TOI Author :: Lavanya Conjeevaram

MSS-G or Group-Based Segmentation Security is a security feature that allows users to classify network endpoints into segments and define forwarding policies between segments. A given segment contains a set of hosts that should have identical security properties within the network. 

It is possible to have MSS-G configuration pushed automatically to CloudVision from an external system. This document covers the use of Forescout eyeSegment for policy definition and eyeSight for segment assignment.

MSS G or Group Based Segmentation Security is a security feature that allows users to classify endpoints into

This is an expansion of the ‘Endpoint Search’ feature introduced in the Howard Release. For more information on

802.1X information shows which endpoints have authenticated, are undergoing authentication, or have failed to

A dashboard to provide not just image and configuration compliance but also a proactive assessment for exposure to software defects and security vulnerabilities.

Media Access Control Security (MACsec) is an industry standard security technology that provides secure

In the traditional data center design, inter-subnet forwarding is provided by a centralized router, where traffic traverses across the network to a centralized routing node and back again to its final destination. In a large multi-tenant data center environment this operational model can lead to inefficient use of bandwidth and sub-optimal forwarding.

The feature MP BGP Multicast provides a way to populate the MRIB (Multicast Routing Information Base). MRIB is an

CloudVision Portal release 2017.2.0 introduces support for the network wide Telemetry framework consisting of the

Starting EOS release 4.15.2F, the ability to re number front panel ports of 7050QX 32S is supported.

Sub interface counters provide ability to count packets and bytes incoming and outgoing on L3 sub interfaces. This

Unidirectional links is a feature that configures an Ethernet interface transmit and receive paths to be independent. Specifically, the transmit path can be up or down independent of the receive path being up or down.

As of EOS 4.15.2F, VM Tracer adds support for VMware NSX V. This includes supporting NSX V specific features, improved

MPLSoGRE Filtered Mirroring is a specialized version of Mirroring to GRE Tunnel and Filtered Mirroring in which

DCS 7280E/R series. DCS 7500E/R series. Truncation Size: Truncation size is not available per interface.

When configuring or modifying a RACL applied to a VLAN interface, the VLAN will be blocked while applying the updated

Overlay IPv6 routing over VXLAN Tunnel is simply routing IPv6 packets in and out of VXLAN Tunnels, similar to

This release introduces enhancements to the CloudVision eXchange and OpenStack integration. The following

The document describes an extension of the decap group feature, that allows IPv6 addresses to be configured and used

Ethernet VPN (EVPN) is an extension of the BGP protocol introducing a new address family: L2VPN (address family number 25) / EVPN (subsequent address family number 70). It is used to exchange overlay MAC and IP address reachability information between BGP peers within a tunnel

The 7500R 8CFPX LC linecard with ACO CFP2 optics provides connectivity over DWDM systems and links. 7500R 8CFPX LC

Documentation for the new major features is available in the CloudVision User Guide for release 2017.1.0. This TOI

EOS currently supports VXLAN L2 integration with external controllers using the Arista OVSDB HW VTEP schema ([HW

To avoid hardware updates and route advertisement churn during switch reload or BGP instance start, BGP enters into

This feature adds support for viewing the Digital Optical Monitoring (DOM) parameters for the optics that support

IPv6 support for BFD in ISIS. BFD provides a faster convergence in scaled deployments where using aggressive times

The 40G only ports on Trident 2 switches may now be configured as 1 lane of 10G, 1G, or 100M*. This

ECMP Hash visibility CLI determines the output interface for an ECMP set based on the flow parameters supplied by the user. Ingress interface, source IP address, destination IP address and IP protocol are the required parameters. L4 source and destination ports and VLAN identifier are optional, but should be specified if the packet has them.

The per port per VLAN feature allows application of QoS policies for IP, IPv6 and non IP traffic on a per port per VLAN

Ingress policing on front panel ports is supported on DCS 7010X and DCS 7050X since EOS4.14.0F. When ingress policing

The feature enables support for displaying per traffic class counters on ingress interfaces. The feature is

Per VLAN MAC Learning is a feature to enable/disable mac learning per vlan instead of per port. Using this feature with

Nexthop group match in PBR policy enables the user to match incoming packets being routed to a specified nexthop group

The BGP labeled unicast (LU) RFC is used to advertise BGP routes with a stack of MPLS labels, thereby allowing

The guaranteed bandwidth feature ensures minimum bandwidth for outgoing lower priority traffic from a

The VxLAN VTEP counters feature allows the device to count VxLAN packets received and sent by the device on a per

L3 interface ingress counters can be used to count routable traffic coming into the box on sub interfaces and vlan

The eBgp "ip next hop unchanged" feature allows a router to send routes to its eBgp peers without changing their next

DANZ provides a set of features and tools to enhance instrumentation and network/ application performance monitoring with the following key functional areas.