* ExtremeXOS 11.6
Extreme Networks last week introduced Version 11.6 of the ExtremeXOS operating system for its LAN switches, with security enhancements.
Extreme says the new version allows only devices with valid DHCP-assigned IP addresses to access the network. This is an attempt to disrupt a method of bypassing network access control (NAC) by using a static IP address. My colleague Phil Hochmuth has details.
If a user attempts to bypass the NAC in this way, the switch can alert an administrator.
Extreme says its new software also has enhancements to 802.1X, in something called the Universal Port framework. The IEEE 802.1X standard provides for authentication to a network. The Universal Port framework automatically provisions network resources when new users and devices connect to the network, according to Extreme. It also allows you to set per-user quality of service, enforce rate-limiting on bandwidth, and provide dynamic access-control lists.
Extreme says both the NAC enhancement and Universal Port can be used with Sentriant AG, Extreme’s NAC software. Sentriant tests endpoints for compliance with security policies without requiring agent software.
Switches running ExtremeXOS now also will be more ready for Microsoft’s NAP. When it is released, the switches won’t need any hardware upgrades. NAP-related improvements include the ability for the switch running ExtremeXOS to automatically quarantine any end systems while continuing to allow access to remediation servers, Extreme says.
The operating system was first introduced three years ago. ExtremeXOS Version 11.6 is shipping now, and is included in any new BlackDiamond core switches or Summit edge switches.
