30

Switching Enhancements

Release Note

Removing a Description from a Switch Port

You can now return the description of a switch port to its original blank value by entering the following command:

set switch port=port-numberdescription=

and providing no value for the description parameter.

Command Changes

The following table summarises the modified command:

CommandChange

set switch port

Changed description parameter

 

 

Securing a Single VLAN through Switch Filters

On AT-8824, Rapier 24i, AT-8724XL and AT-8624 switches only (not on 48-port switches), this enhancement enables you to use switch filters to secure only the current VLAN, instead of securing all VLANs on the switch. To turn on this feature, a new command disables “vlansecure” mode for filters (see “Configuring vlansecure” on page 31).

Without this enhancement (the default situation) a switch filter only allows a host to access the network through a particular port on the switch. For example, if you have a PC connected to port 15 in vlan2, and define the following filter, the PC can only communicate when it is connected to port 15:

add switch filter entry=0 dest=pc-mac-addressvlan=2 port=15 action=forward

With this enhancement, the above filter limits the host to accessing vlan2 through port 15, but does not prevent the host from accessing other VLANs through other ports in vlan2. For example, if the above filter exists and you move the PC to another port in vlan2, this enhancement prevents the PC from communicating with devices in vlan2 but allows it access to other VLANs on the switch. The following figure shows a PC that has been moved from port 15 to port 16 to illustrate the effect.

Software Version 2.8.1 C613-10477-00 REV B

Page 30
Image 30
Allied Telesis AT-9800, RAPIER I Removing a Description from a Switch Port, Securing a Single Vlan through Switch Filters