Enterasys SecureStack C2 C2K122-24 Instruction Manual

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 1 of 41
F0615-O
50 Minuteman Road
Andover, MA 01810 (USA)
Tel: [phone]
Enterasys® SecureStack™ C2
Firmware Version 5.01.06.0007
August 2008
INTRODUCTION:
This document provides specific information for version 5.01.06.0007 of firmware for the following SecureStack
C2 products:
C2G124-24
C2G124-48
C2G124-48P
C2H124-48
C2H124-48P
C2K122-24
C2G134-24P
C2G170-24
C3G124-24P
C3G124-24
C3G124-48
C3G124-48P
Enterasys Networks recommends that you thoroughly review this release note prior to installing or
upgrading this product. There may be a more up-to-date version of this Release Note.
Please go to the Enterasys web site to ensure that this is the latest revision of the Release Note
(http://www.enterasys.com/support/).
FIRMWARE SPECIFICATION:
Status
Version No.
Type
Release Date
Current Version
5.01.06.0007
Maintenance Release
August 2008
Previous Version
5.01.06.0006
Maintenance Release
August 2008
Previous Version
5.01.05.0004
Maintenance Release
July 2008
Previous Version
5.01.04.0001
Maintenance Release
June 2008
Previous Version
5.01.03.0007
Maintenance Release
May 2008
Previous Version
5.01.03.0003
Maintenance Release
May 2008
Previous Version
5.01.02.0007
Maintenance Release
March 2008
Previous Version
5.01.01.0051
Maintenance Release
March 2008
Previous Version
5.01.01.0049
Maintenance Release
February 2008
Previous Version
5.01.01.0047
Maintenance Release
January 2008
Previous Version
5.01.01.0040
Maintenance Release
December 2007
Previous Version
5.01.01.0039
Feature Release
December 2007
Previous Version
5.00.75
Customer Release
August 2007
Previous Version
5.00.59
Customer Release
March 2007
Previous Version
5.00.32
Customer Release
January 2007
Previous Version
5.00.28
Customer Release
December 2006
Previous Version
4.00.31
Customer Release
August 2006
Previous Version
4.00.24
Customer Release
July 2006
Previous Version
3.03.33
Customer Release
April 2006

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 2 of 41
F0615-O
Status
Version No.
Type
Release Date
Previous Version
3.03.27
Customer Release
March 2006
Previous Version
3.02.32
Customer Release
February 2006
Previous Version
3.02.30
Customer Release
January 2006
Previous Version
3.01.94
Customer Release
January 2006
Previous Version
3.01.91
Customer Release
November 2005
Previous Version
3.01.90
Customer Release
November 2005
Previous Version
3.01.80
Customer Release
October 2005
Previous Version
3.01.71
Customer Release
August 2005
Previous Version
3.01.52
Customer Release
July 2005
Previous Version
3.01.45
Customer Release
June 2005
Previous Version
3.01.20
Customer Release
June 2005
Previous Version
3.00.52
Customer Release
May 2005
Previous Version
3.00.50
Customer Release
May 2005
Previous Version
2.01.37
Customer Release
April 2005
Previous Version
2.01.26
Customer Release
March 2005
Previous Version
2.01.24
Customer Release
March 2005
Previous Version
2.01.22
Customer Release
March 2005
Previous Version
2.01.20
Customer Release
February 2005
Previous Version
2.00.48
Customer Release
December 2004
Previous Version
1.01.12
Customer Release
November 2004
Previous Version
1.01.11
Customer Release
October 2004
Previous Version
1.00.20
Customer Release
July 2004
BOOTPROM COMPATIBILITY:
This version of firmware is compatible with all boot code versions.
NETWORK MANAGEMENT SOFTWARE SUPPORT:
NMS Platform
Version No.
NetSight Automated Security Manager
3.1.1
NetSight Console
3.1.1
NetSight Inventory Manager
3.1.1
NetSight Policy Manager
3.1.1
NetSight NAC Manager
3.1.1
If you install this image, you may not have control of all the latest features of this product until the next version(s)
of network management software. Please review the software release notes for your specific network
management platform for details.

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 3 of 41
F0615-O
SUPPORTED FUNCTIONALITY:
Existing Product Features
20 Gbps Full Duplex (40 Gbps bidirectional) Stacking
Interconnect
Support for mixing SecureStack C3 with a
SecureStack C2 stack
802.1D
MGBIC support: MGBIC-LC01, MGBIC-LC03,
MGBIC-LC09, MGBIC-02, MGBIC-08, MGBIC-MT01
802.1Q –VLAN tagging and identification
16K MAC Address Table
802.1p –Traffic Management / Mapping to 6 queues
Selectable MAC hashing algorithms
802.3x Flow Control
Auto Negotiation
802.3ad –Dynamic and Static Creation for Link
Aggregation (6 LAGs, 8 ports per LAG)
8 Priority Queues Per port
802.1s –Multiple Spanning Tree Protocol (up to 4
instances)
Queuing Control Strict & Weighted Round Robin
802.1w –Rapid Spanning Tree
Jumbo Frames (up to 9K)
Spanning Tree Backup Root
Ability to set port advertise ability via CLI
Legacy Path Cost
Multi-method Authentication
STP Pass Thru
User + IP Phone Authentication
SpanGuard
802.1X Authentication
Loop Protect
Multiple RFC3580 users per Gigabit port (up to 6)
RFC3580 VLAN Authentication using MAC
Authentication
CoS Inbound Rate Limiting in mixed C2/C3 stacks
LLDP
L2 Policy rules in mixed C2/C3 stacks
Link Flap Detection
802.1X IP Phone Authentication
Per Port Broadcast Suppression
Non Strict 802.1X default RFC 3580 With Auth
Failure
Port Mirroring (up to 8 ports anywhere in the stack)
RADIUS Client
Private Port (Private VLAN)
Turn off RADIUS Authentication (RADIUS Realm)
Cabletron Discovery Protocol (CDP)
Session-Timeout and Termination-Action RADIUS
Attributes Support
Cisco Discovery Protocol (CDP) v1/2
MAC Authentication / MAC Authentication Masking
Cisco IP Phone Discovery
MAC Authentication retained after age out
GVRP
RADIUS Accounting for MAC Authentication
IGMP v1/v2/v3 Snooping
Web Authentication (PWA)
Syslog
Web Redirect –PWA+ and URL redirection
CLI Management
EAP Pass Thru
Telnet Support
Dynamic and Static MAC Locking
SSH Support
New Mac Trap
IPv4/IPv6 Dual Host Management Support
Dynamic VLAN Assignment (RFC 3580)
WebView
Dynamic Egress
SSL Interface to WebView
RMON (4 groups)
Text-based Configuration Upload/Download
RMON View in the CLI With Persistent Sets
Discard VLAN Tagged Frames
RMON Packet Capture/Filtering Sampling
Policy Manager Support
SNMPv1, SNMPv2c, SNMPv3
Enterasys Policy –Single User
Simple Network Time Protocol (SNTP)
Priority Classification L2-L4
Alias Port Naming

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 4 of 41
F0615-O
Existing Product Features
VLAN Classification
Ability to Set Time and Date via the MIB
VLAN-to-Policy Mapping on a per Port Basis
Configurable Login Banner
ToS Rewrite
Node/Alias Table
COS MIB –inbound rate limiting
Clear config/clear config all will retain host IP
IP Routing
DHCP Server
Routing Protocols: RIP, OSPF, VRRP, DVMRP, IRDP,
PIM-SM
ACLs
Multiple IP helper addresses per Interface (up to 6)
SMON MIB support for Port Mirroring
CoS MIB based Flood Control (broadcast, multicast,
and unknown unicast)
CPU/Memory utilization monitoring via SNMP
INSTALLATION AND CONFIGURATION NOTES:
Please refer to http://www.enterasys.com/download/#switches for the latest firmware updates to the SecureStack
C2. In general, the SecureStack C2 product will be shipped to you pre-configured with this version of firmware. If
you would like to upgrade an existing SecureStack C2 product, please follow the TFTP download instructions that
are included in your Configuration Guide.
TFTP download instructions are also available on the Enterasys support web site at:
http://knowledgebase.enterasys.com/esupport/esupport.asp?ID=ent19703.
Soft copies of the Configuration Guide are available at no cost to the user on the Enterasys Networks web site,
http://www.enterasys.com/support/manuals. To order hard copies of the Configuration Guide, contact your
Enterasys representative.
Please refer to http://www.enterasys.com/download/download.cgi?lib=c2 and choose the ―archive‖ link to view
information on changes previous to the release information listed in this document.
The SecureStack C2 family of stackable switches is managed by a single IP address for a stack of up to 8
switches.
In order to download the new software to a stack of C2 switches, simply follow the instructions to upgrade a
switch with new software and then the system will automatically download the new software to all the members in
the stack controlled by that stack manager.
UPGRADING FROM PREVIOUS VERSIONS
Additional steps are required when upgrading from 1.xx.xx software to 2.xx.xx or higher software versions. These
steps will not be required in subsequent releases.
Upgrading from 1.xx.xx to 2.xx.xx
To upgrade from a 1.xx.xx version to a 2.xx.xx version follow the steps below:
1. Save the config onto the C2 stack.
2. Download the new image onto the stack without resetting the unit.
3. Load the locally stored configuration file back onto the switch/stack use the command ―configure
configs/<filename>‖.
4. When prompted that this will clear the configuration and reset the stack, type ―y‖ to continue.
The stack will reset, the current config will be cleared, the new image will start up, and the stack will automatically
program itself with the previous configuration.
If the CLI is monitored during this process, the user will see that all Diffserv commands will display error
messages stating the command is unknown. This message should be ignored and is for information only.

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 5 of 41
F0615-O
Upgrading from the 2.00.48 release to the 2.01.20 release requires some additional steps for users who utilize
GVRP. When upgrading to the 2.01.20 image, the user should only reconfigure GVRP on inter-switch links (ISLs).
GVRP was enabled by default in the 2.00.48 image on all edge ports; only non-default commands are displayed
in the config, so only the set GVRP disable commands would be listed in a config file created in a 2.00.48 image.
In the 2.01.20 image, the situation is the opposite. Any ―GVRP disable‖ commands are ignored. For any ports on
which the user wants GVRP ―enabled‖, the user must log back in and reconfigure those ports to ―enable‖. Any
ports which the user wants to be ―disabled‖ will require no action.
Configuration files that were created in the 1.xx.xx track can be applied to a switch/stack using the 2.xx.xx track,
however the steps defined above for configuring GVRP must be observed.
Upgrading from 2.xx.xx to 3.xx.xx
Release 3 contains an improved method of stack communications which resolves some stack related issues seen
in unusual circumstances with Release 1 and Release 2 code. This new communication is not compatible with the
methods used in Release 1 and Release 2 code. Therefore, when upgrading the stack to Release 3, it is
important that you ensure the new code has been successfully downloaded to all members of the stack before
issuing a stack reset (which will cause the stack to begin using the just downloaded code). If all members are not
successfully updated before issuing a reset, units not updated will need to be removed from the stack and
upgraded individually.
To upgrade to Release 3, it is highly recommended that you first upgrade to the latest Release 2 code (02.01.37)
as detailed above. This release contains additional safeguards that check that proper code versions exist on all
members of a stack.
To upgrade from a 2.xx.xx version to a 3.xx.xx version follow the steps below:
1. At switch prompt, execute the ―dir‖ command. This will display the file names of the images existing on
device.
2. If running version 2.01.37 and a backup image exists, use the ―delete <file name>‖ command to remove
the backup image.
Use the ―copy tftp://<tftp server IP>/<path>/<image name> system:image‖ command to download the new
Release 3 image. This image is downloaded, sent to all stack members, and marked as a ―backup‖ code
image. If this download to any of the stack members is unsuccessful, an error message should be
generated.
3. Issue the ―show version‖ command to verify that the new Release 3 code image exists on all stack
members as the ―backup‖ image. If not, you should manually push this code to any stack member that is
not properly updated using the ―set switch copy-fw‖ command.
4. Once all stack members contain the new software image, use the ―set boot system <image name>‖
command to set the newly downloaded image as the ―active‖ image.
5. Stack will reboot using the updated code.
If you have a unit that is running Release 2 or older software, and you want to use the unit in a stack running
Release 3 software, you must boot the unit as a standalone unit and update its code to Release 3 before cabling
it into the existing stack.
Router Capacities
The following table defines the router capacities:
Feature
Capacity
ARP Dynamic
2024
ARP Static
512
Route Table
2500
OSPF Areas
4

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 6 of 41
F0615-O
Feature
Capacity
Total OSPF LSA Type
2500
OSPF LSA Type 1 –Router Links
No restriction can equal 2500
OSPF LSA Type 2 –Networks Links
No restriction can equal 2500
OSPF LSA Type 3 –Summary Networks
No restriction can equal 2500
OSPF LSA Type 4 –Summary ASBRs
No restriction can equal 2500
OSPF LSA Type 5 –AS External Links
No restriction can equal 2500
OSPF LSA Type 7 –NSSA External Links
No restriction can equal 2500
OSPF LSA Type 9 –Opaque Subnet-only
Not Supported
OSPF LSA Type 10 –Opaque Area
Not Supported
OSPF LSA Type 11 –Opaque AS
Not Supported
OSPF ECMP paths
4
Static routes
64
RIP routes
2500
IP Interfaces
24
Secondary Interfaces
31
VRRP Interfaces
20
IP Helper Address
6 per interface
Access Rules (inbound only)
100
Access Rules –Per ACL
9
IGMP Groups
256
DVMRP Routes
256
FIRMWARE CHANGES AND ENHANCEMENTS:
Changes and Enhancements in 5.01.06.0007
11052 Resolved an issue introduced in release 5.01.06.0006 that affected reassembly of IP fragments directed at a routed
interface or the host address of the switch.
Changes and Enhancements in 5.01.06.0006
10690 Corrected an issue where the flowcontrol pause packets were transmitted too early leading to packet loss.
10704 Corrected an issue whereby running macauth and dot1x simultaneously would cause port policies to be removed.
10809 Corrected a CLI issue where restoring a config file containing an extra space before the end of line generated errors.
10816 Corrected an issue where ―clear port lacp port" did not restore default port LACP settings.
10848 Changed the MST configuration name default string from the bridge MAC address to a more generic name ―default".
10852 Corrected a potential memory leak associated with OSPF which prevented an interface from reaching full adjacency.
10874 Corrected an issue when under certain circumstances the SNTP client stopped processing requests.
10906 Corrected an issue that could prevent policy configurations from being loaded by the switch.
10972 Corrected an issue which could result in the loss of SNMP management.
Changes and Enhancements in 5.01.05.0004
10061 Added a CLI prompt message to "set port vlan‖ informing users that setting VLAN membership for dynamic VLANs is
not supported.
10542 Corrected an issue where clients performing 802.1X authentication on ports configured for multiauth
failed to obtain DHCP IP addresses after a device reset.

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 7 of 41
F0615-O
Changes and Enhancements in 5.01.05.0004
10061 Added a CLI prompt message to "set port vlan‖ informing users that setting VLAN membership for dynamic VLANs is
not supported.
10201 Corrected an issue where "set switch movemanagement" caused the policy application to fail.
10440 Corrected an issue where "[no] ip routing" command was not linked to the MIB-2 IpForwarding object.
10521 Resolved an issue which prevented DHCP clients from obtaining IP addresses from the DHCP server.
10700 Corrected an issue which prevented the "host ip" value to be properly restored from a saved configuration file.
10056 Enhanced 802.1x authentication whereby the switch continues to send periodic Unicast Request Identity frames after
the first client authenticates. Previously the switch stopped sending EAP frames after the first successful authentication.
10356 Corrected an issue where enabling port mirroring would stop traffic flow across ports that were not members of the
mirror group.
10712 / 10676 Corrected an issue where default policies were removed thus preventing 802.1x clients from authenticating.
10597 Resolved an issue in multiuserauth mode whereby an inactive user was dropped from the egress vlan list and could
no longer transmit packets out the egress vlan.
10655 Resolved an issue where client authentication failed when the management ip address was not configured.
Changes and Enhancements in 5.01.04.0001
10140 Corrected an issue with the LLDP MIB implementation that could result in the loss of SNMP
management or high CPU utilization.
10396 Corrected an issue whereby after an initial invalid RADIUS request fails, subsequent valid requests
were rejected for the same user due to caching of the initial RADIUS state attribute.
10551 Corrected an issue with displaying the correct LACP partner key when doing a ―show port lacp port
<port string> status summary‖ command.
10443 Corrected an issue with the ―clear radius server‖ command that could result in a reset.
10627/10697/10250 Corrected an issue whereby disabling dot1x on an authenticated port could affect SNMP
management or cause a reset.
10314 Corrected an issue where ports could fail to 802.1x authenticate valid users if mac locking was
enabled.
10324 Corrected an erroneous interface message timeout reset (NIM timeout event) caused during
management changes of complex interface configurations.
10554 Corrected an issue causing an SSH login to appear to hang in configurations where the motd banner
and length are set.
10501 Corrected an issue where ―show mac type self command‖ would fail to show local mac addresses.
10498 Corrected a display issue with the ―show config all spantree‖ command caused by a page break
truncating the output.
10535 Added the ability to set the PVID on a port with a VLAN learned via GVRP. A new informational
message ―INFO: PVID has been set. VLAN membership cannot be set on dynamic VLAN‖ alerts the
administrator that PVID is settable on a dynamic VLAN but VLAN membership is not configurable.
10227 Corrected issue with RADIUS server redundancy which could prevent users from authenticating via the
secondary server.
10486 Corrected an issue where ACL entries restored using a configuration file could fail to be applied.

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 8 of 41
F0615-O
Changes and Enhancements in 5.01.03.0007
Removed a change introduced in 5.01.03.0003 that was intended to correct an issue with persistence of port
advertised capability on combo ports. This change introduced an auto negotiation problem on Combo POE
ports where for 100Mb clients may fail to link on these ports.
Changes and Enhancements in 5.01.03.0003
Corrected an issue in the Policy MIB where the etsysPortPolicyProfileSummaryTable
(1.3.6.1.4.1.5624.1.2.6.3.3) failed to return a value for etsysPortPolicyProfileSummaryOperID.
Corrected issue that prevented multiple 802.1x Policy authentications on a single port.
Corrected an issue where receiving constant pauses frames on a port could cause Spanning Tree instability on
the switch.
Corrected a potential reset associated with one form of interface message timeout ―NIM: Timeout event‖.
Corrected an issue with GVRP that could cause a failure to properly configure egress on learned VLANs.
Corrected an issue where the port inlinepower admin state was not persistent.
Corrected an issue in the readability of output of the ―show config vlan‖ command.
Corrected an issue where ASM is unable to apply actions to ports.
Corrected an issue concerning the ―set ip protocol‖ command. If the static IP address of a switch is stored in a
configuration file, then the IP is changed to be acquired using DHCP, the original IP can now be restored using
the saved configuration file.
Corrected an issue with persistence of port advertised capability on combo ports.
Corrected an issue where high rates of multicast traffic caused pause frames to be generated on the upper
ports (25-48) of 48 port devices.
Corrected an issue with the RADIUS reauthentication timer. During an unrecognized overflow condition which
occurred approximately once every 49 days, the switch would constantly attempt to authenticate all RADIUS
supplicants. This would last for a period equal to the authentication time.
Corrected an issue in Policy that could prevent the application of a profile after a system reboot. Previously a
hardware error would be given indicating a failure to set a profile on a port.
Changes and Enhancements in 5.01.02.0007
Corrected an issue where permanent licenses were incorrectly detected as having expired.
Corrected an issue with the ―show mac port‖ command displaying output from multiple ports.
Corrected an issue where SSH IdleTimeOut was not initialized, causing a failure to timeout SSH sessions.
Corrected a potential memory corruption and reset associated with the MAC authentication process.
Corrected a potential NIM timeout event reset associated with deleting interfaces with large numbers of VLANs
(>1000).
Corrected an issue where Dynamic Egress failed if a rule to discard tagged packets was applied to the port.
Corrected a display issue where clearing default role on a port with Policy Manager, prevented the display of
user roles.
Corrected an issue in DVMRP where if a session is stopped and a new channel is selected to the same
multicast server, the stream associated with the new group was dropped.
Corrected an issue where IfSpeed and IfHighSpeed MIB objects incorrectly report port speed on 10Gig
interfaces.
Corrected an issue in the MAU-MIB ability to set dot3MauType to dot3MauType1000BaseTFD.

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 9 of 41
F0615-O
Changes and Enhancements in 5.01.02.0007
Corrected an issue that could result in the inability to apply previously acceptable policies to ports after a
system reboot.
Corrected an issue that prevented proper operation of IGMP Snooping on ports that had authenticated to a
new VLAN.
Enabled the ability to syslog messages greater than 124 Characters in length. Previously some messages may
have been truncated.
Changes and Enhancements in 5.01.01.0051
Corrected an issue in the Enterasys CoS MIB that could prevent new CoS MIB settings from being applied and
enforced from Policy Manager. This issue was originally introduced in the 5.01.01.0047 firmware.
Changes and Enhancements in 5.01.01.0049
Corrected an issue with Bridge MIB that inverted the reading and setting of VLAN tagged egress. Untagged
egress would read as tagged. Tagged VLAN egress would read as untagged. Setting tagged egress would
result in untagged egress. Setting untagged egress would result in tagged egress. This issue was introduced in
the previous release (5.01.01.0047)
Corrected an issue in the display of SNMP configuration that could cause a system reset when the ―show
configuration‖ command was issued. This issue was introduced in the previous release (5.01.01.0047)
Changes and Enhancements in 5.01.01.0047
Added Support for CoS MIB based flood control of broadcast, multicast and unknown unicast traffic. (See
Appendix A of the Release Notes for configuration information).
Added SMON MIB support for management of Port Mirroring. (See Appendix A of the Release Notes for
configuration information).
Added support for monitoring resource utilization via the etsysResourceUtilizationMIB.
Corrected a CLI issue that prevented insertion of text without erasing the remainder of the command line.
Corrected a reset issue with the ―show config outfile command‖.
Corrected an issue that prevented the clearing of the admin login using the ―clear system login‖ command.
Corrected a display issue in the ―show system utilization process‖ command.
Corrected an issue with counting RMON Statistics for 1024-1518 octet packets.
Corrected an issue with forwarding static multicast addresses after a reset.
Modified the Span Guard port lockout state to disable the port if the spanguardtimeout is set to zero. This will
prevent any control traffic on this port from being processed when locked.
Moved the informational message ―ewaNewConnection EmWeb socket accept() failed:
S_errno_EWOULDBLOCK‖ to the informational level (7) for Syslog.
Corrected a potential loss of Spanning Tree configuration when upgrading from earlier images.
Corrected a CLI display issue with the ―show inlinepower‖ command when the command is executed over an
SSH session.
Added CLI support for the port string format of type ge.1-2.1.
Corrected an issue migrating policy TCI rule configurations when upgrading system firmware from earlier
images.
Corrected an issue that caused loss of SNMP configuration when restoring a configuration file.
Jumbo packets are now counted as errors when jumbo packets are disabled on the switch.

CUSTOMER RELEASE NOTES
08/13/2008 P/N: 9038155-52 Subject to Change Without Notice Page: 10 of 41
F0615-O
Changes and Enhancements in 5.01.01.0047
Corrected an issue that prevented Syslog messages generated from routing protocols.
Modified the SNTP poll interval to be set as a power of 2, to conform to RFC1305.
Previous images supported only a single permit or deny any rule per ACL. The SecureStack-C2 will now
support one each for ICMP, UDP, TCP, and IP.
Improved the resiliency of the host process by ensuring control traffic (e.g. BPDUs) gets higher priority during
heavy traffic loads.
Corrected an issue were RIPv2 routes with a 32 bit mask were not accepted.
Corrected an issue were Policy rule counts could potentially be updated incorrectly when a rule was removed.
This could have prevented new rules from being added.
Changes and Enhancements in 5.01.01.0040
Corrected a shared-memory timing issue that in rare circumstances could affect management access to the
switches after a reset. The new code ensures that shared memory is accessed in an orderly fashion by multiple
processes during startup.
Changes and Enhancements in 5.01.01.0039
Implemented the new Enterasys standard version numbering system on the SecureStack C2.
Changed the default logging severity level to 6. The result of this will be that more informational messages may
be seen in Syslog and CLI than in previous images. However, this does not affect the operation of the switch.
Added support for LACP short timers.
When a fiber port is disabled, both the transmit and receive links of the port will now be disabled.
Multi-word VLAN name assignments are supported and persistent when encapsulated in quotes.
Users can ping the host IP address from any port in a mixed stack as long as the port has the proper VLAN
egress configuration.
Resolved an issue with policy where in certain configurations port policy assignments weren‘t being removed
properly.
Fix an issue with policy based inbound rate limiting which was preventing rate limits from being enforced.
Support has been added for RFC 3580, VLAN authorization in conjunction with MAC Authentication services.
With a basic PWA configuration on the stack, users can now access the PWA login page by simply entering the
PWA server IP address instead of being required to enter the entire URL.
Modifying the MACLock Firstarrival value will limit the number of users allowed network access on the port.
Changes to this value will be enforced on the number of current users as well as new users.
Corrected the reporting of physical port and LAG port speeds using the ifSpeed MIB..
When executing the command ―show config‖, the output will encrypt the passwords of SNMP users.
Resolved an issue where MAC Authenticated devices that were continuously sending data were required to re-
authenticate every 10 minutes or so even though re-authentications has been disabled.
Multi-word SNMPv3 group names can now be configured and deleted as long as the group names are
encapsulated in quotes.
The CLI output of the ―show cdp‖, ―show port egress‖, and ―show mac port <port>‖ commands will now be
managed properly by the terminal display value set using the ―set length‖ command.
Removed an additional offset seen in the display output of the SNMP configuration when executing the CLI
command ―show config‖ or ―show config snmp‖.
Modifying the lacptimeout value will no longer require globally disabling and re-enabling LACP to be enforced.
LAG ports which are spread across multiple units in a stack have been made more resilient in the event of a
failure of one of the stack members.
Corrected an issue caused by an incorrect port index being used which presented itself as the Syslog message
―Invalid hpc_index of 0‖.
Added support for the dot1dStpPortPathCost mib.