beautypg.com

Allied Telesis AT-WA1104G-10 User Manual

Page 34

background image

Features in 291-08

34

Version 291-10
C613-10488-00 REV G

CR00016662
CR00016891
CR00017335
CR00017937

-

This software release supports the new x900-48FS switch. For an overview
of the switch, see

“Support for the new x900-48FS switch—CR00016662”

on page 92

.

-

-

-

-

-

-

-

-

Y

-

-

CR00016913

PPP

-

This enhancement enables the PPPoE client to establish a session promptly
after a restart or power cycle. This is done by sending a PPPoE Active
Discovery Terminate (PADT) frame in response to a frame received with an
unknown PPPoE session ID.

Y

Y

Y

Y

Y

Y

-

-

Y

Y

Y

CR00017197

SSH, User,

RADIUS

-

SSH sessions to the router or switch can now be authenticated via RADIUS.
The router or switch attempts to authenticate an SSH user via RADIUS if the
user to be authenticated is not configured in the local user database and
the router or switch has RADIUS configured.

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

Y

CR00017395

Firewall

-

This enhancement enables the firewall to establish accurate MSS
(Maximum Segment Size) values for TCP sessions without using the MTU
discovery process. MTU discovery depends on ICMP error packets, so does
not work in networks that do not forward ICMP error packets.

To enable this feature, use the command:

enable firewall policy=name adjusttcpmss

The adjusttcpmss parameter enables the firewall to adjust the MSS value
stored inside incoming TCP SYN packets, to reflect the lower of the two
MTU values on the ingress and egress interfaces. Normally, for example, if
a TCP SYN packet arrives from an interface with an MTU of 1500 and leaves
on an interface with an MTU of 1000, the MSS inside the SYN packet will
remain at 1460. When this feature is enabled, the MSS will be adjusted to
960 because the firewall knows that the egress interface has a smaller
MTU. Note that the firewall does not change the original MSS value if it is
already lower than the values of the ingress and egress interfaces.

To disable this feature, use the command:

disable firewall policy=name adjusttcpmss

This feature is disabled by default.

Y

Y

Y

Y

Y

Y

-

-

-

-

Y

CR

Module

Level

Description

AR4

00

AR7

x5

AR7

x0S

Rap

ier i

Rap

ier w

AT

-8800

A

T-8

600

A

T-8

700

XL

x900

-48

A

T-

99

00

A

T-9

800