EOS 4.21.3F TOI

As of EOS release 4.19.0F, breakout mode is not supported on any ports between 11-26 (inclusive) and ports between 47-62 (inclusive), and these ports can only run at 1x40GbE or 1x100GbE

This document explains how to configure and deploy Arista MSS with Fortinet FortiGate firewalls (also called

Support for asset tagging aids hardware identification by the use of user supplied strings. Fixed

BGP conditional route inject functionality is available with the ribd routing protocol model since EOS 4.21.0F

EOS 4.21.3F introduces support for BGP Flowspec, as defined in RFC5575 and RFC7674. The typical use case is to filter or redirect DDoS traffic on edge routers.

This feature adds support for a dynamic configuration model to eliminate the need for the network administrator to

The default policy behavior is to permit/accept all routes when a BGP neighbor or peer group is configured with a route

Neighbor default originate feature is used to advertise a default route to the neighbor (peer or peer group) even when

BGP Non Stop Forwarding (NSF) aims to minimize the traffic loss when the the following scenarios occur:

BGP out delay is an existing feature in EOS where an optional delay could be applied prior to advertising a route. The

The BGP Prefix Independent Convergence (PIC) Edge feature refers to fast re convergence of traffic destined for BGP

4.21.3F introduces support for Bidirectional PIM in the platforms listed below. The TOI for the support in earlier

Starting from EOS 4.21.3F, license for feature BRCM STRATA SCHW TP, which stands for Broadcom Strata Single Chip

The CLI command “switchport dot1q vlan tag disallowed” disallows all the vlan tagged packets sent on L2

DCS 7280SRM 40CX2 is a 1RU fixed system, which has two CFP2 ports (41 and 42), capable of hosting either CFP2 DCO, or

If a network uses deep packet inspection for its ECMP, RFC7432 recommends deployments to use a control word in L2 EVPN

Log archiving is used to periodically (every minute) copy logs and core files from tmpfs filesystems /var/log and

Explicit Congestion Notification (ECN) is an extension to the Internet Protocol and to the Transmission Control

ContainerTracer provides a composite view of the physical network topology and Kubernetes. Kubernetes and CVX must

Headroom buffers are used to store packets when ingress admission control checks fail to store them in both the

This is an addendum to the “IP in IP decapsulation” document.

This feature sets the default administrative status of physical Ethernet interfaces to

DirectFlow runs alongside the existing layer 2/3 forwarding plane, enabling a network architecture that

On Algomatch platforms, expansions and encoding transformations on IP prefixes are performed before attempting to

This feature tracks the number of IPv4 unicast, IPv6 unicast and IPv4 multicast packets routed by each physical port.

The feature is close to Assured Forwarding Per Hop Behavior where the classification of the incoming packets is based

SWI Image Verification is a feature that allows one to determine if their SWI image has been tampered with. It verifies

In the traditional data center design, inter-subnet forwarding is provided by a centralized router, where traffic traverses across the network to a centralized routing node and back again to its final destination. In a large multi-tenant data center environment this operational model can lead to inefficient use of bandwidth and sub-optimal forwarding.

“MLAG Domain Shared Router MAC” is a new mechanism to introduce a new router MAC to be used for MLAG TOR

Many Layer 2 VXLAN deployments span more than one physical data center (DC) location. Typically, each DC has several

FIB compression allows us to program routes into the hardware more efficiently. Routes are programmed in the route

Until now, all PTP packets received on Arista switches with PTP boundary mode enabled will automatically be sent to

All modern high density electronic circuit chips are susceptible to naturally occurring phenomenon called single

Some of Arista’s products may use one or more FPGAs for certain tasks pertaining to controlling one or more of the

This feature introduces the support for IPv4 ACL configuration under GRE and IPsec tunnel interfaces and IPv6 ACL configuration under GRE tunnel interfaces. The configured ACL rules are applied to a tunnel terminated GRE packet i.e. any IPv4/v6-over-GRE-over-IPv4 that is decapsulated by the GRE tunnel-interface on which the ACL is applied, or a packet terminated on IPsec tunnel i.e, IPv4-over-ESP-over-encrypted-IPv4 packet that is decapsulated and decrypted by the IPsec tunnel interface on which the ACL is applied.

This feature introduces the ability to match on 1) any BGP aggregate contributor or 2) a specific BGP aggregate’s

This feature enhances the feature limitation checking when performing Smart System Upgrade (SSU) and enables

This feature allows inter VRF route leaking locally from one VRF into another on the same device. Inter VRF routes can

IPv4 routes of certain prefix lengths can be optimized for enhanced route scale. The feature is described here. This

IPv4 routes of certain prefix lengths can be optimized for enhanced route scale on 7500R, 7280R, 7500R2 and 7280R2

This feature implements RFC 5310 that allows IS-IS PDUs to be authenticated using following secure hash algorithms (SHA): SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512. The feature is supported in both default and non-default vrf. Unlike the existing authentication scheme based on MD5 and ClearText, with this feature two IS-IS nodes can be configured with different SHA algorithm and secret-key and can still exchange IS-IS PDUs. 

The ‘clear isis instance’ command can be used to reset the ISIS instance that is running. All ISIS instance and interface states will be cleared and re-initialized from the configuration so that ISIS rediscovers neighbors and reconverges the different instances in the ISIS routing tables.

IS IS Graceful Restart adds support for Restart Signaling for IS IS, IETF RFC 5306. When IS IS is used

This feature provides streaming of the IS IS Link State Database via TerminAttr. The IS IS LSDB is exported to Smash at

The IS IS minimum remaining lifetime feature ensures that no matter what value of Remaining Lifetime is received, a

This feature introduces a configurable LSP refresh interval for originating ISIS LSPs. The default

Sub interface counters provide ability to count packets and bytes incoming and outgoing on L3 sub interfaces. This

Subinterfaces divide a single ethernet or port channel interface into multiple logical L3 interfaces based on the

This feature enables MACsec service for non MACsec capable front panel ports. MACsec over front panel port is

Explicit Congestion Notification (ECN) is an IP and TCP extension that facilitates end to end network congestion