cnMatrix 3.2.1-r5 is released

cnMatrix Release 3.2.1-r5 is now available at

Software upgrade to 3.2.1-r5 through cnMaestro is available.

Feature Enhancements

Improve Reset Button functionality

If the Reset Button is pressed between 1-10 seconds and let go in this time frame, the switch resets keeping the current configuration. If the Reset Button is pressed for more than 10 seconds the switch automatically resets to factory default settings.

IGMP Snooping

Adding new CLI and WEB GUI IGMP Snooping configuration option to enable/disable enforcement of Router-Alert check in IGMP packets.

[no] ip igmp snooping enforce-router-alert

PBA update static VLAN tagging when PVID is updated

The PBA PVID-update action has been enhanced to automatically remove the untagged VLAN port membership for the static PVID (the current PVID value that is being dynamically updated) when the PBA policy is applied. The untagged VLAN port membership is restored when the PBA policy is no longer applied to the port.

Only the untagged membership for the static PVID VLAN is cleared. If other untagged VLAN port memberships are present (which is currently supported by the cnMatrix VLAN implementation), they are not cleared.

DHCP Client

Allow DHCP Client on a Layer 3 Interface to configure dynamically allocated address from networks.

In previous releases, this operation failed because dynamically allocated addresses from networks overlapped the Management Port address

Attention: If the L3 interface is dynamically configured with an IP address from network, the Management Port IP address will be automatically set to Once the IP address on L3 interface is removed, the Management Port default address will be restored.

Fixed Issues

Tracking Product Description
3069 All Layer 3 routing performance issues when using Routed Port.
3166 All LG IPSEC phone does not get configured on voice VLAN using LLDP-MED.
3123 All Switched TCP traffic can be dropped when IGMP Snooping is enabled.

Known Issues

Tracking Product Description Workaround
388 All DHCP Relay: The switch doesn’t relay all DHCP Release and Renew packets if there are more than 360 DHCP clients connected to the switch. Use cnMatrix switch to relay DHCP packets for less than 360 DHCP clients.
460 All LLDP port-id-subtype setting and DHCP server host hardware-type 3 setting are lost after boot. Reconfigure the settings if they are lost after reboot.
519 All UP7 traffic not equally serviced if received from 2 different ports - SP scheduler N/A
554 All 802.1x Single Host : Mac-addresses are not learned in mac-address table after the clients are authenticated in single-host mode while in multi-host are learned properly N/A
695 All Ping doesn’t work between 1/10 Gb interfaces or 1/10 Gb port-channels when STP mode is PVRST and more than 9 VLANs are created. N/A
838 All DHCP Snooping: When disabling DHCP Snooping globally, the DHCP Snooping VLAN configuration is cleared. Reconfigure DHCP Snooping per VLAN.
848 All Auto Attach: For phone detection it is advisable not to use rules with LLDP-CAP “phone” as matching criteria. Phones can be identified using other data LLDP data, such as System Description, System Name or Chassis ID.
946 All Routing is not working on routed port when static ARP is used Use static ARPs only for VLAN interfaces.
985 All Exec-timeout setting is lost after reboot. Reconfigure this setting after unit reboot.
1056 All Physical ports that are part of a port-channel are returning to VLAN 1 after remote peer is performing a boot default.
1) When port-channel is deleted, links are not restored to original VLANs
2) When link member is not part of the bundle, it is assigned to VLAN 1
1555 All When downloading agent using SFTP from SSH/telnet session, the download progress is displayed on the console interface, not in the current session. N/A
1828 All Establishing a SSH session between two cnMatrix devices running software version 3.0 is not working. N/A
1879 All cnMaestro Support for User Defined Overrides Is missing CLI Templates might be used from CnMaestro Access and Backhaul menu taking in consideration that it’s mutual exclusive with Object Based Configuration
1879 All cnMaestro MSTP mode is not supported in cnMaestro MSTP mode may be configured from cnMaestro only from CLI Templates menu in Access and Backhaul
2103 All cnMaestro Router Port configuration from CLI Templates will result in faulty port performance tracking N/A
2122 All RIPv1/RIPv1 compatible updates are not sent to the RIP neighbors (3.0.1-r4 does not work with RIPv1 RIP router) Only connect cnMatrix 3.0.1-r4 to RIPv2 neighbors, and set the RIP send update to RIPv2 mode

Feature Notes

  • If you remove the default IP address from mgmt0 interface and save the running-config the default IP address is restored after boot.
  • DHCP Client is enabled by default on In-Band Ports from VLAN 1.
    • On EX1028 and EX1028P, VLAN 1 has the default IP address
  • The Out-of-Band port has the following default IP address:


  • 265 – Flow control counters displayed by the command show interface flow control are not incremented on Extreme Ethernet interfaces (10GB).
  • 437 – SNTP Authentication is not supported for broadcast and multicast modes.
  • 1879 – CLI Templates are mutual exclusive with object configuration, as user overrides are not yet available
  • 1879 – MSTP mode may be configured only from CLI Templates menu in Access and Backhaul
  • 2103 – Router Port configuration from CLI Templates will result in faulty port performance tracking
    • Configuring a router port from a template can lead to unexpected monitoring behavior. The setting is not recommended while using cnMaestro.
  • 2603 – If a static IP is set on L3 interface from CLI/Web, the out-of-sync condition is not triggered by cnMaestro.
    Workaround: trigger an out-of-sync condition e.g. bounce an interface from CLI/Web
  • 2603 – When the hostname is changed from CLI/web, cnMaestro enters in an erroneous out-of-sync condition. Workaround: This condition may be ignored or a new push config may be issued
  • 2609 – To preserve switch config finalized before switch on-boarding, the user needs to pre configure manually the switch from cnMaestro.