M4250 Datasheet

Advanced Static Routing functions for administrative
traffic control
• Static Reject Routes are configurable to control the traffic destined to a particular network so that it is not
forwarded through the router
• SuchtrafcisdiscardedandtheICMPdestinationunreachablemessageissentbacktothesource
• Static reject routes can be typically used to prevent routing loops
• Default routes are configurable as a preference option
In order to facilitate VLAN creation and VLAN routing
using Web GUI, a VLAN Routing Wizard offers
following automated capabilities:
• CreateaVLANandgenerateauniquenameforVLAN
• Add selected ports to the newly created VLAN and remove selected ports from the default VLAN
• CreateaLAG,addselectedportstoaLAG,thenaddthisLAGtothenewlycreatedVLAN
• Enable tagging on selected ports if the port is in another VLAN
• Disable tagging if a selected port does not exist in another VLAN
• Exclude ports that are not selected from the VLAN
• Enable routing on the VLAN using the IP address and subnet mask entered as logical routing interface
DHCPRelayAgentsrelayDHCPrequestsfromany
routedinterface,includingVLANs,whenDHCPserver
doesn’t reside on the same IP network or subnet
• TheagentrelaysrequestsfromasubnetwithoutaDHCPservertoaserverornext-hopagentonanother
subnet
• UnlikearouterwhichswitchesIPpacketstransparently,aDHCPrelayagentprocessesDHCPmessagesand
generatesnewDHCPmessages
• SupportsDHCPRelayOption82circuit-idandremote-idforVLANs
• MultipleHelperIPsfeatureallowstocongureaDHCPrelayagentwithmultipleDHCPserveraddressesper
routing interface and to use different server addresses for client packets arriving on different interfaces on the
relay agent server addresses for client packets arriving on different interfaces on the relay agent
RouterDiscoveryProtocolisanextensiontoICMP
and enables hosts to dynamically discover the IP
address of routers on local IP subnets
• BasedonRFC1256forIPv4
• Routers periodically send router discovery messages to announce their presence to locally-attached
hosts
• The router discovery message advertises one or more IP addresses on the router that hosts can use as their
default gateway
• Hosts can send a router solicitation message asking any router that receives the message to immediately
send a router advertisement
• Router discovery eliminates the need to manually configure a default gateway on each host
• It enables hosts to switch to a different default gateway if one goes down
Loopback interfaces are available as dynamic, stable IP addresses for other devices on the network, and for routing protocols
SupportofRoutingInformationProtocol(RIPv2)as
adistancevectorprotocolspeciedinRFC2453for
IPv4
• Each route is characterized by the number of gateways, or hops, a packet must traverse to reach its intended
destination
• Categorizedasaninteriorgatewayprotocol,RIPoperateswithinthescopeofanautonomoussystem
IPMultinettingallowstoconguremorethanoneIPaddressonanetworkinterface(othervendorsmaycallitIPAliasingorSecondaryAddressing)
ICMPThrottlingfeatureaddscongurationoptions
forthetransmissionofvarioustypesofICMPmes-
sages
• ICMPRedirectscanbeusedbyamalicioussendertoperformman-in-the-middleattacks,ordivert
packetstoamaliciousmonitor,ortocauseDenialofService(DoS)byblackholingthepackets
• ICMPEchoRequestsandothermessagescanbeusedtoprobeforvulnerablehostsorrouters
• RatelimitingICMPerrormessagesprotectsthelocalrouterandthenetworkfromsendingalargenumberof
messagesthattakeCPUandbandwidth
ThePolicyBasedRoutingfeature(PBR)overrides
routing decision taken by the router and makes the
packet to follow different actions based on a policy
• It provides freedom over packet routing/forwarding instead of leaving the control to standard routing proto-
cols based on L3
• For instance, some organizations would like to dictate paths instead of following the paths shown by
routing protocols
• Network Managers/Administrators can set up policies such as:
– My network will not carry traffic from the Engineering department
– Traffic originating within my network with the following characteristics will take path A, while other traffic
will take path B
– When load sharing needs to be done for the incoming traffic across multiple paths based on packet
entities in the incoming traffic
PAGE 9 of 44
AV Line Managed Switches
Datasheet | M4250 series
AV Line Managed Switches