Cambium Networks cnMatrix EX2010-P handleiding

Niet gecategoriseerd

Cambium Networks

320 pagina's

PDF beschikbaar

Handleiding

/ 320

Je bekijkt pagina 137 van 320

L2 Features 137

the LLDPDU received on the port. If no LLDP data is present, matches

are not allowed.

MAC address-based policy lockdown is available. MAC-based policies are permitted to

remain active after the associated MAC address has been aged from the FDB. The goal is to

support devices that go to sleep or do not send traffic frequently and get removed from the

FDB. Continual removal and reinstallation of policies for these types of devices is non-

optimal because this results in a certain amount of traffic loss each time. The user can

determine the behavior they prefer (i.e., clear policies based on MAC address aging or leave

the policies temporarily applied) based on the devices they connect.

Default behavior will be to NOT age MAC-based policies.

MAC-based policies that are not aged will be removed

upon a link-down or for any other PBA event just as they

are in prior releases (e.g., PBA disable, PBA port disable,

policy delete/disable).

A new configurable option allows the user to age or not

age MAC-based policies so that the behavior can be

customized to the user’s connected devices.

Release 3.1

Auto-VLAN support

New Cambium vendor-specific LLDP TLVs are introduced to support

automatic VLAN configuration on cnMatrix for directly connected Cambium

devices (e.g., cnPilot). The new PBA TLVs are implemented as an extension to

the LLDP standard, using its flexible extension mechanism. They are

implemented as vendor-specific (Cambium OUI: 58-C1-7A) TLVs using TLV

type 127 as described in the 802.1ab (LLDP) standard. Two new TLVs have

been defined:

PBA Authentication TLV – used by cnMatrix to export current

authentication-related data and settings for use by attached Cambium

devices.

PBA Device Settings TLV – used by Cambium devices leveraging PBA

to export required PBA device settings (i.e., to push policies) to

cnMatrix.

From a functional perspective, cnMatrix, acting as the upstream device,

includes the PBA Authentication TLV in the regularly generated LLDPDUs for

a port. The PBA port operational status (enabled/disabled), the LLDP PBA

Authentication TLV Tx status (enabled/disabled) and the state of the PBA

application overall (enabled/disabled) impacts whether the TLV is included in

LLDPDUs on a port. The downstream device (e.g., cnPilot) receives the PBA

Authentication TLV and, if policy data is present to be pushed to cnMatrix, a

PBA Device Settings TLV is constructed and added to the LLDPDU for the

port.

When received by cnMatrix, the PBA Device Setting TLV is authenticated (if

necessary), decoded and the action components (VLAN list, native VLAN,

state flags) are used to create a dynamic rule, action and policy that is applied

to the port through which the TLV was received. The policy remains in effect

/ 320

Bekijk gratis de handleiding van Cambium Networks cnMatrix EX2010-P, stel vragen en lees de antwoorden op veelvoorkomende problemen, of gebruik onze assistent om sneller informatie in de handleiding te vinden of uitleg te krijgen over specifieke functies.