Alcatel-Lucent 9000, 6800, 6850 user manual 802.1x

Page 75

Open Problem Reports and Feature Exceptions

PR 91681

On an OS9000, the following is noted when running a test called "alya.cgi (Backdoors)" in the NESSUS test suite:

Security Note: Web mirroring - http (80/tcp)

The following CGI have been discovered:

Syntax: cginame (arguments [default value])

/web/content/login.html (userName [] password [] B1 [Login])

Workaround: This is the expected behavior for the login pages for WebView and Web-AVLAN authen- tication. NESSUS is known to provide those bogus reports.

PR 95642

On an OS9000, the Denial of Service testing tool (NESSUS) generates bogus reports.

Workaround: There is no known workaround at this time.

PR 107176

OS6800 may incorrectly show the router-mac address as the source of a DoS attack.

Workaround: There is no known workaround at this time.

802.1x

Problem Reports

PR 98375

On an OS6850, DHCP rules are not being used to classify traffic on a regular group mobility port. For this reason, with a matching DHCP rule, Device Classification policy will not consider matching a DHCP rule as having a matching GM rule when the policy is applied.

Workaround: There is no known workaround at this time.

PR 99658

On an OS6850, not all MAC addresses will be learned when testing with a traffic generator to simulate traffic with incremental MAC addresses.

Workaround: There is no known workaround at this time.

OmniSwitch 6800/6850/9000—Release 6.1.3.R01

page 75

Image 75

Contents Page Related Documentation OmniSwitch 6800 Series Getting Started guideUpgrade Instructions for 6.1.3.R01 Memory Requirements OmniSwitch 6800 SeriesOmniSwitch 6850 Series OmniSwitch 9000 SeriesNew Hardware Supported OS9800-CMM New Chassis Management Module CMMDual Speed Ethernet Transceivers OmniSwitch 9000 OS-IP-SHELF PoE Power ShelfOmniSwitch 9600 Support for PS-510W AC/PS-360W AC Gigabit Ethernet Transceiver SFP MSA100FX Ethernet Transceivers Supported Hardware/Software Combinations Module Type Part Number3.R01 Asic Physical Feature Platform Software Package New Software FeaturesVlan Range Support BGP4 Software SupportedPIM-SM 802.1Q 2005 Mstp 802.1W Rstp Default802.1x Device Classification Access Guardian 802.1QSource ipv6 destination ipv6 ipv6 Nh next header flow-label Access Control Lists ACLsAccess Control Lists ACLs for IPv6 ACL & Layer 3 SecurityACL Manager Authenticated Switch Access Authenticated VLANsAutomatic Vlan Containment AVC BGP Graceful Restart Basic IPv4 RoutingDhcp Option-82 Relay Agent Information Option Command Line Interface CLIBpdu Shutdown Ports Dhcp RelayDNS Client Dynamic Vlan Assignment MobilityEnd User Partitioning Eupm Health Statistics HTTP/HTTPS Port ConfigurationEthernet Interfaces Generic UDP RelayInterswitch Protocol Amap IP Multicast Switching IpmsIP DoS Enhancements IP Multicast Switching Ipms Proxying IP Route Map RedistributionIPv6 NPD L2 Static Multicast Addresses IPX RoutingL2 Dhcp Snooping L2 MAC Address Table Size EnhancementLearned Port Security LPS Link Aggregation static & 802.3adMulticast Routing Multinetting NTP ClientOSPFv2/OSPFv3 Policy Server Management Partitioned Switch ManagementPolicy Based Routing Permanent Mode Per-VLAN Dhcp RelayPort Mirroring Power over Ethernet PoEQuality of Service QoS Port MappingRedirect Policies Port and Link Aggregate Router Discovery Protocol RDPRouting Protocol Preference SSH Software Supported Operating Systems Secure Shell SSH Public Key AuthenticationSecure Copy SCP Secure Shell SSHSFlow Smart Continuous Switching OmniSwitch 6800/OmniSwitchSmart Continuous Switching OmniSwitch Server Load Balancing SLBSoftware Rollback Source LearningSyslog to Multiple Hosts Switch LoggingText File Configuration Spanning TreeVRRPv2/VRRPv3 User Definable Loopback InterfaceVlan Range Support Vlan Stacking and TranslationWeb-Based Management WebView Trap Name Platforms Description Supported TrapsTrap Name Platforms Description Sion which was active on a slot cannot Trap Name Platforms Description Table gets dropped due to the overload Unsupported Software Features Unsupported CLI CommandsSoftware Feature Unsupported CLI Commands RIP Alcatel IND1LAG Unsupported MIBsMIB Name Unsupported MIB variables Alcatel IND1AAA Alcatel IND1BgpAlcatelIND1Slb MIB Name Unsupported MIB variables AlcatelIND1QoSAlcatelIND1VlanManager MIB Name Unsupported MIB variablesIetfsnmp Open Problem Reports and Feature Exceptions Command Line Interface CLIProblem Reports SFlow RmonWeb-Based Management WebView Feature ExceptionsOpen Problem Reports and Feature Exceptions Open Problem Reports and Feature Exceptions Autonegotiation LayerBridging Ethernet Interfaces Open Problem Reports and Feature Exceptions Group Mobility IP Multicast Switching IpmsPort Mirroring/Monitoring Link AggregationSource Learning Open Problem Reports and Feature Exceptions Open Problem Reports and Feature Exceptions Spanning Tree Open Problem Reports and Feature Exceptions Vlan Stacking Dhcp Snooping Basic IP RoutingIPv6 Open Problem Reports and Feature Exceptions UDP Relay Server Load Balancing SLBAdvanced Routing OSPFv3 DvmrpPIM General Quality of Service includes ACLsPolicy Manager Security 802.1x Authenticated Switch Access Policy Server Management Authenticated VLANsSystem Open Problem Reports and Feature Exceptions Chassis Supervision Open Problem Reports and Feature Exceptions Power Over Ethernet Open Problem Reports and Feature Exceptions Redundancy / Hot Swap Hot Swap Time Limitations for OmniSwitchOpen Problem Reports and Feature Exceptions Region Phone Number Technical Support