Release Notes K.12.26

Enhancements

Concurrent TACACS+ and SFTP”

It is now possible to have SFTP/SCP sessions run concurrently with TACACS+ authentication.

Because the initial login must be with a username/password that has manager level privileges, you

must configure TACACS+ single sign--on in order for TACACS+ and SFTP/SCP to coexist.

To configure TACACS+ single sign-on, user the aaa authentication login privilege-mode command.

Release K.12.22 Enhancements

Release K.12.22 includes the following enhancement:

■ Enhancement (PR_1000443026) — Support for the new revision "C" Mini-GBICs was

added to the CLI and the "show tech" command.

■ Enhancement (PR_1000444415) — OSPF Passive Interface support was added.

“OSPF Passive and Routing Interface Increase”

OSPF sends link-state advertisements (LSAs) to all other routers in the same Autonomous System

(AS). To limit the flooding of LSAs throughout the AS you can configure OSPF to be passive. OSPF

does not run in the AS, but it does advertise the interface as a stub link into OSPF. Routing updates

are accepted by a passive interface, but not sent out.

There is a limit of 512 total active and passive interfaces, but only a total of 128 can be active

interfaces.

To configure a passive OSPF interface, enter this command in vlan context:

ProCurve(vlan-1)# ip ospf passive

Syntax: aaa authentication

Selects the Operator access level. If the privilege-mode option is entered,

TACACS+ is enabled for a single login. The authorized privilege level

(Operator or Manager) is granted by the TACACS+ server.

Default: Single login disabled.