Aggregation 10G Switch MES5332A
- Bandwidth:
- 640 Gbps
- Interfaces:
- 32x10G SFP+, 1xOOB
- Power supply:
- AC/DC, 2 hot-swappable power supplies
Description
MES5332A switches are high performance devices with 10GBASE-R/1000BASE-X interfaces that can be used as aggregation switches in carrier networks and data centers.
The devices ports support operation at rates of 1 Gbps (SFP) and 10 Gbps (SFP+), that provides usage flexibility and ability of gradual transition to higher data rates. The non-blocking architecture provides correct packet processing under maximum loads, while maintaining minimal and predictable delays for all types of traffic.
The front-to-back ventilation design ensures effective cooling when using the devices in modern data centers.
The devices comply with CE requirements.
Alternatives
You can purchase a similar device instead of the discontinued one
Aggregation 10G Switch MES5332A rev.C
- Level:
- L3
- Bandwidth:
- 640 Gbps
- Interfaces:
- 32x10G SFP+, 1xOOB
- Power supply:
- AC/DC, 2 hot-swappable power supplies
Specifications
- Bandwidth:
- 640 Gbps
- Interfaces:
- 32x10G SFP+, 1xOOB
- Stacking:
- up to 8 devices
- MAC table:
- 32768
- ARP table:
- 8125
- Dynamic routing:
- RIP/OSPF/IS-IS/BGP
- Power supply:
- AC/DC, 2 hot-swappable power supplies
ECCM
Eltex Cloud Configuration Manager is a centralized system for network equipment management
Features and capabilities
For full specifications and manuals see Documents and files section below
Interfaces:
10GBASE-R (SFP+)/1000BASE-X (SFP)
32
10/100/1000BASE-T (OOB)
1
USB 2.0
1
Console port RS-232 (RJ-45)
1
Performance:
Bandwidth
640 Gbps
Buffer memory
3 MB
RAM (DDR3)
1 GB
ROM (NAND Flash)
1 GB
MAC table
32768
VLAN table
4094
Link Aggregation Groups (LAG)
128, up to 8 ports in one LAG
Quality of Services (QoS)
8 egress queues per port
Jumbo frames
10240 bytes
Stacking
Up to 8 devices
Physical and environmental parameters:
Power supply
100–240 V АС, 50–60 Hz
36–72 V DC
Power supply options
1 AC/DC power supply
2 hot-swapable AC/DC power supplies
Dying Gasp support
No
Operating temperature
From -10 to +45 °С
Storage temperature
From -50 to +70 °С
Cooling
Front-to-Back, 4 fans
Operating humidity
No more than 80 %
Form factor
19", 1U
Dimensions (WxHxD)
430x44x275 mm
Weight
3.8 kg
Related products
Components, modules, and software options that are purchased additionally
Free
Basic warranty
Up to 5 years
Extended warranty
Hit
Free
First in, first out
Monday to Friday (GMT +7)
Priority support
Monday to Friday (GMT +7)
Priority support
Monday to Friday (GMT +5)
Support
Hit
Documents and files
Firmware version 5.5.4.4 R16 (intermediate firmware version for switches MES53xxA when switching from versions 5.5.x.x to 6.0.2 and later) (Issue date: 10-04-2025)
ZIP, 23.0 Mb
Firmware version upgrade guide (Issue date: 18-04-2025)
PDF, 969 Kb
Firmware version 6.6.13.5 R2 (Issue date: 14-10-2026)
ZIP, 40.6 Mb
MIB files (Issue date: 14-10-2026)
ZIP, 1.54 Mb
The firmware is compatible with other device models:
MES5324A, MES5316A
Firmware updates
Firmware version 6.6.13.5
Added:
- Support for DHCP option 242 has been implemented;
- The maximum number of ERPS sub-rings has been increased to 32;
- Support for Priority-based Flow Control on 400G ports has been implemented;
- Stacking is now supported between MES3300-24, MES3300-24F, MES3300-48, and MES3300-48F devices.
Fixed:
- Fixed a bug that caused the static MAC entry on the peer-link to be deleted after a device in a VPC pair was rebooted;
- Fixed a bug that caused the device to reboot when a special character was handled incorrectly during an SSH connection;
- Fixed a bug that caused the device to reboot when clients with dACL were re-authenticated;
- Fixed the incorrect display of the system description in a stack made up of switches with different numbers of ports;
- Fixed the incorrect update of a VXLAN tunnel built over a route with a prefix other than /32;
- Fixed link flapping and false link-up events on ports with FT-SFP-FX-155-13-2-D-I transceivers;
- Fixed a bug when loading into the candidate-config a configuration file containing the command no snmp-server enable traps ospf;
- Fixed a bug when applying SNMPv3 user settings using the commit/confirm mechanism.
Previous versions
Firmware version 6.6.13.4
Added:
- Added the ability to specify the as-range for remote-as dynamic BGP neighbors;
- Added support for the PRP protocol (IEC 62439-3) for MES3510S-XX devices;
- Added support for the PTP protocol (IEEE 1588v2) in Transparent Clock mode for MES3510S-XX devices;
- Added the ability to create a static ARP record with a multicast MAC address;
- Added the ability to assign a Native VLAN to Dot1x if an Access-Reject message is received from the RADIUS server;
- Added the ability to assign a Native VLAN in Dot1x if the RADIUS server is unavailable;
- Added the ability to track the availability of RADIUS servers;
- Added support for option 79 in IPv6 DHCP Relay;
- Added the ability to add the DHCP option 82 on the interface;
- Added the ability to customize Option 82 templates for PPPoE IA;
- Added support for the sFlow flow-sample function for outgoing traffic;
- Added the ability to configure the loopback detection mode;
- Added support for the local proxy ARP function;
- Added collection of DHCP Snooping statistics;
- Added the LLDP neighbor output command for all interfaces at once;
- Added the ability to check the availability of the switch's IP address via VXLAN tunnels;
- Added the ability to change the Don't Fragment bit in the external VXLAN header;
- Increased the maximum number of OSPF neighbors to 256;
- Added the ability to control the announcement of an aggregated route when receiving a prefix included in it;
- Added support for the Persistent hash function for ECMP;
- Added support for Explicit Congestion Notification function;
- Added support for Enhanced Transmission Selection function;
- Added automatic learning of the MAC address of a VPC neighbor via a peer-link;
- Added support for the Micro-BFD function;
- Added a new CPU Rate Limit tcp-other for all TCP packets except SSH, TELNET, HTTP/HTTPS.
Fixed:
- The error of switching the STP Alternate interface to the Listening and Learning state has been fixed;
- Fixed an error when disabling routing;
- Fixed a MAC table synchronization error that caused the VPC domain to malfunction;
- Fixed an error that caused devices in the stack to freeze and reboot if there was no license on one of them;
- Fixed the error of summation of interzonal routes in OSPF;
- Incorrect tag transmission in the PPPoE session has been fixed;
- Fixed an error that caused the switch to reboot when connecting multiple phones at the same time;
- Fixed an error that caused the switch to reboot when deleting the ACL setting from the vlan interface;
- Fixed sending a false SNMP trap about configuration changes;
- Fixed an error copying the configuration to the switch when configuring the NTP server in the VRF;
- Fixed an error in copying the configuration to candidate-config using the SFTP protocol;
- Fixed an error that did not allow assigning a non-default VRF control from the 192.168.1.X network to the OOB address;
- Fixed incorrect display of configuration of metric and distance parameters for static routes in VRF;
- Fixed an error that caused the device to reboot when loading the startup configuration containing the PIM or IGMP settings on a VLAN interface that was missing from the VLAN Database;
- Fixed an error that caused the Transfer distance to be displayed incorrectly in the DDM output;
- Fixed the error of inverting the switchport forbidden default-vlan setting in the web interface;
- Fixed an error where Green Ethernet settings were not applied;
- Fixed an error where the private-vlan isolated settings were deleted after the device was rebooted;
- Fixed an error that caused the switch to reboot when changing VXLAN nexthop;
- Fixed an error that caused the switch to reboot while simultaneously viewing and configuring the device configuration;
- Fixed an error displaying AF for BGP neighbors in the show ip bgp all all neighbors command;
- Fixed an error of intercepting reject-route traffic on the CPU;
- Fixed the error of displaying information on SNMP when polling ifOutDiscards;
- Fixed an error that caused the new wizard to hang on the stack after transferring control;
- Fixed an error that caused the switch to reboot when applying an ACL on the physical interface;
- Fixed an error that caused BFD packets to continue being sent after connectivity was lost;
- Fixed an error that causes the device to reboot when the interface is added to the port channel multiple times;
- Fixed a system timer processing error that caused the device to reboot.
Firmware version 6.6.12.1
Added:
- Added the ability to filter type 5 EVPN routes;
- Added the ability to install VXLAN tunnels from any loopback interface;
- Added setting the value of the DSCP label in the VXLAN tunnel header based on the DSCP label in the source packet;
- The mechanism for forming ECMP groups has been redesigned. The number of available ECMP groups has been expanded to the maximum hardware limit;
- Implemented the Persistent hash functionality for the port channel;
- The ability to create multiple protected-port groups has been implemented;
- Added support for BGP as-override in the context of route-map;
- Added support for BGP Additional Paths;
- Added support for BGP dynamic neighbors;
- Added support for the BFD protocol for static routes;
- Added the ability to change the External Route Tag field when importing external routes;
- Implemented the ability to filter routes by External Route Tag in OSPF using route-map;
- Implemented the Track Boolean functionality;
- Implemented an FTP client;
- Added support for PPPoE IA;
- Added the ability to specify the source-interface for the FTP client;
- Implemented the ability to save the output of commands to a file in the flash memory of the device;
- Supported the work of DHCP-Relay in conjunction with VRRP;
- Implemented the functionality of creating /32 routes to DHCP clients based on the data of the DHCP Snooping table;
- Added the ability to use DHCP Snooping in S-VLAN on ports in Customer mode;
- Implemented the collection of statistics of the DHCP Relay function;
- Added the ability to substitute CVLAN/SVLAN tags in the DHCP option 82;
- Implemented the functionality of blocking a local account;
- Implemented the authentication open functionality for 802.1x;
- Added commands for cleaning multicast IGMP/MLD Snooping groups;
- Added commands for cleaning multicast routes PIM, PIMv6, IGMP-Proxy and MLD-Proxy.
Fixed:
- Fixed a reboot that occurred when processing next-hop address in the routing table;
- Fixed a reboot that occurred when using Ipv6 RP address on the Loopback interface;
- Fixed a reboot that occurred when polling the eltLbdVlanBased and eltIpDhcpSnoopPortClientsLimit tables;
- Fixed an error that caused the SNMP community to be displayed in an unencrypted form;
- Fixed an error that caused packets to be processed on the CPU when ICMP-Redirect was disabled;
- Fixed an error that caused global PCL services to malfunction after removing an ACL from a port;
- Fixed the Management ACL on the OOB interface;
- Fixed an error that caused the remote OSPF Area to continue to be displayed in the system;
- Fixed an error that caused the configuration to be lost in the BGP neighbor context;
- Fixed an error that caused the Voice VLAN number to match the VLAN number issued by the RADIUS server through the radius-attribute;
- Fixed an error that caused the configuration to be incorrectly backed up using the TFTP protocol;
- Fixed errors in the backup server configuration output;
- Fixed an error that caused the backup server vrf and ip tftp source-vrf commands to not be loaded from the starup-config to the running-config;
- Fixed an error that caused the negative optical signal level to be displayed in the Web interface;
- Fixed an error that caused variables to be applied in the banner when connecting via SSH;
- Fixed an error that caused information about power supplies to be displayed;
- Fixed an error that caused the autobaud command to be displayed in the configuration;
- Fixed the coexistence of DHCP Relay and IP Unnumbered;
- Fixed an incorrect interface definition when a BPDU with the TCN flag was received;
- Fixed a freeze that occurred when copying a file via HTTP was interrupted;
- Fixed the display of information about incoming and outgoing optical power when diagnosing transceivers in the Web interface;
- Fixed an error in filling the ARP entry in the first next-hop of an ECMP group consisting of VXLAN ports;
- Fixed an error in the DHCP server operation that caused the device to hang;
- Fixed an error that caused a collision of virtual VRRP MAC addresses when the master changed in a VRRP pair;
- Fixed a BGP session establishment error (Optional Attribute Error) that occurred when applying BGP configuration from the candidate-config;
- Improved the stability of the devices.
Firmware version 6.6.11.3 (not intended for installation on industrial switches MES3500I-10P, MES3500I-08P, MES3500I-8P8F)
- Fixed the MAC Flapping error in the ERPS ring when restoring the link;
- Fixed an error in synchronizing MAC addresses between stack units;
- Fixed the display of the status and diagnostic results of SFP modules for MES2300-48P devices;
- Fixed incorrect learning of MAC addresses on orphan ports in VPC;
- Improved device stability.
Firmware version 6.6.11.2
Added:
- Added support for EVPN Asymmetric IRB;
- Added the ability to balance traffic going through L3VNI to a multihomed recipient;
- Added support for BGP Allows In;
- Added support for BGP AS Override in the context of BGP neighbors;
- Added support for Address Family IPv6 in BGP;
- Added support for BGP Multipath AS-Path Relax;
- Added VRF support for Route Map in aggregated BGP routes;
- Added support for MPLS L3VPN;
- Added support for the LDP protocol;
- Added the ability to set Route Distinguisher in VRF;
- Added the ability to summarize external OSPF/OSPFv3 routes on ASBR;
- Added the ability to set a passive interface in PIM;
- Added the ability to change the parameters of the hash function used in the traffic balancing mechanism;
- Added the ability to set the minimum number of ports in LAG;
- Added support for syncing dynamic Voice VLAN OUI on Backup units;
- Added support for GVRP Static-VLAN;
- Added the ability to set the CEF format for syslog messages;
- Added the display of the lldp neighbors table to the WEB interface;
- Added support for configuring the Service-Type RADIUS attribute during authorization on the switch;
- Added support for deleting secure MAC addresses when dynamically adding recordings to the Voice VLAN OUI;
- Transmission of information about the VLAN number configured on the port to the NAS-Port-Id(87) is implemented when the user is authorized by Dot1x or MAB;
- Transmission of information about the voice VLAN number configured on the port to the NAS-Port-Id(87) is implemented when the user is authorized by Dot1x or MAB;
- Reduced minimum interval time for sending/receiving BFD packets;
- The limit on the number of sources in one mirroring session has been lifted;
- Increased the maximum length of input commands;
- Expanded the possibilities of displaying information about BGP EVPN routes;
- Work with QSFP28 FIBO FT-Q100-DR modules is supported;
- Setting the value of the DSCP label in the VXLAN tunnel header based on the DSCP label in the source packet.
Fixed:
- Fixed the error of displaying dot1x commands in startup-config;
- Fixed an error in applying the IS-IS protocol configuration from candidate-config;
- Fixed configuration loading error with the command snmp-server enable traps ipv6 ospf;
- Fixed the error of shifting the route-target command when copying the configuration to startup-config;
- Fixed the error of using logging host commands in candidate-config;
- Fixed the error of losing some commands when applying candidate-config;
- Fixed an error where there was an increased interruption of traffic passing through this interface during the addition of a new port to the LAG in stack;
- Fixed an error where the route-target was not deleted from the IP VRF;
- Fixed the handling of administrative distance when redistributing routes from BGP to OSPF;
- Fixed the handling of administrative distance when redistributing static routes in OSPF;
- Fixed an error where it was possible to set the operation mode of the trunk interface with the switchport access acceptable-frame-type untagged-only setting;
- Fixed an error where one of the switches of the VPC pair always became Root in RPVST;
- Fixed an error with the device stack hanging when deleting VPC commands;
- Fixed an error where the VPC did not check the LACP Partner ID;
- Fixed an error that led to incorrect 100% CPU usage of the switch in the VPC pair;
- Fixed an error in the snmp get-next handler that caused the device to reboot;
- Fixed an error that caused a reboot when setting the BPDU filtering mode;
- Fixed an error that caused the device to freeze when downloading software via the WEB interface;
- Fixed an error that caused the device to reboot when building fragmented packages;
- Fixed an error that caused a reboot when deleting a static ARP record;
- Fixed an error where secure-permanent Voice VLAN MAC addresses were cleared after the device was rebooted;
- Fixed the error of displaying the snmp trap mac-notification change command in the interface configuration output;
- Fixed an error where BFD packets arriving at ports of stack units other than the master were not processed;
- Fixed an error that caused a reboot when working with the configuration file;
- Fixed an error that caused a reboot when configuring burst for traffic-shape;
- Fixed an error where the Secondary switch of the VPC pair was sending STP BPDU;
- Fixed an error that caused a reboot when setting up a VRF on an SVI that had previously been deleted and re-created;
- Fixed an error that caused a reboot when deleting VXLAN tunnels;
- Fixed an error that caused a reboot when deleting the policy route-map from the interface;
- Fixed an error that caused stack management to be lost when using the DHCP opt.82 functionality;
- Fixed an error where ports on MES5310-48 could remain in the DOWN state after reboot;
- Fixed an error in displaying the status of the PM160-220/12 power supply.
Firmware version 6.6.10
Added:
- Added the option to select a port when uploading files using the SCP/SFTP protocols;
- Added the ability to use the ping utility for size>1518, added the packet fragmentation parameter;
- Added the ability to limit the speed of incoming packets on ARP protocol ports when ARP inspection is active;
- Added the ability to limit the speed of incoming packets on the ports of the DHCP protocol with active DHCP snooping;
- Added the ability to change the user's password via the TACACS protocol;
- Added the ability to filter routes using route-map when redistributing them to L3VNI;
- Added support for BGP Next Hop Unchanged;
- Added support for IP SLA in VRF;
- Added support for NTP in VRF;
- Added PBR support to VRF;
- Added support for the Session-Timeout RADIUS attribute;
- Added support for the Termination-Action RADIUS attribute;
- Added support for SCP in VRF;
- Added support for the SFTP client in VRF;
- Added support for Voice VLAN without Authentication (Bypass);
- Added auto-cost reference-bandwidth support for the OSPF protocol;
- Added support for ebgp-multihop in VRF;
- Added lacp hold-time up support;
- Added support for max-metric in the OSPF protocol;
- Added support for route-map for the BGP protocol when redistributing routes;
- Added support for spanning-tree guard loop for STP, RSTP, MSTP modes;
- Added support for additional output filters in show running-config;
- Added a show command in the interface configuration mode;
- Added output of VLAN interface names in ifDescr SNMP OID;
- Added the IfInDiscard packets counter to the output of show interfaces;
- Added counters for individual ACL rules in the IN direction (currently not supported on MES53xxA series switches);
- Added an error notification when trying to launch ping and traceroute in a non-existent VRF;
- Implemented a single data type for snmptrap for adding and removing a unit to the stack;
- Increased the maximum lifetime of MAC addresses in FDB.
Fixed:
- Fixed an error where Vlans received via GVRP from the backup unit of the stack were cyclically added and deleted;
- Fixed an error where one of the ports of the aggregated interface switched to the Down status during NSF on the backup switch;
- Fixed an error where traffic drawdown could be traced on the stack during NSF;
- Fixed an error where one of the stack units could reboot during the reset of the aggregated interface settings;
- Fixed an error where the MSTP tree would not rebuild after a name change or revision;
- Fixed an error where the no ip vrf command did not completely remove the VRF settings from the system;
- Fixed an error where the ip ospf cost setting for interface ip A.B.C.D vrf vrf_name in running-config and startup-config was not displayed;
- Fixed an error in which command input confirmation was incorrectly processed;
- Fixed an error in which pvst BPDUs were not transmitted in transit through a switch with STP turned off on a separate VLAN;
- Fixed an error where, after raising the link, the originating vlan value was 0 in the first BPDU PVST+/RPVST+;
- Fixed an error that caused the OSPF metric to be reset when the device was rebooted;
- Fixed an error related to traffic interruption when restarting VPC Primary on MES5410-48 devices;
- Fixed an error when creating an aggregated route in OSPF;
- Fixed an error that caused an additional reboot of one of the units during stack auto-assembly;
- Fixed an error that caused units to disconnect from the stack under a certain load;
- Fixed an error that caused the Port Channel belonging to the VPC group to be in the errdisable state;
- Fixed an error that caused one or more units in the stack to reboot from the MES2300-xx/3300-xx series devices during the transfer of mastery;
- Fixed incorrect indications on some stack ports that could occur during skill transfer;
- Fixed a reboot that appeared when entering commands longer than 279 characters;
- Fixed a reboot that appeared when receiving the MSDP Source-Active Jumbo package;
- Fixed a reboot that manifested itself during manipulation on the OOB and VLAN 1 interfaces;
- Fixed incorrect display in logs of the reason for Cold/Warm StartUp reboot;
- Fixed incorrect behavior of the CLI when the AS BGP number is greater than 2147483647;
- Fixed the accounting of some commands using the TACACS protocol.
Firmware version 6.6.9.3
Added:
- Added support for LLDP TLV IEEE 802.3 Power Via MDI;
- Supported PIM protocol in VRF;
- Implemented command for displaying PSU information in CLI for PM160-220/12 (rev.B, C, D) and PM100-48x12 (rev.B);
- Implemented Priority-based Flow Control;
- Implemented IPv6 Traffic Class filtering in ACL;
- Implemented simultaneous S-VLAN and C-VLAN tag filtering for outgoing traffic on ports in TR-101 mode;
- Implemented IP Source Guard per VLAN functionality;
- Implemented SFTP protocol support for the backup function;
- Increased speed of working with MAC addresses when the MAC table is heavily utilized;
- Added SNMP Trap for stack link status change;
- Increased the number of DHCP Relay servers to 32;
- Supported stacking of MES2300-24P and MES2300-48P devices with each other;
- Implemented the ability to accept dynamic ACLs from the RADIUS server for Dot1x clients;
- Increased the number of PVST instances to 256;
- Implemented support for loopback detection on individual VLANs;
- Increased the number of authentication key characters for the SNTP protocol to 32 characters;
- Implemented SCP server functionality;
- Implemented replace config functionality;
- Implemented the ability to change the administrative distance for BGP in GRT and VRF;
- Increased the DHCP server limit for the number of static IP addresses to 1024;
- Increased the DHCP server limit on the number of IP addresses issued to 4096.
Fixed:
- Fixed device rebooting during BFD session establishment when Unit ID 2 is the master;
- Fixed device freezing when rolling back candidate-config c with configured VRFs;
- Fixed false error message about fan operation;
- Fixed an error causing active ports in the VPC group to drop;
- Fixed an error displaying information about remote links added to the Port-Channel VPC group;
- Fixed an error related to traffic interception on the CPU when routing within a single VTEP;
- Fixed an error assigning a UDP port in BFD packets;
- Fixed an error where an EVPN Type 2 route was not created when a learned MAC address was present on the ESI-LAG port;
- Fixed a bug where the backup unit in the stack cyclically rebooted after a software update;
- Fixed a bug where disabled PoE was enabled on MES2300-24P rev.C1 after rebooting;
- Fixed a bug that caused interfaces to shut down spontaneously;
- Fixed a bug that occurred when copying files via SCP for an account without specifying a password;
- Fixed incorrect behaviour of DHCP Relay when PBR was enabled;
- Fixed incorrect behaviour of FDB for route-unknown traffic;
- Fixed a bug that occurred when saving settings to the running configuration when configuring via the web interface;
- Fixed a bug that occurred when restarting the OSPF process;
- Fixed a bug that occurred when assigning an IP address to the OOB interface from the default address network;
- Fixed a bug in selecting the root port in MSTP mode;
- Removed the carriage return character after each command in TACACS accounting;
- Fixed a bug when copying the snmp-server enable traps ospf configuration string in the CLI;
- Fixed a bug when entering the show ip route vrf X command with a non-existent VRF name.
Firmware version 6.6.8.8
Added:
- Added NSF (Non-Stop Forwarding) support for stacking mode;
- Added the ability to assign the Backup role to the maximum number of devices in the stack;
- Changed the algorithm in which a device that took the Master role in the stack transferred mastery back to the former device with the Master role that returned to work after a reboot if the system Uptime was less than 10 minutes.
Fixed:
- Fixed a bug that could cause a reboot of the Backup/Slave switch in the software image loading process;
- Fixed a bug that caused the switch to reboot after receiving BPDU on an interface that is included in a VPC group and operating in Portfast mode;
- Fixed an error where the EVPN Type 2 route was not generated when changing the type of MAC address on the ESI-LAG port.
Firmware version 6.6.8.2
Fixed:
- Fixed device reboot when connected to it by the dropbear ssh client;
- Fixed an error in transmitting traffic to a host connected via EVPN-multihoming;
- Fixed an error in the optical interface display on the MES3300-48F.
Firmware version 6.6.8.1
Added:
- Increased the number of characters in the route-map name to 64;
- Increased the number of characters in the prefix-list name to 64;
- The SFTP client is implemented;
- Implemented the functionality of 802.1x authentication with inaccessible authentication bypass;
- Implemented the Change of Authorization (CoA) functionality;
- User disconnection when receiving a Disconnect Request from Radius (CoA) is supported;
- Radius attribute No. 8 Framed-IP-Address is supported;
- Added the ability to configure the OOB source interface for sFlow;
- Added the ability to configure source-vrf for TFTP;
- Added the ability to configure UDP src port for SNTP;
- Implemented automatic addition of the phone's mac address to the oui-table for Voice VLAN functionality;
- Added a mechanism to avoid learning the mac address from incoming LLDP from the phone;
- Implemented the sending of an SNMP trap when adding a unit to the stack;
- Added the ability to copy the license for the specified unit in the stack;
- DNS operation in VRF is supported;
- sFlow operation in VRF is supported;
- SSH client operation in VRF is supported;
- Added the ability to change the administrative distance for the OSPF protocol in VRF;
- Added support for the NTP protocol;
- Added the ability to set a Port-Channel in RSPAN as the output interface.
- Implemented the ability to configure the RADIUS NAS-Port-Id attribute(87);
- Implemented the ability to authorize MAC and 802.1x clients on different radius servers.
Fixed:
- Fixed an error in the output of the show radius-servers status command with multiple configured RADIUS-servers;
- Fixed an error in the operation of the ip ssh port command. It now applies to all VRFs.;
- Fixed an error in the operation of the ACL with the log-input setting;
- Fixed an error in sFlow flow-sampling;
- Fixed the output of a false message when sFlow is running;
- Eliminated the output of information about non-existent interfaces in the stack using the SNMP protocol;
- Fixed an error when using the ip route 0.0.0.0 /0 x.x.x.x track command;
- Fixed the desynchronization of mac address tables on different VTEPs within the same ESI;
- Fixed MAC-Flapping in the scheme with VPC;
- Fixed an error when deleting the ACL and Port-Channel from the interface;
- Fixed reboot when executing the show qos tail-drop unit 1 command;
- Fixed device freezes during multiple reboots;
- Improved stability of the VPC protocol;
- Fixed the error of long Port-Channel transition to the Forwarding state when the portfast spanning-tree is configured on it;
- Improved VPC stability;
- Fixed incorrect operation of the BFD via the Port-Channel interface;
- Fixed a critical error on MES3300-XX when processing Gratuitous ARP from VRRP addresses on the OOB port.
Firmware version 6.6.7.5
Added:
- Added information about the hardware version of the device to the output of the show system id command;
- The possibility of adding VLANs on LAG interfaces via the WEB has been implemented;
- Added support for LACP Force operation mode;
- Added the display of static multicast records in the ip igmp snooping table;
- Added support for collaboration between DHCP relay and DHCP server;
- Added the ability to disable the USB port;
- Added the ability to statically configure OSPF neighbors;
- Added OSPF network type non-broadcast, point-to-multipoint non-broadcast;
- Added VRF support in DHCP Relay;
- Added support for TCP adjust-mss;
- Added the possibility of extended IS-IS database output;
- The collaboration of DHCP Relay with EVPN/VXLAN is supported;
- Added Multi-VRF support for hardware BFD sessions;
- Added the ability for VPC peer detection to work in VRF;
- Added synchronization of ARP records between switches of the same EVPN multihoming ESI group.
Fixed:
- Fixed reboot when copying configuration via scp/tftp/flash;
- Optimized work with flash memory;
- Fixed a reboot when entering the show logging command in the stack;
- Fixed a bug that causes stack units to reboot when there is a high CPU load;
- Fixed a bug that caused the stack of MES3300-48 and MES3300-48F devices to fail;
- The do show ip interface vrf all command has been restored;
- Fixed the issue of LAG LACP recovery in timeout short mode;
- Fixed an erroneous change of the OSPF zone in the settings when executing the passive-interface command;
- Fixed mac address authorization in multi-sessions mode;
- Fixed an error when copying a configuration containing the switchport trunk allowed vlan all command;
- Fixed an error in displaying the role of neighbors in the output of the show ip ospf neighbor command;
- Fixed the problem of interrupting traffic processing on the master's CPU when there is a high load on the stack;
- Fixed a problem with VXLAN traffic transmission when using trunk ports between spine/leaf;
- Fixed a problem with traffic routing via L3VNI VXLAN when there is a default route;
- Fixed the error of removing standard ipv4/ipv6 ACLs from the configuration;
- Fixed the possibility of restarting the device at the time of removing the ACL from the VLAN interface with qos advanced-mode trust dscp configured;
- Fixed a problem with blocking traffic on slave units when configuring BPDU Guard in RPVST mode;
- Fixed an issue with an i2c bus failure in the stack;
- Fixed an issue with resetting the exp label in the mpls header in transit traffic;
- Fixed a bug with MAC Flapping in the VPC scheme when using the Po interface, number above 48;
- Fixed critical errors that occur when editing device configurations in a VPC pair;
- Fixed an error with rebooting the switch during SNMP requests for DDM information;
- Fixed an error with switching to local command authorization when there is no response from the tacacs server;
- Fixed an error with authorization of commands on the backup tacacs+ server when the main server is unavailable;
- Fixed an error with rebooting the switch when authenticating on the tacacs+ server in single-connection mode;
- Fixed an error indicating an incorrect port in the logs when receiving TC BPDU;
- Improved stability of the SSH server;
- Fixed the error of long Port-Channel transition to the Forwarding state when the portfast spanning-tree is configured on it;
- Improved VPC stability;
- Fixed incorrect operation of the BFD via the Port-Channel interface.
Firmware Version 6.6.5.4
Added:
- Ability to configure OOB interface as a source-interface for SNMPv2;
- Ability to configure OOB interface as a source-interface for SNMPv3;
- SNMPv2 support in VRF;
- SNMPv3 support in VRF;
- GRE tunnel support;
- Support for multihomed connections for EVPN/VxLAN scenario with Ingress Replication.
Fixed:
- Improved stability of peer-detection functionality in VPC;
- Erroneous removal of voice vlan from interface by timeout in the presence of port security settings;
- SSH session hangs due to an error in calculating Message authentication code in SSH packet.
Firmware Version 6.6.5
Added:
- Added support for BGP Route Map, Community List and AS-Path List in VRF;
- Added BFD support for BGP in VRF;
- Added BFD support for OSPF in VRF;
- Added support for encryption of the user's password using the SHA512/md5 algorithm;
- Added BFD support for IS-IS;
- Added the ability to change the ipv4 gateway address in EVPN type 5 routes;
- Added support for the RADIUS client in VRF;
- Added the ability to configure the source-interface OOB for SYSLOG;
- Added the ability to configure the OOB source-interface for TACACS+;
- Added BFD support for OSPF;
- Added support for VCT cable diagnostics for SFP-T;
- Added support for an extended number of UDBs in the ACL;
- Increased the number of ACEs in ACL to 512;
- Added support for filtering routes by the value of the as-path attribute in BGP;
- Added community support in BGP;
- Added the ability to configure the source-interface OOB for SNTP;
- Added support for SNTP operation in VRF;
- Added support for SYSLOG operation in VRF;
- Added support for the TACACS+ client in VRF;
- Added support for SSH server operation in VRF;
- Added ARP suppression support for EVPN/VXLAN.
Fixed:
- Fixed the process of removing the VRF setting from the OOB interface;
- Fixed the behavior in which STP root BPDU packets did not pass through the VPC peer-link;
- Fixed a reboot that occurred when the number of ACL rules with port-range was exceeded;
- Fixed L3VNI collaboration with VXLAN in multicast replication mode;
- Fixed incorrect operation of PBR with VRRP;
- Fixed device freeze when configuring SNMPv3;
- Fixed a behavior where a MAC-flapping storm started in a VPC;
- Fixed incorrect isolation of VPC groups from peer-link;
- Fixed a issue with OSPF neighbours breaking when CPU utilisation is high;
- Fixed issue with sending BGP update EVPN Type-2 when MAC address re-learning in a different ethernet-segment;
- Fixed issue with traffic switching via VRRP backup;
- Fixed problem with parasitic ICMP Redirect from VRRP backup when pinging a VRRP IP;
- Fixed a critical error occurring when CPU utilisation is high;
- Fixed critical error occurring when adding OUI for VOICE VLAN;
- Fixed critical error occurring when configuring sflow in stack;
- Fixed a critical error occurring when stack links are broken;
- Fixed critical errors occurring when building STP tree or VPC neighborhoods;
- Fixed L3VNI collaboration with VXLAN in multicast replication mode;
- Fixed PBR collaboration with VRRP;
- Fixed device freeze when removing ACL;
- Fixed device reboot related to the operation of the BGP protocol;
- Fixed device reboot when adding ACLs with UDP and TCP port ranges to the interface;
- Fixed device reboot when deleting VLAN bound to VXLAN;
- Fixed mac flapping between LAG when using VPC;
- Fixed incorrect addition of outgoing VRRPv2 protocol packets;
- Fixed a behavior in which STP root BPDU packets did not pass through the VPC peer-link.
Firmware Version 6.6.4
Added:
- The bit depth of the uptime counter has been increased;
- Added support for macro operation based on track status;
- Added support for cable diagnostics for MES2300-xx/MES3300-xx series devices;
- Added support for displaying information about QSFP28 in the output of the show inventory command;
- Added support for J9285D DAC cables;
- Added VRRP support to VRF;
- Added support for tftp in VRF;
- Added VRF support for the OOB interface;
- Added the ability to disable sending an empty packet to check the availability of the TFTP server;
- Added route-map support for OSPF;
- Added support for policy base routing next-hop;
- Added the ability to summarize routes in BGP;
- The value of the upper limit for the rate-limit has been increased;
- Added the ability to redistribute routes from eBGP to L3VPN;
- Added support for password encryption when logging commands;
- Added the possibility of simultaneous operation of MAC and IP access lists on interfaces;
- Added the ability to check the source mac address in the IP source-guard;
- Added the ability to limit the number of DHCP clients per port;
- Added the ability to send an snmp trap to the login/logout event.
Fixed:
- Software flow control is disabled for the console port;
- Fixed vulnerability of the Web interface;
- The position of the AAA command block in the configuration has been changed;
- Fixed the operation of the DHCP server when sending DHCP NAK packets;
- The operation of optical and copper switches in the same stack has been restored;
- Fixed an error that causes a cyclical reboot of a Slave unit in the stack when upgrading to version 6.6.3.8;
- Fixed rebooting of switches in the scheme with VxVLAN/EVPN when restarting the ospf process;
- Fixed single-hop BFD for eBGP neighborhoods;
- Fixed the problem of routing traffic between stack units for 2300/3300 devices;
- Fixed an error that caused the device to reboot when adding a non-existent VPC domain to the VPC group;
- Fixed an error that causes the role to be retransmitted after the Primary device is rebooted in the VPC;
- Fixed the problem of device freezing when flapping MLAG links in VPC;
- Fixed the problem of incorrect VPC assembly after restarting one of the paired devices;
- Fixed a cyclic reboot of the device when there is an ethertype switchport dot1q setting on the interface;
- Fixed an error in restoring the switchport default-vlan tagged command when updating software;
- Fixed an error where the L3 interface of the physical port did not switch to the Up state when rapid-pvst was enabled;
- Fixed the problem of blocking MLAG, after restarting it, in RPVST;
- Changed the default value of the spanning-tree cost parameter for 25G/40G/100G ports;
- Fixed spanning-tree cost calculation for port-channel interfaces;
- Fixed device reboot when polling the dot1dTpFdbEntry SNMP table;
- Fixed an error that occurs when deleting the SNMPv3 server settings from the configuration;
- Fixed an error when binding the ACL to the interface vlan.
Firmware Version 6.6.3.5
Added:
- FEC operation support for 25G ports.
Fixed:
- Fixed switching part of the links to the UP status when using the FH-DP4T26QS05 40G QSFP/4 SFP+ Fang Zhang Copper Twinax Cable 5M cable.