Professional Documents
Culture Documents
3COM OS Switch 4500 V3.03.02p20 Release Notes
3COM OS Switch 4500 V3.03.02p20 Release Notes
Full spelling Access Control List Command line interface Dynamic Host Configuration Protocol File Transfer Protocol Generic Attribute Registration Protocol GARP VLAN Registration Protocol Huawei Group Management Protocol Hypertext Transfer Protocol Internet Control Message Protocol Internet Group Management Protocol Internet Protocol Link Aggregation Control Protocol Management Information Base Multiple Spanning Tree Protocol Neighbor Discovery Protocol Net Time Protocol Quality of Service Remote Authentication Dial-In User Service Remote Monitoring Rapid Spanning Tree Protocol Simple Network Management Protocol Strict Priority Secure Shell
Page 1 of 1
Full spelling Spanning Tree Protocol Trivial File Transfer Protocol User Datagram Protocol Virtual Local Area Network 3Com Network Director
Page 2 of 2
Table of Contents
Version Information 6 Version Number 6 Version History 6 Hardware and Software Compatibility Matrix 7 Restrictions and Cautions 8 Feature List 9 Hardware Features 9 Software Features 9 Version Updates 11 Feature Updates 11 Command Line Updates 15 MIB Updates 30 Configuration Changes 32 V3.03.02p20 Operation Changes 32 V3.03.02p19 Operation Changes 33 V3.03.02p15 Operation Changes 33 V3.03.02p11 Operation Changes 33 V3.03.02p09 Operation Changes 34 V3.03.02p06 Operation Changes 34 V3.03.02p05 Operation Changes 34 V3.03.02p04 Operation Changes 35 V3.03.02p03 Operation Changes 35 V3.03.02p01 Operation Changes 36 V3.03.02 Operation Changes 36 V3.03.00p03 Operation Changes 36 V3.03.00p01 Operation Changes 37 V3.03.00 Operation Changes 37 Open Problems and Workarounds 37 List of Resolved Problems 37 Resolved Problems in V3.03.02p20 37 Resolved Problems in V3.03.02p19 38 Resolved Problems in V3.03.02p15 41 Resolved Problems in V3.03.02p11 43 Resolved Problems in V3.03.02p09 45 Resolved Problems in V3.03.02p06 48 Resolved Problems in V3.03.02p05 49 Resolved Problems in V3.03.02p04 51 Resolved Problems in V3.03.02p03 52 Resolved Problems in V3.03.02p01 57
October 19, 2012 Page 3 of 3
Resolved Problems in V3.03.02 59 Resolved Problems in V3.03.00p03 59 Resolved Problems in V3.03.00p02 61 Resolved Problems in V3.03.00p01 64 Resolved Problems in V3.03.00 66 Resolved Problems in V3.02.00p02 66 Resolved Problems in V3.02.00p01 67 Resolved Problems in V3.02.00 67 Resolved Problems in V3.01.00p03 67 Resolved Problems in V3.01.00p02 68 Resolved Problems in V3.01.00p01 68 Resolved Problems in V3.01.00 68 Related Documentation 68 Software Upgrading 69 Remote Upgrading through CLI 69 Boot Menu 69 Software Upgrading via Console Port (Xmodem Protocol) 71 Using TFTP Through an Ethernet Interface 72 Using FTP Through an Ethernet Interface 73 Appendix 74 Details of Added or Modified CLI Commands in V3.03.02p06 74 dot1x unicast-trigger 74 Details of Added or Modified CLI Commands in V3.03.02p11 75 mac-authentication timer offline-detect 75 bpdu-drop any 76 Details of Added or Modified CLI Commands in V3.03.02p15 76 voice vlan lldp 76 display link-delay 77 link-delay 77 link-delay up 78 link-delay updown 79 Details of Added or Modified CLI Commands in V3.03.02p19 79 mac-address station-move quick-notify 79 arp rate-limit enable noshut 80 dot1x auth-fail-retry 81
Page 4 of 4
List of Tables
Table 1 Version history .............................................................................................................................. 6 Table 2 Compatibility matrix....................................................................................................................... 7 Table 3 Hardware features ........................................................................................................................ 9 Table 4 Software features .......................................................................................................................... 9 Table 5 Feature updates ........................................................................................................................... 11 Table 6 Command line updates ............................................................................................................... 15 Table 7 MIB updates ................................................................................................................................ 30
Page 5 of 5
Version Information
Version Number
Version Information: 3Com OS V3.03.02s168p20 Note: To view version information, use the display version command in any view. See Note.
Version History
Table 1 Version history Version number V3.03.02s168p20 V3.03.02s168p19 V3.03.02s168p15 V3.03.02s168p11 V3.03.02s168p09 Last version V3.03.02s168p19 V3.03.02s168p15 V3.03.02s168p11 V3.03.02s168p09 V3.03.02s168p06 Release Date 2012-10-18 2012-06-19 2010-12-15 2010-06-21 2010-04-23 None None None None From the version, only release the APP of 168-bit encryption for SSH. None Remarks
V3.03.02s56p06 V3.03.02s168p06 V3.03.02s56p05 V3.03.02s168p05 V3.03.02s56p04 V3.03.02s168p04 V3.03.02s56p03 V3.03.02s168p03 V3.03.02s56p01 V3.03.02s168p01 V3.03.02s56 V3.03.02s168 V3.03.00s56p03 V3.03.00s168p03 V3.03.00s56p02 V3.03.00s168p02 V3.03.00s56p01 V3.03.00s168p01
V3.03.02s56p05 V3.03.02s168p05 V3.03.02s56p04 V3.03.02s168p04 V3.03.02s56p03 V3.03.02s168p03 V3.03.02s56p01 V3.03.02s168p01 V3.03.02s56 V3.03.02s168 V3.03.00s56p03 V3.03.00s168p03 V3.03.00s56p02 V3.03.00s168p02 V3.03.00s56p01 V3.03.00s168p01 V3.03.00s56 V3.03.00s168
2009-12-23
2009-10-14
None
2009-08-19
None
2009-06-19
None
2009-02-23
features
2008-10-31
features
2008-09-25
2008-06-16
None
2008-03-20
None
Page 6 of 6
Version number V3.03.00s56 V3.03.00s168 V3.02.00s56p02 V3.02.00s168p02 V3.02.00s56p01 V3.02.00s168p01 V3.02.00s56 V3.02.00s168 V3.01.00s56p03 V3.01.00s168p03 V3.01.00s56p02 V3.01.00s168p02 V3.01.00s56p01 V3.01.00s168p01 V3.01.00s56 V3.01.00s168
Last version V3.02.00s56p02 V3.02.00s168p02 V3.02.00s56p01 V3.02.00s168p01 V3.02.00s56 V3.02.00s168 V3.01.00s56p03 V3.01.00s168p03 V3.01.00s56p02 V3.01.00s168p02 V3.01.00s56p01 V3.01.00s168p01 V3.01.00s56 V3.01.00s168 First release
2007-07-20
2007-06-30
None
2007-01-17
features
2006-09-21
2006-06-13
None
2006-01-09
None
2005-10-27
First release
Specifications
Page 7 of 7
Specifications
When a switch with a new version flash runs V3.01.00, using FTP to upload an application file to the switch, or performing write operations on the flash of the switch such as executing the display diagnostic-information command often fails. V3.01.00p01 and later have solved this problem.
A device running boot ROM V1.00 may get out of power during startup, which may cause the loss of the application file. You are recommended to upgrade the boot ROM version to V1.01 to solve this problem.
<4500>display version 3Com Corporation Switch 4500 26-Port Software Version 3Com OS V3.xx.xx ------- Note Copyright (c) 2004-2008 3Com Corporation and its licensors, All rights reserved. Switch 4500 26-Port uptime is 0 week, 0 day, 0 hour, 0 minute
Switch 4500 26-Port with 1 MIPS Processor 64M 8196K bytes DRAM bytes Flash Memory
Feature List
Hardware Features
Table 3 Hardware features Category Dimensions (H W D) Description 43.6mm 440mm 260mm (1.72 17.32 10.24 in.) (devices without PWR) 43.6mm 440mm 420mm (1.72 17.32 16.54 in.) (devices with PWR)
Weight (full configuration) 3.5Kg (7.72 lb.) (26-port devices without PWR) 4Kg (8.82 lb.) (50-port devices without PWR) 5.8Kg (12.79 lb.) (26-port devices with PWR) 6.2Kg (13.67 lb.) (50-Port devices with PWR)
Maximum consumption
power
40 W (26-port devices without PWR) 50 W (50-port devices without PWR) 380 W (26-port devices with PWR) 380 W (50-Port devices with PWR)
Input voltage
AC: Rated voltage range: 100 VAC to 240 VAC (50Hz to 60Hz) Max voltage range: 90 VAC to 264 VAC (50Hz to 60Hz) DC: Rated voltage range: 48 VDC to 60 VDC Max voltage range: 72 VDC to 36 VDC
Software Features
Table 4 Software features Features Port auto-negotiation Flow control Link aggregation Description Supports both speed and duplex mode auto-negotiation. Supports IEEE 802.3x-compliant flow control for full-duplex, and backpressure based flow control for half-duplex. Supports up to 8 aggregation groups, each of which supports up to 8 FE ports or 4 GE ports.
Page 9 of 9
Description The port internal loopback test detects the connectivity between switch chips and PHY chips. The port external loopback test detects the connectivity between PHY chips and network interfaces with the help of the self-loop header. The two tests used together can determine whether a fault is a switch fault or a link fault.
Combo ports Unicast, multicast and broadcast suppression VLAN MAC address table Supports bandwidth ratio- and rate-based suppression modes on ports. Supports port-based VLANs, and up to 256 IEEE 802.1Q-compliant VLANs. Supports MAC address learning and up to 8K MAC addresses; Complies with IEEE 802.1D; Notifies MAC address changes to ARP. RSTP 802.1X authentication Supports STP and complies with IEEE 802.1D. Supports PEAP/EAP/TLS/TTLS. The main purpose of IEEE 802.1X is to implement authentication for wireless LAN users, but its application in IEEE 802 LANs provides a method of authenticating LAN users. SSHv2 Secure Shell (SSH) offers an approach to logging into a remote device securely. By encryption and strong authentication, it protects devices against attacks such as IP spoofing and plain text password interception. A switch can work as an SSH server to support connections with SSH clients running on PCs. The voice VLAN feature adds ports into voice VLANs by identifying the source MAC addresses of packets. It automatically assigns higher priority for voice traffic to ensure voice quality. This feature supports two application modes: manual and automatic. Through a DHCP relay agent, DHCP clients in a subnet can communicate with a DHCP server in another subnet to obtain valid IP addresses. In this way, DHCP clients in different subnets can share one DHCP server. This method saves costs and helps implement centralized management. Supports up to 256 static ARP entries. Supports static routing and RIP. Internet Group Management Protocol Snooping (IGMP Snooping) is a multicast constraining mechanism that runs on Layer 2 devices to manage and control multicast groups. Bandwidth management; flow control with 64 bps granularity; 8 sending queues per port; Traffic classification; Traffic rate limit; Port mirroring, which supports only one source mirroring port.
Voice VLAN
QoS
Page 10 of 10
Description Software upload and upgrade through the XMODEM protocol, FTP or TFTP To implement authentication on remote telnet, web, and console users, you need to configure use names and passwords on a RADIUS server, and configure RADIUS authentication on the access switch. When such a user logs onto the switch, the switch sends the user name and password to the RADIUS server for authentication. If the user passes authentication, it can log it to the switch. The switch can only works as a TFTP client. Configuration methods supported: CLI, console port, telnet, and Modem; Features and functions supported: SNMP, remote monitoring (RMON) 1/2/3/9 group MIBs, system logging, hierarchical alarming, Syslog And NTP. Filtering, output and collection of alarm/debug information; Diagnostic tools: Ping, Tracert, and so on; Remote maintenance through Telnet and other ways
Network maintenance
web Fault diagnostics and alarm output Fast startup Detects and reports hardware/software faults. In fast startup mode, a switch can complete a startup process within 60 seconds by skipping the power-on self test (POST) and directly running the APP program. You can set the startup mode to fast or normal in the boot ROM menu.
Version Updates
Feature Updates
Table 5 Feature updates Version Number V3.03.02p20 Item Hardware feature updates Software feature updates V3.03.02p19 Hardware feature updates Software feature updates V3.03.02p15 Hardware feature updates None None None New feature: ARP quick update None Description
Page 11 of 11
Version Number
Description
1) Automatic Discovery of IP Phones Using LLDP 2) Link State Change Suppression Configuration
V3.03.02p11
None New features: bpdu-drop any None New features: 1) DHCP client supports automatic configuration of default route None New features: 1) 802.1X Unicast Trigger Function None None None New features: 1) System-guard transparent feature With this function, you can configure the switch not to deliver RIP multicast packets to the CPU while the protocol is not enabled on the switch. 2) Mac-address max-mac-count log 3) LACP MAD
V3.03.02p09
V3.03.02p06
V3.03.02p05
V3.03.02p04
V3.03.02p03
None New features: 1) Restart accounting when the reauthentication user name changes. 2) Private LLDP MIB 3) CPU-protection feature 4) Command-alias feature 5) Loopback detection trap 6) IPv6 ACL
V3.03.02p01
October 19, 2012
Hardware feature
None
Page 12 of 12
Item Software feature updates New features: 1) 2) 3) HTTPS Auto VLAN AM binding
Description
3 types of binding added: IP-MAC binding, IP-port binding, MAC-port binding. 4) 5) line-rate assignment feature of RADIUS Attribute ignore feature
This feature can be configured to ignore the authentication attribute in the RADIUS Authentication Accept packet. Please refer to the Operation Manual and Command Manual. V3.03.02 Hardware feature updates Software feature updates None New features: 1) 2) 3) 4) LLDP IP Source Guard Dynamic ARP Inspection HWTACACS.
Please refer to the Operation Manual and Command Manual. V3.03.00p03 Hardware feature updates Software feature updates None New features: 1) 2) 3) V3.03.00p02 Hardware feature updates Software feature updates Sub IP DHCP server Password control
None New features: RSA, DSA negotiation order self-selection and GVRP None New features: Support for RFC4188 and RFC2674. None
Page 13 of 13
V3.03.00p01
V3.03.00
October 19, 2012
Version Number
Description New features added to V3.03.00e on the basis of V3.02.xx: 1) 2) 3) 4) 5) 6) 7) 8) 9) VLAN mapping Selective QINQ IGMP snooping non-flooding FTP banner HTTP banner Telnet copyright Speed auto-negotiation configuration Port link-delay (link state change delay) Host manual addition to a multicast group
10) Dot1X handshake control 11) Router port manual designation 12) Support for inner-VLAN based Layer-2 ACL configuration, which allows you to configure ACL rules based on the inner VLAN information of packets. 13) IPv6 management 14) DHCP snooping support for processing DHCP NAK and decline packets 15) Enhanced SFP, supporting SFP encryption information reading 16) Port isolation across a stack 17) EAP authentication mode for telnet users 18) Port security and/or mode 19) RIP support for modifying the offset field for specific subnets 20) SNMP support for password configuration copy 21) IGMPv3 snooping 22) Support for long domain names 23) Support for mask configuration in SNMP MIBview 24) MAC-authentication support for guest VLAN 25) DLDP recover 26) DHCP option 82 string function 27) HGMP topology management and trace-MAC 28) EAD quick employment 29) Support for web-based cluster configuration
October 19, 2012 Page 14 of 14
Version Number
Item
Description 30) Destination MAC address update Deleted features: password control
V3.02.00p02
None New features: 1. Or mode of port-security Dot1X request packets trigger dot1X authentication; non-dot1X packets with an unknown MAC address trigger MACauthentication. Suppose the source MAC address of a dot1X packet passes MAC authentication. If it then passes dot1X authentication, the original MAC authentication user logs out automatically; if not, the original MAC authentication user keeps online.
V3.02.00
None New features: 1) 2) 3) 4) 5) Putty V0.58 support Syslog to host 802.1X PEAP/EAP/TLS/TTLS NTP Notifying MAC address/port changes to ARP
V3.01.00
First release; refer to related manuals for more information. First release; refer to related manuals for more information.
Description
Version Number
Description
Command 1: arp rate-limit enable noshut Add new keyword of noshut to command arp ratelimit enable. Please refer to Details of Added or Modified CLI Commands in V3.03.02p19
V3.03.02p15
Refer to Details of Added or Modified CLI Commands in V3.03.02p15 None None bpdu-drop any Refer to Details of Added or Modified CLI Commands in V3.03.02p11
V3.03.02p11
New Commands
None mac-authentication timer offline-detect Refer to Details of Added or Modified CLI Commands in V3.03.02p11
V3.03.02p09
None None None Refer to Details of Added or Modified CLI Commands in V3.03.02p06 None None None None None Command 1: Syntax system-guard transparent rip undo system-guard transparent rip View System view Description Use the system-guard transparent command to configure the system-guard transparent function for RIP protocol. Then, upon receiving a RIP multicast packet, the switch will only broadcast the packet within
V3.03.02p06
V3.03.02p05
V3.03.02p04
New Commands
Page 16 of 16
Version Number
Item
Description the corresponding VLAN, but not deliver the packet to the CPU for processing. Use the undo system-guard transparent command to disable the function for RIP protocol. Then, upon receiving a RIP multicast packet, the switch will not only broadcast the packet within the corresponding VLAN but also deliver the packet to the CPU for processing. By default, the system-guard transparent function is disabled on the switch. Note that: