Specifications

54 ExtremeWare 7.0 Release Notes
Clarifications, Known Behaviors, and Resolved Issues
In a “real-world” IPX environment, clients and servers generally do not lose communication with the
directly attached switch for the FDB entries to age out (9338).
IPX and Bi-Directional Rate Shaping
Bi-directional Rate Shaping is not supported in conjunction with IPX traffic (9226, 9153).
Security and Access Policies
Simulated Mode Creates ACL
When you enable the CPU-DoS-Protect feature in simulated mode, an ACL is still created when a DoS
attack is simulated and traffic is blocked (PD2-129163414).
Network Login Design Guidelines and Limitations
Following are Network Login design guidelines and limitations (PD2-130051101):
• All client MACs on an authenticated port will have network access. You cannot authenticate on a
per-MAC basis, only per-port.
• All client MACs on an unauthenticated port will see broadcast and multicast traffic.
• Network Login must be disabled on a port before that port can be deleted from a VLAN.
• Campus Mode login will not show the original VLAN to which the port was connected to once the
port transition to destination VLAN takes place.
• A Network Login VLAN port should be an untagged Ethernet port and should not be a part of
following protocols:
— ESRP
— STP
— VLAN aggregation
— Load-sharing
• Enabling any of these protocols on Network Login ports will take higher precedence. This may result
in a port transitioning from a blocked state to a forwarding state.
• Network Login is not supported for T1, ATM, PoS and MPLS TLS interfaces.
• MSM-failover will clear Network Login state information.
Configure RADIUS with Existing VLAN for Network Login
If you configure your RADIUS server with a VLAN that does not exist on the switch, you cannot log in
with Network Login. You must either create the VLAN on the switch or correct the RADIUS
configuration. After you correct the configuration, clear the session associated with the failed login
before you log in again (PD2-101984392).
RADIUS and the BlackDiamond
When RADIUS authentication is configured on a BlackDiamond switch, upon reboot, you will see the
following message indicating that the system is initializing before authentication messages will be
transmitted to the configured RADIUS server(s) (7046):
“Warning: Radius is going to take one minute to initialize.”