Hitless Management Configuration Notes And Feature Limitations - Brocade Communications Systems FastIron Administration Manual

TABLE 13
Traffic type
Layer 3 IPv6 routed
traffic
Management traffic
Security
Other services to
Management

Hitless management configuration notes and feature limitations

The following limitations apply to hitless management support.
FastIron Ethernet Switch Administration Guide
53-1003625-01
Hitless management configuration notes and feature limitations
Hitless-supported services and protocols - FSX 800 and FSX 1600 (Continued)
Supported protocols and services
• BGP4+
• IPv6 unicast forwarding
• OSPFv3
• OSPFv3 with ECMP
• Static routes
• VRRP
• VRRP-E
N/A
• 802.1X, including use with dynamic
ACLs and VLANs
• IPv4 ACLs
• IPv6 ACLs
• DHCP snooping
• Dynamic ARP inspection
• EAP with RADIUS
• IP source guard
• Multi-device port authentication,
including use with dynamic ACLs and
VLANs
• AAA
• DHCP
• sFlow
• SNMP v1, v2, and v3
• SNMP traps
• NTPv4
• Traceroute
Impact
Layer 3 routed traffic for supported protocols
is not impacted during a Hitless
management event. Traffic will converge to
normalcy after the new active module
becomes operational.
Other Layer 3 protocols that are not
supported will be interrupted during the
switchover or failover.
If BGP4+ graceful restart or OSPF graceful
restart / OSPFv3 NSR is enabled, it will be
gracefully restarted and traffic will converge
to normalcy after the new active module
becomes operational.
Configured ACLs will operate in a hitless
manner.
All existing management sessions (SNMP,
TELNET, HTTP, HTTPS, FTP, TFTP, SSH
etc.), are interrupted during the switchover
or failover process. All such sessions are
terminated and can be re-established after
the new Active Controller takes over.
Supported security protocols and services
are not impacted during a switchover or
failover.
NOTE
If 802.1X and multi-device port
authentication are enabled together on the
same port, both will be impacted during a
switchover or failover. Hitless support for
these features applies to ports with 802.1X
only or multi-device port authentication only.
Configured ACLs will operate in a hitless
manner, meaning the system will continue
to permit and deny traffic during the
switchover or failover process.
Supported protocols and services are not
impacted during a switchover or failover.
DNS lookups will continue after a switchover
or failover. This information is not
synchronized.
Ping traffic will be minimally impacted.
125