New and Corrected Features in ExtremeXOS 15.3

Protocol Independent Multicast (PIM) Designated Router (DR) Priority The DR Priority option allows you to prioritize a particular router in the DR election process by

assigning it a numerically larger DR Priority.

MAC Address Hash The hash algorithm used for the L2 MAC hash table has been improved so that more MAC addresses

can be inserted prior to filling the hash bucket.

This feature applies only to the Summit X670, BlackDiamond 8900-40G6Xc, and BlackDiamond X8

series switches.

VMAN Double Tag The VMAN double tag feature adds an optional port CVID parameter to the existing untagged VMAN

port configuration

STP Instances Scale Fix The STP Instances Scale fix resolves a software deficiency (see PD4- 3427549640 in the Resolved

Issues in ExtremeXOS 15.3.2 on page 148) and increases limit values (see below table).

Increase Protocol Independent Multicast (PIM) Neighbors in Advanced Edge License. This feature expands the number of PIM neighbors in our Advanced Edge license from two to four.

Change Default Parameter for Protocol Independent Multicast (PIM)-Register-

Checksum Command This feature changes the default parameter for the configure pim register-checksum-to command to be

the RFC method which would be the following: configure pim register-checksum-to exclude-data.

Lawful Intercept If you have lawful Intercept user privileges, you can log in to a session and configure lawful intercept

on the switch. The configuration consists of dynamic ACLs and a mirror-to port to direct traffic to a

separate device for analysis.

IGMP and MLD Loopback This section explains the new feature, IGMP and MLD loopback, which allows configuration of static

and dynamic groups on a VLAN without specifying a portlist.

Multicast Equal Cost Multipath (ECMP) Feature The Multicast Equal Cost Multipath (ECMP) feature supports PIM routers to load split traffic over

different equal cost multiple paths instead of sending all traffic over a single path.

Bidirectional Forwarding Detection (BFD) BFD (Bidirectional Forwarding Detection) is an ExtremeXOS service that provides rapid failure

detection of the forwarding path to a nexthop, and sends failure detection notices to its clients (for

example, routing protocols) to initiate recovery action.

New and Corrected Features in ExtremeXOS 15.4

Egress sFlow Sampling Previous releases of ExtremeXOS already have sFlow sampling functionality, but it was restricted to

the ingress port traffic. This enhancement of this feature extends the sampling to the egress traffic

as well, both unicast and multicast streams

Energy Efficient Ethernet IT organizations benefit from reducing the power consumption of network equipment, which in turn

reduces energy usage and lowers overall operating costs.

Energy efficient Ethernet (EEE) is used during idle periods by the PHYs to reduce power. If EEE is not

used, the PHY draws full power even when not sending traffic. Enabling EEE significantly reduces the

power consumption of the switch.

Within ExtremeXOS, a PHY/switch combination (BlackDiamond and Summit switches) or a PHY with

AutoGrEEEn capability (E4G cell site routers) is needed to allow EEE to work. In a typical setup, the

PHY and switch communicate when to enter or exit low power idle (LPI) mode.

AutoGrEEEn technology implements the EEE standard (802.3az specification) directly in PHYs on E4G

cell site routers, enabling EEE mode when interfacing with non-EEE–enabled MAC devices. This

allows you to make existing network equipment EEE-compliant by changing the PHY devices.

L3 Interface Scaling The L3 interface scaling feature increases the number of routed interfaces from 512 to 2,048 on

those switches that can support 2,048 L3 interfaces in hardware

OpenFlow Enhancements ExtremeXOS Release 15.4 provides the following OpenFlow enhancements:

Port-Based Link Aggregation Group (Load Sharing) Port-based load sharing is a useful tool for addressing certain types of networking problems

involving link aggregation. Network designers should carefully consider both the advantages and

disadvantages of port-based load sharing before deciding to use it in their networks.

Identity Management (IDM) Role-Based VLANs Previous versions of ExtremeXOS identity management (IDM) require that ports on which the

users/devices are connected can only be added statically to VLANs. There was no mechanism to

classify traffic from an identity (device/ user) to a particular VLAN. For this new feature, when an

identity is detected and the role is determined, ExtremeXOS dynamically creates the VLAN that is

required for the identity to send traffic. If the identity was deleted, aged out, or is moved, its VLAN is

pruned to preserve bandwidth. This feature leverages MVRP to add uplink ports to the dynamically

created VLAN.

Cisco Discovery Protocol (CDP v1) This feature adds support for Cisco Discovery Protocol (CDP v1).

Static Ethernet and Time Division Multiplexing (TDM) Multi-Protocol Label Switching

(MPLS) Pseudowire (PW) Static Multi-Protocol Label Switching (MPLS) pseudowires (PWs) are configurable point-topoint

emulated circuits that have statically configured MPLS PW labels.

Selective VLAN Mapping to Virtual Private LAN Service (VPLS) VMAN customer edge ports (CEPs) can filter incoming frames matching a set of VIDs. Multiple

VMANs can have CEP ports that are on the same Ethernet port provided that the VIDs do not

overlap. This feature adds the capability to assign VMANs with CEP ports to a VPLS.

VMAN is the VLAN stacking (Q-in-Q) feature in ExtremeXOS. There are two types of ports: access and

network. The access port can be unaware or aware of the VLAN. The customer edge port is the

VLAN-aware port of the VMAN. This is also known as selective Q-in-Q.

Pseudowire (PW) Label-Switched Path (LSP) Load Sharing This feature increases the number of named Label-Switched Paths (LSPs) to be configured per L2VPN

pseudowires (PWs) for use as the transport LSP from 1 to 16. This includes Resource Reservation

Protocol (RSVP) LSPs and static LSPs. This feature also provides Equal-Cost Multi-path (ECMP)

address-based hashing on L2VPN ingress nodes when transmitting into Link Aggregation Group

(LAG).

Proactive Service Framework This feature enables the switch to proactively send basic configuration and operation information to

a cloud-hosted collector for the purpose of assisting the Extreme Networks TAC to resolve customer-

reported issues.

Non-Extreme Networks Optics Licensing Starting with ExtremeXOS 15.4, Extreme Networks will begin issuing a purchasable software license,

“non-Extreme Optics” to use optical devices from third-party vendors on 40G and 100G ports.

Currently this feature only issues warning messages, but the actual restriction of the ports will be

implemented in a future release.

Transparent Interconnection of Lots of Links (TRILL) Transparent Interconnection of Lots of Links (TRILL) is packet encapsulation standard

specifically designed to meet the requirements of the data center

Dynamic Host Configuration Protocol (DHCP) Smart Relay Support for Secondary IP

address IDs This feature adds capabilities to the Dynamic Host Configuration Protocol (DHCP) Relay module in

ExtremeXOS to include secondary IP addresses of the VLAN as the gateway address (giaddr) while

relaying a DHCP request. There are two modes of operation: sequential and parallel.

Access Control List (ACL) Customer VLAN ID (CVID) Match Criteria This access control list (ACL) match criteria feature allows you to specify access-lists that filter on the

inner-VLAN-id field of a double-tagged packet.

Multi-Protocol Label Switching/Virtual Private LAN Services (MPLS/VPLS) Management

and Counters The following EMS logs allow you to track Multi-Protocol Label Switching (MPLS) protocols, some

label-switched paths (LSPs), pseudowires (PWs) and MPLS interface operational states. These logs

are at the “Info” level and are not generated in the default log output (the default level for MPLS is

“Warning”).

New and Corrected Features in ExtremeXOS 15.5

Support Linux File System This feature introduces the concept of the “current working directory” relative to an ExtremeXOS

login session

Non-Extreme Networks Optics Licensing Starting with ExtremeXOS 15.4, Extreme Networks began issuing a purchasable software license,

“non-Extreme Optics” to use optical devices from third-party vendors on 40G and 100G ports

Ethernet Ring Protection Switching (ERPS) Using Y.1731

Continuity Check Messages (CCMs) This feature supports ERPS/G.8032 using Connectivity Fault Management (CFM) that sends Y.1731

Continuity Check Messages (CCMs) to detect connectivity failures, and thus link status. This is in

addition to the current support for IEEE 802.1ag CCMs.

Return-to-Normal Simple Network Management Protocol

(SNMP) Notifications This feature provides the ability for network management software (Ridgeline or NetSight) to receive

“return-to-normal” SNMP notifications for CPU utilization or “overheated or too cold” from

ExtremeXOS devices.

Simple Network Management Protocol (SNMP) Notification Logs This feature provides a log of notifications sent by the SNMP agent that can be queried by an

network management software (Ridgeline or NetSight). You can create multiple SNMP notifications

logs, restrict what is added to the logs, age log entries, limit the maximum number of entries, and

control these features using either the command line interface or SNMP.

Bidirectional Forwarding Detection (BFD) Up/Down Traps ExtremeXOS now has read-only support for all BFD MIB tables and global objects. It supports BFD

notifications as well.

Internet Protocol (IP) v6 Multi-cast Listener Discovery Protocol (MLD) Source-Specific

Multi-cast (SSM) Map This feature enables MLDv1 hosts to participate in Source Specific Multi-cast.

Access Control List (ACL) Enhancements The following ACL enhancement are included in ExtremeXOS 15.5:

• ACL rule deletion improvement—“leave a hole”: Previously, deleting an ACL rule, caused TCAM

shifting to occur to fill in all entries from the highest precedence slice to the lowest precedence slice.

Now when a rule is deleted no shifting occurs, leaving a “hole” where the entry previously existed.

• ACL rule insertion improvement—attempt shifting up or down within a single slice: Previously,

inserting an ACL rule at a given precedence caused all rules to shift down from rules in the lowest

precedence slice to the slice mapped to the specified precedence to make an empty position for the

new rule. Now shifting will occur either down or up until a “hole” is encountered only within a single

slice.

• ACL rule insertion improvement—using virtual slice priorities: Previously, physical slice order

dictates the precedence order of slices and rule/slice shifting occurs across the full spectrum of slice

precedences as required by each operation. Now a new virtual slice precedence is inserted in

between two existing slices to avoid rule shifting spanning multiple slices. Only in the worst case

scenario, when all slices have been allocated for at least some rules, will new virtual slices not be

available and TCAM rule shifting may have to span multiple slices.

• ACL rule insertion improvement—first attempt to find a “hole” at the same precedence level:

Previously, deletions did not form “holes”. However, other ACL improvements listed above will

create holes. Now we will attempt to fill an existing hole at the specified precedence level to avoid

any shifting associated with the insertion.

Enhance Clear Counters Per Port Command This feature enhances the clear counters ports command by supporting a <port_list>

argument.

Multi-switch Link Aggregation Group (MLAG) Out-of- Band Keep-Alive Protocol This feature directs health check messages to also be exchanged on an alternate path—typically

management VLAN. If the peer is alive when the ISC link alone goes down, one of the MLAG peers

disables its MLAG ports to prevent duplicate south-bound traffic to the remote node.

Multi-switch Link Aggregation Group (MLAG) Support for More than One Peer ExtremeXOS now supports for MLAG switches to create two MLAG peers.

Multi-switch Link Aggregation Group (MLAG) MD5 Hash for TCP Checkpointing

Connecting The checkpoint messages exchanged between MLAG peers over a TCP connection are sent in plain

text and are vulnerable to spoofing. This feature secures the checkpoint connection against

spoofing.

Layer 2 Protocol Tunneling (L2PT) and Filtering L2PT is useful for connecting remote switches across a service provider network

Y.1731 Compliant Performance Monitoring SNMP MIBs This feature adds support for Y.1731 performance measurement MIB defined by MEF-36

(http://metroethernetforum.org/PDF_Documents/technicalspecifications/MEF_36.pdf).

Multiprotocol Label Switching (MPLS) Pseudowire— Label-Switched Path (PW-LSP)

MIB Counters By implementing the tables in PW LSP sharing MIB, the SNMP manager can observe the transmit

packet counters over each LSP that is configured for use by the PW, and aggregate transmit and

receive packet counters over the PW itself.

Joint Interoperability Test Command (JITC)

Compliance Joint Interoperability Test Command (JITC) compliance

New and Corrected Features in ExtremeXOS 15.6

Dynamic Host Configuration Protocol (DHCP) v6 RFC3315 Client The DHCPv6 for IPv6 enables DHCPv6 servers to pass configuration parameters such as IPv6 network

addresses to a DHCPv6 client.

Python Scripting The load script <script> command can now be a Python v2.7.3 compatible script and may

interact with the CLI and file system.

Inter-Virtual Router (VR) Routing for IPv4 Unicast Static Routes This feature supports IPv4 Inter-VR routing via static routes. Virtual routers (VR) allow for separate

Layer 3 routing domains.

Link Aggregation (LAG) Configuration Change Does Not Disrupt Spanning Tree

Protocol (STP) Operation Currently, adding or deleting ports from a link aggregation group (LAG) produces the following error: Warning: Any config on the master port is lost (STP, IGMP Filter, IGMP Static Group, MAC-Security, CFM, TRILL, etc.)

The current LAG implementation modifies the switch hardware VLAN interface tables by removing

the entire LAG configuration and replaces it with the new LAG configuration. This destruction and

recreation of virtual port interfaces may exhibit the characteristics of interface flapping and may

cause traffic loss. This behavior is independent of any protocols configured on a LAG interface.

Enable IProute Compression by Default Compressed routes reduce the number of routes that are installed in the hardware routing tables.

This improves packet forwarding performance when the switch uses hardware routing tables

Layer 2 Protocol Tunneling (L2PT) and Filtering for Multi-protocol Label Switching

(MPLS) This feature was first introduced in ExtremeXOS 15.5.1. This revision of the feature adds MPLS

support.

Port-Specific VLAN Tagging This feature allows bridging of frames with different VLAN IDs that have been trunked by third-party

equipment

New and Corrected Features in ExtremeXOS 15.7

Bridge and Q-Bridge Management Information Bases (MIBs) This feature:

Implements the following objects/tables as defined by RFC 4363:

dot1qBase group

dot1qPortVlanTable under dot1qVlan group

dot1qVlanStaticTable under dot1qVlan group

Adds dot1BasePortTable support into the existing Bridge MIB on ExtremeXOS.

Open Shortest Path First (OSPF)v2/v3 Import Policy Improvements This feature allows Import Policy to be used by OSPFv2/v3 to install routes selectively into the switch

routing table.

ExtremeXOS Trivial File Transfer Protocol (TFTP) Client MTU/Block-Size Configuration This feature adds support in ExtremeXOS commands for a configurable block-size option when

transferring files using Trivial File Transfer Protocol (TFTP).

ExtremeXOS I/O Native Applications Support This feature provides means to extend the native capabilities of ExtremeXOS through Python

processes

ExtremeXOS Web-Based GUI: Chalet Chalet is a web-based user interface for setting up and viewing information about a switch. Chalet

removes the need to know and remember commands in a command line environment

Label-Switched Path (LSP) Fast Failover ExtremeXOS Multiprotocol Label Switching (MPLS) provides support for Redundant Resource

Reservation Protocol - Traffic Engineering (RSVP-TE) label-switched paths (LSPs), which allows the

configuration of a primary and up to two secondary paths for a particular LSP

Multi-protocol Label Switching (MPLS) Resource Reservation Protocol - Traffic

Engineering (RSVP-TE) Explicit Route Option (ERO) Exclude Option This feature allow the path for a Resource Reservation Protocol – Traffic Engineering (RSVP-TE)

Label-Switched Path (LSP) to be calculated to avoid certain hops.

Clear Internet Protocol Address Resolution Protocol (IPARP)/Clear Neighbor-Discovery

Refresh This feature enhances the clear iparp and clear neighbor-discovery commands by adding an

ability to clear only inactive neighbor entries

Minimum Number of Link Aggregation Control Protocol (LACP) Link Aggregate Group

(LAG) Members The LAG minimum links feature allows you to configure a value for the minimum number of active

links to keep the entire LAG up.

AAA: Ability to Administer All Default User Accounts Accounts can be disabled or enabled locally using read/write access. Even all administrative

privileged accounts and user privileged accounts can be disabled.

Network Time Protocol (NTP) over Management Port Network Time Protocol (NTP) is a protocol for synchronizing clocks of servers or network entities

using TCP/IP-based networks which have a coherent variable latency

Dynamic Host Configuration Protocol (DHCPv6) Relay— Install Routes for Snooped

Delegated IPv6 Prefixes This feature provides a way for the ExtremeXOS DHCPv6 Relay Agent to install routes for ensuring

reachability to DHCPv6 clients that get their IP addresses from customer edge switches which

distribute a delegated IPv6 prefix to the clients.

Multicast Listener Discovery (MLD) Source Specific Multicast (SSM) Mapping This feature enables MLDv1 hosts to participate in Source Specific Multicast (SSM).

Virtual Machine (VM) Tracking Enhancements for NetSight Previously, when XNV is enabled on Multiple Link Aggregation Group (MLAG)- enabled ports, both

MLAG peers authenticate the VM independently. Now, to integrate with NetSight and Network

Access Control (NAC), provided MLAG peers have ISC connectivity, only one MLAG peer

authenticates a VM that is learned on an MLAG port.

Configuring Power Budget Capability for Summit X430- 8p Switches You can now configure the budgeted Power over Ethernet (PoE) power reserved for all power

devices for Summit X430-8p switches from 60–90 W.

Zero Touch Provisioning The Zero Touch Provisioning feature enables switches “out of the box” to automatically gain a

management IP address and configuration without serial cables and manual configuration.

31-Bit Prefixes on IPv4 Interfaces (RFC 3021) You can now configure IPv4 addresses with 31-bit prefixes on both network VLANs and the

Management VLAN. Applications (for example, Ping) and protocols (for example, OSPF) can use the

IPv4 interfaces configured with these 31-bit prefixes.

Priority Flow Control (PFC) Statistics per Port This feature introduces a new command that displays the number of priority flow control (PFC)

pause control frames sent and received on a specific port.

Entity Management Information Base (MIB) Port Support The Entity management information base (MIB) provides a standard Simple Network Management

Protocol (SNMP) mechanism to retrieve device-specific information.

Spanning Tree Protocol (STP) Enhancements This enhancement to the ExtremeXOS Spanning Tree Protocol (STP) Implementation

Private Virtual Local Area Networks (PVLANs) Management Information Base (MIB) ExtremeXOS 15.7 now has the following MIB tables:

PVLAN Table supporting GET/SET.

PVLAN Member VLAN Table supporting GET/SET and the following changes to existing MIB

tables:

o Modifications to extremeVlanOpaqueControlTable for adding translated ports.

o Modifications to extremeVlanOpaqueTable to display translated VLAN ports.

MAC Address Locking This feature introduces the ability to limit access to a port to specified MAC addresses or a maximum

number of MAC addresses on a first-come first-served basis.

Open Shortest Path First (OSPF)v3 Point-to-Point Interfaces This feature for OSPFv3 is similar to OSPFv2 point-to-point interfaces, which is already supported in

ExtremeXOS

ExtremeXOS Secure Shell/Secure Copy Protocol (SSH/ SCP) Client Upgrade Using

OpenSSH This feature upgrades SSH client/SCP client behavior using OpenSSH from openssh-3.9p1 to openssh-

6.5p1.

Link Aggregation Group (LAG)—Multiple VLAN Registration Protocol (MVRP)

Enhancements Link aggregation allows an increased bandwidth and resilience by using a group of ports to carry

traffic in parallel between switches. Multiple ports can be aggregated into one logical port. MVRP

can be enabled on the logical port. The MVRP control packets are transmitted on any available

physical port of the LAG.

OpenFlow v1.3 and Pseudowire Multiprotocol Label Switching (MPLS) This feature provides limited support of OpenFlow v1.3 and includes controlling a Multiprotocol

Label Switching (MPLS) Pseudowire overlay network using OpenFlow

Static Generalized Precision Time Protocol (gPTP) Port Roles The Generalized Precision Time Protocol (gPTP) port role feature allows you to enable or disable the

Best Master Clock Algorithm (BMCA) function of gPTP.

Protocol Independent Multicast (PIM) Enhancement: Shortest-Path Tree (SPT)

Threshold Option “Infinity” This enhancement adds a new option for the shortest-path tree (SPT) threshold parameter that

causes the last hop router (LHR) to not switch over to SPT from rendezvous point (RP) tree. When

this option is configured, an LHR or intermediary route does not build (S;G)s entries; instead traffic

paths are based on (*;G)s only.

New and Corrected Features in ExtremeXOS 16.1

RADIUS Authentication and Authorization Enhancements The RADIUS client software sends authentication requests using standard mechanisms for PAP,

CHAP (RFC 2865 (13)) and EAP (RFC 3579 (12)).

This feature introduces authentication retransmission algorithm capability, which uses two

retransmission algorithms in combination: Back-off Round Robin, and simple Round Robin. These

retransmission algorithms provide server redundancy.

ONEPolicy ONEPolicy allows you create profiles for securing and provisioning network resources based upon

the role the user or device plays within the enterprise. By first defining the user or device role,

network resources can be tailored to a specific user, system, service, or port-based context by

configuring and assigning rules to the policy role. A policy role can be configured for any

combination of Class of Service, VLAN assignment, classification rule precedence, or default

behaviour based upon L2, L3, and L4 packet fields. Hybrid authentication allows either policy or

dynamic VLAN assignment, or both, to be applied through RADIUS authorization.

Access Control List (ACL) Library Enhancements To implement ONEPolicy requires enhancements to certain existing Access Control List (ACL)

conditions and actions, plus the addition of some new ones

Class of Service (CoS) Class of Service (CoS) prioritizes, rate-limits, rate shapes, and otherwise controls defined traffic types

of a switch; it is used as part of a bandwidth management strategy. CoS is an enhancement to the

existing Quality of Service (QoS) feature. CoS is typically configured using NetSight through the CoS

Management Information Base (MIB).

Command Usability Enhancements This feature changes a select set of commands so that you may specify VLANs by VID instead of by

name. Some commands allow you to specify a list of VIDs.

Access Control List (ACL) Two-Stage Policy This feature exposes the VLAN Content Aware Processor/VLAN Filter Processor (VCAP/VFP) using the

ExtremeXOS Access Control List (ACL) manager.

Security Enhancements This feature includes the following changes and enhancements:

Configurable timed lockout that is applied to accounts after a configurable number of failed

logon attempts.

Stronger hash algorithm for account passwords.

Removal of unmasked passwords in the command line interface.

Stronger obfuscation of RADIUS and TACACS+ shared secrets.

Integrity checking of downloaded images.

Syslog alert issued when a configurable percentage of the Syslog memory buffer is filled.

Optionally restricting the use of show log and show diagnostics commands by

nonadministrator accounts.

The “safe defaults” script (unconfigured switch startup wizard) enables these new options

collectively, as well as forcing the user to change the default administrator and failsafe

passwords.

Generalized Precision Time Protocol (gPTP) Enhancement Previously, the number of Generalized Precision Time Protocol (gPTP)-capable ports was static.

Switches now handle a variable number of ports based on the number of ports on the switch.

Extreme Loop Recovery Protocol (ELRP) Port Shutdown Extreme Loop Recovery Protocol (ELRP) detects loops by sending out an ELRP protocol data units

(PDUs) out of one or more ports of a particular VLAN. ELRP takes system MAC addresses, changes

them to a broadcast MAC address by appending “01:” to the front, and then sends out the PDUs. If

PDUs are received back by ELRP, a loop is present. Each ELRP PDU is sent on a particular VLAN, so

you must configure each VLAN that you wish to monitor.

In this ELRP enhancement, when a loop is detected using ELRP, an option to disable the port where

the ELRP packet egresses is added to suppress the loop. You may specify a duration, which after it

expires, the ports are enabled, or you can keep the ports disabled permanently until you choose to

enable them.

Increase of Protocol-Independent Multicast (PIM) Control Packets Previously, ExtremeXOS Protocol-Independent Multicast (PIM) implementation sends maximum

1,500 byte-size control packets that can accommodate 175 sources per multicast group.

The size of these control packets has now been increased to accommodate 3,000+ sources per

group.

This large control packet is fragmented at the IP layer and reassembled at the received node.

OpenFlow Updated Match Conditions and Actions ExtremeXOS 16.1 includes an upgrade to OpenFlow v1.3 by upgrading from version 1.4 to 2.1 of

OpenVswitch. The match conditions and actions tables change as result of this upgrade.

Alternate Stacking Supported on 1G Variant of Summit X460-G2 Series Switches Alternate stacking is now available for 1G oriented Summit X460-G2 series switches with 10G VIM

modules (VIM-2T or VIM-2X).

Two-Way Active Measurement Protocol (TWAMP) Light This features is the light version of TWAMP, which is an industry standard (RFC 5357) for measuring

round-trip performance between two devices that support the TWAMP protocols. TWAMP defines

two protocols: the TWAMP-Control protocol and the TWAMP-Test protocol. The TWAMP-Control

protocol is used to set up test sessions. The test sessions use the TWAMP-Test protocol to transmit

and reflect performance measurement packets. The TWAMP-Control protocol uses TCP for

communication, while the TWAMP-Test protocol uses UDP.

Flow Redirects (Policy-Based Routes) Limits Increase The limit of number of flow redirects and flow redirect next hops has been increased. This allows

you to install many more policy-based routes in the switch.

The number of flow redirects was limited to 256; that limit is increased to 4,096. The number of next

hops was limited to 32 per flow redirect; this limit is increased to 4,096 next hops cumulatively

across all flow redirects.

Single Virtual Group for User Access Control Lists (ACLs) This feature allows you to put all user rules into a single virtual group to prevent multiple rule

matches and allow only the highest priority rule to do the matching and execute its actions.

40Gbps LR4 Parallel Single-Mode (PSM) Quad Small Form-Factor Pluggable (QSFP)

Optical Transceiver This feature adds support for the LR4 Parallel Single Mode (PSM) Quad Small Form-Factor Pluggable

(QSFP) optical transceiver on 40G optical QSFP+ ports. Running in 4 × 10g mode allows gives you the

capability of having four independent transmit and receive channels, each capable of 10Gbps

operation over a 10km single mode fiber hydra MPO to 4xLC duplex patch cord terminated with

standard 10G LR SFP+ optical transceivers.