beautypg.com

Performance optimization on fc long distance isls, Fos security enhancements – Dell POWEREDGE M1000E User Manual

Page 8

background image

Fabric OS v7.1.0a Release Notes v1.0

Page 8 of 41

FEC (Forward Error Correction) Support Enhancements

FEC Support on Additional Links

With FOS v7.1 FEC support is extended as follows:

FEC support on links between 16G switch and 16G AG

FEC support on links between 16G switch and Brocade 16G HBA (requires HBA driver 3.2 or
later)

FEC support on links between a pair 16G AGs (for cascaded Access Gateway Configurations)

FEC support on links between 16G AG and Brocade 16G HBA (requires HBA driver 3.2 or
later)

Note:

In FOS v7.0.x FEC is supported only on the 16G FC ISLs.

Enable or Disable FEC for Long Distance Port

FOS v7.1 allows users to enable or disable the FEC feature while configuring a long distance
link. This allows end users to turn off FEC where it is not recommended, such as when
configuring active DWDM links.

Performance Optimization on FC Long Distance ISLs

Several enhancements are made in FOS v7.1 to allow users to optimize performance on FC long distance ISLs.
These enhancements include:

Two new options for the portcfglongdistance command - one option to configure the number of
buffers, and another option to configure the frame size for LD and LS modes.

Display of average buffer usage and average frame size in portbuffershow output

A new command portBufferCalc,

to calculate the number of buffers required on a long distance port,

by providing the distance, speed and average frame size.

FOS Security Enhancements

TACACS+ Support

In addition to RADIUS and LDAP, FOS v7.1 also supports TACACS+ for user authentication and authorization.

Support includes:

Allowing users to login to FOS switches using user accounts configured in the TACACS+ server.

Allowing users to configure the TACACS+ server configuration using the “aaaconfig” command.

Open LDAP Support

Starting with FOS v7.1, OpenLDAP server based authentication is supported for FOS platforms. When
configured with the correct CA certificate(s), the complete LDAP session will be encrypted using TLS.

Miscellaneous LDAP Enhancements
Previous to FOS v7.1, complete “userPrincipalName” was mandatory for user authentication. Starting with FOS
v7.1, users need not provide the domain part of the “userPrincipalName”.

Support for Password Expiration Policy per User

FOS v7.1 allows the password expiration policy to be configured on a per user basis. User accounts without
this configuration will take the global password expiration configuration.