Allied Telesis Patch 1 AT-S63 Podręcznik Użytkownika Pobierz pdf (Strona 10)

AT-S63 Version 4.0.0 Patch 2 Software Release Notes

PN 613-001166 Rev A 10 Allied Telesis, Inc.



Supplicant and VLAN Associations - The 802.1x port-based network access control feature

could move a port to only one VLAN after receiving a VLAN association from a RADIUS

server, and ignored future VLAN associations until a port was linked down and up again.

 PEAP and 802.1x Port-based Network Access - 802.1x Port-based Network Access now

supports PEAP.

Version 4.0.0 Operational Notes

 Stacking and IGMP snooping. IGMP snooping on a stack requires that a multicaster be on a

master switch.

 Web server. The default setting for the web server on the switch has been changed from

enabled to disabled. To manage the switch with a web browser, enable the server with the

ENABLE HTTP SERVER command.

 Classifier criteria. Access control lists and Quality of Service policies cannot filter on the

following combinations of classifier criteria:

— VLAN ID and source or destination IP address.

— Protocol and source or destination IP address

This rule applies whether the criteria are in the same classifier or in different classifiers that

are applied to the same access control list or Quality of Service policy.

 Protocol (Layer 2) IP criterion - Do not use the IP value in the Protocol (Layer 2) variable of a

classifier to filter IP traffic. The results may be unpredictable. Instead, use the IP source or

the IP destination criterion. The following values can be used to filter large IP address ranges:

 ID numbers of ACLs. The ID numbers of permit ACLs have to be less than the ID numbers of

deny ACLs. Otherwise, the results might be unpredictable on ports that have both permit and

deny ACLs. To avoid this issue, start numbering your permit ACLs at ID number 1 and your

deny ACLs at ID number 100.

 ID numbers of QoS policies. If you assign two QoS policies to the same port and one of the

policies is filtering on a subset of the IP addresses of the other policy, the ID number of the

subset policy has to be lower than the ID number of the other policy. Otherwise, the results

might be unpredictable.

Value Range

128.0.0.0/1 128.0.0.0 to 255.255.255.255

64.0.0.0/2 64.0.0.0 to 126.255.255.255

32.0.0.0/3 32.0.0.0 to 63.255.255.255

16.0.0.0/4 16.0.0.0 to 31.255.255.255

8.0.0.0/5 8.0.0.0 to 15.255.255.255

4.0.0.0/6 4.0.0.0 to 7.255.255.255

2.0.0.0/7 2.0.0.0 to 3.255.255.255

1.0.0.0/8 0 to 1.255.255.255

1 2 ... 5 6 7 8 9 10 11 12 13 14 15 ... 18 19

Brak uwag

Allied Telesis Patch 1 AT-S63 Podręcznik Użytkownika Strona 10