command to omit the IP
address and Hostname of appliances listed.

87696 We were ignoring failure of the image transfer, leading us to continue attempting
the upgrade -- uselessly, as the managed appliance would eventually be instructed to
install something it did not have.

88043 Fixed an issue when scheduling reboots or upgrades on appliances, so now we

honor the appliance permissions as well as the operation permissions

88053 Fixed an issue where an RBM user with RO (read-only) permission to a group was
able to perform some operations for which they did not have permission (replace
certificates, start/stop service, shutdown, set password, unlock secure vault, change
secure vault password).

88841 Fixed the case where the CMC reports duplex errors on managed Steelhead
appliances even when Duplex Alarm is disabled on CMC

89479 An authorized user can enter invalid data into a browser's URL that will cause the
web UI to become unresponsive.

90385 Removed a redundant section when exporting reports for individual appliances.

90409 Fixed an issue that prevented the editing of Role-Based Accounts, that were
created using the CLI, via the Management Console Web Interface.

90717 Fixed an issue where upgrading from rbt_cmc 6.1.1-pre #108 would result in UI
error "Error building table, Request "qosClasses" not handled" on the Advanced QoS
page due to missing configuration in backend.

90917 Fixed an issue that prevented the Optimization Service from being restarted
when pushing policies to appliances.

91466 Fixed an issue where the health status of an appliance would remain at "Needs
Attention" even though the actual status had changed to "Healthy."

91836 Extended the existing "Restart QoS service if required" checkbox to handle
interface MTU changes as well.

92108 Fixed an issue that prevented setting the Steelhead In-path Interface VLAN ID via
the CMC CLI

92899 Fixed the Reports > Exports page to accept comma separated list of ports when
user selects 'Custom' as Application parameter.

94331 Fixed an issue where the "Secure Peering (SSL)" policy page on the CMC would
occasionally load very slowly with a large number of trusted peers and/or appliances
with their own peering certificates (in the hundreds)

95367 Fixed a problem where an individual policy page could not be copied to another
policy.

95565 Fixed CMC error "Unable to add global application, maximum number of classifier
rules reached" occurring during policy fetch from Steelheads having large number of
sites in Advanced Mode.

95567 Added support for some new appliance license types.

95973 Fixed an issue where a report over a very large group (e.g. Global, with a lot of
appliances) could fail.

96321 Fixed an issue that would cause a scheduled RSP Image installation to fail

96407 Fixed an issue where switching configurations or restoring the CMC from a state
where common administrative login is enabled to disabled erroneously caused the
username and password used to connect to all appliances to be overwritten.

97873 Fixed an XSS security problem on the RSP Dataflow page caused by improper
sanitization of user input.

98305 Fixed an issue where the Unmanaged Appliances alarm is triggered during CMC
start up, when the CMC has not yet connected to all managed appliances.

98717 Fixed an issue that caused restores of pre-migration appliance backups to fail.

99163 Fixed an issue that could cause some reports to not be exported for migrated (or
replaced) appliances

99171 Added the "clear interface" CLI commands to the CMC that are used to clear
interface statistics.

99947 Fixed a file descriptor leak that caused usable space for configuration dbs. to be
lost after successive saves.

100543 Fixed an issue that prevented being able to initiate RSP HA transfers from the
CMC

100591 Fixed an issue where users with permissions to Appliance Management -> CLI
Commands could not send CLI commands to managed appliances

101318 Fixed an issue that could cause the CMC to mark any RSP HA transfers as "timed
out" even though they subsequently completed.

106786 Fixed an issue on the Management ACL policy page which prevented the rules
table from loading.

5) UPGRADING
This section describes how to upgrade the CMC appliance software. These instructions assume
6

you are familiar with the CMC appliance, the CMC Command-Line Interface (CLI), and the
Management Console.

To upgrade the Riverbed Central Management Console appliance:

1) Download the software image from the Software tab of the support site to a location such as
your desktop.
2) Log in to the Management Console using the Administrator account (admin).
3) Navigate to the Setup: Software Upgrade page and choose one of the following options:
4) From URL. Type the URL that points to the software image in the text box.
5) From Local File. Browse your file system and select the software image.
6) Click Install Upgrade.

6) HARDWARE AND SOFTWARE REQUIREMENTS

The CMC appliance has the following requirements:

19 inch (483 mm) two- or four-post rack

Any computer that supports a Web browser with color image display

Javascript and cookies must be enabled on your Web browser.

The CMC has been tested with Mozilla Firefox version 10 and ESR (Extended Support
Release) and Microsoft Internet Explorer versions 7 and 8.

NOTE: If you want to encrypt your communication, you must have a Secure Sockets
Layer (SSL) capable browser.

The CMC command-line interface has the following requirements:

An ASCII terminal or emulator that can connect to the serial console (9600 baud, 8 bits,
no parity, 1 stop bit, and no flow control) or

A computer with a Secure Shell (ssh) client that is connected by an IP network to the
Steelhead appliance Primary interface. Free ssh clients include PuTTY for Windows
computers, OpenSSH for many Unix and Unix-like operating systems, or Cygwin.

7) CONTACTING RIVERBED SUPPORT

Riverbed provides phone support at 1-888-RVBD-TAC (1-888-782-3822).
Outside the U.S. dial +1 415 247 7381.
You can also submit a support case online or email support@riverbed.com. A member of the
support team will reply as quickly as possible.
Visit the Riverbed Support site to download software updates and documentation, browse our
library of Knowledge Base articles, manage your account, or open a support case

2012 Riverbed Technology. All rights reserved. Riverbed and any Riverbed product or service name or logo used herein
are trademarks of Riverbed Technology. All other trademarks used herein belong to their respective owners. The
trademarks and logos displayed herein may not be used without the prior written consent of Riverbed Technology or
their respective owners.