BASD Wireless Project Addendum #2: Network Switch Specs

Transcription

1 BASD Wireless Prject Addendum #2: Netwrk Switch Specs ADDNEDUM #2 REQUESTED NETWORK SWITCH HARDWARE Where the term HP appears (Hewlett-Packard), the intent is t mean: HP branded r precisely equivalent functinal hardware/sftware 1. EQUIPMENT DESCRIPTION 4 - HP JC101A prt switch chassis w/ 2 mdule slts (r equivalent) 4 - HP JC091A prt 10G mdule (r equivalent) 4 - HP JC095A prt SFP-X mdule (r equivalent) 8 - HP JG234A X130 10G SFP+ LC ER 40km tranceiver 85 - HP J099A Prt POE Switch (r equivalent) 21 - HP JD119B X120 1G SFP LC LX Transceiver (r equivalent) HP JD118B X120 1G SFP LC SX Transceiver (r equivalent) 2. SWITCH FEATURES: QS feature creates traffic classes based n access cntrl lists (ACLs), IEEE 802.1p precedence, IP, and DSCP r Type f Service (TS) precedence; supprts filter, redirect, mirrr, r remark; supprts the fllwing cngestin actins: strict pririty (SP) queuing, weighted rund rbin (WRR), weighted fair queuing (WFQ), weighted randm early discard (WRED), weighted deficit rund rbin (WDRR), and SP+WDRR Integrated netwrk services Supprt fr pen applicatin architecture (OAA) mdules, extends and integrates applicatin capability int the netwrk Ring Resiliency Prtectin Prtcl (RRPP) Prvides fast recvery fr ring Ethernet-based tplgy; prvides cnsistent applicatin perfrmance fr applicatins such as VIP Management Remte cnfiguratin and management enables cnfiguratin and management thrugh a secure Web brwser r a CLI lcated n a remte device IEEE 802.1ab LLDP discvery advertises and receives management infrmatin frm adjacent devices n a netwrk, facilitating easy mapping by netwrk management applicatins USB supprt File cpy: allws users t cpy switch files t and frm a USB flash drive DHCP ptins DNS Relay and SMTP Redirectin DHCP Server (RFC 2131), Client, and Optin-82 Relay (RFC 3046) 1 Page

2 BASD Wireless Prject Addendum #2: Netwrk Switch Specs sflw Prvides scalable, ASIC-based netwrk mnitring and accunting, which allws netwrk peratrs t gather a variety f sphisticated netwrk statistics and infrmatin fr capacity planning and real-time netwrk mnitring purpses SNMPv1, v2c, and v3 Facilitate centralized discvery, mnitring, and secure management f netwrking devices Netwrk Time Prtcl (NTP) Synchrnizes timekeeping amng distributed time servers and clients; keeps timekeeping cnsistent amng all clck-dependent devices within the netwrk s that the devices can prvide diverse applicatins based n the cnsistent time High-density prt cnnectivity Supprts up t 84 1-Gigabit prts per unit (612 per stack) Aut-MDIX Autmatically adjusts fr straight-thrugh r crssver cables n all 10/100 prts Jumb frames On Gigabit Ethernet and 10-Gigabit prts, jumb frames f 9k size allw high-perfrmance remte backup and disaster-recveryservices IEEE 802.3af Pwer ver Ethernet (PE) Prvides up t 15.4 W per prt t IEEE 802.3af-cmpliant PE-pwered devices such as IP phnes, wireless access pints, and security cameras IEEE 802.3at Pwer ver Ethernet (PE+) Supprt simplifies deplyment and dramatically reduces installatin csts by helping t eliminate the time and cst invlved in supplying lcal pwer at each access pint lcatin IPv6 native supprt IPv6 hst enables switches t be managed and deplyed at the IPv6 netwrk's edge Dual stack (IPv4/IPv6) transitins frm IPv4 t IPv6, supprting cnnectivity fr bth prtcls MLD snping frwards IPv6 multicast traffic t the apprpriate interface IPv6 ACL/QS supprts ACL and QS fr IPv6 netwrk traffic, preventing traffic flding IPv6 ruting supprts IPv6 static rutes and IPv6 versins f RIP, OSPF, IS-IS, and BGP ruting prtcls Hardware-based wire-speed access cntrl lists (ACLs) Help prvide high levels f security and ease f administratin withut impacting netwrk perfrmance with a feature-rich TCAM-based ACL implementatin Unique versatile architecture Supprts the best f bth fixed-prt and mdular cnfiguratins Resiliency and high availability Data center ptimized design Frnt-t-back/back-t-frnt airflw fr ht/cld aisles, rear rack munts, and redundant htswappable AC r DC pwer and fans Manageability Full-featured cnsle Prvides cmplete cntrl f the switch with a familiar CLI 2 Page

3 BASD Wireless Prject Addendum #2: Netwrk Switch Specs Web interface Allws cnfiguratin f the switch frm any Web brwser n the netwrk RMON and sflw Prvide advanced mnitring and reprting capabilities fr statistics, histry, alarms, and events Multiple cnfiguratin files Allw multiple cnfiguratin files t be stred t a flash image Trubleshting Ingress and egress prt mnitring: enable netwrk prblem slving Tracerute and ping: enable testing f netwrk cnnectivity Virtual cable tests: prvide visibility t cable prblems 3. LAYER 2 SWITCHING GARP VLAN Registratin Prtcl allws autmatic learning and dynamic assignment f VLANs 32K MAC addresses prvide access t many Layer 2 devices 4,094 prt-based VLANs prvide security between wrkgrups IEEE 802.1ad QinQ and selective QinQ Increase the scalability f an Ethernet netwrk by prviding a hierarchical structure; cnnect multiple LANs n a high-speed campus r metr netwrk Gigabit Ethernet prt aggregatin Allws gruping f prts t increase verall data thrughput t a remte device 10GbE prt aggregatin Allws gruping f prts t increase verall data thrughput t a remte device IPFIX/sFlw Allws traffic sampling Spanning Tree Prtcls (STP, MSTP, and RSTP) and STP rt guard Helps prevent netwrk lps; up t 32 MSTP instances available 4. LAYER 3 SWITCHING Address Reslutin Prtcl (ARP) Determines the MAC address f anther IP hst in the same subnet; supprts static ARPs; gratuitus ARP allws detectin f duplicate IP addresses; prxy ARP allws nrmal ARP peratin between subnets r when subnets are separated by a Layer 2 netwrk Dynamic Hst Cnfiguratin Prtcl (DHCP) Simplifies the management f large IP netwrks and supprts client and server; DHCP Relay enables DHCP peratin acrss subnets Layer 3 ruting 3 Page

4 BASD Wireless Prject Addendum #2: Netwrk Switch Specs Layer 3 IPv4 ruting Prvides ruting f IPv4 at media speed; supprts static rutes, RIP and RIPv2, OSPF, IS-IS, and BGP RIP and RIPng supprt Prvides cmplete supprt f RIP fr bth IPv4 and IPv6 OSPF and OSPFv3 supprt Prvides cmplete supprt f OSPF fr bth IPv4 and IPv6 IS-IS and IS-ISv6 supprt Prvides cmplete supprt f IS-IS fr bth IPv4 and IPv6 Layer 3 IPv6 ruting prvides ruting f IPv6 at media speed; supprts static rutes, RIPng, OSPFv3, IS- ISv6, and BGP4+ Bidirectinal Frwarding Detectin (BFD) Enables link cnnectivity mnitring and reduces netwrk cnvergence time fr RIP, OSPF, BGP, IS-IS, VRRP, MPLS, and IRF Virtual Ruter Redundancy Prtcl (VRRP) and VRRP Extended Allw quick failver f ruter prts Plicy-based ruting Makes ruting decisins based n plicies set by the netwrk administratr IGMPv1, v2, and v3 Allw individual hsts t be registered n a particular VLAN PIM-SSM, PIM-DM, and PIM-SM (fr IPv4 and IPv6) supprt IP Multicast address management and inhibitin f DS attacks Equal-Cst Multipath (ECMP) Enables multiple equal-cst links in a ruting envirnment t increase link redundancy and scale bandwidth MPLS supprt Prvides extended supprt f MPLS, including MPLS VPNs and MPLS Traffic Engineering (MPLS TE) VPLS supprt Prvides extended supprt f VPLS fr data center t data center cmmunicatin at Layer 2; prvides supprt f hierarchical VPLS fr scalability 5. SECURITY Unicast Reverse Path Frwarding (URPF) Allws nrmal packets t be frwarded crrectly, but discards the attaching packet due t lack f reverse path rute r incrrect inbund interface; prevents surce spfing and distributed attacks; supprts distributed UFPF Defense-in-depth security 4 Page

5 BASD Wireless Prject Addendum #2: Netwrk Switch Specs Prvides integrated and distributed security enfrcement that can be managed frm a central lcatin, such as the HP Intelligent Management Center (IMC) Advanced prcessr queuing mechanism Helps prevent denial-f-service (DS) attacks, while DHCP snping helps ensure that devices can nly receive an IP address frm a legitimate DHCP server n the netwrk IEEE 802.1X-based dynamic delivery f QS, ACLs, and VLANs Allws cmplete cntrl ver user netwrk access Guest VLAN Prvides a brwser-based envirnment t authenticated clients that is similar t IEEE 802.1X Prt islatin Secures and adds privacy, and prevents malicius attackers frm btaining user infrmatin MAC-based authenticatin Allws r denies access t the switch based n a client MAC address HTTPS management Prvides secure Web management Multi-Custmer Edge (MCE)-Multicast Virtual Ruting and Frwarding (MVRF) Prvide MPLS Edge ruter supprt Public Key Infrastructure (PKI) Used t cntrl access RADIUS/HWTACACS Eases switch management security administratin by using a passwrd authenticatin server Secure Shell (SSHv2) Encrypts all transmitted data fr secure, remte CLI access ver IP netwrks IP Surce Guard Helps prevent IP spfing attacks; filters packets n a per-prt basis, which prevents illegal packets frm being frwarded Access cntrl lists (ACLs) helps prvide high levels f security and ease f administratin; 6k ingress entries and 1k egress entries (IPv4 and IPv6 6. CONVERGENCE Vice VLAN Autmatically assigns VLAN and pririty fr IP phnes, simplifying netwrk cnfiguratin and maintenance Internet Grup Management Prtcl (IGMP) Utilizes Any-Surce Multicast (ASM) r Surce-Specific Multicast (SSM) t manage IPv4 multicast netwrks; supprts IGMPv1, v2, and v3 5 Page

6 BASD Wireless Prject Addendum #2: Netwrk Switch Specs Prtcl Independent Multicast (PIM) Defines mdes f Internet multicasting t allw ne-t-many and many-t-many transmissin f infrmatin; PIM Dense Mde (DM), Sparse Mde (SM), and Surce- Specific Mde (SSM) are supprted LLDP-MED (Media Endpint Discvery) Defines a standard extensin f LLDP that stres values fr parameters such as QS and VLAN t autmatically cnfigure netwrk devices such as IP phnes Prt mirrring Enables traffic n a prt t be simultaneusly sent t a netwrk analyzer fr mnitring OAM (IEEE 802.3ah) peratins, administratin and maintenance (OAM) management Capability detects data link layer prblems that ccurred in the "last mile"; mnitrs the status f the link between the tw devices CFD (IEEE 802.1ag) cnnectivity fault detectin (CFD) Prvides a Layer 2 link OAM mechanism used fr link cnnectivity detectin and fault lcating 7. PERFORMANCE Latency µs (Stre and Frward) (64-byte packets) Thrughput 155 millin pps Ruting/Switching capacity 208 Gb/s Ruting table size entries (IPv4) Mac address table size entries 6 Page