VXLAN Routing
The VTEP enabled VXLAN routing behaves as a VXLAN L3 gateway under centralized routing mode. Please have detailed at VXLAN Routing.

Enable VXLAN on NAC Ports
VXLAN is not allowed to be configured on the ports with NAC, such as 802.1x and MAB and web authentication, enabled. This restriction is removed in release 3.8.0.

DNS Domain Search List
Add a CLI command "set system dns-search-list xxxx" to configure the search list of DNS lookup with the host name.

Multi-line Announcement

The content of login announcement with multiple lines can be configured by new added CLI command "set system login multiline-announcement ...".

Specify Source Interface for SNMP Trap Configuration

Support to specify source interface for SNMP Traps. The source interface could be loopback or l3-interface. The specified source interface is used to derive the source IP address for the SNMP traps sent, so that traps received from each switch will always have a single consistent source IP address.

SNMPwalk Fails

It's possible that SNMPwalk fails when switch has multiple VLANs enabled inband because the returned SNMP reply message can only be sent back via the l3 interface on which the associate SNMP query message is received. It is fixed in 3.8.0.4 by lookup the l3 routing tables to send the SNMP reply messages to SNMPwalk client.

Multi-line Banner

The content of banner with multiple lines can be configured by new added CLI command "set system login multiline-banner ...".

Cannot Read out EEPROM Data on AS7326-56X
The I2C address is changed on the new model of AS7326-56X.  The driver code is modified to fix this issue on the update model of AS7326.

Static MAC Address is Changed to Dynamic on MLAG peer-link Port 

On an MLAG spine switch called spine A for convenience of expression, configure a static MAC address on the peer-link port. If this MAC address is learned on a single-homed port on the peering spine switch, it will be synchronized to spine A on peer-link port. And then the type of this configured static MAC address on the peer-link port is changed to dynamic.

Cannot Access to SNMP Agent

If enable management VRF and Inband connection as following CLI commands, SNMP agent will not be accessed.

set system inband enable true

set system management-vrf enable true

The Size of NETCONF.events Increases Indefinitely

If configure NETCONF on the switch, the size of NETCONF log file /tmp/stream/NETCONF.events will increase indefinitely. Add a mechanism of rotation to fix this issue. Keep the size of this file within 2M.

Crash if Configure port-mode via NETCONF

The NETCONF process might crash if configure port-mode to "trunck" and then back to "access" repeatedly via NETCONF.

VXLAN Cannot Work on LAG Port

Supposing a LAG is in the network interface of a specific VXLAN instance, if get a member port of this LAG down and then up, the incoming traffic on the access port cannot go into the VXLAN tunnel. This issue is fixed in 3.8.0.4.

802.1X Authorization Failure on VXLAN Access Port

When reset VXLAN configuration from Ampcon SDN controller, 802.1x authorization on the VXLAN access port may be failed. This issue is fixed in 3.8.0.4.

Different MAC Addresses of VRRP IP Returned

In case of active-active VRRP over MLAG, when a client requests the MAC address binding to VRRP virtual IP address via ARP/NS, different MAC address may be returned. This issue is fixed in 3.8.0.4.

Upgrade Failure on SquashFS Platforms

On SquashFS platforms, N3100 and N3000, with customer's configuration, upgrade from 2.11.25.x to 3.8.x will fail. This issue is fixed in 3.8.0.4.

Ports Cannot Link up on S5248

Ports 13~16 and 37~40 and 48 cannot link up.

Traffic with Duplicate Source MAC Received on both MLAG Spine Switches

In some kind of abnormal circumstance, traffic with duplicate source MAC address may be received on both MLAG spine switches at the same time. Therefore, in a specific MALG spine switch, this MAC address will be moved between a single-homed port and the peer-link port. If this kind of traffic is only received on a spine switch after a while, on the other spine switch, the MAC address should be learned on the peer-link port only.

Login ACL Rules Should not Applied to SNMP Access

The configured login ACL rules are also applied to SNMP access. This issue is fixed in 3.8.0.6.

OpenVPN iptables Rules Removed When Restart PicOS

The iptables rules allowing OpenVPN connection between local AmpCon agent and the remote AmpCon server is removed when PicOS is restarted with command such as "systemctrl restart picos". AmpCon agent will have no way to connect to the remote AmpCon server. This issue is fixed in 3.8.0.6.

Have VXLAN Traffic Loop if Underlay Routing Being Changed

If underlay routing is being changed constantly, a traffic loop of VXLAN overlay may appear. Namely, on a specific VTEP, a MAC address of a host is learned on both access port and the network port with regarding a VXLAN instance.

Access Port Disappear After Add/Delete VXLAN Repeatedly

Repeat the procedure, delete VXLAN configuration and then rollback, access ports in a VXLAN instance may disappear when "run show vxlan vni xxxx".

RADIUS/TACACS+ Authentication for NETCONF Session

Authenticated RADIUS/TACACS+ users can access to PicOS switch via NETCONF.

Public Key Authentication for NETCONF Session

Users authenticated via public key can access to PicOS switch via NETCONF. Please note the public keys of a specific user are supposed to be restored at the home directory, i.e ~/.ssh/authorized_keys.

Fix CoPP Statistics Error

When "run show copp statistics", may display arbitrary statistics numbers over CoPP protocol classes. This issue is fixed in 3.8.0.12.

Memory Leak Caused by NETCONF Process

When a NETCONF client accesses to the switch via RADIUS authentication repeatedly, memory leak may occur in process pica_netconf. This issue is fixed in 3.8.0.12.

Keep Sending RADIUS Request Messages

If configure RADIUS authentication and then enable NETCONF, the switch will keep sending RADIUS request Messages out. This issue is fixed in 3.8.0.12.

Drastic Variation over CPU Utilization

The number of CPU utilization may change drastically and fastly on AS4610. This issue is fixed in 3.8.0.12.

[Radius] Decryption Failure Occurs When Request Packets with Empty Passwords are Sent

Solution: After receiving an Access-Accept packet from the server, the switch no longer generates redundant Access-Request packets with incorrect passwords. This issue is fixed in 3.8.0.13.

Usermap File Grows Endlessly when There are Repeated SSH Attempts to the Switch

The usermap file grows endlessly when there are repeated SSH attempts to the switch. This issue is fixed in 3.8.0.13.

OVS Web Service is Still up Even If It is Disabled in PicOS Configuration

The lighttpd service is brought up by systemd because the setting of the option "WantedBy" in lighttpd.service, which walks around the toggle option (ovs_enable_lighttpd=false) in /etc/picos/picos_start.conf.