Allied Telesis 613-001480 Switch User Manual


 
AT-S94 Version 3.0.0.41 Software Release Notes
PN 613-001480 Rev A 10 Allied Telesis, Inc.
The following is a new CLI command introduced in Version 3.0.0.40:
Version 3.0.0.38
No new features were introduced in this release.
Version 3.0.0.35
No new features were introduced in this release.
Version 3.0.0.33
No new features were introduced in this release.
Version 3.0.0.32
Dynamic VLAN Assignment (DVA) - The system supports Dynamic VLAN assignment
based on 802.1x RADIUS Attributes. A predefined VLAN is assigned to a new user/port,
after successful authentication of that user/port.
Forwarding/Filtering of Unregistered Multicast Frames - This feature enables to
configure how to handle MC Frames that belong to unregistered MC groups.
Unregistered MC groups are the groups that are not known to the switch. The switch learns about MC
groups by IGMP Snooping, or by static configuration.
Normally, MC frames are always flooded to all ports in the VLAN. If IGMP Snooping is enabled, the
switch learns about existence of MC groups and keeps track of which ports have joined to which MC
group. This enables the switch to forward the MC frames (from a registered MC group) only to ports
that are registered to that MC group. All unregistered MC frames, i.e., the MC frames that do not
belong to a registered MC group, are still flooded to all ports on the VLAN.
The “Forwarding/Filtering of Unregistered MC Frames” feature enables to configure whether to forward
or to filter these MC frames.
STP BPDU Guard - BPDU Guard is used as a security mechanism to protect the network
from invalid configurations.
BPDU Guard is usually used either when fast link ports (ports connected to clients) are enabled or
when STP feature is disabled. When BPDU guard is enabled on a port, the port is shut down if a BPDU
message is received and an appropriate SNMP trap is generated.
RADIUS Accounting - The feature enables to record device management sessions
(Telnet, serial and WEB but not SNMP) and or 802.1x authentication sessions.
802.1x Enhanced Features - This release supports 802.1x Multi Session mode enabling
multiple 802.1x sessions simultaneously on a port. This allows number of specific hosts
that have been authorized to get access to the port. Filtering is based on the source MAC
addresses.
Table 1: CLI Command
CLI Command Description of Functionality
dot1x legacy-supp-mode Use the dot1x legacy-supp-mode interface
configuration command in multiple session mode to
enable 802.1x switch to send periodic EAPOL
request identity frame according to tx timeout period.
This is the default behavior