Hi,
Can anyone clarify if you are able to configure VLANs, port security, Trunks on a switch running the LAN LITE IOS?
Trunking
These are the trunking limitations:
•
The switch treats frames received with mixed encapsulation (IEEE 802.1Q and Inter-Switch Link [ISL]) as frames with FCS errors, increments the error counters, and the port LED blinks amber. This happens when an ISL-unaware device receives an ISL-encapsulated packet and forwards the frame to an IEEE 802.1Q trunk interface. There is no workaround. (CSCdz33708)
•IP traffic with IP options set is sometimes leaked on a trunk port. For example, a trunk port is a member of an IP multicast group in VLAN X but is not a member in VLAN Y. If VLAN Y is the output interface for the multicast route entry assigned to the multicast group and an interface in VLAN Y belongs to the same multicast group, the IP-option traffic received on an input VLAN interface other than one in VLAN Y is sent on the trunk port in VLAN Y because the trunk port is forwarding in VLAN Y, even though the port has no group membership in VLAN Y. There is no workaround. (CSCdz42909).
•For trunk ports or access ports configured with IEEE 802.1Q tagging, inconsistent statistics might appear in the show interfaces counters privileged EXEC command output. Valid IEEE 802.1Q frames of 64 to 66 bytes are correctly forwarded even though the port LED blinks amber, and the frames are not counted on the interface statistics. There is no workaround. (CSCec35100).
VLAN
This is the VLAN limitation:
•If the number of VLANs times the number of trunk ports exceeds the recommended limit of 13,000, the switch can fail.
The workaround is to reduce the number of VLANs or trunks. (CSCeb31087)
Port Security:
When port security is enabled on an interface in restricted mode and the switchport block unicast interface command has been entered on that interface, MAC addresses are incorrectly forwarded when they should be blocked
The workaround is to enter the no switchport block unicast interface configuration command on that specific interface. (CSCee93822)
Below are the LAN Lite IOS features:
Scalable and highly secure network management: Secure Shell (SSH), Secure Sockets Layer (SSL), Secure Copy Protocol (SCP), and SNMPv3 crypto
• Network management tool support by CiscoWorks, Cisco Network Assistant, and Catalyst Device Manager
• Baseline Network Admission Control and 802.1x MAC Auth Bypass and Protected Port
• Voice VLAN and voice-aware port security, BPDU Guard, and Root Guard
• Standard QoS with Class of Service (CoS) marking, Shaped Round Robin, Weighted Tail Drop, and Strict Priority scheduling
• Link aggregation using Port Aggregation Protocol (PAgP) and 802.3ad LACP
• Complete Spanning Tree Protocol support via 802.1s, 802.1w, and PVST+
• VLAN Trunking Protocol (VTP), Cisco Discovery Protocol v2, and LLDP
• Multicast support in hardware with IGMP Snooping, Filtering, and Querier
• Troubleshooting and monitoring tools such as TDR, SPAN, and UDLD
Hope this clear you...
Please rate the helpfull posts.
Regards,
Naidu.
