Dell MX9116n EMC SmartFabric OS10 User Guide - Page 354

13 Layer 2 802.1X Link Aggregation Control Protocol (LACP) Link Layer Discovery Protocol (LLDP) Media Access Control (MAC) Multiple Spanning-Tree (MST) Rapid Per-VLAN Spanning-Tree Plus (RPVST+) Rapid SpanningTree Protocol (RSTP) Virtual LANs (VLANs) Port Monitoring (Local/Remote) Verifies device credentials before sending or receiving packets using the Extensible Authentication Protocol (EAP), see 802.1X Commands. Exchanges information between two systems and automatically establishes a link aggregation group (LAG) between the systems, see LACP Commands. Enables a local area network (LAN) device to advertise its configuration and receive configuration information from adjacent LLDP-enabled infrastructure devices, see LLDP Commands. Configures limits, redundancy, balancing, and failure detection settings for devices on your network using tables, see MAC Commands. Maps MST instances and maps many virtual local area networks (VLANs) to a single spanning-tree instance, reducing the number of required instances, see MST Commands. Combination of rapid spanning-tree and per-VLAN spanning-tree plus for faster convergence and interoperability, see RPVST+ Commands. Faster convergence and interoperability with devices configured with the Spanning-Tree and Multiple SpanningTree Protocols (STPs and MSTPs), see RSTP Commands. Improved security to isolate groups of users into different VLANs and the ability to create a single VLAN across multiple devices, see VLAN Commands. Port monitoring of ingress or egress traffic, or both ingress and egress traffic, on specified port(s). Monitoring methods include port-mirroring, remote port monitoring, and encapsulated remote-port monitoring (see Local/ Remote Commands). 802.1X The IEEE 802.1X standard defines a client and server-based access control that prevents unauthorized clients from connecting to a LAN through publicly accessible ports. Authentication is only required in OS10 for inbound traffic. Outbound traffic transmits regardless of the authentication state. 802.1X employs the extensible authentication protocol (EAP) to provide device credentials to an authentication server, typically remote authentication dial-in service (RADIUS), using an intermediary network access device. The network access device mediates all communication between the end-user device and the authentication server so the network remains secure. The network access device uses EAP-over-Ethernet, also known as EAPOL - EAP over LAN, to communicate with the end user device and EAP-over-RADIUS to communicate with the server. NOTE: OS10 supports only RADIUS as the back-end authentication server. 354 Layer 2