Alcatel-Lucent Alcatel OmniSwitch Configuration Guide and Command List for 6850 Models

Page 74

Open Problem Reports and Feature Exceptions

PR 99931

When tagging a link aggregate on an OS6850, QoS does not trust the individual ports of the link aggre- gate.

Workaround: Manually set the trust bit of the underlying ports through QoS (qos port <slot/port> trusted), or set the port default to trusted (qos trust ports).

PR 99983

The OS6850 switch cannot boot up properly with a boot.cfg that exceeds the QoS limitation. It is not recommended to manually edit the boot.cfg to configure your QoS. Booting up with a boot.cfg obtained from a "write memory" is fine.

The hardware allocation checking is not done during boot up causing QoS configurations to be out of sync with the hardware capability.

Workaround: To prevent the boot.cfg from going beyond the QoS limitations on a large QoS configura-

tion, proceed as follows: edit a text file with your desired qos configuration, apply the configuration using "configuration apply text_file", and save the boot.cfg using "write memory".

PR 101223

On an OS6800, if a policy rule specifies the keyword "log" or "log interval", then the policy is rejected.

Workaround: Logging is not supported by the OS6800. The keyword "log" and "log interval" has to be removed from the policy rule definition.

Security

General

Problem Reports

PR 89262

NESSUS reports bogus “Vulnerabilities”. Basically, NESSUS collects all those known attacks/vulnerabili- ties into their test suites.

For example, NESSUS sends: http://<switch-address>/cgi/bin/guestbook.cgi

WebView/HTTP-Server’s response: Prompts user for the default switch login page (which is the normal operation for our embedded server).

Since our HTTP server replies with some form of an HTTP response, NESSUS mistakenly concludes that the HTTP server is vulnerable to this attack.

Workaround: There is no known workaround at this time.

page 74

OmniSwitch 6800/6850/9000—Release 6.1.3.R01

Image 74
Contents Page OmniSwitch 6800 Series Getting Started guide Related DocumentationUpgrade Instructions for 6.1.3.R01 OmniSwitch 9000 Series OmniSwitch 6800 SeriesOmniSwitch 6850 Series Memory RequirementsNew Hardware Supported New Chassis Management Module CMM OS9800-CMMGigabit Ethernet Transceiver SFP MSA OmniSwitch 9000 OS-IP-SHELF PoE Power ShelfOmniSwitch 9600 Support for PS-510W AC/PS-360W AC Dual Speed Ethernet Transceivers100FX Ethernet Transceivers 3.R01 Supported Hardware/Software CombinationsModule Type Part Number Asic Physical New Software Features Feature Platform Software PackageVlan Range Support Software Supported BGP4PIM-SM 802.1Q 802.1W Rstp Default802.1x Device Classification Access Guardian 802.1Q 2005 MstpACL & Layer 3 Security Access Control Lists ACLsAccess Control Lists ACLs for IPv6 Source ipv6 destination ipv6 ipv6 Nh next header flow-labelACL Manager Automatic Vlan Containment AVC Authenticated Switch AccessAuthenticated VLANs Basic IPv4 Routing BGP Graceful RestartDhcp Relay Command Line Interface CLIBpdu Shutdown Ports Dhcp Option-82 Relay Agent Information OptionEnd User Partitioning Eupm DNS ClientDynamic Vlan Assignment Mobility Generic UDP Relay HTTP/HTTPS Port ConfigurationEthernet Interfaces Health StatisticsIP DoS Enhancements Interswitch Protocol AmapIP Multicast Switching Ipms IPv6 NPD IP Multicast Switching Ipms ProxyingIP Route Map Redistribution L2 MAC Address Table Size Enhancement IPX RoutingL2 Dhcp Snooping L2 Static Multicast AddressesMulticast Routing Learned Port Security LPSLink Aggregation static & 802.3ad OSPFv2/OSPFv3 MultinettingNTP Client Per-VLAN Dhcp Relay Partitioned Switch ManagementPolicy Based Routing Permanent Mode Policy Server ManagementPort Mapping Power over Ethernet PoEQuality of Service QoS Port MirroringRouting Protocol Preference Redirect Policies Port and Link AggregateRouter Discovery Protocol RDP Secure Shell SSH Secure Shell SSH Public Key AuthenticationSecure Copy SCP SSH Software Supported Operating SystemsServer Load Balancing SLB Smart Continuous Switching OmniSwitch 6800/OmniSwitchSmart Continuous Switching OmniSwitch SFlowSource Learning Software RollbackSpanning Tree Switch LoggingText File Configuration Syslog to Multiple HostsVlan Stacking and Translation User Definable Loopback InterfaceVlan Range Support VRRPv2/VRRPv3Web-Based Management WebView Supported Traps Trap Name Platforms DescriptionTrap Name Platforms Description Sion which was active on a slot cannot Trap Name Platforms Description Table gets dropped due to the overload Software Feature Unsupported CLI Commands Unsupported Software FeaturesUnsupported CLI Commands RIP Alcatel IND1Bgp Unsupported MIBsMIB Name Unsupported MIB variables Alcatel IND1AAA Alcatel IND1LAGMIB Name Unsupported MIB variables AlcatelIND1QoS AlcatelIND1SlbMIB Name Unsupported MIB variables AlcatelIND1VlanManagerIetfsnmp Problem Reports Open Problem Reports and Feature ExceptionsCommand Line Interface CLI Rmon SFlowFeature Exceptions Web-Based Management WebViewOpen Problem Reports and Feature Exceptions Open Problem Reports and Feature Exceptions Layer AutonegotiationBridging Ethernet Interfaces Open Problem Reports and Feature Exceptions IP Multicast Switching Ipms Group MobilityLink Aggregation Port Mirroring/MonitoringSource Learning Open Problem Reports and Feature Exceptions Open Problem Reports and Feature Exceptions Spanning Tree Open Problem Reports and Feature Exceptions Vlan Stacking Basic IP Routing Dhcp SnoopingIPv6 Open Problem Reports and Feature Exceptions Server Load Balancing SLB UDP RelayAdvanced Routing Dvmrp OSPFv3PIM Quality of Service includes ACLs GeneralPolicy Manager Security 802.1x Authenticated Switch Access Authenticated VLANs Policy Server ManagementSystem Open Problem Reports and Feature Exceptions Chassis Supervision Open Problem Reports and Feature Exceptions Power Over Ethernet Open Problem Reports and Feature Exceptions Hot Swap Time Limitations for OmniSwitch Redundancy / Hot SwapOpen Problem Reports and Feature Exceptions Technical Support Region Phone Number