Tag :: TOI

Aggregate storm control with traffic class option provides the capability to rate limit BUM(Broadcast, Unknown

This article describes changes to the platform command 'show platform fm6000 agileports'. Earlier this command was

Agile ports allow users to connect 40G interfaces on 7130 products utilizing multiple parallel SFP ports per 40G capable interface. This enables 40G capable applications, such as MetaConnect and MetaWatch, to operate at that speed.

Data center switches and servers have traditionally been managed by separate teams using different tools creating complexity in setting up and maintaining the end to end network in the datacenter. In an AI network, the nature of the workload amplifies the effect of a single server’s network failure or network misconfiguration impacting the work of large numbers of machines in the network. This is costly both in lost productivity and in the high level of support required to fix network errors that can occur in the compute and network domains.

This feature introduces support for sending long command arguments in TACACS+ accounting messages.

The 40G only ports on Trident 2 switches may now be configured as 1 lane of 10G, 1G, or 100M*. This

With the 15.0 release, CloudVision Cognitive Unified Edge (CV-CUE) introduces API Sandbox that allows you to try out API flows.

The cEOS-lab and vEOS-lab platforms use a different “forwarding plane” than EOS and CloudEOS; it is a software forwarding agent called Etba. A more efficient Etba provides more flexibility and better scalability for virtual network simulation for cEOS-lab and vEOS-lab users.

This document describes how to integrate with Arista Media Control Service(MCS) supported APIs and the EOS releases that they are available in

This article describes a feature for Tap Aggregation mode, which supports filtering and forwarding packets with Arista proprietary Tap Aggregation timestamp inserted after MAC address and before VLAN tag and IP header With this feature enabled, timestamped packets can be correctly parsed and be subject to load balancing of port channels and TCAM-based filtering/traffic-steering, the same way as regular packets. When this feature is enabled, regular packets without timestamp are unaffected. This feature may be useful for Arista switches that are expected to receive such timestamped packets so that load balancing, ACL, service policy and traffic policy can be applied to correctly forward and filter such packets.

Arista VESPA or Arista Virtual Ethernet Segment with Proxy ARP and associated features offer a campus solution for wireless deployment. Please note that all references to the keyword VESPA in this document refer to Arista VESPA.

This features enables ARPs learnt on an SVI interface to be converted into Host routes which can further be

The "set as path prepend" clause in the config route map mode is enhanced to accept the "auto" keyword. The "auto"

This feature is provided on all platforms. The BGP listen range command has been modified to optionally allow

Support for asset tagging aids hardware identification by the use of user supplied strings. Fixed

This feature adds support for associating a WAN interface with multiple Dynamic Path Selection (DPS) path groups to allow paths originating from the same interface to have different priorities.

The EOS-4.35.1F release introduces IGMP Snooping Accelerated Software Upgrade (ASU) support. This enhancement guarantees sub second disruption to multicast forwarding services during software upgrades by ensuring IGMP Snooping remains fully operational and preserving its learned state without interruption. This is essential for highly sensitive environments like IPTV and financial institutions. ​​

AVB technology allows transporting time sensitive professional grade audio and video streams over a switched ethernet network while providing deterministic latency and bandwidth guarantees. Supporting protocols include:

The audit report includes the start and end timestamps of the communication key timers for the past six months, the event type, MAC address, type of the key used between AP and the server, and the login ID. It also lists the non-TPM Access Points connected to the server during the onboarding window.

With the 13.0.1 release, you can authenticate wired hosts connected to the LAN ports of access points (W-118 and W-318) using 802.1X or MAC-based authentication. You can configure the authentication parameters for each downlink port on the access point (AP) using a LAN Port profile in CV-CUE. The communication happens either through a bridged network or transferred using L2 Tunnels.

Use the Authentication Studio to configure RADIUS servers for user authentication and 802.1X authentication and accounting. The 802.1X authentication protocol is a port-based network access control that provides an extra layer of security for both wired and wireless networks.  

In an EVPN network, unique route targets are assigned to each VLAN (or a VLAN bundle). For an IRB (Integrated Routing and Bridging) configuration, unique route targets are assigned for each L3-VRF as well.These route targets are statically configured for each VLAN (or a VLAN bundle) and each L3-VRF as well. Starting with 4.35.1F, such route targets for L3-VRFs can now be auto-derived from the corresponding VNI numbers.

The Federal Communications Commission (FCC) mandates that operations in the 6 GHz band require all Access Points (APs) operating at standard power to communicate their geolocation to an Automated Frequency Coordination (AFC) system. The AFC system evaluates this geolocation data to ensure compliance with regulatory requirements by providing the APs with the permissible frequencies and the maximum allowable transmission power for each frequency range at their specific locations. 

The current workflow for installing extensions involves multiple manual steps: copying, installing, and setting to install at boot, and on dual supervisor systems these steps have to be repeated in a peer supervisor CLI session. This feature introduces new CLI commands automating this process, improving EOS extension management for both dual supervisor and fixed system devices, and easing set up of EOS devices at scale. They are modeled to resemble existing install source commands and should behave similarly for EOS extensions. Both commands are available in enable mode.

Automatic certificate management provides support for retrieving signed x509v3 certificates from a server under the Enrollment over Secure Transport (EST) protocol, described in RFC 7030. The feature provides only EST client capabilities.

This feature detects whether a given EOS image is MLAG ISSU compatible with the currently running version on a switch.

Groups of front panel ports can be controlled by one power controller module. Power faults can often be detected by the power controller, which causes loss of power for all ports controlled by the power controller. The fault can be triggered by inrush current during insertion or removal of transceivers. A broken transceiver can cause a fault too.

CloudVision Cognitive Unified Edge (CV-CUE) dynamically computes and updates a baseline for normal performance and connectivity of the network. The baseline adjusts as the network behavior changes, eliminating the false positive and false negative alerts associated with thresholds.

Use bearer tokens to provide custom applications or third-party applications, like Ansible, login access to CloudVision. Doing so will allow the application to make configuration changes to EOS devices. Bearer token login can be used with identity providers that issue bearer tokens and have an introspection endpoint. Okta and PingIdentity have been tested for use with CloudVision.

As of EOS 4.17.0F, BFD support has been enhanced with support for configuring BFD within VRFs, improved scalability

BFD for static routes enables monitoring of directly connected next hop reachability using a BFD session. This is

This document describes BFD RFC7130 mode on EOS. RFC7130 defines a mechanism to run BFD protocol over port channels with an independent asynchronous BFD session on every port channel member link. With RFC7130 support, the port channel member link will be removed from forwarding if the BFD session state transitions from UP to DOWN on the member link. This is useful for quickly detecting failures where L1 stays connected but the interface is unable to forward traffic.

BFD Stateful Switchover (SSO) allows for a switchover from an active supervisor to a standby supervisor where BFD

IPv6 support for BFD in ISIS. BFD provides a faster convergence in scaled deployments where using aggressive times

BFD telemetry streaming via OpenConfig implements the gNMI path /bfd/interfaces/interface/peers such that users can get real time telemetry data on BFD sessions configured on the device.

At the beginning of 2014 the the Number Resource Organization announced that the pool of 2 byte BGP AS numbers had

BGP additional paths is an enhancement that allows a BGP router to advertise and receive multiple distinct paths for

BGP Add Path TX allows for a BGP speaker to advertise multiple paths (instead of a single best path) for a prefix towards

EOS BGP implementation normally considers only active routes in RIB for advertisement to its peers. In certain

The aggregate address advertise only feature adds the capability of NOT installing the Null0 route in the FIB/kernel

The "set as path prepend" clause in route map configuration mode has been enhanced with the addition of the “last

The automatic Route Distinguisher (auto RD) feature is designed to simplify customer configuration by automating RD assignment. This feature is supported for the following address families.

ACL based traffic management often requires matching packets’ destination addresses against one or more sets of IP prefixes. This can become difficult to manage when the prefix sets need to be consistently maintained on several devices and either change too frequently or are very large. When the prefixes for the prefix sets are learned by BGP, this feature provides an alternative to maintaining unwieldy sets of statically configured IP prefixes. Instead the prefix sets are populated by BGP based on the BGP communities that are assigned to learned prefixes. BGP can manage IP prefix field sets for use with Traffic Policies.

To avoid hardware updates and route advertisement churn during switch reload or BGP instance start, BGP enters into

BGP Fallback AS offers the ability for BGP peering relationships be established with either the local as or the router

EOS 4.21.3F introduces support for BGP Flowspec, as defined in RFC5575 and RFC7674. The typical use case is to filter or redirect DDoS traffic on edge routers.

This feature introduces support for BGP route-target ranges specifically for route import. With this new capability, ranges of route targets can be configured for importing routes into VRFs.

BGP inbound update processing delay is a feature in EOS where an optional delay is applied prior to processing inbound UPDATE messages from a peer(s). The duration of the delay is configurable per peer. The delay is applied to UPDATE messages for all the address families that are negotiated with the peer. The delay timer starts when the peer becomes established. The routes from such peers are processed only after the timer expires. Any routes received after the timer expired are processed as usual without the delay. Both the default VRF and non-default VRFs are supported.

IPv6 BGP peers and IPv6 prefixes for non default VRFs are supported starting EOS 4.15.0F. All CLI commands available

The default policy behavior is to permit/accept all routes when a BGP neighbor or peer group is configured with a route