Tag :: TOI

The AES-256 Support for SNMPv3 feature implements 256-bit encryption for SNMPv3 interactions on the DMF Controller and managed devices. Configuring the AES-256 privacy protocol option enhances the User-based Security Model (USM) by enforcing 256-bit encryption standards.

The DANZ Monitoring Fabric (DMF) Aggregate Arista GRE TAP action receives GRE-encapsulated packet samples from EOS switches, and generates an IPFIX report containing the flow 5-tuple, metadata, and timestamps from switches that the packet passed through.  Use the IPFIX report to determine the flows in a data fabric, monitor server session initialization delays, estimate the bandwidth of flows, and learn the path of packets through the fabric.

The AGM for ECMP feature allows monitoring the number of packets and bytes going through each member of the configured ECMP group on the system, with a high time resolution.

The DANZ Monitoring Fabric (DMF) Aggregate sFlow takes sFlow packet samples and generates an IPFIX report containing the flow 5-tuple, metadata, and timestamps from switches that the packet passed through.

Aggregate storm control with traffic class option provides the capability to rate limit BUM(Broadcast, Unknown

This article describes changes to the platform command 'show platform fm6000 agileports'. Earlier this command was

Agile ports allow users to connect 40G interfaces on 7130 products utilizing multiple parallel SFP ports per 40G capable interface. This enables 40G capable applications, such as MetaConnect and MetaWatch, to operate at that speed.

Data center switches and servers have traditionally been managed by separate teams using different tools creating complexity in setting up and maintaining the end to end network in the datacenter. In an AI network, the nature of the workload amplifies the effect of a single server’s network failure or network misconfiguration impacting the work of large numbers of machines in the network. This is costly both in lost productivity and in the high level of support required to fix network errors that can occur in the compute and network domains.

Allow Arista Networks to upgrade the Access Point (AP) firmware whenever a new version becomes available. Enabling this feature ensures the AP firmware stays up to date with the latest CV-CUE version. Selecting the Allow Arista to Upgrade Access Points checkbox allows Arista to upgrade your AP firmware. If you don’t have any Scheduled Updates configured for any location in CV-CUE, Arista will notify you of the schedule for when they will perform the firmware upgrade for that location's APs. If you already have Scheduled Updates configured, the firmware upgrade will occur according to the schedule you have defined in CV-CUE. Arista will not interfere with your pre-configured schedule.

This feature introduces support for sending long command arguments in TACACS+ accounting messages.

The 40G only ports on Trident 2 switches may now be configured as 1 lane of 10G, 1G, or 100M*. This

With the 15.0 release, CloudVision Cognitive Unified Edge (CV-CUE) introduces API Sandbox that allows you to try out API flows.

The cEOS-lab and vEOS-lab platforms use a different “forwarding plane” than EOS and CloudEOS; it is a software forwarding agent called Etba. A more efficient Etba provides more flexibility and better scalability for virtual network simulation for cEOS-lab and vEOS-lab users.

This document describes how to integrate with Arista Media Control Service(MCS) supported APIs and the EOS releases that they are available in.

This document lists and describes the MCS supported features and the EOS releases that they are available in. Please refer here for information on how to configure and troubleshoot MCS and here for detailed API documentation.

This article describes a feature for Tap Aggregation mode, which supports filtering and forwarding packets with Arista proprietary Tap Aggregation timestamp inserted after MAC address and before VLAN tag and IP header With this feature enabled, timestamped packets can be correctly parsed and be subject to load balancing of port channels and TCAM-based filtering/traffic-steering, the same way as regular packets. When this feature is enabled, regular packets without timestamp are unaffected. This feature may be useful for Arista switches that are expected to receive such timestamped packets so that load balancing, ACL, service policy and traffic policy can be applied to correctly forward and filter such packets.

Arista VESPA or Arista Virtual Ethernet Segment with Proxy ARP and associated features offer a campus solution for wireless deployment. Please note that all references to the keyword VESPA in this document refer to Arista VESPA.

This features enables ARPs learnt on an SVI interface to be converted into Host routes which can further be

In an EVPN/VXLAN environment, ARP and IPv6 Neighbor Discovery (ND) bindings are typically learned only from packets addressed to the switch (via its SVI) or from broadcast traffic. This limits the switch's knowledge of hosts that request for SVI IP or hosts that send GARP. In addition to snooping packets requesting resolution for switch’s IP address, this feature enables the switch to learn and maintain ARP/ND bindings by snooping ARP and ND packets requesting resolution of IPs other than the switch’s IP, that are broadcast to other hosts through the switch.

The "set as path prepend" clause in the config route map mode is enhanced to accept the "auto" keyword. The "auto"

This feature is provided on all platforms. The BGP listen range command has been modified to optionally allow

Support for asset tagging aids hardware identification by the use of user supplied strings. Fixed

This feature adds support for associating a WAN interface with multiple Dynamic Path Selection (DPS) path groups to allow paths originating from the same interface to have different priorities.

The EOS-4.35.1F release introduces IGMP Snooping Accelerated Software Upgrade (ASU) support. This enhancement guarantees sub second disruption to multicast forwarding services during software upgrades by ensuring IGMP Snooping remains fully operational and preserving its learned state without interruption. This is essential for highly sensitive environments like IPTV and financial institutions. ​​

AVB technology allows transporting time sensitive professional grade audio and video streams over a switched ethernet network while providing deterministic latency and bandwidth guarantees. Supporting protocols include:

The audit report includes the start and end timestamps of the communication key timers for the past six months, the event type, MAC address, type of the key used between AP and the server, and the login ID. It also lists the non-TPM Access Points connected to the server during the onboarding window.

With the 13.0.1 release, you can authenticate wired hosts connected to the LAN ports of access points (W-118 and W-318) using 802.1X or MAC-based authentication. You can configure the authentication parameters for each downlink port on the access point (AP) using a LAN Port profile in CV-CUE. The communication happens either through a bridged network or transferred using L2 Tunnels.

Use the Authentication Studio to configure RADIUS servers for user authentication and 802.1X authentication and accounting. The 802.1X authentication protocol is a port-based network access control that provides an extra layer of security for both wired and wireless networks.  

In an EVPN network, unique route targets are assigned to each VLAN (or a VLAN bundle). For an IRB (Integrated Routing and Bridging) configuration, unique route targets are assigned for each L3-VRF as well.These route targets are statically configured for each VLAN (or a VLAN bundle) and each L3-VRF as well. Starting with 4.35.1F, such route targets for L3-VRFs can now be auto-derived from the corresponding VNI numbers.

The Federal Communications Commission (FCC) mandates that operations in the 6 GHz band require all Access Points (APs) operating at standard power to communicate their geolocation to an Automated Frequency Coordination (AFC) system. The AFC system evaluates this geolocation data to ensure compliance with regulatory requirements by providing the APs with the permissible frequencies and the maximum allowable transmission power for each frequency range at their specific locations. 

The current workflow for installing extensions involves multiple manual steps: copying, installing, and setting to install at boot, and on dual supervisor systems these steps have to be repeated in a peer supervisor CLI session. This feature introduces new CLI commands automating this process, improving EOS extension management for both dual supervisor and fixed system devices, and easing set up of EOS devices at scale. They are modeled to resemble existing install source commands and should behave similarly for EOS extensions. Both commands are available in enable mode.

Automatic certificate management provides support for retrieving signed x509v3 certificates from a server under the Enrollment over Secure Transport (EST) protocol, described in RFC 7030. The feature provides only EST client capabilities. This document describes automatic retrieval of CA certificates which is an update to the existing TOI which can be found here. All updates are highlighted.

This feature detects whether a given EOS image is MLAG ISSU compatible with the currently running version on a switch.

Groups of front panel ports can be controlled by one power controller module. Power faults can often be detected by the power controller, which causes loss of power for all ports controlled by the power controller. The fault can be triggered by inrush current during insertion or removal of transceivers. A broken transceiver can cause a fault too.

CloudVision Cognitive Unified Edge (CV-CUE) dynamically computes and updates a baseline for normal performance and connectivity of the network. The baseline adjusts as the network behavior changes, eliminating the false positive and false negative alerts associated with thresholds.

Beacon protection ensures the management beacon frames are secure and prevents attackers from manipulating them. It ensures protection from tampering of beacon frames and also prevents DoS attacks. Beacon protection is applicable for the WPA3 security mode and is mandatory for Wi-Fi 7. Beacon protection is not supported in Transition Modes.

Use bearer tokens to provide custom applications or third-party applications, like Ansible, login access to CloudVision. Doing so will allow the application to make configuration changes to EOS devices. Bearer token login can be used with identity providers that issue bearer tokens and have an introspection endpoint. Okta and PingIdentity have been tested for use with CloudVision.

As of EOS 4.17.0F, BFD support has been enhanced with support for configuring BFD within VRFs, improved scalability

BFD for static routes enables monitoring of directly connected next hop reachability using a BFD session. This is

This document describes BFD RFC7130 mode on EOS. RFC7130 defines a mechanism to run BFD protocol over port channels with an independent asynchronous BFD session on every port channel member link. With RFC7130 support, the port channel member link will be removed from forwarding if the BFD session state transitions from UP to DOWN on the member link. This is useful for quickly detecting failures where L1 stays connected but the interface is unable to forward traffic.

BFD Stateful Switchover (SSO) allows for a switchover from an active supervisor to a standby supervisor where BFD

IPv6 support for BFD in ISIS. BFD provides a faster convergence in scaled deployments where using aggressive times

BFD telemetry streaming via OpenConfig implements the gNMI path /bfd/interfaces/interface/peers such that users can get real time telemetry data on BFD sessions configured on the device.

At the beginning of 2014 the the Number Resource Organization announced that the pool of 2 byte BGP AS numbers had

BGP additional paths is an enhancement that allows a BGP router to advertise and receive multiple distinct paths for

BGP Add Path TX allows for a BGP speaker to advertise multiple paths (instead of a single best path) for a prefix towards

EOS BGP implementation normally considers only active routes in RIB for advertisement to its peers. In certain

The aggregate address advertise only feature adds the capability of NOT installing the Null0 route in the FIB/kernel

The "set as path prepend" clause in route map configuration mode has been enhanced with the addition of the “last

The automatic Route Distinguisher (auto RD) feature is designed to simplify customer configuration by automating RD assignment. This feature is supported for the following address families.