User guide

September 2009
Page 32 of 79 OmniSwitch 6400/6850/6855/9000/9000E—Release 6.4.2.R01
• Average utilization level over the last minute (percentage)
• Average utilization level over the last hour (percentage)
• Maximum utilization level over the last hour (percentage)
• Threshold level
Additionally, Health Monitoring provides the capacity to specify thresholds for the resource utilization
levels it monitors, and generates traps based on the specified threshold criteria.
HTTP/HTTPS Port Configuration
The default HTTP port and the default Secure HTTP (HTTPS) port can be configured for the
embedded Web server in the switch.
IGMP Multicast Group Configuration Limit
By default there is no limit on the number of IGMP groups that can be learned on a port/VLAN
instance. However, a user can now configure a maximum group limit to limit the number of IGMP
groups that can be learned. The maximum group limit can be applied globally, per VLAN, or per port.
Port settings override VLAN settings, which override global settings. Once the limit is reached, the
user can configure the switch to drop the incoming membership request, or replace an existing
membership with the incoming membership request. This feature is available on IPv4 and IPv6/MLD.
Interface Admin Down Warning
The user can enable/disable the display of a confirmation prompt before an interface is administratively
disabled to prevent a user from inadvertantly issuing an “admin down” command for an interface(s).
This feature is disabled by default.
IP Multicast Flood Unknown
When this feature is enabled, multicast packets are flooded on the VLAN until the multicast group
membership table is updated, they are then forwarded based on the multicast group membership table.
IPMVLAN Multicast Group Overlapping
Different ISPs may use the same multicast group addresses. To remedy this, a user can configure the
same multicast address on different IP Multicast VLANs (IPMVLAN). A common use case will be a
network where each receiver port is only configured for one IPMVLAN. A user can define the
mapping between an IPMVLAN and a customer VLAN ID (c-tag) to be used in the c-tag translation
rule.
IPsec Support for IPv6
IPsec is a suite of protocols for securing IPv6 communications by authenticating and/or encrypting
each IPv6 packet in a data stream. IPsec provides security services such as encrypting traffic, integrity
validation, authentication, and anti-replay.
The OmniSwitch implementation of IPsec supports the transport mode of operation and manually
configured SAs only. In transport mode, the data transferred (payload) in the IPv6 packet is encrypted
and/or authenticated and only the payloads that are originated and destined between two end-points are
processed with IPsec.
Note: This is a licensed feature and requires that a license file be installed on the switch. Refer to the
current price list for ordering information.