Alcatel-Lucent 6800 Partitioned Switch Management, Per-VLAN Dhcp Relay, Policy Server Management

Software Supported

Partitioned Switch Management

A user account includes a login name, password, and user privileges. The privileges determine whether the user has read or write access to the switch, and which command domains and command families the user is authorized to execute on the switch. The privileges are sometimes referred to as authorization; the designation of particular command families or domains for user access is sometimes referred to as parti- tioned management.

Available command domains and families are listed in the following table:

Domain	Corresponding Families
domain-admin	file telnet dshell debug
domain-system	system aip snmp rmon web config
domain-physical	chassis module interface pmm health
domain-network	ip rip ospf vrrp ip-routing ipx ipmr ipms
domain-layer2	802.1q
	vlan bridge stp
	linkagg ip-helper
domain-service	dns
domain-policy	qos policy slb
domain-security	session avlan aaa

Per-VLAN DHCP Relay

The OmniSwitch 9000 allows you to configure multiple DHCP relay (ip helper) addresses on a per-vlan basis. For the Per-VLAN service, identify the number of the VLAN that makes the relay request. You may identify one or more server IP addresses to which DHCP packets will be sent from the specified VLAN. Both standard and per VLAN modes are supported.

Policy Server Management

Policy servers use Lightweight Directory Access Protocol (LDAP) to store policies that are configured through Alcatel-Lucent’s PolicyView network management application. PolicyView is an OmniVista application that runs on an attached workstation.

The Lightweight Directory Access Protocol (LDAP) is a standard directory server protocol. The LDAP policy server client in the switch is based on RFC 2251. Currently, PolicyView is supported for policy management.

Policy Based Routing (Permanent Mode)

Policy Based Routing may be used to redirect traffic to a particular gateway based on source or destina- tion IP address, source or destination network group, source or destination TCP/UDP port, a service or service group, IP protocol, or built-in source port group.

Traffic may be redirected to a particular gateway regardless of what routes are listed in the routing table. Note that the gateway address does not have to be on a directly connected VLAN; the address may be on any network that is learned by the switch.

Policy Based Routing is supported on the OmniSwitch 9000 Series. The 6.1.3.R01 release provides support for this feature on the OmniSwitch 6850 Series.

page 28 OmniSwitch 6800/6850/9000—Release 6.1.3.R01