Features in 291-08

33

Enhancements

CR

Module

Level

Description

AR400

AR7x5

AR7x0S

Rapier i

Rapier w

AT8800-

AT-8600

AT-8700XL

x90048-

AT-9900

AT-9800

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

CR00012822

BGP

-

The BGP counter output display has been significantly improved. Also, the

Y

Y

Y

Y

Y

Y

-

-

Y

Y

Y

 

 

 

command show bgp counter=all now prints out the RIB, UPDATE, DB and

 

 

 

 

 

 

 

 

 

 

 

 

 

 

PROCESS counters.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

CR00016099

MACFF,

-

MAC-forced forwarding has been enhanced for use in a hospitality

-

-

-

Y

Y

Y

Y

Y

-

-

-

 

DHCP

 

situation, such as a hotel. The enhanced solution allows hotel guests to

 

 

 

 

 

 

 

 

 

 

 

 

Snooping

 

connect to the network without having to change their IP settings, while

 

 

 

 

 

 

 

 

 

 

 

 

 

 

still ensuring privacy for each guest. Typically some guests will obtain their

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IP address from the hotel's DHCP server and others will have statically

 

 

 

 

 

 

 

 

 

 

 

 

 

 

configured IP addresses in their PCs.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

The solution is designed to interoperate with a specialised Access Router

 

 

 

 

 

 

 

 

 

 

 

 

 

 

that is able to deal with the full range of IP addresses that will be in use on

 

 

 

 

 

 

 

 

 

 

 

 

 

 

the guests' PCs. The Nomadix Access Gateway (from www.nomadix.com)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

is an example of such a specialised access router.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Configuration of the new feature is similar to the existing MAC-forced

 

 

 

 

 

 

 

 

 

 

 

 

 

 

forwarding configuration. On each edge switch, you also need to enter the

 

 

 

 

 

 

 

 

 

 

 

 

 

 

following new command before enabling DHCP snooping:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

disable dhcpsnooping ipfiltering

 

 

 

 

 

 

 

 

 

 

 

 

 

 

You also need to turn on ARP security and allow authorised clients to send

 

 

 

 

 

 

 

 

 

 

 

 

 

 

only unicast packets, by entering the following commands:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

enable dhcpsnooping arpsecurity

 

 

 

 

 

 

 

 

 

 

 

 

 

 

enable dhcpsnooping strictunicast

 

 

 

 

 

 

 

 

 

 

 

 

 

 

This enhancement also introduces the ability to add MACFF servers with

 

 

 

 

 

 

 

 

 

 

 

 

 

 

static MAC addresses, rather than relying on ARP to determine them based

 

 

 

 

 

 

 

 

 

 

 

 

 

 

on IP addresses. To do this, enter the command:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

add macff server mac=macaddr

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Version 291-10

C613-10488-00 REV G

Page 33
Image 33
Allied Telesis AT-WA1104G-10 manual CR00012822, Process counters, CR00016099, Macff