New ignore-nas-id-attributes Option for RADIUS CoA

In NAT-based deployments, RADIUS Change of Authorization (CoA) requests may be rejected due to a mismatch between the NAS identifier in the CoA packet and the switch IP address or hostname. This can happen since packets sent by the CoA Client are addressed to the NAT gateway address before translation.

As of version 4.1.9.85, an optional ignore-nas-id-attributes setting was added to the client command (under aaa server radius dynamic-author configuration mode) to allow CoA requests to be processed despite a NAS identifier mismatch. When enabled, session identifiers are still validated. By default, this setting is disabled and the switch continues to enforce both NAS and session identifier validation, in accordance with RFC behavior.

New OSPF GUI Screens (4.10.1.15)

Version 4.10.1.15 added support for 2 additional GUI screens supporting OSPF functionality:

1. OSPFv2 Neighbor - displays the OSPFv2 neighbor table.

2. OSPFv3 Neighbor - displays the OSPFv3 neighbor table.

Support Additional Tag Values for RADIUS VLAN Attributes (RAVA/DVA)

In earlier versions, RADIUS attributes used for RAVA/DVA VLAN assignment were ignored if the Tag field was set to a non-zero value, which could prevent VLAN assignment when using default Cisco ISE configurations. As of version 4.1.9.85, the switch now supports Tag values in the range 0x00–0x1F for RADIUS attributes Tunnel-Type (64), Tunnel-Medium-Type (65), and Tunnel-Private-Group-ID (81), in accordance with RFC 2868. This enhancement improves interoperability with Cisco ISE and eliminates the need for additional server-side configuration when using tagged RADIUS VLAN attributes.

CBD Network Probe Version

In Version 4.10.0.15 the CBD Network Probe version was upgraded to version 2.10.1.20250619

Enhanced Fan Status and Monitoring

The output of the show system fans command has been enhanced to include a Fan Duty Cycle field, which indicates the current operating capacity (percentage) of each fan.

In addition, a new “Warning” fan status and corresponding syslog message are now generated when a fan reaches 100% utilization, providing earlier visibility into potential thermal or cooling issues.

Enhanced PoE Information Display

The information provides for the “show power inline <interface>” was enhanced. The following fields were updated or added:

• Port Status field – For interfaces supporting the IEEE 802.3bt Type 3 (4-pair) standard, port status information is now displayed for both power channels (ALT-A and ALT-B), even when the connected powered device (PD) is a Single-Signature PD.

• PD Signature Check field –This field now supports a new value, “Invalid”, indicating that the connected PD is neither a Dual-Signature nor a Single-Signature PD. The Invalid status is also displayed when the port is down or when other PD signature detection errors occur.

• PD Auto Class Status field – A new field indicating whether Auto Class negotiation is supported and enabled on the connected PD.

Enhanced PoE Counter Display for 802.3bt Interfaces

For interfaces supporting the IEEE 802.3bt Type 3 (4-pair) standard, PoE counters now display separate counters for both power channels (ALT-A and ALT-B) for both Dual-Signature and Single-Signature powered devices (PDs).

Previously, separate ALT-A and ALT-B counters were shown only for Dual-Signature PDs. For Single-Signature PDs, only a single set of counters was displayed.

There is no change for interfaces supporting the IEEE 802.3bt Type 3 (2-pair) standard The display for this interface will continue to display a single set of PoE counters.

Caveats Resolved in Relase 4.10.1.15