Extreme Networks Associate (ECA) key terms

Extreme's fabric technology that lets switches build a self-forming, resilient topology using a short-path bridging model. Edge nodes attach to the fabric and traffic is forwarded over the shortest path without traditional spanning tree blocking.

An IEEE 802.1aq standard that replaces spanning tree with link-state routing to compute shortest paths across a mesh. It supports multipathing and fast convergence, and underlies Extreme Fabric Connect deployments.

An Extreme feature that lets conventional access switches or third-party devices join a Fabric Connect network as edge nodes without running the full fabric control plane themselves, simplifying integration of legacy gear.

Intermediate System to Intermediate System, a link-state interior gateway protocol. Extreme Fabric Connect uses an extended IS-IS instance to distribute topology and service information between fabric nodes.

A tunneling protocol that encapsulates Layer 2 frames inside UDP packets, extending a Layer 2 segment across a Layer 3 underlay. It is widely used to build overlay networks in data centers and campus fabrics.

VXLAN Tunnel Endpoint, the device that encapsulates and decapsulates VXLAN traffic. Each VTEP has an IP address on the underlay and maps local VLANs to VXLAN network identifiers.

VXLAN Network Identifier, a 24-bit value that identifies a specific VXLAN segment. It allows far more isolated segments than the 12-bit VLAN ID field permits.

A logical network built on top of an existing physical or routed underlay, using tunnels or encapsulation to provide services such as stretched Layer 2 segments or policy-based segmentation independent of the transport.

The physical and routed infrastructure that carries encapsulated overlay traffic between endpoints. Its stability, MTU sizing, and routing design determine how well the overlay performs.

Extreme Networks' modular operating system for its switching platforms, offering scripting, role-based CLI, and a wide feature set. Newer releases are branded Switch Engine while retaining ExtremeXOS command conventions.

The current branding for Extreme's modular switch operating system that evolved from ExtremeXOS. It keeps the same command structure and configuration model while adding newer platform support and features.

VSP Operating System, the operating system used on Extreme VSP data center platforms. It uses a different CLI and configuration model from ExtremeXOS, built around fabric services and service instances.

The command-line interface used on ExtremeXOS and Switch Engine devices. Commands are entered in a hierarchical mode structure, with show commands for verification and configure commands for changes.

A level in the ExtremeXOS CLI hierarchy that determines which commands are available, such as user, privileged, or configuration mode. Moving between modes is done with specific commands.

A stored set of device settings that can be saved, viewed, and reused across reboots or devices. In ExtremeXOS it is managed with commands such as save configuration and show configuration.

A Virtual Local Area Network, a Layer 2 broadcast domain that groups ports logically regardless of physical location. VLANs reduce broadcast scope and provide basic traffic separation.

The IEEE standard for VLAN tagging, which inserts a tag into Ethernet frames to identify the VLAN. Trunk links use tagging so multiple VLANs can share one physical link.

A switch port configured to carry traffic for a single VLAN, typically connecting end devices. Frames arriving untagged are placed into that VLAN.

A switch port that carries multiple VLANs, using 802.1Q tags to distinguish them. It typically connects switches or carries traffic to devices that understand tagging.

A Layer 2 protocol that prevents loops by electing a root bridge and blocking redundant paths. Variants include STP, RSTP, and MSTP, with different convergence speeds and behaviors.

Combining multiple physical links into one logical link to increase bandwidth and provide redundancy. It is standardized as IEEE 802.3ad and requires matching configuration on both ends.

Link Aggregation Control Protocol, defined in IEEE 802.3ad, which negotiates and monitors member links of an aggregation group so both sides agree on which links are active.

Open Shortest Path First, a link-state interior gateway routing protocol that computes shortest paths using cost metrics. It supports areas to scale routing domains and is common in campus and data center networks.

Border Gateway Protocol, a path-vector routing protocol used to exchange routes between autonomous systems and increasingly within large data centers. It selects best paths using attributes such as AS path and local preference.

The set of known routes a device uses to decide where to forward packets. Entries include destination prefixes, next hops, and metrics, and are populated by connected, static, and dynamic routing sources.

Extreme's cloud-based network management platform that provides onboarding, monitoring, configuration, and analytics for wired and wireless infrastructure from a single dashboard.

A logical grouping in ExtremeCloud IQ that organizes devices, policies, and settings by location or purpose. Sites simplify applying consistent configuration across many devices.

A reusable set of configuration settings in ExtremeCloud IQ that defines how devices behave, including SSIDs, VLANs, and device templates. Policies are assigned to sites and devices.

Service Set Identifier, the name that identifies a wireless network. Clients use it to select and associate with the correct WLAN, and it is configured within a network policy.

A deployment method where a new device automatically contacts a management system, receives its configuration, and becomes operational without manual setup, reducing errors and deployment time.

An operational model where network devices are configured and monitored through a cloud-hosted platform rather than only local controllers or on-premises tools, enabling centralized visibility and automation.

A security model that grants permissions based on a user's assigned role rather than individual identity. It limits what each administrator or user can view or change.

An IEEE standard for port-based network access control that authenticates devices or users before allowing network access. It typically involves a supplicant, authenticator, and authentication server.

Remote Authentication Dial-In User Service, a protocol that centralizes authentication, authorization, and accounting. Network devices act as clients to a RADIUS server during 802.1X and login processes.

A set of policies and technologies that control which devices and users may join a network and what they can reach, often combining authentication, posture checks, and dynamic policy enforcement.

A diagnostic feature that copies traffic from one or more ports to a monitoring port so it can be captured and analyzed. It is commonly used with protocol analyzers during troubleshooting.

A standard protocol for sending log messages from network devices to a central server. Centralized logging helps with auditing, correlation, and detecting issues across many devices.

Simple Network Management Protocol, used to query and receive alerts from network devices. It relies on MIBs and traps and should be secured with strong credentials and restricted access.

The subscription level that determines which management features and support a device or platform can use. Choosing the right tier affects available analytics, automation, and service entitlements.

The family of products and services Extreme offers, spanning campus switching, data center fabrics, wireless, SD-WAN, cloud management, and security. Knowing the categories helps map requirements to platforms.