Ipv6 Multicast Features; Security Features - Dell PowerConnect 8024 User Manual

Protocol Independent Multicast-Sparse Mode
Protocol Independent Multicast-Sparse Mode (PIM-SM) is used to efficiently route multicast traffic to
multicast groups that may span wide area networks, and where bandwidth is a constraint. PIM-SM uses
shared trees by default and implements source-based trees for efficiency. This data threshold rate is used
to toggle between trees.

IPv6 Multicast Features

Protocol Independent Multicast IPv6 Support
PIM-DM and PIM-SM support IPv6 routes.
MLD/MLDv2 (RFC2710/RFC3810)
MLD is used by IPv6 systems (listeners and routers) to report their IP multicast addresses memberships
to any neighboring multicast routers. The implementation of MLD v2 is backward compatible with
MLD v1.
MLD protocol enables the IPv6 router to discover the presence of multicast listeners, the nodes that
want to receive the multicast data packets, on its directly attached interfaces. The protocol specifically
discovers which multicast addresses are of interest to its neighboring nodes and provides this information
to the multicast routing protocol that make the decision on the flow of the multicast data packets.

Security Features

Access Control Lists (ACL)
Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while
blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow
control, restrict contents of routing updates, decide which types of traffic are forwarded or blocked, and
above all provide security for the network.
For information about defining ACLs, see "IP ACL Configuration" and "MAC ACL Configuration."
Dot1x Authentication (802.1x)
Dot1x authentication enables the authentication of system users through an external server. Only
authenticated and approved system users can transmit and receive data. Supplicants are authenticated
through the Remote Authentication Dial In User Service (RADIUS) server using the Extensible
Authentication Protocol (EAP). Also supported are PEAP , EAP-TTL, EAP-TTLS, and EAP-TLS. MAC-
based authentication allows multiple supplicants connected to the same port to each authenticate
individually. For example, a system attached to the port might be required to authenticate in order to
gain access to the network, while a VoIP phone might not need to authenticate in order to send voice
traffic through the port.
For information about enabling and configuring 802.1X port authentication, see "Dot1x
Authentication."
35
Introduction