Cisco SFE2000 Release Note page 12

RELEASE NOTES
Linksys One Ready Communications Solution
STP Root Guard
Network administrators may want to prevent devices outside of the core of the network from being
assigned the spanning tree role of "root". Spanning Tree Root Guard is used to prevent an unauthorized
device from becoming the root of a spanning tree.
If root guard is enabled on a port, it is never selected as the STP root port; the roles it can be assigned are:
Designated, Alternate, Backup or Disabled. Root guard functionality enables detection and resolution of
miss configurations, while preventing loops or loss of connectivity.
BPDU filtering (when STP is disabled)
On a LAN interconnected by multiple bridges, Spanning Tree selects a controlling Root Bridge and Port
for the entire bridged LAN, and a Designated Bridge and Port for each individual LAN segment. When
traffic passes from one end station to another across the LAN, it is forwarded through the designated
Bridge/Port for the LAN segment, to the Root Bridge, which in turn forwards the traffic to the designated
Bridges/Ports on the opposite side. Bridges use Bridge Protocol Data Units (BPDUs) to communicate
Spanning Tree information.
Link Aggregation
Link Aggregation
Up to eight Aggregated Links may be defined, each with up to eight member ports, to form a single Link
Aggregated Group (LAG). This enables:
Fault tolerance protection from physical link disruption
• Higher bandwidth connections
• Improved bandwidth granularity
• High bandwidth server connectivity LAG is composed of ports with the same speed, set to full-
duplex operation
Link Aggregation and LACP
LACP uses peer exchanges across links to determine, on an ongoing basis, the aggregation capability of
various links, and continuously provides the maximum level of aggregation capability achievable
between a given pair of systems. LACP automatically determines, configures, binds and monitors the
port binding within the system.
Access Control Lists (ACLs)
Access Control Lists (ACLs) are a general mechanism to inspect incoming frames and classify them into
named logical groups based on various criteria. Each such group may have specific actions that are
carried out on each frame classified as a member of that group.
• IP ACL classification
• MAC Access Lists
• ACL actions
12
Linksys One Ready Communications Solution SFE2000/SFE2000P and SGE2000/
1 February 2007
SGE2000P