Install guide

ManualsBrandsAllied Telesis ManualsComputer equipmentRapier 8

Release Note

Software Release 2.6.4

For AT-8600, AT-8700XL, AT-8800, Rapier, and Rapier i

Series Switches

Introduction ...................................................................................................... 3

Upgrading to Software Release 2.6.4 ................................................................ 3

Hardware Platforms .......................................................................................... 4

New platform - AT-8600 Series switch ........................................................ 4

Overview of New Features ................................................................................ 5

NEBS Compliant Models ................................................................................... 6

Importing BGP routes into OSPF ........................................................................ 6

Enabling BGP route import ......................................................................... 6

Limiting the number of routes .................................................................... 6

Advertising desired routes .......................................................................... 7

Configuration example ............................................................................... 7

SNMPv3 ............................................................................................................ 8

Stacking ........................................................................................................... 8

What is Stacking? ....................................................................................... 8

Topologies .................................................................................................. 8

How Stacking Works .................................................................................. 9

ICMP Router Discovery Advertisements ............................................................. 9

Router Discovery Process ............................................................................ 9

Router Advertisement Messages ............................................................... 10

Router Solicitation Messages .................................................................... 10

Router Advertisement Interval .................................................................. 10

Preference Level ....................................................................................... 11

Lifetime .................................................................................................... 11

Configuration Procedure .......................................................................... 11

Support for Long File Names (DOS 28.3) ......................................................... 12

Upgrading to new software releases ......................................................... 12

Regressing to previous software releases .................................................. 13

Testing Asynchronous and Switch Ports ........................................................... 13

Interrupting Text Flow with the CLI ................................................................. 13

Disable 10/100 Ports at the Hardware Level .................................................... 14

Specifying the Mode of Operation When IGMP Snooping is Enabled ............... 14

IP Route Filter Changes to Protocol Parameter ................................................. 15

Remote Security Officer (RSO) Login ................................................................ 16

Remote Security Officer Login and IPv4 Only ............................................ 16

Remote Security Officer Login, IPv4 and IPv6 ............................................ 16

Enable IPV6 MLD Interface Command ............................................................. 17

Text Message at Login (Welcome banner) ........................................................ 17

Private VLANs ................................................................................................. 18

Summary of content (36 pages)

PAGE 1
Release Note Software Release 2.6.4 For AT-8600, AT-8700XL, AT-8800, Rapier, and Rapier i Series Switches Introduction ...................................................................................................... 3 Upgrading to Software Release 2.6.4 ................................................................ 3 Hardware Platforms .......................................................................................... 4 New platform - AT-8600 Series switch ..................................
PAGE 2
Software Release 2.6.4 2 Membership Rules for Private VLANs ........................................................ Private VLANs on Rapier 48i Switches ....................................................... Configuring Private VLANs ....................................................................... Modified Commands ................................................................................ Configuration Example .............................................................................
PAGE 3
Software Release 2.6.4 3 Introduction Allied Telesyn announces the release of Software Release 2.6.4 for the AT-8600, AT-8700XL, AT-8800, Rapier, and Rapier i Series switches. To see which new features and enhancements apply to each product type, see Overview of New Features on page 5. This Release Note describes: ■ important factors you need to consider when upgrading to Software Release 2.6.4 from an earlier software release, in Upgrading to Software Release 2.6.
PAGE 4
Release Note Table 1: File names for Software Release 2.6.4 (Continued) Product name Software release file GUI resource file CLI help file AT-8848 86s-264.rez d8848e04.rsc 8800264A.HLP Rapier G6 86s-264.rez d_rg6e04.rsc RP-264A.HLP Rapier G6F 86s-264.rez drg6fe04.rsc RP-264A.HLP Rapier 16F 86s-264.rez dr16fe04.rsc RP-264A.HLP Rapier 16Fi 86s-264.rez dr16ie04.rsc RP-264A.HLP Rapier 24 86s-264.rez d_r24e04.rsc RP-264A.HLP Rapier 24i 86s-264.rez dr24ie04.rsc RP-264A.
PAGE 5
Software Release 2.6.4 5 Overview of New Features Table 2 summarises the new features and enhancements in Software Release 2.6.4 by product series. Each new feature and enhancement is described in the following sections. Stacking was first released in Software Release 2.6.2, and SNMPv3 was first released in Software Release 2.6.3 on AT-8700XL, AT-8800, Rapier, and Rapier i Series switches. Both features are now available on AT-8600 Series switches.
PAGE 6
Release Note BCP Option 8 Firewall Enhancements ! RAPIER I RAPIER AT-8800 AT-8700XL AT-8600 Table 2: New features and enhancements in Software Release 2.6.4 by product series (Continued) ! ! ! ! NEBS Compliant Models Software Release 2.6.4 adds support for the following two new Network Equipment Building Systems (NEBS) compliant Layer 3 switch models: ■ Rapier 24i (NEBS compliant) ■ AT-8724XL (NEBS compliant) Contact your authorised distributor or reseller for ordering information.
PAGE 7
Software Release 2.6.4 7 The other way to limit the imported routes is to configure a routing filter. This filter is used in conjunction with the bgpfilter parameter in the set ospf command to control the passing of routing information in and out of the device. To configure a filter, use the add ip filter command: add ip filter=filter-number {action=include|exclude} source=ipadd [smask=ipadd] [entry=entry-number] Use this filter to limit imported BGP routes with the command: set ospf bgpfilter=300...
PAGE 8
Release Note SNMPv3 SNMPv3 provides enhanced security management features whilst maintaining compatibility with earlier versions SNMPv1 and SNMPv2. The basic additional features of version 3 are: ■ Message Authentication: ■ Hashing and time stamping is employed to ensure that messages are received from valid sources. ■ Message Confidentiality ■ Encryption can be applied to messages to ensure content privacy.
PAGE 9
Software Release 2.6.4 9 How Stacking Works The Stacking feature centralises management by distributing and maintaining system-wide information about stack members. It also: ■ Synchronises and propagates information about individual stack members ■ Propagates CLI and GUI commands ■ Manages responses and acknowledgements ■ Synchronises the stack configuration file Switches have individual host IDs, which you set, so that they know which device they are in the stack.
PAGE 10
Release Note Table 3: Router Discovery Process (Continued) When ... Then ... the switch receives a router solicitation the switch multicasts an early router advertisement on the multicast interface on which it received the router solicitation. a host receives a router advertisement the host stores the IP address and preference level for the advertisement lifetime. the lifetime of all existing router advertisements on a host expires the host sends a router solicitation.
PAGE 11
Software Release 2.6.4 11 Preference Level The preference level is the preference of the advertised address as a default router address relative to other router addresses on the same subnet. By default, all routers and layer 3 switches have the same preference level, zero (0). While it is entered as a decimal in the range -2147483648..2147483647, it is encoded in router advertisements as a twos-complement hex integer in the range 0x8000000 to 0x7fffffff.
PAGE 12
Release Note 3. Set preference levels. By default, every logical interface has the same preference for becoming a default router (mid range, 0). To give a logical interface a higher preference, increase the preferencelevel. To give it a lower preference, decrease this value. If it should never be used as a default router, set it to notdefault. add ip interface=interface ipaddress={ipadd|dhcp} preferencelevel={-2147483648..2147483647|notdefault} [other-parameters...
PAGE 13
Software Release 2.6.4 13 Regressing to previous software releases If software release 2.6.4 is installed on the switch and then a previous software release that supports only DOS 8.3 format is installed (see Table 4), long file names that were in DOS 28.3 format are truncated to DOS 8.3 format. When software release 2.6.4 or later is reinstalled, these truncated file names are restored to their DOS 28.3 format and no information is lost. Support for long file names in only DOS 8.
PAGE 14
Release Note Disable 10/100 Ports at the Hardware Level When disabling a port or group of ports on the switch, you can now specify that 10/100 Ethernet ports are disabled at the hardware level, using the command: disable switch port={port-list|all} [link={enable|disable}] [other-parameters...] The link parameter specifies whether 10/100 Ethernet ports are either enabled or disabled at the hardware level. If disable is specified, this is the equivalent of disconnecting the cable.
PAGE 15
Software Release 2.6.4 15 If none is specified, the switch does not create router ports at all. To add and delete reserved IP multicast addresses to and from the list of router multicast addresses specified by the set igmpsnooping routermode command when the ip parameter is selected, use the commands: add igmpsnooping routeraddress delete igmpsnooping routeraddress The IP addresses specified must be from 224.0.0.1 to 224.0.0.255.
PAGE 16
Release Note Remote Security Officer (RSO) Login There are two section to this enhancement. The first section applies to switches that support Remote Security Officer (RSO) and IPv4 only. The second section applies to switches and routers that support RSO, IPv4, and IPv6. Remote Security Officer Login and IPv4 Only This section applies to the AT-8600, AT-8700XL, AT-8800, Rapier, and Rapier i Series switches.
PAGE 17
Software Release 2.6.4 17 Enable IPV6 MLD Interface Command This enhancement is available on AT-8800, Rapier, and Rapier i Series switches. This command lets users enable the Multicast Listener Discovery (MLD) protocol on an interface that already exists. For Release 2.6.4, the v1compatible parameter for the command has been replaced with the queryversion parameter.
PAGE 18
Release Note INFO: INFO: PASS: ………… ………… INFO: Self tests beginning. RAM test beginning. RAM test, 65536k bytes found. Switch startup complete Warning: This equipment is for authorised persons only. If you do not have proper clearance, please logout now. Login: Users with Manager privileges or higher create the file named login.txt by using the edit command or by loading an existing text file. The contents of the file must be in printable ASCII characters but with no control characters.
PAGE 19
Software Release 2.6.4 19 appropriate uplink port. A single customer may use multiple ports, connected to individual PCs or trunked together to increase bandwidth. If a customer uses multiple ports, these ports are able to communicate with each other. On Rapier i and AT-8800 Series switches, private VLANs obsolete protected VLANs and the protected parameter of the create vlan command. If you run a configuration that uses the protected parameter, the VLAN will be converted to a private VLAN.
PAGE 20
Release Note Each private or uplink port: ■ May be tagged or untagged, but can only be an untagged member of one port-based VLAN ■ May be trunked with other ports of the same type Private VLANs on Rapier 48i Switches The ports on Rapier 48i switches are divided into two instances: ■ ports 1-24 plus uplink port 49 ■ ports 25-48 plus uplink port 50 Private VLANs on a Rapier 48i switch can only consist of ports from one instance.
PAGE 21
Software Release 2.6.4 21 Modified Commands The create vlan and add vlan port commands have been modified as described below. create vlan=vlan-name vid=2..4094 [private] The private parameter specifies that the VLAN is a private VLAN. A private VLAN contains ports or groups of ports that are isolated from the other ports in the VLAN. add vlan={vlan-name|1..
PAGE 22
Release Note Figure 3: Example output from the SHOW VLAN command. VLAN Information --------------------------------------------------------------------------Name ............... default Identifier ......... 1 Status ............. static Private VLAN ....... No Untagged ports ..... 1,3-23 Tagged ports ....... None Spanning Tree ...... default Trunk ports ........ None Mirror port ........
PAGE 23
Software Release 2.6.4 23 Probing IP Addresses When creating a DHCP range, you can now specify how the DHCP server checks whether an IP address is being used by other hosts by specifying the new probe parameter, with the command: create dhcp range=name ip=ipadd number=number policy=name [gateway=ipadd] [probe={arp|icmp}] The probe parameter specifies how the DHCP server checks whether an IP address is being used by other hosts.
PAGE 24
Release Note Virtual Bridge (VLAN) MIB Support has been added for RFC 2674, “Definitions of Managed Objects for Bridges with Traffic Classes, Multicast Filtering and Virtual LAN Extensions” which defines MIB objects for managing IEEE 802.1Q VLANs. Objects defined in this MIB reside in the mib(1) sub-tree (Figure 4 on page 24), under the dot1dBridge sub-tree defined in RFC 1493, and have the object identifier qBridgeMIBObjects ({ mib-2 dot1dBridge(17) qBridgeMIB(7) 1 }).
PAGE 25
Software Release 2.6.4 25 Valid Values for IPv6 Router Advertisement AdvRetransTimer This enhancement is available on AT-8800, Rapier, and Rapier i Series switches. The value you enter for the AdvRetrans timer is now rounded up to the nearest 100 milliseconds (for example, 301 becomes 400). The AdvRetrans timer is the interval between repeats of each Router Advertisement message sent by the switch, and is specified by using the retrans parameter in the command: set ipv6 nd interface=interface retrans=0..
PAGE 26
Release Note Extended Show Debug Command The command show debug displays the output of a list of other show commands. A full parameter has been added and displays a longer list of commands: show debug [stack|full] The output also depends on the switch’s security mode and the user’s privileges. The possible command list variations are given in Table 5 on page 26. The stack parameter limits the output to a stack dump, if one is available.
PAGE 27
Software Release 2.6.
PAGE 28
Release Note Table 5: The list of show commands that are executed by the show debug command, when the full parameter is or is not specified, under different combinations of security mode and privilege level (Continued) Full parameter specified? Security mode Privilege level List of commands executed Yes show system (without current configuration file) show files show install show release show interface show ip interface show ip arp show ip route full show ip count show switch (AR400, AT-8700XL, AT-8
PAGE 29
Software Release 2.6.
PAGE 30
Release Note Table 8: Parameters displayed in the output of the show tacplus telnet command. Parameter Meaning TACACS+ telnet privilege level The level of TACACS+ privilege required for using telnet on the switch; a number in the range 0 to 15, or none. None indicates that no TACACS+ authenticated user can use telnet.
PAGE 31
Software Release 2.6.4 31 ■ When changing the configuration of the participating routers using Telnet, GUI or SNMP, configure each device individually by pointing to their individual IP addresses. ■ When changing the configuration of the participating routers, do not use the VR IP address. Only one device, the VR master, is responding to this IP address, and you may not know which device it is.
PAGE 32
Release Note BCP Option 8 This enhancement is available on Rapier and Rapier i Series switches. This enhancement implements support for Bridge Control Protocol (BCP) Option 8 (IEEE 802 Tagged Frames). The Bridging Control Protocol (BCP) is responsible for configuring the bridge protocol parameters on both ends of the point-to-point link. By default, BCP Option 8 is not supported.
PAGE 33
Software Release 2.6.4 33 To specify arp, use the commands: [debug={all|arp|http|packet| pkt|process|proxy|smtp}] [other-parameters...] enable firewall policy=name [debug={all|arp|http|packet| pkt|process|proxy|smtp}] [other-parameters...] disable firewall policy=name A switch that is also acting as a NAT device will now respond to ARP requests for any of its global IP addresses.
PAGE 34
Release Note Table 10: Parameters in the output of the show firewall arp command (Continued) Parameter Meaning NAT Type The type of NAT configuration associated with the IP address: Int Based - The address (range) was specified by an interfacebased NAT configured with the add firewall policy nat command Rule Int - The address (range) was specified by a NAT rule configured by the add firewall policy rule command, where the ACTION parameter was specified as NAT The private interface associated with
PAGE 35
Software Release 2.6.4 Software Release 2.6.
PAGE 36
Release Note Software Release 2.6.