Ethernet Access Switch MES2408P
- Level:
- L2
- Bandwidth:
- 20 Gbps
- Interfaces:
- 8x1G PoE/PoE+, 2x1G SFP
- Power supply:
- AC/DC
Description
MES2408P series switches with PoE support provide end users connection to networks of large enterprises, small and mid-sized businesses and service providers via 1G/10G interfaces.
Advanced warranty and support packages
Extend basic package with additional paid services
Learn more
Specifications
- Level:
- L2
- Bandwidth:
- 20 Gbps
- Power supply:
- AC/DC
- Interfaces:
- 8x1G PoE/PoE+, 2x1G SFP
- QoS:
- 8 egress queues per port
- MAC table:
- 8192
- VLAN table:
- 4094
- ARP:
- 1000
ECCM
Eltex Cloud Configuration Manager is a centralized system for network equipment management
Features and capabilities
For full specifications and manuals see Documents and files section below
Interfaces:
10/100/1000BASE-T PoE/PoE+
8
100BASE-FX/1000BASE-X (SFP)
2
Console port RS-232 (RJ-45)
1
Performance:
Bandwidth
20 Gbps
Buffer memory
512 KB
RAM (DDR3)
256 MB
ROM (SPI Flash)
32 MB
MAC table
8192
VLAN table
4094
VRRP routers
No
Link Aggregation Groups (LAG)
8 groups, up to 8 ports in one LAG
QoS
8 egress queues per port
Jumbo frames
Maximum packet size is 10000 bytes
Physical parameters:
Power
176–250 V AC, 50–60 Hz or 36–72 В DC
PoE budget
240 W
Hardware support for Dying Gasp
No
Operating temperature
From -20 °C to +50 °C
Storage temperature
From -40 °C to +70 °C
Cooling
Passive
Operating humidity
No more than 80 %
Dimensions (WxHxD)
430x44x178
Related products
Components, modules, and software options that are purchased additionally
Free
Basic warranty
Up to 5 years
Extended warranty
Hit
Free
First in, first out
Monday to Friday (GMT +7)
Priority support
Monday to Friday (GMT +7)
Priority support
Monday to Friday (GMT +5)
Support
Hit
Documents and files
Firmware version upgrade guide (Issue date: 09-04-2025)
PDF, 975 Kb
Firmware version 10.4.5.2 R1 (Issue date: 29-09-2026)
ZIP, 10.1 Mb
MIB files (Issue date: 29-09-2026)
ZIP, 2.59 Mb
The firmware is compatible with other device models:
MES3708P, MES2408, MES2428P, MES2408B, MES2408C, MES2428, MES2428B, MES2408CP, MES2408PL, MES1428
Firmware updates
Firmware Version 10.4.5.2
Fixed:
- Fixed a bug that caused loss of access to the switch when running the command to enable a VLAN range with IGMP Snooping enabled;
- Fixed a bug that caused an erroneous SNMP trap to be sent about configuration restoration;
- Fixed a memory leak that occurred during MAB authentication of devices and, after prolonged switch uptime, made it impossible to authorize them even when the RADIUS server responded successfully;
- Fixed a bug that caused incorrect display of the delayed reboot time;
- Fixed a bug that caused the WEB interface to malfunction when switching between the L2/L3 Management tabs;
- Fixed a bug that made it impossible to boot MES2428B and MES2408B switches after upgrading the software from versions 10.1.4–10.2.0 to versions 10.3.6.4–10.4.5.
Previous versions
Firmware Version 10.4.5
Added:
- Added encryption of passwords used by the backup functionality;
- Added the ability to add two VLAN tags on an incoming port;
- Added the ability to include the Service-Type attribute in Access-Request packets sent to the RADIUS server during authentication via Console, Telnet, SSH, and Web;
- Added the ability to limit the number of simultaneously active SSH and Telnet sessions;
- Added Alarm Relay support for devices with dry contacts.
Fixed:
- Fixed the display and deletion of port-security violation restrict|protect|discard-shutdown commands in interface configuration mode;
- Fixed an error where the switch did not resolve domains with a dot, as well as Alias names;
- Fixed an error that caused incorrect display of Ethernet interfaces and missing Port-channel settings for management ACL in the output of show running-config;
- Fixed an error where the Voice VLAN was not assigned via LLDP;
- Fixed an error that led to an emergency reboot of the device if there were empty lines at the beginning of the startup configuration;
- Fixed an error that caused DHCP Discover to stop working when limiting the number of clients on a port with configured DHCP Snooping;
- Fixed an error that caused Backup units to freeze when updating software;
- The limit on the maximum password length in the WEB has been lifted.
Firmware Version 10.4.4
Added:
- Updated the SSH server to version 9.9p2;
- Added the %n specifier to DCS for displaying the port number on the front panel;
- Added stack unit information to the output of the show system information command;
- Added the ability to reboot the entire stack via the web interface;
- Added an LLDP neighbors page to the web interface;
- Added a stack information page to the web interface;
- Reworked the interface list display in the web interface;
- Implemented switching between stack units when visualizing interfaces in the web interface;
- Added the eltPhdUnitEnvParamTable SNMP table for displaying the uptime of stack units;
- Added the ability to generate RSA keys of arbitrary length;
- Added the ability to generate ECDSA and Ed25519 keys;
- Added the ability to configure DCS options in HEX format;
- Added the ability to configure TFTP packet retransmission parameters;
- Added the ability to configure a password for MAB authentication;
- Added the show system id command to the show tech-support output;
- Added support for special characters in the SFTP password;
- Added MAC table synchronization when a Backup unit connects to the Master unit;
- Added display of RAM and Flash information in bytes;
- Added a message indicating the start of file copying over SFTP;
- Changed the SSH public key calculation algorithm;
- Increased the maximum RSA key length to 8192 bits;
- Increased the maximum username and password length for SFTP;
- Increased the default RSA key length to 3072 bits.
Fixed:
- Fixed an error with enabling STP compatibility for RPVST after a Master unit switchover;
- Fixed an error where LACP did not form on 10GE ports when Ethernet OAM was enabled;
- Fixed an error where ACL settings disappeared from the running configuration after a device reboot;
- Fixed an error where the ifHighSpeed OID returned an incorrect value;
- Fixed an error where the sntp unicast-server domain-name command was not removed from the configuration;
- Fixed an error with stack links being disabled when the switch overheated;
- Fixed an error with a false SYSLOG message appearing when polling temperature sensors;
- Fixed an error with port isolation when using RPVST;
- Fixed a command synchronization error after a reboot for RPVST in the VLAN context;
- Fixed a stack synchronization error when adding a port to a port channel containing a large number of VLANs;
- Fixed a stack synchronization error when applying a configuration with a large number of SVIs;
- Fixed a port status synchronization error in the stack when RPVST was running;
- Fixed a dot1x session synchronization error in the stack;
- Fixed a configuration saving error that led to loss of device management;
- Fixed an error that caused extraneous settings to appear on the VLAN interfaces of Backup units;
- Fixed an ERPS error that caused a storm when a switch with STP enabled was present in the network;
- Fixed incorrect display of the ip source binding command;
- Fixed the display of roles in the show stack command output on Backup units;
- Fixed the display of the switchport port-security violation command in the configuration;
- Fixed a discrepancy between the uptime value in the CLI and the value obtained via SNMP;
- Fixed an SSH connection drop when executing the show running-config command;
- Expanded the fan rotation speed thresholds for log message generation;
- Changed the mechanism for generating the session variable for the web interface.
Firmware Version 10.4.3.4
Fixed:
- Fixed incorrect balancing of traffic in the LAG in the stack due to incorrect synchronization of the order of adding ports to the LAG;
- Raising ports on backup units in the stack has been moved to a later stage of booting, after applying the configuration from startup-config;
- Fixed the error of incorrect ARP processing on the CPU;
- Fixed the error of releasing TCAM resources when IPSG is running.
Firmware Version 10.4.3.3
Fixed:
- Fixed an error that could cause the device to reboot when polling via SNMP using GetBulkRequest;
- Fixed an error where LLDP neighbors were not displayed;
- Fixed an error related to buffer leakage, due to which devices stopped authenticating using 802.1X;
- Fixed an error due to which the DHCP Offer was not forwarded to the client when working with DHCP Snooping and guest VLAN;
- Fixed an error that caused incorrect cable diagnostics;
- Fixed the reboot of the switch when performing "show tcp connections" in an SSH session with TACACS authorization.
Firmware Version 10.4.3.1
Added:
- Added support for Dying Gasp in the stack;
- Added SQinQ support in the stack;
- Added QinQ support in the stack;
- Added support for Rate-limit in the stack;
- Added support for Per-VLAN Access List in the stack;
- Added support for Ethernet OAM in the stack;
- Added LBD per VLAN support;
- Added a new SNMP OID for reloading arbitrary stack units;
- Added the ability to enable the trust of someone else's option 82 on untrusted DHCP Snooping interfaces;
- Added support for the Filter-ID RADIUS attribute;
- Additional messages have been added to the ZTP logs;
- Added support for the CEF format for SYSLOG messages. The format of some SYSLOG messages has been fixed;
- Added support for processing traffic with a PRP header;
- Added support for LLDP Dot3TLV Power-via-MDI;
- Added support for dry contacts for MES37xx;
- Added the ability to add the TCP port number of the server when working with the copy and backup server commands;
- Added synchronization of all software images for all units in the stack;
- Added information about default settings to the show stack command;
- Added a command to disable the serdes parameter check.
Fixed:
- Fixed an error where the switch did not respond to an SNMP request with the report flag not set;
- Fixed an error where the switch did not return all OID values during the SNMP survey of the ISS-ENV-MIB tree;
- Fixed an error that returned an incorrect value for the temperature of the switch via SNMP;
- Fixed IPv6 traffic routing error;
- Fixed an error in the operation of the F button;
- Expanded the range of ports used in the stack for MES2411X devices;
- Fixed errors during stack assembly;
- Fixed an error when enabling RPVST in the stack;
- Fixed an error where backup units in the stack might not connect to the master when they were rebooted at the same time;
- Fixed the behavior of backup units in the stack when sending logs with incorrect severity;
- Fixed an error in synchronizing EOAM UDLD command objects with backup threads;
- Fixed loss of routed traffic when transferring between backup units and the master unit in the stack;
- Fixed cyclic reboot of a unit when returning it to the stack;
- Fixed errors that appear when navigating to the System Resources page in the WEB interface;
- It is forbidden to use VLAN 4095 in sQinQ commands;
- Fixed an error in synchronizing sQinQ commands with backup units;
- Fixed an error that causes the device to reboot when trying to delete sQinQ rules;
- Fixed an error when removing SQinQ override rules from LAG interfaces;
- Fixed an error where the default IP 192.168.1.239 was not deleted after configuring VLAN 1;
- Fixed the maximum number of static IPv4 routes;
- Fixed the error of deleting static routes when updating the software to version 10.4.2 and higher;
- Fixed an error that caused an emergency reboot when saving the configuration;
- Fixed the error of incorrect blocking of the user by setting up login block-for;
- The severity threshold for events recorded in the default-syslog-file has been reduced;
- Fixed an error with incorrect processing of fragmented packets on the CPU;
- Optimization of the output speed of the PoE configuration;
- Unconnected units have been removed in the output of the show power inline command;
- Fixed an error of incorrect reading of temperature sensor data in the output of show env;
- Fixed incorrect display of Firmware version in show system information;
- Fixed an error where the ACL incorrectly filtered ARP frames;
- Fixed an error when performing rate-limit input for LAG on the stack;
- Fixed an error in the Dot1x VLAN optional for MAB authorization;
- Fixed an error where the value of the Calling-Station-ID field was incorrectly substituted when trying to reauthorize the Dot1x client using EAP-TLS;
- Fixed an error in Port-isolation with LAG on the MES2428 device;
- Fixed an error that occurs when reinitializing the PoE controller;
- Fixed an error that caused the L3 functionality to stop working when sending a large number of TCP messages to the Syslog server;
- Fixed an error where the lldp med-app-type voice vlan vlan-id setting disappeared from running-config after using the switchport voice vlan command;
- Fixed an error where the VLAN attribute from the RADIUS server did not work in conjunction with the Voice VLAN;
- Fixed an error that occurs when the switch processes a fragmented SNMP packet;
- Fixed an error where the link on XG ports with 1G copper modules did not switch to the UP status.
Firmware Version 10.4.2.1
Added:
- Added the collaboration of IP Source Guard and MAC-based VLAN.
Fixed:
- Fixed an error where AAA authentication mode break was not working;
- Fixed the removal of default route settings when upgrading from older software versions;
- Fixed L3 traffic failure in Dot1x guest-vlan;
- Fixed an error related to the loss of traffic in the ring in the scheme with MSTP+GVRP;
- Improved device stability;
- Fixed an error when using the default interface command that causes the switch to freeze;
- Fixed an error where DHCP Discover does not go through LAG;
- Fixed an error when trying to create an L3 VLAN interface;
- Fixed an error that causes the device to freeze when Port-Security is triggered;
- Fixed an error leading to incorrect cleaning of the MAC table when receiving BPDU TC.
Firmware Version 10.3.6.13
Fixed:
- Fixed a bug in LLDP where the LLDP frame was dropped if there was a small-format Power Via MDI TLV.
Firmware Version 10.3.6.11
Added:
- Added a command to delete the ssh server-address setting;
- Added a command that disables comparing the IP address in the Next server IP address field and the IP address in the ip dhcp relay server configuration;
- Added the ability to change the standard buffer utilization values of batch processes;
- Added support for Accounting for Dot1x/MAC using the RADIUS protocol;
- The output of the show interfaces status command looks like a similar command on MES23xx/33xx/35xx/5324 devices.
Fixed:
- Improved command stability;
- Fixed the hang of the switch when displaying the current configuration;
- Fixed an error that leads to a complete loss of device control;
- Fixed a problem with the switch hanging when executing the default interface range;
- Fixed an error with the speed setting in line telnet/ssh;
- Fixed an error that caused Web interface pages to not load;
- Fixed an error where the cost in STP was incorrectly calculated for interfaces;
- Fixed a problem with the switch hanging when changing the STP mode from RSTP to RPVST;
- Fixed an error where there was no L3 access to the switch after reboot;
- Fixed an error that freezes the SSH session when saving the configuration to the SFTP server;
- Fixed an error where the source ip was incorrectly specified in the SNMP response packets;
- Fixed an error where the POWER-ETHERNET-MIB poll::pethMainPseConsumptionPower returned a value in deciwatts instead of watts;
- Fixed an error that displayed an extra log about duplicating a link local IPv6 address;
- Fixed a dot1x PC authorization error when using RADIUS VLAN Attributes and Voice VLAN together;
- Fixed an error leading to TCP session reset;
- Fixed an error that caused high CPU usage when connected to the switch by a telnet client on TCP port 22.
Firmware Version 10.3.6.6
Added:
- Added a method for encrypting passwords in the CLI using the SHA512 algorithm. ATTENTION. If there are users with a 64-character password, the password must be replaced with a shorter one before updating;
- Added a limit on the number of unsuccessful authorization attempts in the Web;
- Added the ability to specify the number of unsuccessful authorization attempts to log in to the CLI and Web;
- Added the Service-Type attribute to the RADIUS request when authenticating a user using the Dot1x and MAB protocols;
- Increased the maximum key size when configuring radius-server and tacacs-server host to 128;
- Added the setting for option 150 for the DHCP server.
Fixed:
- Fixed a bug where the Tunnel-Private-Group-Id attribute was not processed if the Tag field was present;
- Fixed a bug where authentication via the Dot1x protocol did not work.
Firmware Version 10.3.6.3
Added:
- Added the ability to download configurations from TFTP/SFTP servers via WEB interface;
- Added the ability to choose between MAC and 802.1x authentication.
Fixed:
- Fixed a bug where the original broadcast DHCP Discover was switched on Uplink in a scheme with configured DHCP Relay within the same VLAN;
- Fixed a bug where the lease of an IP address was not renewed in a scheme with configured DHCP Relay within the same VLAN;
- Fixed a bug that caused incorrect display of fan speeds when polling via SNMP;
- Fixed a bug where a GET request would return NULL if it contained an invalid OID;
- Fixed a conflict between the global voice vlan id and active port-channel settings;
- Fixed a bug where the radius vlan attribute did not work in multi-session mode;
- Fixed a bug with simultaneous operation of Dot1x and MAB authorization.
Firmware Version 10.3.6
Added:
- Added the ability to enable DHCPv4/v6 snooping on 64 VLANs;
- Added the ability to set an IP address for accessing the snmp community;
- Added support for the Session-Timeout Radius attribute;
- Added support for the Termination-Action Radius attribute;
- Added support for the Cisco GLC-BX SFP module;
- Added verification of the current software version with the one received via DHCP Option 43, if the versions match, the software will not be updated;
- Added the ability to set a MAC ACL for a host with a MAC address 00:00:00:00:00:00.
Fixed:
- Fixed an Alarm indicator error for MES1428 and MES2428 devices;
- Fixed an error where the lldp med-app-type voice vlan vlan-id string disappeared from running-config after configuring the switchport voice vlan;
- Fixed an error where the ssh auth-type ip setting disappeared from running-config after ssh restart SSH Server error fixes;
- Fixed an error where speed matching with the optical 100M SFP module did not work;
- Fixed an error where the VLAN was not deleted from the port when executing the default interface command;
- Verification of the LACP Admin Key received from the partner is disabled.
Firmware Version 10.3.5
Fixed:
- Fixed an issue where configuring backup server sftp led to high CPU usage;
- Fixed the conflict of adding VLANs to interfaces in general mode when Dot1x settings are configured on other interfaces;
- Fixed an error where the default logging setting was displayed in the configuration;
- Fixed an error that occurred when resetting the interface configuration;
- Fixed the error of applying startup-config after restarting the device;
- Fixed an error that causes the switch to freeze while booting a device with a large number of MSTP instances;
- Fixed the problem of unicast ARP packet flooding when ARP Inspection is enabled.
Firmware Version 10.3.4
Added:
- Added support for the RADIUS VLAN attribute for Dot1x;
- Added dynamic distribution of SQinQ and MBV rules;
- Added the ability to change the password using a request from the TACACS+ server;
- Added the ability to issue a DHCP address by a DHCP server by interface number;
- Added counters for ACL rules;
- DNS Client added;
- Increased the maximum number of L3 interfaces to 20.
Fixed:
- Fixed a bug when sending syslog messages in an SSH session;
- Improved stability of the ERPS protocol;
- Fixed a bug when processing Voice VLAN events;
- Fixed problems with Voice VLAN operation on ports in general mode;
- Fixed incomplete recording of information when redirecting show tech-support to a file;
- Fixed the grep function for the show tech-support team;
- Fixed an error saving a description consisting of several words;
- Added the ability to write the interface type and identifier in commands together and separately;
- Implemented auto-completion of the interface name by Tab;
- Fixed type and values for the eltexPhyTransceiverInfoDiagnosticSupported SNMP table;
- Fixed return values for the SNMP table IF-MIB::ifHighSpeed;
- Fixed visual and syntax errors in MIB files;
- Fixed a bug when removing the switch from the TACACS+ server;
- Fixed interface initialization error when booting after upgrading the switch from older versions;
- Fixed bugs that cause the management switch to hang;
- Fixed a bug when breaking Telnet sessions;
- Fixed pagination when connecting via SSH;
- Fixed the output of the show ip dhcp server pools command.
Firmware Version 10.3.3.1
Fixed:
- Fixed the problem with incorrect routes when the switch receives the address via DHCP via DHCP-relay.
Firmware Version 10.3.3
Added:
- Added support for DHCP packets with Broadcast flag in DHCP Relay;
- Added discard-shutdown option for Port Security;
- Added show-command to view list of ACL rules on interfaces;
- Added the ability to add ACE description;
- Added the ability to delete multiple static routes by mask or all at once via no ip route command;
- Added interface statistics for ARP Inspection;
- Added information about interface media-type to show interfaces status output;
- Added syslog messages display in CLI for TELNET/SSH protocols;
- Added the ability to configure netmask in /xx prefix length format;
- Added show ip route command to show tech-support output.
Fixed:
- Fixed incorrect MAC address removal from MAC table after exceeding ARP timeout for nexthop static routes;
- Fixed adding incorrect padding for DHCP packets in DHCP Relay;
- Adjusted IGMP Snooping queue limits on CPU to minimize multicast delays with a large volume of IGMP messages;
- Fixed bug in MSTP which caused network loops after the reboot.
Firmware Version 10.3.2
Added:
- Added Voice VLAN feature;
- Added the ability to run Voice VLAN and Dot1x together;
- Added SNMP Trap for Storm Control;
- Added SNMP Trap for Port Security;
- Added logging of critical errors;
- Removed unnecessary firewall messages when connecting via Telnet/SSH to secondary IP addresses;
- Added protection from upgrading to unsupported SW version;
- The System Contact and System Location fields are now empty by default;
- Added L2 support code to SNMP OID sysServices;
- Added the ability to change the parameters of the current user without breaking the session;
- Added the ability to switch to the global configuration mode using the "configure" command;
- The "show ip binding" command is now available to a user with privilege level 1;
- The "show logging" command is now available to a level 1 user;
- Improved appearance and options for configuring VLAN via the WEB interface;
- Added system description command.
Fixed:
- Fixed a bug where the device terminated the session when entering more than 20 characters in the login;
- Fixed removal of Multicast-TV VLAN from all ports when deleting VLAN;
- Fixed switch freezing when performing cable diagnostics via WEB;
- Fixed switch freezing when trying to connect externally via SFTP;
- Fixed a bug where it was impossible to replace a dynamic DHCP Snooping entry with a static one;
- Fixed port blocking issue after reboot when STP is globally disabled;
- Fixed issue with default gateway configuration when receiving DHCP option;
- The System Contact and System Location fields are set to empty by default.
Firmware Version 10.3.1
In software version 10.3.1 for the switch models MES1428(B),MES2428(B)(T) no functional changes were made.
Firmware Version 10.2.10
Added:
- Added None method for authorization;
- Implemented Guest and Unauthenticated VLAN features;
- Implemented cause of reboot monitoring via SNMP;
- Added command to enable DHCP-relay for VLAN.
Fixed:
- Fixed incorrect simultanious work of DHCP-relay and DHCP-snooping;
- Increased the maximum number of characters in username to 64;
- Fixed bug with polling SNMP tables when saving the configuration;
- Fixed error when creating interface VLAN in WEB;
- Redesigned VLAN configuration page in WEB;
- Fixed the mechanism of adapting the AAA configuration to the new syntax.
Firmware Version 10.2.9.4
Added:
- Added authorization using SSH keys;
- Added "spanning-tree bpdufilter" command hint when configured in interface-range context;
- All possible special characters for username and SNMP commands are now supported;
- Increased the maximum number of characters in the name, hostname, description fields;
- Increased the maximum number of characters in the name, hostname, description fields;
- DHCP opt 82 and PPPoE IA settings are now separated;
- Added MAC address value to show system info output;
- Added support for the following cryptographic algorithms in SSH: aes192-cbc, aes128-ctr, aes192-ctr, aes256-ctr;
- Added Calling-Station-Id field in access-request packet for 802.1x;
- Added the ability to completely change the configuration from a file without rebooting the device.
Fixed:
- Fixed incorrect display of "ipv6 nd inspection" command;
- Fixed interfaces status changing when updating the device;
- Optimized logging of executed commands when using "write startup-config";
- Optimized "show running-config command" output;
- Improved "spanning-tree bpdufilter enable" command hint;
- Transceiver in/out power via SNMP is now displayed in dBm.
Firmware Version 10.2.8.2
Added:
- Implemented cold/warm startup logging;
- Implemented chain authentication method for AAA;
- Added the ability to use both RADIUS and TACACS for authentication;
- Added the ability to set your own value in the NAS-Identifier field;
- Added the ability to configure the service policy without binding it to the interface;
- Added the ability to configure src and dst ports for DHCP Relay;
- Changed ZTP mode;
- Added support for the ERPS protocol;
- Added support for the HTTPS protocol;
- Added the ability to configure DHCP Relay without an IP address on client VLANs.
Fixed:
- Fixed RX rate limit logging;
- Fixed xSTP work with LBD-frames;
- Fixed incorrect privilege assigning during RADIUS-authentication;
- Fixed dropping all traffic when setting rate-limit more than 1 Gbps;
- Configuring authorized-manager ip-source 0.0.0.0 0.0.0.0 allows authorization from any ip addresses;
- Optimized work with memory;
- Fixed tips for enable/disable commands;
- Fixed reboot and authentication SNMP-trap;
- Fixed possible duplication of the main MAC address from the MAC LAG of another device;
- Fixed work of dot1x port-control force-authorized in multi-session mode;
- Fixed STP operation when changing the status of a port on which STP is disabled, the MAC address table is no longer being flushed;
- Fixed problem with displaying multicast groups in the forwarding-database table;
- Fixed problem with IGMP-report processing in IGMP Proxy;
- Access to WEB-interface for users with privileges below 15 is prohibited;
- Fixed bootloader version view.
Firmware Version 10.2.7.2
Added:
- Added the ability to configure DCS on separate VLANs and interfaces;
- Configuring of logging to Syslog servers and local log files has been optimized;
- The number of configuration entries for logging to Syslog servers has been increased;
- Severity of syslog entries "TCP-4-Connection attempt to closed/non-active TCP port" has been changed to debugging;
- sysObjectID format has been changed.
Fixed:
- Fixed problem with limiting the number of groups when receiving IGMPv3 report;
- Fixed an issue where an IGMPv3 report containing multiple entries was not sent to the mrouter interface;
- Fixed issue with SNMP IPv6 targethost configuration;
- Fixed a bug in displaying the "no lldp transmit" and "no lldp receive" commands;
- Fixed problem with displaying 64-bit counters;
- Fixed problem with SNTP server configuration disappearing after reboot.
Firmware Version 10.2.7
Added:
- Added the ability to block IGMP Query on an interface;
- IGMP authorization via RADIUS is now supported;
- IGMP and VRRP packets L2PT encapsulation is now supported;
- The secure-permanent and secure-delete-on-reset modes are now supported in the Port-security module;
- Added SYSLOG message when trying to change the interface by the user in the Port-security module;
- 802.1x authorization is now supported;
- Added the ability to restrict TCP-SYN traffic for the Firewall module;
- IPv6 link-local addressing function is now supported in authorized manager;
- Storm-control now restricts known multicast traffic;
- To change the IP address on an interface, the 'no ip address' command is now optional;
- Entering the 'interface range' context can now be performed for arbitrary interfaces of the same type;
- The default parameters are no longer displayed in the configuration;
- Negotiation capabilities description and parameters, allowed for configuration via SNMP have been changed;
- Added the ability to view the MAC table for individual interfaces via SNMP;
- HW revision format of devices in 'show system information' output and corresponding SNMP oid now matches the vendor sticker;
- Monitoring capabilities of cooling fans have been expanded;
- The output of some SYSLOG messages has been changed;
- Added indication of the reboot initiator to the SYSLOG message and SNMP trap for the corresponding event;
- SYSINFO parameters overwriting was optimized when loading devices;
- Added the ability to use VCT in the WEB interface;
- Added the ability to define the description of Ethernet / LAG interfaces in the WEB-interface.
Fixed:
- Fixed errors in processing multicast traffic from the 239.x.x.x range;
- Fixed display of different types of IGMP mrouter interfaces in the configuration;
- Fixed a bug with enabling the QoS module;
- Fixed possible disappearance of the Class-map after reboot;
- Fixed disappearance of static MAC entries after reboot;
- Fixed disappearance of static ARP entries after reboot;
- Fixed disappearance of DCS module settings after reboot;
- Fixed incorrect display of addresses in the SYSLOG message;
- Fixed a bug with incorrect user authorization using TACACS + when connecting to the device's IPv6 interface;
- Fixed device reboot when trying to specify a domain name as an SNTP server;
- Fixed loss of access and restart of devices, when using telnet;
- Fixed 'show etherchannel port-channel' command output;
- Fixed display bootloader version in 'show bootvar' output;
- Fixed possible reboot of devices when polling the L2PT module table via SNMP;
- Fixed high CPU load during intence SNMP polling;
- Fixed a bug with assigning the same UDP ports when using logging and tftp;
- Fixed a problem with the disappearance of the manually assigned IP address through the WEB interface.
Firmware Version 10.2.6.3
Added:
- Added the ability to block IGMP Query on the interface;
- Secure-constant and secure-delete-on-reset modes are now supported for port security.
Fixed:
- Fixed a bug when enabling QoS.
Firmware Version 10.2.6
Added:
- CPU can now process 802.1q double tagged traffic;
- Added the ability to add two 802.1q headers via MAC-ACL;
- xSTP protocols events logging is now supported;
- Rootguard feature for individual MSTIs was added;
- The setting for copying an 802.1p tag to an external 802.1q tag has been unified;
- IPv6 ND inspection is now supported;
- IPv6 ND RA guard is now supported;
- Increased the maximum number of interfaces with the enabled IPv6 ND RA guard feature;
- Added the ability to assign trusted ports for IGMP Snooping;
- Increased the number of processed packets limit in IGMP Snooping;
- Configuration/firmware files download status monitoring via SNMP is now supported;
- Added the ability to select the active software image via SNMP;
- Changed the format of interface names in the output of show commands;
- Default DHCP option 60 has been changed;
- Port-channel and Link-aggregation module are now enabled by default;
- Default logging severity is now informational(6);
- Ability to periodically transmit Gratuitous ARP;
- CPU processing of the ARP messages has been changed;
- TACACS+ authorization of entered commands is now supported;
- Maximum number of authorized-manager entries was increased up to 100;
- Added the ability to configure IPv6 authorized-manager;
- Maximum number of NTP servers was increased up to 4.
Fixed:
- Fixed errors when configuring xSTP via SNMP;
- Fixed operation of restricted-role feature for MSTP;
- Fixed operation of LLDP port-id-subtype commands;
- Fixed errors in configuring MAC notification change via SNMP;
- Fixed errors when configuring DHCP server IP address via SNMP;
- Fixed DHCPv4 / DHCPv6 / PPPoE-IA snooping binding table overflow behavior;
- Fixed the switch reboot when working with static DHCPv6 Snooping entries;
- Fixed errors in configuring DCS module via SNMP;
- Fixed disappearance of static IGMP Snooping groups after reboot;
- Optimized configuration output when working with a large number of IGMP Snooping entries and a large number of active VLANs;
- Fixed display of queue-map regn-priority ipDscp commands in configuration;
- Fixed errors in configuring Class-map via SNMP;
- Fixed bug with switching between NTP servers when using IPv6;
- Fixed bugs with the inability of authorization on the device;
- Fixed bug when resetting password via boot-menu when RADIUS / TACACS + authentication was configured;
- Fixes in login / exec banner output;
- Fixed bug with restarting devices from SSH session;
- Fixed problems with copying empty software image via SFTP;
- Fixed output of VLAN module debug commands to a remote session;
- Fixed switch reboot when polling the switch via SNMP;
- Fixed display of device's uptime in the WEB-interface;
- Fixed switch reboot because of frequent switching between tabs in the WEB interface;
- Fixed freezing when working in the WEB-interface.
Firmware Version 10.2.5.2
Fixed:
- Fixed disappearance of port-channel load-balance settings after reboot;
- Fixed incorrect operation of DHCP Snooping with certain MAC addresses;
- Fixed memory leak when working with DHCP client;
- Fixed reboot when running IGMP Snooping;
- Fixed issue with freeing TCP sockets.
Firmware Version 10.2.5
Added:
- Boot file size is reduced;
- SFP-T is now supported;
- Ability to specify speed/duplex capabilities for auto-negotiation;
- Ability to clear the IGMP/MLD snooping groups table;
- Extended debug capabilities for IGMP snooping;
- Login/exec banner is now supported;
- Ability to disable the confirmation request for commands;
- Confirmation request for shutdown branch commands in global configuration mode;
- Changed show vlan and show ip IGMP snooping forwarding-database commands in the show tech-support output;
- Added show iss-health status command output to the show tech-support output;
- Added warning when running out of hardware resources for Protocol-based VLAN;
- Network-admin/operator RADIUS attributes are now supported.
Fixed:
- IGMP snooping sparse-mode switching with high utilization of the IGMP snooping forwarding-database table was optimized;
- Fixed a hint for the no switchport egress-filter command;
- Fixed interruption of SNMP-query eltMesIssAaaMIB;
- Fixed reboot during eltexphytransceiverdiagnosticentry SNMP polling;
- Fixed reboot when reconfiguring static IGMP groups;
- Fixed missing logging of entered commands when using logging hostname-format;
- Fixed freezing when interrupting telnet sessions during command output;
- Fixed flushing of the IGMP snooping forwarding-database table when there are no subscriptions.
Firmware Version 10.2.4
Added:
- Added the ability to transparently transmit 802.1q traffic of the entire range (VLAN 1-4094) without preliminary VLAN DB configuration;
- Added logging of flapping MAC addresses;
- Added support for GVRP protocol;
- Added web server support;
- Added support for ssh client;
- Added the ability to reset the interface settings with one command;
- Added the ability to customize the origin-id field in syslog messages;
- Changed the work of the Storm Control function, traffic limiting works without taking into account the interframe interval (IFG);
- The number of static mac entries has been expanded to 32 for each port.
Fixed:
- Fixed error with telnet client connection during tacacs / local authorization if TACACS + server is unavailable;
- Fixed output of syslog messages during transit connection by telnet / ssh client;
- Fixed limitation error for multicast groups;
- Fixed the error of polling via SNMP when requesting several OIDs at the same time;
- Fixed error with port protection function on MES2408CP devices.
Firmware Version 10.2.3
Added:
- Added the ability to configure MTU;
- Expanded DDM output for SFP transceivers;
- Optimized TCAM utilization for ACL;
- Added the ability to exclude default VLAN on interfaces;
- Added L2PT support for PVST, RIP, OSPF, Cisco proprietary-protocols (VTP, DTP, etc.);
- Added support for L2PT on LAG interfaces;
- Added the ability to configure Acceptable-frame-type for interfaces in switchport access mode;
- Added the ability to configure Acceptable-frame-type for interfaces in swithcport dot1q tunnel mode;
- Added missing tips for LAG interfaces;
- Added support for Telnet client;
- Added support for macros;
- Added support for the configuration modification mechanism when updating software;
- Added ability to view Software build via SNMP;
- Added ability to configure port attribute in TACACS+ header;
- Added ability to view U-boot version in CLI and SNMP;
- Changed the logic of ip binding limit work with static entries.
- Optimized TCAM utilization by Ethernet OAM;
- Added the ability to configure IP Source-guard in separate VLANs.
Fixed:
- Fixed error displaying vlan 4094 in configuration;
- Fixed freezing when reloading from telnet / SSH sessions;
- Fixed freezing when clearing individual vty sessions;
- Fixed a bug with access to the switch when using more than 2 TACACS+ servers;
- Fixed a problem with the inability to increase privilege levels when working with TACACS+;
- Fixed work of accounts with privilege level 15. The admin account is no longer required;
- Fixed problem with processing traffic on CPU when using ACL modify-vlan;
- Fixed incorrect configuration clearing when removing interfaces from LAG;
- Fixed behavior of the ip igmp snooping sparse-mode command when enabling or disabling IGMP Snooping;
- Fixed ACL operation in conjunction with DHCP / DHCPv6 Snooping;
- Fixed behavior of the ip binding record counter when DHCP Snooping is disabled;
- Fixed behavior of ip dhcp client vendor-specific command;
- Fixed behavior of ARP protocol when working with default IP address;
- Fixed bug when setting a long system location or system contact name;
- Fixed bug when disabling L2PT for LLDP;
- Fixed issue with displaying static IGMP groups with LAG interfaces specified.
Firmware Version 10.2.2
Added:
- Supported battery monitoring via SNMP;
- The ability to configure MVR via SNMP is supported;
- The show ip igmp snooping groups command output has been changed;
- DCS functionality supported (adding option 82) for DHCPv4 relay;
- Supported deny / permit rules for selective QinQ functionality.
Fixed:
- Fixed snmpwalk polling with DHCP client enabled;
- Fixed bug when assigning the same interface description via SNMP;
- Fixed a bug leading to learning MAC addresses in an inactive VLAN on an interface from DHCP packets;
- Fixed incorrect display of IGMP static-group indicating different types of interfaces in the configuration;
- Fixed the logic of the port-security violation commands.
Firmware Version 10.2.1.1
Added:
- Extended range of configurable STP hello-time values.
Fixed:
- Fixed a bug with missing part of the configuration from show running-config;
- Fixed DCS operation: option 82 is now removed in messages sent to the client;
- Fixed problem with freezing when copying multiple configurations using snmpset commands;
- Fixed bugs when receiving invalid IGMP packets;
- Fixed a bug that caused freezing after exec-timeout telnet / ssh-sessions;
- Fixed a bug that caused a short-term loss of access to the device;
- Fixed snmp trap format for mac notification change functionality;
- Fixed bugs when configuring IPv6 ACL;
- Fixed a bug with the disappearance of the logging of the ZTP functionality;
- Fixed bug with ignoring STP hello-timer value received from root bridge;
- Fixed bug with incorrect exiting of the physical interface from the LAG;
- Fixed crash restart when using MAC notification change functionality.
Firmware Version 10.1.9
Added:
- Collaboration of static and dynamic DHCPv6 snooping entries is supported;
- Joint operation of Protocol-based vlan and PPPoE-IA is supported;
- Extended configuration of DCS functionality is supported (DHCP option 82, DHCPv6 option 18.37, pppoe-ia vendor-tags);
- Changed commands for configuring MAC-based vlan functionality;
- Joint work of MAC-based vlan and DHCP snooping functionality is supported;
- Supported RADIUS vendor-specific attribute 'Eltex-AVpair';
- Disabled messages when synchronizing the switch via SNTP;
- Added NTP-server stratum output;
- SNMP-trap cold / warm start supported;
- Changed the output of the 'show snmp traps' command;
- Added System name column to LLDP neighbor table;
- Increased the accuracy of calculating the values of interface utilization;
- Changed the order of displaying functionality in the configuration output;
- Delayed switch reboot functionality is supported;
- The space between the type and the interface number has become optional when entering the interface configuration mode;
- Removed unsupported / outdated commands from CLI;
- Changed commands for configuring and viewing debug functionality;
- All debug messages are now disabled by default;
- BOOT-menu supported;
- Added commands for working with flash content;
- The maximum length of a vlan name is limited;
- Added check for configuration changes before rebooting;
- The default user 'guest' has been removed;
- All 'clear' commands have been moved to privileged mode.
Fixed:
- Fixed reflection of IGMP messages;
- Fixed possible switch reboot when viewing IGMP snooping mrouter ports;
- Fixed mechanism for processing IGMP leave messages;
- Fixed problem with disappearing LLDP management addresses;
- Fixed work of Class-map;
- Fixed ACL sub-action work;
- Fixed the 'no queue-map regn-priority ipDscp / vlanPri' command;
- Fixed behavior of PoE indicator on MES2428P switch;
- Fixed work of indication on combo ports in prefer-fiber mode;
- Fixed switch hangs when performing cable diagnostics;
- Fixed restart when entering 'clear ip dhcp relay statistics' command;
- Fixed duplicate DHCP offer / ack messages with unicast flag;
- Fixed the problem with adding entries to the DHCP snooping table with option 82;
- Fixed problem with DHCPv6 reply messages when releasing addresses;
- Fixed bugs in the SNMP functionality;
- Fixed handling of service protocol messages in 'switchport acceptable-frame-type tagged' mode;
- Fixed processing of Ethernet-OAM messages on xSTP blocked ports;
- Fixed display of oper status when using UDLD aggressive mode;
- Fixed possible reboot when using multicast-tv vlan;
- Fixed incorrect display of configuration in 'show startup';
- Fixed work with long passwords for the bootloader;
- Fixed transition between interface configuration modes and interface groups;
- Added handling of file download interruption when telnet / ssh sessions are broken;
- Fixed reboot of the switch when connecting to the switch via SSH.
Firmware Version 10.1.8.5
Added:
- Supported selective-qinq add-vlan functionality;
- Optimized setting of Dot1Q tunnel functionality;
- Timestamp precision for syslog messages increased to milliseconds;
- DHCP / DHCPv6 snooping can no longer be enabled on inactive vlan;
- Supported IGMP snooping with selective QinQ;
- Added display of all PSEs for 2428Р in the 'show power detailed' command;
- The functionality of the 'exec-timeout' setting has been improved for individual lines;
- Supported special character '@' for snmp community;
- The functionality of limiting the number of DHCP clients on physical interfaces has been improved.
Fixed:
- Fixed cli MES2428P hangs;
- Fixed hangs of switches when it was impossible to send IGMP messages;
- Fixed error starting VCT when using long patchcords;
- Fixed error 'SNMP ++: Invalid Pdu' when polling the issSystem table;
- Fixed work of Dot1Q tunnel functionality;
- Fixed rebooting of the switch when removing 'selective-qinq' rules from interfaces;
- Fixed restart with a large number of traces in a telnet session;
- Fixed the logic of joint work of static and dynamic DHCP snooping entries;
- Fixed problems with displaying the port of TACACS servers in the configuration;
- Fixed display of physical interfaces in syslog messages;
- Fixed empty output for local syslog files when they are full;
- Fixed switch hangs when performing cable diagnostics;
- Fixed an issue where the switch could be accessed by entering a blank password when using TACACS;
- An issue has been fixed where entries in the MAC table for inactive vlanes were created when receiving ICMPv6 messages;
- Fixed a problem with displaying the administrative status of interfaces after a reboot;
- Fixed names of interfaces in IfName;
- Fixed restart of the switch when polling ifMainDesc;
- Fixed output of 'show interfaces description' command;
- Fixed issue with enabling port-security when removing port-security settings;
- Fixed handling of tagged igmp-reports by MVR functionality.
Firmware Version 10.1.8.2
Added:
- IGMP requests that fall under the multicast snooping profile and max-groups restriction are sent to Uplink;
- The IGMP group is added to the igmp snooping table when there is no response from the RADIUS server;
- Fixed operation of the 802.1x multi-session functionality;
- Fixed error of incorrect reading of DDM for DWDM modules;
- The error of the system buffer overflow when using the IP IGMP-Proxy functionality has been fixed, which has caused the services that send traffic from the CPU to freeze;
- The error of the system buffer overflow when using the IP PIM functionality was fixed, in which part of the MC groups are not added to the ip mroute table;
- Fixed a bug where the timer for rebuilding the STP tree was not reset;
- The error of rebuilding the STP tree when adding VLAN to the port is fixed;
- The error when turning on ip dhcp snooping has been fixed, which leads to a reboot of the backup unit on the stack;
- Fixed conflicts of column / row numbers and interface indices for SNMP tables ifTable and rlPhdUnitStackPortTable;
- Fixed the error of the endless output of the show green-ethernet command;
- Fixed incorrect STP shutdown on ports in PVST mode;
- Improved device stability.
Fixed:
- Fixed incorrect L4 ACL configuration output format;
- Fixed incorrect work with sockets, leading to loss of control;
- Fixed incorrect output of show ipv4 interface;
- Fixed error when changing port settings via SNMP in eltMesIssVlanPortTable;
- Fixed incorrect port speed change when switching media on combo ports;
- Fixed bug with incorrect operation of enable authentication tacacs with 2 servers;
- Fixed bug with incorrect work of enable when user local matches the one configured on the tacacs server;
- Fixed logged out messages and snmp trap with empty username;
- Fixed a bug when setting a user with a password length> 85 characters;
- Fixed extraneous output when entering 'crypto key generate rsa';
- Fixed incorrect setting of checksumm in the IP header when configuring IGMP Snooping replace source IP;
- Fixed a bug that caused the software to stop loading when the state of the interfaces changed;
- Fixed incorrect work of interface auto-negotiation when it is turned off and then turned on;
- Fixed hint and auto-completion of DCS settings in interface range mode;
- Fixed bug when deleting Ethernet OAM Aggressive settings.
- Fixed xSTP operation in compability STP mode;
- Optimized the process of changing Vlan on interfaces.