Release Notes
Table Of Contents
- Release Notes for the Business Policy Switch 2000 Software Version 1.1
- Introduction
- Related publications
- New features and enhancements
- Compatibility with BayStack 450 Switch software version4.0
- QoS traffic policing
- EAPOL-based security
- Introduction
- EAPOL-based security example
- Overview and terms
- EAPOL dynamic VLAN assignment
- Setting up the Authentication server
- Authentication process
- System requirements
- EAPOL-based security configuration rules
- RADIUS-based network security
- Configuring EAPOL using CI menus
- Configuring EAPOL using JDM
- Configuring EAPOL using the Web-based management system
- Support for the GBIC MDA
- Automatic PVID
- Tabular port statistics
- Ability to ping
- Improved STP Fast Learning Mode
- BootP menu item for a stack of only BPS 2000 switches
- Additional Web-based management operation
- Resolved issues
- Known issues
- Known limitations
19
Release Notes for the Business Policy Switch 2000: Software Version 1.1
The Operational Traffic Control field can have one of the following two values:
• Incoming and Outgoing—If the controlled port is unauthorized, frames are
not transmitted through the port; all frames received on the controlled port are
discarded. The controlled port’s state is set to Blocking.
• Incoming—If the controlled port is unauthorized, frames received on the port
are discarded, but the transmit frames are forwarded through the port.
EAPOL dynamic VLAN assignment
If EAPOL-based security is enabled on a port, and then the port is authorized, the
EAPOL feature dynamically changes the port’s VLAN configuration according to
preconfigured values, and assigns a new VLAN. The new VLAN configuration
values are applied according to previously stored parameters (based on the
user_id) in the Authentication server.
The following VLAN configuration values are affected:
• Port Membership
• PVID
• Port Priority
When the EAPOL-based security is disabled on a port that was previously
authorized, the port’s VLAN configuration values are restored directly from the
switch’s non-volatile random access memory (NVRAM).
The following exceptions apply to dynamic VLAN assignments:
• The dynamic VLAN configuration values assigned by EAPOL are not stored
in the switch’s NVRAM.
• You can override the dynamic VLAN configuration values assigned by
EAPOL; however, aware that the values you configure are not stored in
NVRAM.
• When EAPOL is enabled on a port, and you configure values other than
VLAN configuration values, those values are applied and stored in NVRAM.