![Arris ICX 7650-48P Скачать руководство пользователя страница 175](http://html1.mh-extra.com/html/arris/icx-7650-48p/icx-7650-48p_configuration-manual_2976303175.webp)
TABLE 26
Supported hitless stacking protocols and services (continued)
Traffic type
Supported protocols and services Impact
Management traffic
N/A
All existing management sessions (SNMP, Telnet, HTTP, HTTPS, FTP,
TFTP, SSH, and so on) are interrupted during the switchover process.
Sessions are terminated and can be re-established after the new
active controller takes over.
Security
•
ACLs
•
Dos attack prevention
(TCP syn/ICMP)
•
DHCP snooping
•
Dynamic ARP inspection
•
IP source guard
•
MAC filter
•
MAC port security
Supported security protocols and services are not affected during a
switchover or failover, with the following exceptions:
•
IPsec, when enabled on an ICX 7450 stack, does not support
hitless stacking because IPsec sessions must be re-
established by device firmware. Stacking split, merge, and
member reload follow normal stacking behaviors.
•
Media Access Control Security (MACsec), 802.1ae, when
configured on an ICX 7450 stack, does not support hitless
stacking because MACsec sessions must be re-established
by device firmware.
•
802.1X is affected if re-authentication does not occur in a
specific time window.
•
MAC authentication is affected if re-authentication does not
occur in a variable-length time window.
•
In some cases, a few IP source guard packets may be
permitted or dropped.
•
If 802.1X and MAC authentication are enabled together on
the same port, both will be affected during a switchover or
failover. Hitless stacking support for these features applies
to ports with 802.1X only or multi-device port authentication
only.
•
For MAC port security, secure MAC addresses are
synchronized between the active and standby controllers, so
they are hitless. However, denied MAC addresses are lost
during a switchover or failover but may be relearned if
traffic is present.
Configured ACLs will operate in a hitless manner. That is, the system
will continue to permit and deny traffic during the switchover or
failover process. However, dynamic ACLs are not supported for hitless
switchover and failover.
After a switchover or failover, the new active controller will re-
authenticate 802.1X or MAC authentication sessions that were being
forwarded in hardware.
Other services to management
•
AAA
•
DHCP
•
sFlow
•
SNMP v1, v2, and v3
•
SNMP traps
•
SNTP
•
Traceroute
Supported protocols and services are not affected during a switchover
or failover.
DNS lookups will continue after a switchover or failover. This
information is not synchronized.
Ping traffic will be minimally affected.
Hitless Stacking
Supported hitless stacking protocols and services
Ruckus FastIron Stacking Configuration Guide, 08.0.90
Part Number: 53-1005572-01
175
Содержание ICX 7650-48P
Страница 8: ...Ruckus FastIron Stacking Configuration Guide 08 0 90 8 Part Number 53 1005572 01...
Страница 22: ...Ruckus FastIron Stacking Configuration Guide 08 0 90 22 Part Number 53 1005572 01...
Страница 88: ...Ruckus FastIron Stacking Configuration Guide 08 0 90 88 Part Number 53 1005572 01...
Страница 170: ...Ruckus FastIron Stacking Configuration Guide 08 0 90 170 Part Number 53 1005572 01...
Страница 236: ...Ruckus FastIron Stacking Configuration Guide 08 0 90 236 Part Number 53 1005572 01...