master port is still blocked and slave port is still opened. Furthermore, when ZESS is
switched, FDB of the blocked port will be upgraded.
Figure 3-3 ZESS network topology
3.2.15 DHCP relay
DHCP relay forwards users’ DHCP request packet to the designated DHCP server by L3
interface, and forwards the packet returned by the server to the user. ZXR10 5250 DHCP
relay supports configuration of multiple server. It supports identification and processing of
option82. Many different actions of forwarding, dropping or substitution can be adopted
for packets carrying option82.
3.2.16 TACACS+
Besides common radius authentication, ZXR10 5250 also supports TACACS+
authentication of administrative user. TACACS+ seems similar to radius in usage. It is
also an authentication method with client plus server. The device works as client and
sends the username and password to remote TACACS+ server, who takes
authentication and then returns the result to the client. Besides the difference in
authentication process and packet attribute, the biggest difference between TACACS+
and radius lies in the fact that TACACS+ takes encapsulation of the forwarded packet,
which greatly improves the system security.
To Next Page
Loading...
