EOS 4.24.0F TOI

The primary challenge with using a switching ASIC as a load balancer has been how to deal with changes in the network

EOS 4.23.1F added basic MLAG support for 7800R3, 7500R3 and 7280R3 platforms. The MLAG features that are currently

802.1X is an IEEE standard protocol that prevents unauthorized devices from gaining access to the network.

The following table describes the advanced mirroring features that are currently supported with links to their respective TOIs.

Adds the ability to revert to previous behavior where BGP and static routes could resolve over BGP aggregates (when

4.24.0F adds Accelerated Software Upgrade (ASU) support to the 7170 series.  Accelerated Software Upgrade

BFD for static routes enables monitoring of directly connected next hop reachability using a BFD session. This is

BFD Stateful Switchover (SSO) allows for a switchover from an active supervisor to a standby supervisor where BFD

EOS 4.21.3F introduces support for BGP Flowspec, as defined in RFC5575 and RFC7674. The typical use case is to filter or redirect DDoS traffic on edge routers.

This feature implements RFC3107 that allows carrying a label stack with BGP route updates, using multi protocol BGP.

This feature limits the maximum number of routes that BGP can advertise to a peer. When the maximum

RPKI provides a mechanism to validate the originating AS of an advertised prefix. Using the result of the validation to apply inbound policy in a route map.

This change adds a global toggle to BGP communities that allow for community sharing to be enabled/disabled for all

Burst size feature works in conjunction with the shape rate feature and allows configuring the amount of data in

Segment Routing Traffic Engineering Policy (SR TE) aka SR Policy makes use of Segment Routing (SR) to allow a headend

Add support for configuring admin distance for OSPFv3 external routes, without this OSPFv3 would always install

By default, counters are polled from hardware every 2 seconds. This enhancement allows this period to be configured,

DHCP relay agent uses one of the addresses configured on the interface as the source IP when relaying messages to the

DirectFlow is a feature that allows the user to steer traffic by matching on packet headers and/or metadata using the

EOS 4.24.0 adds support for egress IPv6 RACLs without using packet recirculation. So, by default, egress IPv6 ACL

Security MAC ACLs can be used to permit and/or deny ethernet packets on the egress port by matching on the following

E-Tree is an L2 EVPN service (defined in RFC8317) in which each attachment circuit (AC) is assigned the role of Root or Leaf. In this implementation, ACs are configured at the VLAN level, and the forwarding rules are enforced using a combination of local configuration of leaf VLANs (for local hosts), and asymmetric route targets (for remote hosts).

EVPN MPLS VPWS (RFC 8214) provides the ability to forward customer traffic to / from a given attachment circuit (AC) without any MAC lookup / learning. The basic advantage of VPWS over an L2 EVPN is the reduced control plane signalling due to not exchanging MAC address information. In contrast to LDP pseudowires, EVPN MPLS VPWS uses BGP for signalling. Port based and VLAN based services are supported.

As described in the L3 EVPN VXLAN Configuration Guide, it is common practice to use Layer 3 EVPN to provide multi

A pseudowire is usually transported over a single network path in order to preserve the packet ordering of each

This feature adds support for offloading BFD Transmit path to hardware (ASIC) for specific types of BFD sessions. This will improve accuracy of transmit timer implementations for BFD (especially with fast timers like 50 ms) and relieve pressure on the main CPU in scenarios of scale.

EOS-4.24.0 adds support for hardware-accelerated sFlow on R3 systems. Without hardware acceleration, all sFlow processing is done in software, which means performance is heavily dependent on the capabilities of the host CPU. Aggressive sampling rates also decrease the amount of processing time available for other EOS applications.

The hardware based implementation of the firewall uses a segment security model. In the segment security model,

On network devices, when a route is programmed, a certain portion of hardware resources is allocated and associated

When two sites of a VPN are connected to PE routers from different Autonomous Systems (AS), the PE routers cannot

The IS IS maximum LSP size feature provides the ability to configure the maximum LSP size that the IS IS protocol will

Level 1 2 routers set attached bit in their Level 1 LSPs to indicate their reachability to the rest of the network. A

L2 protocol packets - LLDP, LACP and STP are trapped to the CPU by default. This feature allows for disabling the per protocol trap on a given set of interfaces.

Ethernet VPN (EVPN) is an extension of the BGP protocol introducing a new address family: L2VPN (address family number 25) / EVPN (subsequent address family number 70). It is used to exchange overlay MAC and IP address reachability information between BGP peers using type-2 routes, but additionally,  EVPN supports the exchange of layer 3 IPv4 and IPv6 overlay routes through the extensions described in (type 5 EVPN routes).

Lanz Mirroring feature allows users to automatically mirror traffic queued as a result of congestion to either CPU or a different interface.

The LDP pseudowire feature provides support for emulating Ethernet connections over a Multiprotocol Label

MAP T is a double stateless NAT64 translation technology. It allows an internet service provider to share IPv4

Network address translation (NAT) is a common method used to remap one IP address space into another by modifying the

Octa is a process which combines OpenConfig and certain TerminAttr functionality, primarily with the intent of

This feature enables per port TC-To-COS mapping, where TC represents Traffic-Class and COS represents Vlan tag PCP bits. While at present there is a global TC-To-COS mapping, we can use the TC-To-COS feature to create custom profiles which can be applied to the required interfaces. 

Port Security: Protect mode (PortSec Protect) is newly added to the Port Security feature and is designed to restrict

This priority drop feature provides a way to drop packets according to QOS priority when the device ingress maximum packet rate is oversubscribed.

This feature introduces support for ACL configuration on VXLAN decapsulated packets. The configured ACL rules will

This document describes the feature that allows redistribution of routes from ISIS to OSPFv3 running on a device.

When there are multiple VRFs on the device and there is a need to share routes between them, typically for shared

In addition to aliasing only the first token in a CLI command, EOS now supports full command aliasing using regular

This article describes the support for specifying User Defined Fields (UDF) in Router ACLs including IPv4 and IPv6

Segment Routing Traffic Engineering Policy (SR TE) aka SR Policy makes use of Segment Routing (SR) to allow a headend

Support for negotiating and receiving IPv6 unicast and IPv6 labeled unicast (6PE) updates from a BGP peer.

This article describes the support for specifying User Defined Fields (UDF) in Sub interface ACLs including IPv4 and