Extreme Networks ExtremeWare XOS 11.3, Manual

Page: 31 / 698

Summary of Features
ExtremeWare XOS 11.3 Concepts Guide
31
IP Multinetting
Software version 11.0 of ExtremeWare XOS introduces IP multinetting, which allows you to overlap
multiple subnets onto the same physical segment. IP multinetting is designed for use in legacy
networks, as a transitional tactic.
For more information on IP multinetting, see Chapter 23 .
RMON
With software version 11.1, ExtremeWare XOS introduces Remote Monitoring (RMON), which supports
RFC 1757 and RFC 2021. RMON provides a method of monitoring the network by collecting Ethernet
port statistics and to set systemwide alarm variables.
For more information on RMON, see Chapter 8 .
ELRP
ExtremeWare XOS 11.1 introduces support for the Extreme Loop Recovery Protocol (ELRP) ELRP allows
you to prevent, detect, and recover from Layer 2 loops in the network. Once a loop is detected through
ELRP, different recovery actions can be taken such as blocking certain ports to prevent looping or
logging a message to the system log. The action taken is largely dependent on the protocol using ELRP
to detect loops in the network.
For more information on using standalone ELRP, see Appendix B . For more information on using ELRP
in conjunction with ESRP, see Chapter 21 .
Network Login
Network Login is a method of authenticating users as hosts are added to a network. As a new host is
added to the network, its port connection is in an unauthenticated state, denying any access to the
network. During authentication, the user supplies a password to the switch using the host. If
authenticated, the port connection is authenticated, and traffic flows to and from the host and the
network.
ExtremeWare XOS version 11.3 introduces the following network login enhancements: hitless failover
support, local database authentication, secure MAC, and netlogin MAC-based VLANs:
●
Hitless failover—Modular switches with network login configured and enabled support hitless
failover by relaying current client authentication information from the primary MSM to the backup
MSM. If failover occurs during the authentication or re-authentication of a client, the client must
repeat the authentication process.
●
Local database authentication—You can explicitly configure and use the local database for
authentication instead of using a RADIUS server. In ExtremeWare XOS 11.2, the local database was
available only if the RADIUS servers became unavailable.
●
Secure MAC—You can configure ports on the switch to accept and authenticate a client with a
specific MAC address. If you associate a MAC address with one or more ports, only authentication
requests for that MAC address received on the port(s) are sent to the configured RADIUS server or
local database; the port(s) block all other authentication requests.
●
Netlogin MAC-based VLANs—The BlackDiamond 8800 family of switches and the Summit X450
switch support netlogin MAC-based VLANs. Netlogin MAC-based VLANs allow a port assigned to