PowerConnect M6220/M6348/8024/8024F/M8024/M8024-k/
7024/7048/7024P/7048P/7024F/7048R/7048R-RA Release Notes
Internal Authentication Server
The PowerConnect Series switches support 802.1x authentication of network users from an internal authentication
database. IAS users are given access to network resources. IAS users are not given management access to the switch.
IAS users, once authenticated, can only pass frames across the switch.
The IAS database can be downloaded to the switch using the "ias-users" target in the copy command. The ias-users file
takes the form of a configuration script, as follows:
configure
aaa ias-user username client-1
password my-password1
exit
aaa ias-user username client-2
password aa5c6c251fe374d5e306c62496c3bcf6 encrypted
exit
aaa ias-user username 1f3ccb1157
password 1f3ccb1157
exit
IAS users may also be configured via the web interface.
DNS Client
The PowerConnect Series switches support name resolution via an embedded DNS client. When a DNS name is
specified, it is attempted to be resolved against the configured DNS servers immediately. The PowerConnect switches
will store the resolved IP address. If the IP address of the host resolved via DNS changes, the administrator will need to
update the configured IP address, either via DNS or manually.
If the switch is configured to obtain an address via DHCP, DNS server information received from the DHCP server is
used to populate the DNS client configuration.
Port Profiles (CLI Macros)
The PowerConnect series switches provides a convenient way to save and share common configurations through the
use of CLI macros. A CLI macro is a set of commands having a unique name. When a CLI macro is applied, the CLI
commands contained within the macro are executed and added to the Running Configuration File. When the macro is
applied to an interface, the existing interface configurations are not lost; the new commands are added to the interface
and are saved in the running configuration file.
A CLI macro may have keywords (variables) which are replaced by values provided when the macro is applied (up to 3
keywords per macro). Macros can be applied to specific interfaces, a range of interfaces, or the global configuration.
Administrators may add their own macros or utilize the built-in macros.
Administrators are cautioned to ensure that a sufficient number of exit commands are present in user defined macros to
return the prompt to the level at which it was entered when the macro is invoked.
The software includes 6 built-in macros:
profile-global - the global configuration used to enable RSTP and loop guard.
profile-desktop - the interface configuration for increased network security and reliability when connecting a
desktop device, such as a PC, to a switch port.
profile-phone - the interface configuration used when connecting a desktop device such as a PC with an IP
phone to a switch port.
profile-switch - the interface configuration used when connecting an access switch and a distribution switch
or between access switches.
profile-router - the interface configuration used when connecting the switch and a WAN router.
profile-wireless- the interface configuration used when connecting the switch and a wireless access point.
Built-in macros may not be deleted or altered by the operator.
System Firmware Version 4.1.0.6
Page 9
Drukuj stronę