Specifications

Features in 291-08 98
Version 291-18
C613-10488-00 REV Q
CR00016662
CR00016891
CR00017335
CR00017937
- This software release supports the new x900-48FS switch. For an overview
of the switch, see “Support for the new x900-48FS switch (CR00016662)”
on page 167.
--------Y--
CR00016913 PPP - This enhancement enables the PPPoE client to establish a session promptly
after a restart or power cycle. This is done by sending a PPPoE Active
Discovery Terminate (PADT) frame in response to a frame received with an
unknown PPPoE session ID.
YYYYYY- - YYY
CR00017197 SSH, User,
RADIUS
- SSH sessions to the router or switch can now be authenticated via RADIUS.
The router or switch attempts to authenticate an SSH user via RADIUS if the
user to be authenticated is not configured in the local user database and
the router or switch has RADIUS configured.
YYYYYYYYYYY
CR00017395 Firewall - This enhancement enables the firewall to establish accurate MSS
(Maximum Segment Size) values for TCP sessions without using the MTU
discovery process. MTU discovery depends on ICMP error packets, so does
not work in networks that do not forward ICMP error packets.
To enable this feature, use the command:
enable firewall policy=name adjusttcpmss
The adjusttcpmss parameter enables the firewall to adjust the MSS value
stored inside incoming TCP SYN packets, to reflect the lower of the two
MTU values on the ingress and egress interfaces. Normally, for example, if
a TCP SYN packet arrives from an interface with an MTU of 1500 and leaves
on an interface with an MTU of 1000, the MSS inside the SYN packet will
remain at 1460. When this feature is enabled, the MSS will be adjusted to
960 because the firewall knows that the egress interface has a smaller
MTU. Note that the firewall does not change the original MSS value if it is
already lower than the values of the ingress and egress interfaces.
To disable this feature, use the command:
disable firewall policy=name adjusttcpmss
This feature is disabled by default.
YYYYYY- - - - Y
CR Module Level Description
AR400 AR7x5 AR7x0S Rapier i Rapier w AT-8800 AT-8600 AT-8700XL x900-48 AT- 9900 AT-9800