Extreme Networks EAS t Switch Software Release Notes, Version 1.00

Transcription

1 Extreme Networks EAS t Switch Software Release Notes, Version 1.00 This release note for the EAS t switch software describes: s on page 1 Supported MIBs on page 7 Known Issues on page 8 Fixed Issues on page 8 s Table 1 lists the software features supported in this release. Table 1: s L2 Features MAC Address Jumbo Frame L2 Multicast Filtering IGMP snooping 1. 8K MAC Address Table; 2. Support 256 static MAC 3. Support 128 static multicast address 1. Tag Frame : 9216bytes 2. Un-tag Frame: 9212bytes (Maximum) Support L2 multicast filtering mode as below - Forward all unregistered groups - Filter all unregistered groups 1. Support IGMP v1,v2 snooping and v3 awareness (including Querier support) IGMP/MLD snooping groups (shared) 3. Be able to forward IGMP control packets (Join, Leave) to multicast router ports only 4. Forbid a specific port to be router ports 5. Per VLAN IGMP Snooping 6. Support host based IGMP snooping fast leave Rev. 01 1

2 s Table 1: s (Continued) MLD Snooping Spanning Tree Loopback Detection 802.3ad Link Aggregation Mirroring 1. Support MLD v1 snooping 2. Support MLD v2 awareness (source filter not supported) IGMP/MLD snooping groups (shared) 4. Be able to forward MLD control packets (Report, Done) to multicast router ports only 5. Forbid a specific port to be router ports 6. MLD per VLAN 7. Can config unregistered group filtering 1. Support 802.1D STP 2. Support 802.1w RSTP 3. Support 802.1s MSTP 4. Support 4 MSTP Instances 5. Support per port / device BPDU filtering 6. Support 802.1D 2004 edition 7. Support Root Restriction(defined in 802.1Q-2005) 1. Support per port shutdown 1. Support max 8 groups 2. The max port number of group is 8 ports 3. Support following load sharing mechanism - Source MAC - Destination MAC - Source MAC + Destination MAC 4. Load-balancing with multicast traffic 1. Support 1 mirroring group 2. Mirroring support following mode - One-to-one port - Many-to-one port - Flow-based mirroring 3. Support Mirroring for Tx/Rx/Both VLAN 802.1Q 802.1Q-2005 edition (STP Root Restriction ) VLAN Group 1. Total 4094 VLAN groups 2. Configurable VID from 1~4094 Port-based VLAN Support VLAN tagging based on PVID Protocol-based VLAN 802.1v Port and Protocol-based VLAN MAC based VLAN GVRP 1. Support 255 dynamic VLANs 2. GVRP advertisement both on dynamic and static VLAN 2

3 s Table 1: s (Continued) Asymmetric VLAN Double VLAN (Q-In-Q) VLAN Translation QoS Bandwidth Control Number of Queues Queue handling 3. GVRP enabled/disabled per port/system basis 1. Support Port-based Q-in-Q 2. Add SVLAN to either untagged or single tagged packets 3. Support Policy based Q-in-Q. Add SVLAN based on 1)- MAC address 2)- Ether type 3)- CVLAN tag 4. Support untagged / single tagged / double tagged at same physical port UNI Port:? - For packets ingress from UNI port, the packet can be untagged, or c tagged? - The packets may be add S tag or replace C tag by S tag based on user configuration.? - The learning and forwarding is based on SVLAN. NNI Port:? - For packets ingress from NNI, it can be untag/single S tag / double tag with S+C, the switch learning and forwarding is based on SVLAN. (C tag is identified by C-TPID, S-tag is identified by S-TPID.) 5. Per System Configurable SVLAN TPID 6. Support only 1 SVLAN TPID (per system) Support up to 16 entries/rules (per system) 1. Support Port and Flow based bandwidth control 2. Minimum granularity 64Kb/s 3. Ingress bandwidth control (for Port and Flow based) 4. Egress bandwidth control (Only for Port based) 5. Switch and client need to enable flow control for RX(upload) traffic. 4 Outbound Queues Support WRR/Strict mode in queue handling Support Weighted Round Robin (WRR) 3

4 s Table 1: s (Continued) Class of Service (CoS) QoS Flow Actions ACL Access Profiles/Rules ACL Policy ACL Statistic Security SSH SSL Port Security Broadcast Storm Control Traffic Segmentation Be able to classify packets according to follow contents: p priority - VID - MAC address - Ether type - IP address - TOS - DSCP - Protocol type - TCP/UDP port number - User defined packet content - Switch Port Remark DSCP to 802.1p priority tag 1. Max 256 Profiles, 256 Rules 2. Support 256 rules/per port. 3. If you apply one rule to all port (1-28), it just takes one rule. 4. Rule id 1 to Support following ACL policy packet contents: p priority - VID - MAC address - Ether type - IP address - DSCP - Protocol type - TCP/UDP port number - User defined packet content - Switch Port Support v2 Support v1/v2/v3 Support 64 MACs per port 1. Allow specifying when broadcast/multicast/unknown unicast traffic hit the definable threshold, switch will disable the port. Only after the broadcast/ multicast traffic fall below the definable threshold, the port will be activated again 2. Min granularity: 64kbps The flooding domain is the logical and operation of VLAN member and ingress port flooding domain. 4

5 s Table 1: s (Continued) AAA 802.1X 1. Support Port-based Access Control RADIUS Accounting RADIUS Auth. For Mgmt Access TACACS+ Authentication For the Management Access User Account Privilege for the Management Access MAC-based Access Control Multiple Authentication 2. Support Host-based Access Control - Maximum 16 MACs per port X packet transparent when 802.1X is disabled. 4. Support EAP, OTP, TLS, TTLS and PEAP 5. Support MD5 authentication 6. Support Dynamic VLAN Assignment 7. Support session timeout attribute Support Network accounting (for 802.1x user) (RFC2866) RFC2138, RFC2139 RFC1492 Support 2 level user account - User (Read only) - Administrator (Read / Write) 1. Support the following methods - Local authentication - Radius authentication 2. Support the following modes - Port-based authentication - Host-based authentication 3. Dynamic VLAN Assignment after successful authentication MAC/802.1X Authentication Management Web-based GUI CLI Editable Login Banner Compatible with following browsers (Support RFC2068) - IE5.5 or later version - Firefox (Mozilla) Editable System Prompt Telnet Server Telnet Client TFTP client RFC854 RFC783 Z modem 5

6 s Table 1: s (Continued) SNMP RMON v1 RMON v2 BootP/DHCP client SNMP v1/v2c/v3 (RFC1157, RFC1901, RFC1905, RFC1908, RFC2570, RFC2575) Support 4 groups (RFC2819) Support Probe config group RFC951, RFC1541 DHCP relay System Log Trap/ Log Severity Control Dual Image Port CPU Monitoring Time Setting LLDP RFC3164 Allow to divide the severity of logs into 3 levels, and config to trigger logging only for certain level of logs specify what 3 levels Port definition and naming Allow monitoring the utilization of CPU via Web/ CLI SNTP Cable Diagnostics Configurable Auto MDI/MDIX IPv6 Management SMTP Technical Support Report IPv6 Host Ready certification RFC2821 Support the command "show tech support" to provide the information for debugging MIB MIBII RFC1213 Bridge MIB RFC1493 SNMPv2 MIB RFC1907 RMON MIB RFC1757, RFC2819 RMONv2 MIB Support Probe Config group (RFC2021) Ether-like MIB RFC1643, RFC2358, RFC p MIB RFC4363 IF MIB RFC2233, RFC2863 RADIUS Accounting RFC2620 Client MIB Ping & TRACEROUTE MIB IE8021x MIB SNMP related MIB RFC4293 MIB RFC2925 RFC2571, RFC2574, RFC2575, RFC2576 6

7 Supported MIBs Table 1: s (Continued) LLDP MIB LLDP-DOT1 MIB LLDP-DOT3 MIB Supported MIBs The supported MIBs are: IANA-ADDRESS-FAMILY-NUMBERS.mib IANAifType-MIB.mib INET-ADDRESS-MIB.mib lldp.mib lldp-dot1.mib lldp-dot3.mib rfc1155-smi.mib rfc1212.mib rfc1213.mib rfc1215.mib rfc1271.mib rfc1354.mib rfc1493.mib rfc1907.mib rfc2021.mib rfc2096.mib rfc2571.mib rfc2572.mib rfc2573n.mib rfc2573t.mib rfc2574.mib rfc2575.mib rfc2576.mib rfc2620.mib rfc2665.mib rfc2819.mib rfc2863.mib rfc2925p.mib rfc2925t.mib RFC4293.MIB RFC4363.MIB 7

8 Known Issues token-ring-rmon-mib.mib ie8021x.mib SNMPv2-CONF.mib SNMPv2-SMI.mib SNMPv2-TC.mib Known Issues This known issues in this version of the switch software include: [CLI][ComboPort] The default of fiber port is disabled, it is different with EAS p. [Bandwidth Control] The Effective rate is wrong. It should be the closest smaller multiple of 64kbps granularity. [LBD/Ling Aggregation] The Loopback Detection cannot work on the LACP trunk port. When master port is linked down. [System/MBA] The device would reboot when a large amount of clients request to the MAC Authentication. [CLI][IPv6] "show ipif_ipv6_link_local_auto" fails when the IP address of IPv4 interface doesn't be set. [CLI][Ports] Difference of Port Status Results by "Show ports "command and "show tech_support" command. [ACL] Only 4 kinds of ACL profile can be created at the same time. And IP and Ethernet type profile have reserved. [ACL] IPv6 with source IP address and IPv6 without source IP address will be 2 type profile. [ACL] The ACL rules are grouped per type and the priority is Ethernet> IP> IPv6 with IP> IPv6 without IP> packet_content. For every type, the matched rule with the lowest profile_id / access_id will be selected. [Mirror] The egress mirrored packets is always tagged. Fixed Issues Because this is the first release of the switch software, there are no fixed issues. 8

9 Fixed Issues 9

10 Fixed Issues AccessAdapt, Alpine, Altitude, BlackDiamond, Direct Attach, EPICenter, ExtremeWorks Essentials, Ethernet Everywhere, Extreme Enabled, Extreme Ethernet Everywhere, Extreme Networks, Extreme Standby Router Protocol, Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, ExtremeXOS, Go Purple Extreme Solution, ExtremeXOS ScreenPlay, ReachNXT, Ridgeline, Sentriant, ServiceWatch, Summit, SummitStack, Triumph, Unified Access Architecture, Unified Access RF Manager, UniStack, XNV, the Extreme Networks logo, the Alpine logo, the BlackDiamond logo, the Extreme Turbodrive logo, the Summit logos, and the Powered by ExtremeXOS logo are trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and/or other countries. sflow is the property of InMon Corporation. Specifications are subject to change without notice. All other registered trademarks, trademarks, and service marks are property of their respective owners Extreme Networks, Inc. All Rights Reserved. 10