The release notes for Switch Engine™ v34.1.1 detail new features, software improvements, supported platforms, upgrade prerequisites, scaling limits, and known issues for Universal Hardware switches. New security features include IPv6 First-Hop Security with RA Guard, DHCPv6 snooping, IPv6 Source Guard, and Neighbor Discovery Inspection; hybrid post-quantum key exchange for SSH, RADIUS over TLS, and Syslog over TLS; and SNMPv3 authentication with SHA-256, SHA-384, and SHA-512. Access and policy enhancements include ACL rules that match both source and destination network zones, Fabric Attach bypass of NetLogin for zero-touch clients, visibility of Fabric Attach clients that fail authentication, automatic Fabric Attach authentication on uplinks, and NetLogin tracking of client IP addresses for the RADIUS Framed-IP-Address attribute. Other additions include a bandwidth mode for flood rate limiting, a configurable EAPS flush method, local staging of debug data for SCP transfer, detailed FEC statistics, SNMP pause frame counters, Transparent Clock support on the 5120 Series, improved OSPF scale on the 5520, 5720, 7520, and 7720 Series, AVB support on the 5320-16P-2MXT-2X, and updates for the Y2038 and Y2036 time overflows and for time-zone changes in Alberta, the Northwest Territories, and British Columbia. Infrastructure upgrades include Linux kernel 6.12 and OpenSSL 3.5.8. Supported deployment models include dual-OS capability with automatic selection by using ExtremeCloud IQ, Extreme Management Center, or manual bootloader configuration. Base and Premier license limits, compatibility matrices with Extreme Management Center, supported RADIUS servers, and tested third-party products are specified. Open issues, known behavioral limitations such as DHCPv6 snooping binding learning when only IPv4 source IP lockdown is enabled, and resolved defects are documented for technical implementation and troubleshooting."
