Transcription
Extreme Networks Data SheetSummit X450e SeriesSummit X450e series switches are based on therevolutionary ExtremeXOS core-class operatingsystem from Extreme Networks . ExtremeXOSis a highly resilient, modular operating systemthat provides continuous uptime, manageabilityand operational efficiency.Summit X450e — The industry’s first PoE edge switches withthe revolutionary modular operating system, ExtremeXOS .Voice-Class Availability Modular ExtremeXOS operating system Ethernet Automatic Protection Switching (EAPS) resiliencyprotocol Resilient system designDesigned for Converged NetworkApplicationsSummit X450e provides high availability andperformance with its advanced traffic management capabilities to support large scale rollout ofconverged network that supports devices suchas IP telephones, wireless APs and other devicesthat require power from a LAN connection. Withlow-latency line-rate performance, Summit X450esupports the 802.3af standards-based PoE onevery port.Summit X450e supports hardware-based routingfor both IPv4 and IPv6 to help provide investment protection by allowing the rollout of IPv6in your network now or in the future. Convergence ready connectivity with Voice over IP automaticprovisioningThe highly flexible Summit X450e switchprovides high-density gigabit plus optional 10Gigabit Ethernet ports in a compact 1RU format,supporting a full range of Layer 2 to Layer 4functionalities on every port for high productivity.Optional redundant power supplies are providedwith each switch to secure against power Efficient management to handle convergence-driven networkchanges with Power over Gigabit EthernetTarget Applications High bandwidth, non-blocking architecture for demandingedge applications Exceptional Quality of Service (QoS) with advanced trafficmanagement capabilities for converged applicationsComprehensive Security EnablingDefense-in-Depth User policy and host integrity enforcement Universal Port dynamic security profile to provide finegranular security policy in the network Detection and response to network intrusion Policy-based selective encryption with Sentriant CE150Summit X450e switch is an industry-leading converged GigabitEthernet PoE edge switch with ExtremeXOS modular operatingsystem and optional dual 10 Gigabit Ethernet ports. Edge PoE switch providing high-densityGigabit PoE to the desktop in a networkrunning ExtremeXOS from the core to the edge
Extreme Networks Data SheetVoice-Class AvailabilityPowered by ExtremeXOS, the Summit X450e switch supports process recovery and application upgrades without theneed for a system reboot. Summit X450e provides the high network availability required for converged applications.Modular Operating Systemfor Non-Stop OperationHigh Availability NetworkProtocolsTrue Preemptive Multitaskingand Protected MemoryEthernet Automatic ProtectionSwitching (EAPS)Summit X450e switches allow each ofthe many applications—such as OpenShortest Path First (OSPF) andSpanning Tree Protocol (STP)—to runas separate Operating System (OS)processes that are protected from eachother. This drives increased systemintegrity and inherently protects againstDenial of Service (DoS) attacks.EAPS allows the IP network to provide thelevel of resiliency and uptime that usersexpect from their traditional voicenetwork. EAPS is superior to SpanningTree or Rapid Spanning Tree protocols andoffers sub-second (less than 50 milliseconds) recovery that delivers consistentfailover regardless of the number ofVLANs, network nodes or networktopology. Since EAPS allows the networkto recover almost transparently, Voiceover-IP (VoIP) calls do not drop and digitalvideo feeds do not freeze or pixelize inmost situations.Process Monitoring and RestartExtremeXOS dramatically increasesnetwork availability using processmonitoring and restart. Each independent OS process is monitored in realtime. If a process becomes unresponsiveor stops running, it can be automaticallyrestarted.Loadable Software ModulesThe modular design of ExtremeXOSallows the upgrading of individualsoftware modules, should this benecessary, leading to higher availability inthe network (see Figure 1).1Updated applicationmodules can beupgraded duringruntimeSpanning Tree/Rapid SpanningTree ProtocolsSummit X450e switches supportSpanning Tree (802.1D), Per VLANSpanning Tree (PVST ), Rapid SpanningTree (802.1w) and Multiple Instances ofSpanning Tree (802.1s) protocols forLayer 2 resiliency.PIM-DMV4.6New Extreme Networksor external applicationmodules can be addedduring runtimeExtreme XOSSSH-2 SCPApplicationModulesPIM-SMV4.5Kernel andKernel LoadableModulesEqual Cost Multipath RoutingEqual Cost Multipath (ECMP) routingallows uplinks to be load balanced forperformance and cost savings while alsosupporting redundant failover. If an uplinkfails, traffic is automatically routed to theremaining uplinks and connectivity ismaintained.Link Aggregation (802.3ad)Cross module link aggregation allowstrunking of up to eight links on a singlelogical connection, for up to 20 Gigabitsper Second (Gbps) of redundant bandwidth per logical connection.Resilient System DesignKernel LoadableModuleSummit X450e is designed with ErrorChecking and Correcting (ECC) RAM toprotect routing tables and continues tooperate in spite of potentially disruptivememory events. Furthermore, the systemis designed with enough durable flashmemory to maintain dual OS images aswell as two copies of configuration files.This provides an added layer of protectionagainst potential crippling disruptions.Redundant Uplink KernelSoftware-enhanced availability allows usersto remain connected to the network even ifpart of the network infrastructure is down.Summit X450e switches continuously checkfor problems in the uplink connections usingadvanced Layer 3 protocols such as OSPF,VRRP and ESRP (ESRP supported in Layer2 or Layer 3), and dynamically routes trafficaround the problem.Protected Data and OS forAvailability2PIM-SMV4.6Software-Enhanced AvailabilitySummit X450e offers optional dual 10gigabit uplinks to provide 20 Gbps uplinkbandwidth. Depending on requirements,full failover resilient links can be supported at Layer 2 with 802.3ad link aggregation, or Layer 3 with OSPF ECMP.Common deployments may call for 2.4:1oversubscription, for which Summit X450edelivers superior resiliency by using theEAPS protocol.Redundant Power SuppliesFigure 1: ExtremeXOS Modular Design 2006 Extreme Networks, Inc. All rights reserved.Summit X450e provides redundant powerexternally and offers a convenient andeasy to upgrade in-field option to protectagainst power anomalies.Summit X450e Switch—Page 2
Extreme Networks Data SheetDesigned for Converged Network ApplicationsSummit X450e provides a high bandwidth, non-blocking architecture with tri-speed copper Gigabit Ethernet ports with PoE fordemanding edge applications. Combining exceptional QoS and advanced traffic management with superior resiliency, comprehensive security and nonblocking performance, Summit X450e switches are the cornerstone of a high-performance convergednetwork.High Bandwidth, Non-BlockingArchitecture for DemandingEdge Applicationsmanaging network changes will greatlyreduce operating expenses.When deployed as an access switch,Summit X450e, with its modular 10gigabit integrated fiber gigabit ports,provides the bandwidth required by themost demanding applications. With morethan 20 gigabits of uplink capacity,bottlenecks don’t exist. Providing lineratethroughput and supporting of jumboframes up to 9,216 bytes, transfers arecompleted in minimal time.Deployments of IP Telephony depend onreliable consistent power from theEthernet jack. Summit X450e is the basisfor a reliable LAN telephony infrastructurewith fully redundant 15.4 watts per port,and QoS and resiliency to match thefailover requirements for latency-sensitiveservices like VoIP phones. With Summit X450e,deployment of powered LAN devices isquick and easy with its support of the IEEE802.3af standard and full Class 3 poweravailability on all ports, backed up 100% bythe EPS-LD redundant power supply(Summit X450e-24p). Summit X450e-48pcan provide up to 370W of PoE power andcan be increased up to 740W of PoE powerto provide full 15.4W class 3 devices on all48-port by adding External Power System(EPS-C and EPS-600LS).Exceptional Policy-based QoSwith Advanced TrafficManagement for ConvergedApplicationsSummit X450e provides eight hardwarequeues per port to support granular trafficclassification with bandwidth allocation.1024 centralized classifiers per switch canuse information from Layers 1 through 4 toprioritize and meter incoming packets atline-rate. When metering traffic, theswitches can drop out-of-spec traffic orflag it for later action. To expediteupstream traffic handling, a packet’sclassification can be carried forward withLayer 2 (802.1p) and Layer 3 (DiffServ)markings. Summit X450e providesadvanced traffic management features thatoffer highest-quality triple play of voice,video and data services.Power Over Gigabit EthernetVoice Grade ConnectionsGranular QoS, low latency, and low jitterenable voice quality connections.Summit X450e supports a range of QoStechnologies that can prioritize andpredictably handle high priority trafficpolicing or rate limiting on ingress, 802.1qtagging and DiffServ marking, and shapingon egress with eight queues per port. TheExtreme Networks tradition of buildingproducts with low latency and jitterEfficient Management toHandle Convergence-DrivenNetwork Changes 2006 Extreme Networks, Inc. All rights reserved.Universal Access PortSummit X450e offers the Universal AccessPort—high-performance gigabit to thedesktop, PoE and wireless support fromevery RJ-45 port. Installing universalservices ports everywhere for data anddevice power greatly simplifies installationsand moves, and helps to future-proof youredge network. Summit X450e providesuniversal attachment at any desktopEthernet speed, any power level from noneto full 15.4 watts.Advanced Routing Capabilities forthe EdgeSummit X450e supports advanced protocolsfor an efficient and productive network.Summit X450e switches provide static andRIP routing for simple IPv4 and IPv6 Layer 3deployment. An optional ExtremeXOSAdvanced Edge license extends the featureset to include other important edgefunctions such as: Edge OSPF for much greater extensibility than RIP can provide Edge PIM sparse modes for routing ofmulticast streams Policy-based routing sFlow hardware samplingNETWORKCORE41Universal Port—Voice-over-IPAuto ProvisioningSummit X450e sets the stage for convergence applications by allowing enterprisesto add new access devices in a nondisruptive Plug-and-Play fashion. Voice andwireless services can be easily implementedwithout major network upgrades. SummitX450e supports automatic provisioning ofVoice over IP using LLDP and event basedcommand scripting capability. It allowsdynamic configuration of voice VLANs andQuality of Services. This auto configurationcapability allows you to configure VoIPphone settings such as voice VLANsettings, call server IP address configuration, etc. This level of simplicity incontinues with Summit X450e—allowingnetwork managers to build networks withlow end-to-end latency and jitter.5LLDP / LLDP-MED32IP Phone1Administrator defines Universal Port policy for IP phones2Phone is connected3Phone sends vendor, model, detailed power requirements, etc.to switch4Switch automatically configures VLAN, QoS, and PoE on the port5Switch pushes VLAN, QoS, call server details, etc. to the phoneFigure 2: Universal Port Voice-over-IP ProvisioningSummit X450e Switch —Page 3
Extreme Networks Data SheetComprehensive Security Using Defense-in-DepthImplementing a secure network means providing protection at the network perimeter as well as the core. Working together withthe Sentriant family of products from Extreme Networks, Summit X450e uses a defense-in-depth strategy in protecting yournetwork from known or potential threats. Extreme Networks security offerings encompass three key areas: user and hostintegrity, threat detection and response, and hardened network infrastructure. Furthermore, with policy-based routing, measurescan be taken to provide confidentiality of selective data in transit between internal network nodes.User Authentication and HostIntegrity CheckingNetwork Login and DynamicSecurity ProfileNetwork Login capability implementedin ExtremeXOS enforces user admissionand usage policies. Summit X450e seriesswitches support a comprehensive rangeof Network Login options by providingan 802.1x agent-based approach, a webbased (agent-less) login capability forguests, and a MAC-based authenticationmodel for devices. With these modes ofNetwork Login, only authorized usersand devices can connect to the networkand be assigned to the appropriate VLAN.The Universal Port scripting frameworkavailable in Summit X450e lets youimplement Dynamic Security Profileswhich in sync with Network Login allowsyou to implement fine grained and robustsecurity policies. Upon authentication,the switch can load dynamic ACL/QoSfor a user or group of users, to deny/allowthe access to the application servers orsegments within the network.Multiple Supplicant SupportShared ports represent a potentialvulnerability in a network. Multiplesupplicant capability on a switch allowsit to uniquely authenticate and apply theappropriate policies and VLANs for eachuser or device on a shared port.Multiple supplicant support secures IPTelephony and wireless access. Convergednetwork designs often involve the use ofshared ports.Media Access Control (MAC)MAC lockdown secures printers, wirelessAPs and servers. The MAC addresssecurity/lockdown feature allowsSummit X450e to block access to anyEthernet port when the MAC address of astation attempting to access the port isdifferent from the configured MAC address.This feature is used to “lock down” anydevice to a specific port.Host Integrity CheckingHost integrity checking helps keep infectedor non-compliant machines off the network.Summit X450e series switches support ahost integrity or endpoint integrity solutionthat is based on the model from the TrustedComputing Group. Summit X450e interfaceswith Sentriant AG, endpoint security softwarefrom Extreme Networks, to verify that eachendpoint meets the security policies thathave been set and quarantines those thatare not in compliance.Network Intrusion Detectionand ResponseHardware-based sFlow SamplingsFlow is a sampling technology that providesthe ability to continuously monitor application level traffic flows on all interfacessimultaneously. The sFlow agent is a softwareprocess that runs on Summit X450e andpackages data into sFlow datagrams thatare sent over the network to an sFlowcollector. The collector gives an up-to-theminute view of traffic across the entirenetwork, providing the ability to troubleshoot network problems, control congestion and detect network security threats.Port MirroringTo allow threat detection and prevention,Summit X450e supports many-to-one portmirroring. This allows the mirroring of trafficto an external network appliance such asan intrusion detection device for trendIPv6 Hardware ForwardingFor more than a decade, a new version of the ubiquitous Internet Protocol (IP) that powersglobal network interconnectivity has been under development, with the primary goal of expandingIP’s address range to allow a unique IP address for any device in the world that might someday need to be addressable. Summit X450e series switches offer this next generation IPv6routing in hardware to provide wire speed routing capability in IPv4/IPv6 dual stack environment.ExtremeXOS on Summit X450e delivers more than just IPv6 hardware forwarding; it providesthe power to control undesired IPv6 traffic to assure network uptime in the presence of IPv6.Summit X450e series switches help provide investment protection by allowing the rollout ofIPv6 in your network now or in the future, when needed. 2006 Extreme Networks, Inc. All rights reserved.analysis or for utilization by a networkadministrator for diagnostic purposes.Line-Rate ACLsACLs are one of the most powerfulcomponents used in controlling networkresource utilization as well as protectingthe network. Summit X450e supports 1,024centralized ACLs per 24-port based onLayer 2, 3 or 4-header information such asthe MAC or IP source/destination address.Denial of Service ProtectionSummit X450e effectively handles DoSattacks. If the switch detects an unusuallylarge number of packets in the CPU inputqueue, it will assemble ACLs that automatically stop these packets from reaching theCPU. After a period of time, these ACLsare removed, and reinstalled if the attackcontinues. ASIC-based LPM routingeliminates the need for control planesoftware to learn new flows, allowing morenetwork resilience against DoS attacks.Secure ManagementTo prevent management data from beingintercepted or altered by unauthorizedaccess, Summit X450e supports SSH2, SCPand SNMPv3 protocols. The MD5 hashalgorithm used in authentication preventsattackers from tampering with valid dataduring routing sessions.Policy-based SelectiveEncryptionSufficient data suggests that insiders accountfor more than 50% of security breaches.Summit X450e supports policybased routing,a mechanism that allows isolation andprotection of data based on department, usergroup or application via encryption.Policy-based routing uses ACLs to redirectpackets away from their normal path toanother physical switch port. Packets can beselected based on their ACL match conditionssuch as CoS, VLAN, IP address, protocol orport number. Traffic that contains sensitiveinformation such as VoIP phone conversations or email can be routed to an encryptionappliance before passed on to its destination.Summit X450e seamlessly integrates withExtreme Networks Sentriant CE150 thatdelivers encryption of sensitive information at a gigabit rate.Summit X450e Switch—Page 4
Extreme Networks Data SheetTarget ApplicationsEdge PoE Switch for High-BandwidthApplicationsSummit X450e is deployed as PoE edge switch,extending the benefits of the ExtremeXOSoperating system to the network edge. Thisuniformity provides consistent quality andperformance throughout your converged networkwhile eliminating operational inefficiencies. Withlow latency and line-rate performance,Summit X450e edge switch connects wirelessdevices, LAN telephony, PDAs and otherequipment without compromising security,scalability, availability, mobility or management.NETWORKCORE42MGMT 322212029181716151413121110198765432421MGMT STACK NOFAN 3222120291817161514131211101987654321STACK NOFAN PSU PSU PSU-E PSU-E Extreme Networks Summit X450e-24pExtreme Networks Summit X450e-24pCONSOLESummit X450eCONSOLESummit X450eAltitudeAltitude 2006 Extreme Networks, Inc. All rights reserved.Summit X450e Switch—Page 5
Extreme Networks Data SheetTechnical SpecificationsExtremeXOS V11.6 SupportedProtocolsSwitching RFC 3619 Ethernet Automatic ProtectionSwitching (EAPS) and EAPSv2 IEEE 802.1D – 1998 Spanning Tree Protocol(STP) IEEE 802.1D – 2004 Spanning Tree Protocol(STP and RSTP) IEEE 802.1w – 2001 Rapid Reconfiguration forSTP, RSTP IEEE 802.1Q-2003 (formerly IEEE 802.1s)Multiple Instances of STP, MSTP EMISTP, Extreme Multiple Instances ofSpanning Tree Protocol PVST , Per VLAN STP (802.1Q interoperable) Extreme Standby Router Protocol (ESRP) IEEE 802.1Q – 1998 Virtual Bridged Local AreaNetworks IEEE 802.3ad Static load sharing configurationand LACP based dynamic configuration IEEE 802.1AB – LLDP Link Layer DiscoveryProtocol LLDP Media Endpoint Discovery (LLDP-MED),ANSI/TIA-1057, draft 08 Extreme Discovery Protocol (EDP) Extreme Loop Recovery Protocol (ELRP) Extreme Link State Monitoring (ELSM) Software Redundant PortsVLANs, vMANs IEEE 802.1Q VLAN Tagging IEEE 802.1v: VLAN classification by Protocoland Port Port-based VLANs Protocol-based VLANs Multiple STP domains per VLAN IEEE 802.1ad Virtual MANs (vMANs)Quality of Service and Policies IEEE 802.1D – 1998 (802.1p) Packet Priority RFC 2474 DiffServ Precedence, including 8queues/port RFC 2598 DiffServ Expedited Forwarding (EF) RFC 2597 DiffServ Assured Forwarding (AF) RFC 2475 DiffServ Core and Edge RouterFunctionsIPv4 RFC 1812 Requirements for IP Version 4Routers RFC 1519 CIDR RFC 1256 IPv4 ICMP Router Discovery (IRDP) RFC 1122 Host Requirements RFC 768 UDP RFC 791 IP RFC 792 ICMP RFC 793 TCP RFC 826 ARP RFC 894 IP over Ethernet RFC 1027 Proxy ARP RFC 2068 HTTP server – Used for web-basedNetwork Login RFC 2338 VRRP Static Unicast Routes Static Multicast Routes RFC 1058 RIP v1 RFC 2453 RIP v2 RFC 2328 OSPF v2 (including MD5authentication) RFC 1587 OSPF NSSA Option RFC 1765 OSPF Database Overflow RFC 2370 OSPF Opaque LSA Option RFC 3623 OSPF Graceful Restart 2006 Extreme Networks, Inc. All rights reserved. RFC 1112 IGMP v1RFC 2236 IGMP v2RFC 3376 IGMP v3IGMP v1/v2/v3 Snooping with ConfigurableRouter Registration Forwarding IGMP Filters Static IGMP Membership Multicast VLAN Registration RFC 2362 PIM-SM RFC 3569, draft-ietf-ssm-arch-06.txt PIM-SSMPIM Source Specific MulticastIPv6 RFC 2460, Internet Protocol, Version 6 (IPv6)Specification RFC 2461, Neighbor Discovery for IP Version 6,(IPv6) RFC 2462, IPv6 Stateless Address Autoconfiguration – Router Requirements RFC 2463, Internet Control Message Protocol(ICMPv6) for the IPv6 Specification RFC 2464, Transmission of IPv6 Packets overEthernet Networks RFC 2465, IPv6 MIB, General Group and TextualConventions RFC 2466, MIB for ICMPv6 RFC 1981, Path MTU Discovery for IPv6, August1996 – Router requirements RFC 3513, Internet Protocol Version 6 (IPv6)Addressing Architecture RFC 3587, Global Unicast Address Format RFC 2710, IPv6 Multicast Listener Discovery v1(MLDv1) Protocol RFC 3810, IPv6 Multicast Listener Discovery v2(MLDv2) Protocol RFC 2080, RIPng RFC 2893, Configured Tunnels RFC 3056, 6to4 Static Unicast routes for IPv6 Telnet server over IPv6 transport SSH-2 server over IPv6 transport Ping over IPv6 transport Traceroute over IPv6 transportManagement and Traffic Analysis RFC 2030 SNTP, Simple Network TimeProtocol v4 RFC 854 Telnet client and server RFC 783 TFTP Protocol (revision 2) RFC 951, 1542 BootP RFC 2131 BOOTP/DHCP relay agent andDHCP server RFC 1591 DNS (client operation) RFC 1155 Structure of Mgmt Information (SMIv1) RFC 1157 SNMPv1 RFC 1212, RFC 1213, RFC 1215 MIB-II,Ethernet-Like MIB & TRAPs RFC 1573 Evolution of Interface RFC 1650 Ethernet-Like MIB (update of RFC1213 for SNMPv2) RFC 1901 – 1908 SNMP v2c, SMIv2 andRevised MIB-II RFC 2570 – 2575 SNMPv3, user based security,encryption and authentication RFC 2576 Coexistence between SNMPVersion 1, Version 2 and Version 3 RFC 1757 RMON 4 groups: Stats, History,Alarms and Events RFC 2021 RMON2 (probe configuration) RFC 2668 802.3 MAU MIB RFC 1643 Ethernet MIB RFC 1493 Bridge MIB RFC 1354 IPv4 Forwarding Table MIB RFC 2737 Entity MIB v2 RFC 2233 Interface MIB RFC 1354 IP Forwarding Table MIBRFC 1724 RIPv2 MIBRFC 1850 OSPFv2 MIBdraft-ietf-pim-mib-v2-o1.txtRFC 2787 VRRP MIBDraft-ietf-bridge-rstpmib-03.txt – Definitions ofManaged Objects for Bridges with RapidSpanning Tree Protocol Secure Shell (SSH-2) client and server Secure Copy (SCP-2) client and server Secure FTP (SFTP) server sFlow version 5 Configuration logging Multiple Images, Multiple Configs BSD System Logging Protocol (SYSLOG), withMultiple Syslog Servers– 999 Local Messages (criticals stored acrossreboots) ExtremeWare vendor MIBs (includes FDB, PoE,CPU, Memory MIBs) ionSecurity Routing protocol MD5 authentication (seeabove) Secure Shell (SSH-2), Secure Copy (SCP-2) andSFTP client/server with encryption/authentication (requires export controlled encryptionmodule) SNMPv3 user based security, with encryption/authentication (see above) RFC 1492 TACACS RFC 2138 RADIUS Authentication RFC 2139 RADIUS Accounting RFC 3579 RADIUS EAP support for 802.1x RADIUS Per-command Authentication Access Profiles on All Routing Protocols Access Policies for Telnet/SSH-2/SCP-2 Network Login - 802.1x, web and MAC-basedmechanisms IEEE 802.1x – 2001 Port-Based NetworkAccess Control for Network Login Multiple supplicants with multiple VLANs forNetwork Login (all modes) Fallback to local authentication database (MACand Web-based methods) Guest VLAN for 802.1x RFC 1866 HTML – Used for web-based NetworkLogin SSL/TLS transport – used for for web-basedNetwork Login, (requires export controlledencryption module) MAC Security – Lockdown and Limit IP Security – RFC 3046 DHCP Option 82 withport and VLAN ID IP Security – DHCP enforcement via DisableARP Learning IP Security – Gratuitous ARP Protection IP Security – Trusted DHCP Server IP Security – DHCP Secured ARP / ARPValidation Layer 2/3/4 Access Control Lists (ACLs)Denial of Service Protection: RFC 2267 Network Ingress Filtering RPF (Unicast Reverse Path Forwarding) Controlvia ACLs Wire-speed ACLs Rate Limiting / Shaping by ACLs IP Broadcast Forwarding Control ICMP and IP-Option Response Control SYN attack protection CPU DoS Protection with traffic rate-limiting tomanagement CPU Robust against common Network Attacks:Summit X450e Switch—Page 6
Extreme Networks Data SheetTechnical Specifications–––––––CERT (http://www.cert.org)CA-2003-04: “SQL Slammer”CA-2002-36: “SSHredder”CA-2002-03: SNMP vulnerabilitiesCA-98-13: tcp-denial-of-serviceCA-98.01: smurfCA-97.28:Teardrop Land -Teardrop and“LAND“ attack– CA-96.26: ping– CA-96.21: tcp syn flooding– CA-96.01: UDP service denial– CA-95.01: IP Spoofing Attacks andHijacked Terminal Connections– IP Options Attack Host Attacks– Teardrop, boink, opentear, jolt2, newtear,nestea, syndrop, smurf, fraggle, papasmurf,synk4, raped, winfreeze, ping –f, ping ofdeath, pepsi5, Latierra, Winnuke, Simping,Sping, Ascend, Stream, Land, OctopusSummit X450e-24pGeneral SpecificationsPerformance 128 Gbps switch fabric bandwidth 65.5 Mpps frame forwarding rate 9216 Byte maximum packet size (Jumbo Frame) 128 load sharing trunks, up to 8 members per trunk 8 QoS queues/port 4096 VLANs (Port, Protocol, IEEE 802.1Q) 1,024 centralized ACL rules per switchForwarding Tables Layer 2/MAC Addresses: 8K IPv4 Host Addresses: 2K IPv4 LPM Entries: 512 IPv6 Host Addresses: 1K IPv6 LPM Entries: 256Rate Limiting Ingress bandwidth policing/rate limiting perflow Egress bandwidth rate limiting per egressqueue Rate Limiting Granularity: 64Kbps Available Rate Limiters: 1,024 per switchIndicators Per port status LED including power status System Status LEDs: management, fan andpowerPorts 24 ports 10/100/1000BASE-T PoE with autospeed and auto-polarity 4 ports SFP (mini-GBIC, shared PHY with 410/100/1000BASE-T ports) 1 port Serial (control port) 1 10/100BASE-T out-of-band management Port Per port status LED including power statusOption Slot Slot for XGM2 dual 10 gigabit option modulePhysical SpecificationsDimensionsHeight Inches/Cm: 1.73 Inches/4.4 CmWidth Inches/Cm: 17.35 Inches/44.1 CmDepth Inches/Cm: 15.3 Inches/38.7 CmWeight Lbs/Kg: 14 lbs/6.35 KgEPS DimensionsEPS-LDHeight: 1.73 Inches/4.4 CmWidth: 17.4 Inches/44 CmDepth: 7.6 Inches/19.3 Cm 2006 Extreme Networks, Inc. All rights reserved.Operating SpecificationsTemperature Operating Temperature Range: 0 C to 40 C(32 F to 104 F) Operating Humidity: 10% to 93% relativehumidity, non-condensing Operational Shock (Half Sine): 30 m/s2 (3g),11ms, 60 Shocks Operational Random Vibration: 3-500 MHz @1.5g rmsStorage & Transportation Conditions (Packaged) Transportation Temperature: -40 C to 70 C(- 40 F to 158 F) Storage and Transportation Humidity: 60% to95% RH, non-condensing Packaged Shock (Half Sine): 180 m/s2 (18g),6ms, 600 shocks Packaged Sine Vibration: 5-62 Hz @ Velocity5mm/s, 62-500 Hz @ 0.2 G Packaged Random Vibration: 5-20 Hz @ 1.0ASD w/-3dB/oct. from 20-200 Hz 14 drops min on sides & corners @ 42”( 15kgbox)Power & Acoustic Sound Voltage Input Range: 85 - 264V Nominal Input Current: 4.25A @ 115V (lowline)2.5A @ 230V (high-line) Maximum In-Rush Current: 30A @115V/60 Hz,Max Load Efficiency: 80% with 60%-100% load Line Frequency Range: 47 - 63 Hz Nominal Frequency Range: 50 - 60 Hz Power Supply Input Socket: IEC 320 C14 Power Cord Input Plug: IEC 320 C13 Heat Dissipation: 120W Power Consumption: 500W Sound Power in accordance with EN 300 753(10-1997) Sound Power: 62 dBA per ISO 7779 Declared Sound Power: 6.4 belsA per ISO 7779& ISO 9296 Bystander Sound Pressure in accordance withNEBS GR-63 Issue 2 Bystander Sound Pressure: 54 dBA right side @ .6mExternal Power Supply - EPS-LD Voltage Input Range: 90 - 264V Nominal Input Voltage/Hz: 115V /60Hz &230V /50Hz Line Frequency Range: 47 - 63 Hz Nominal Frequency Range: 50 - 60 Hz Maximum Input Current Rating: 10A at115 VAC, 5A at 230 VAC Maximum Inrush Current: 30A at 115 VAC, 60Aat 230 VAC Output: -50 VDC, 7.5A max, 375 Watts 12 VDC,7.5A max, 90 Watts Power Supply Input Socket: IEC 320 C14 Power Cord Input Plug: IEC 320 C13 Maximum continuous DC output shall notexceed 465 Watts. TUV-R GS Mark by German Notified Body 73/23/EEC Low Voltage DirectiveInternational Safety of ITE CB Report & Certificate per IEC 609501:2001 All Country Deviations AS/NZX 3260 (Australia /New Zealand)EMI/EMC StandardsNorth America EMC for ITE FCC CFR 47 part 15 Class A (U.S.A.) ICES-003 Class A (Canada)European EMC standards EN 55022:1998 Class A EN 55024:1998 Class A includes IEC 61000-42, 3, 4, 5, 6, 8, 11 EN 61000-3-2,3 (Harmonics & Flicker) ETSI EN 300 386:2001 (EMC Telecommunications) 89/336/EEC EMC DirectiveInternational EMC Certifications CISPR 22:1997 Class A (International Emissions) CISPR 24:1997 Class A (International Immunity) IEC/EN 61000-4-2 Electrostatic Discharge, 8kVContact, 15kV Air, Criteria A
to recover almost transparently, Voice-over-IP (VoIP) calls do not drop and digital video feeds do not freeze or pixelize in most situations. Spanning Tree/Rapid Spanning Tree Protocols Summit X450e switches support Spanning Tree (802.1D), Per VLAN Spanning Tree (PVST ), Rapid Spanning Tree (802.1w) and Multiple Instances of
