Allied Telesis AT-8000S Switch User Manual


 
AT-S94 Version 3.0.0.45 Software Release Notes
PN 613-001777 Rev A 10 Allied Telesis, Inc.
BPDU Guard is usually used either when fast link ports (ports connected to clients) are enabled or
when STP feature is disabled. When BPDU guard is enabled on a port, the port is shut down if a BPDU
message is received and an appropriate SNMP trap is generated.
RADIUS Accounting - The feature enables to record device management sessions (Telnet,
serial and WEB but not SNMP) and or 802.1x authentication sessions.
802.1x Enhanced Features - This release supports 802.1x Multi Session mode enabling
multiple 802.1x sessions simultaneously on a port. This allows number of specific hosts that
have been authorized to get access to the port. Filtering is based on the source MAC
addresses.
The following 802.1x feature enhancements will be supported:
Guest VLAN - This feature allows network administrators to give some limited access to
the network to unauthorized ports. The port would be a member in the Guest VLAN only
after specific timeout from “port up” (letting the supplicant to start the 802.1x), or after
802.1x authentication failure
Unauthenticated VLAN - This feature allows network administrators to define VLANs
when authorization is not required for them.
802.1ab LLDP
LLDP - 802.1ab is an IEEE standard for Link Layer Discovery Protocol in Ethernet
networks. It provides a method for switches, routers and access points to advertise their
identification, configuration and capabilities to neighboring devices that store the data in a
MIB (management information base). Link layer discovery allows a network management
system to model the topology of the network by interrogating the MIB databases in the
devices.
LLDP-MED - The Link Layer Discovery Protocol – Media Endpoint is an extension of the
802.1ab IEEE standard of LLDP providing behavioral requirements for devices
implementing the extensions to enable correct multi-vendor interoperation.
IPv6 Host - The device functions as an IPv6 compliant Host, as well as IPv4 Host. This
functionality is provided in a pure IPv6 network as well as in a combined IPv4/IPv6 network.
Note
IPv6 was not tested for UNH/DoD certification.
Configurable Login Banner - The system supports a text based banner that is configurable
via CLI Command to enable telnet session to display security messages above the login
prompt prior to login.