Gigabit Metro Ethernet Switch www.edge-core.com For a world always connected… ECS4660-28F L2/L3/L4 Gigabit Metro Ethernet Switch Product Overview The Edge-Core ECS4660-28F is a standalone L2/L3/L4 Gigabit Metro Ethernet routing switch with 24 1000BASE-X SFP slots, two 10G XFP uplink slots, and two 10G module slots that can support two additional 10G uplinks. With up to 107 Mpps performance, the ECS4660-28F is ideal for service provider aggregation deployment, providing wire-speed L2 switching and L3 unicast and multicast routing. To maintain high availability, the ECS4660-28F provides redundant power, a hot swappable fan tray, configuration rollback, and G.8032 ring protection. DATASHEET Key Features and Benefits High Availability With IEEE 802.1w Rapid Spanning Tree Protocol, the Edge-Core ECS4660-28F provides a loop-free network with redundant links to the core network and rapid convergence in less than 2 seconds. IEEE 802.1s Multiple Spanning Tree Protocol allows a spanning-tree instance per VLAN and Layer 2 load sharing on redundant links. The ECS4660-28F supports IEEE 802.3ad Link Aggregation Control Protocol (LACP). It increases bandwidth by automatically aggregating several physical links together as a logical trunk and offers load balancing and fault tolerance for uplink connections. Adding an optional redundant power supply ensures that the ECS4660-28F receives stable power support for today’s high-availability, mission-critical environments. Comprehensive QoS The Edge-Core ECS4660-28F offers advance QoS for marking, classification, and scheduling to deliver best-in-class performance for data, voice, and video traffic at wire speed. Eight egress queues per port enable differentiated management of up to eight traffic types across the stack. Traffic is prioritized according to 802.1p, DSCP, IP precedence and TCP/UDP port number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict priority ensure differential prioritization of packet flows and avoid congestion of ingress and egress queues. With bidirectional rate-limiting, per port or per traffic class, the ECS4660-28F preserves network bandwidth and allows full control of network resources. Advanced IPv4 and IPv6 Routing The Edge-Core ECS4660-28F supports hardware-based IPv4 and IPv6 routing for maximum performance. It provides a seamless migration path from IPv4 to IPv6 for future network upgrades and investment protection. Advanced routing protocols such as RIP and OSPF provide dynamic routing by exchanging routing information with other Layer 3 switches or routers. Multicast routing is supported under independent multicast protocols, including PIM-DM and PIM-SM. DVMRP is also supported to interconnect two multicast-enabled networks across non-multicast networks. VRRP prevents your system from failing by dynamically backing up multiple L3 switches for routing. Enhanced Security The Edge-Core ECS4660-28F provides enhanced security features for connectivity and access control, including Access Control Lists (ACLs), authentication, and port-level security with IEEE 802.1X. ACLs can be used to restrict access to sensitive network resources by denying packets based on L2/L3/L4 headers. SSH and RADIUS authentication protects management access to the switch, providing secure network management. IEEE 802.1X port-based access control ensures dynamic, port-based security and user authentication for network access. IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between client's IP, MAC address, port, and VLAN. Simplified Management For IP multicast traffic, the ECS4660-28F uses IGMP snooping to provide fast client joins and leaves of multicast streams. It prevents flooding of IP multicast traffic and limits bandwidth-intensive video traffic to only the subscribers. The ECS4660-28F supports IPv6 management functions for SNMP, HTTP, Telnet, TFTP, ICMP, SSH, RADIUS/TACACS+ authentication, and IPv6 QoS remapping when connecting to the switch. The ECS4660-28F can be managed through an industry-standard Command Line Interface (CLI) with a common industry look and feel that reduces training and operating costs. The switch also provides an easy-to-use web GUI interface through a standard web browser. With four-group RMON, the ECS4660-28F can easily backup and restore firmware and configuration files via TFTP. ows fu dvanced IP Edge-Co ware-b mance 4 to onal rate-lim CS4660-28F l control of netw 4 and CS4 rfo nd Rob tial prioritiza of ingress an ing, per port eserves or nd T manc (WRR) and s on of packet gress q pe o eig acco P port -time trict or d video port t traffic ding to th F sno multi affic a sub tab AN. Simplified Ma r IP multicast tr oping to prov ast s nd rd pre another u etween client nage aff contro user auth s a malicious us r's IP 's IP ead gem twork man ol ensures ation
4
Embed
L2/L3/L4 Gigabit Metro Ethernet Switch · L2/L3/L4 Gigabit Metro Ethernet Switch Product Overview The Edge-Core ECS4660-28F is a standalone L2/L3/L4 Gigabit Metro Ethernet routing
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Gigabit M
etro Ethernet S
witch
www.edge-core.com
For a world always connected…
ECS4660-28FL2/L3/L4 Gigabit Metro Ethernet Switch Product OverviewThe Edge-Core ECS4660-28F is a standalone L2/L3/L4 Gigabit Metro Ethernet routing switch with 24 1000BASE-X SFP slots, two 10G XFP uplink slots, and two 10G module slots that can support two additional 10G uplinks. With up to 107 Mpps performance, the ECS4660-28F is ideal for service provider aggregation deployment, providing wire-speed L2 switching and L3 unicast and multicast routing. To maintain high availability, the ECS4660-28F provides redundant power, a hot swappable fan tray, configuration rollback, and G.8032 ring protection.
DATASHEET
Key Features and BenefitsHigh AvailabilityWith IEEE 802.1w Rapid Spanning Tree Protocol, the Edge-Core ECS4660-28F provides a loop-free network with redundant links to the core network and rapid convergence in less than 2 seconds. IEEE 802.1s Multiple Spanning Tree Protocol allows a spanning-tree instance per VLAN and Layer 2 load sharing on redundant links.
The ECS4660-28F supports IEEE 802.3ad Link Aggregation Control Protocol (LACP). It increases bandwidth by automatically aggregating several physical links together as a logical trunk and offers load balancing and fault tolerance for uplink connections.
Adding an optional redundant power supply ensures that the ECS4660-28F receives stable power support for today’s high-availability, mission-critical environments.
Comprehensive QoSThe Edge-Core ECS4660-28F offers advance QoS for marking, classification, and scheduling to deliver best-in-class performance for data, voice, and video traffic at wire speed. Eight egress queues per port enable differentiated management of up to eight traffic types across the stack. Traffic is prioritized according to 802.1p, DSCP, IP precedence and TCP/UDP port number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict priority ensure differential prioritization of packet flows and avoid congestion of ingress and egress queues.
With bidirectional rate-limiting, per port or per traffic class, the ECS4660-28F preserves network bandwidth and allows full control of network resources.
Advanced IPv4 and IPv6 RoutingThe Edge-Core ECS4660-28F supports hardware-based IPv4 and IPv6 routing for maximum performance. It provides a seamless migration path from IPv4 to IPv6 for future network upgrades and investment protection.
Advanced routing protocols such as RIP and OSPF provide dynamic routing by exchanging routing information with other Layer 3 switches or routers. Multicast routing is supported under independent multicast protocols, including PIM-DM and PIM-SM. DVMRP is also supported to interconnect two multicast-enabled networks across non-multicast networks. VRRP prevents your system from failing by dynamically backing up multiple L3 switches for routing.
Enhanced SecurityThe Edge-Core ECS4660-28F provides enhanced security features for connectivity and access control, including Access Control Lists (ACLs), authentication, and port-level security with IEEE 802.1X. ACLs can be used to restrict access to sensitive network resources by denying packets based on L2/L3/L4 headers. SSH and RADIUS authentication protects management access to the switch, providing secure network management. IEEE 802.1X port-based access control ensures dynamic, port-based security and user authentication for network access.
IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between client's IP, MAC address, port, and VLAN.
Simplified ManagementFor IP multicast traffic, the ECS4660-28F uses IGMP snooping to provide fast client joins and leaves of multicast streams. It prevents flooding of IP multicast traffic and limits bandwidth-intensive video traffic to only the subscribers.
The ECS4660-28F supports IPv6 management functions for SNMP, HTTP, Telnet, TFTP, ICMP, SSH, RADIUS/TACACS+ authentication, and IPv6 QoS remapping when connecting to the switch.
The ECS4660-28F can be managed through an industry-standard Command Line Interface (CLI) with a common industry look and feel that reduces training and operating costs. The switch also provides an easy-to-use web GUI interface through a standard web browser.
With four-group RMON, the ECS4660-28F can easily backup and restore firmware and configuration files via TFTP.
and allows full control of network resources.
Advanced IPv4 and IPv6 RoutingThe Edge-Core ECS4660-28F supports hardware-based IPv4 and IPv6 routing for maximum performance. It provides a seamless migration path from IPv4 to IPv6 for future network upgrades and
With bidirectional rate-limiting, per port or per traffic class, the ECS4660-28F preserves network bandwidth and allows full control of network resources.
Advanced IPv4 and IPv6 RoutingThe Edge-Core ECS4660-28F supports
number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict priority ensure differential prioritization of packet flows and avoid congestion of ingress and egress queues.
With bidirectional rate-limiting, per port or per traffic class, the ECS4660-28F preserves network bandwidth and allows full control of network resources.
802.1p, DSCP, IP precedence and TCP/UDP port number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict priority ensure differential prioritization of packet flows and avoid congestion of ingress and egress queues.
traffic at wire speed. Eight egress queues per port enable differentiated management of up to eight traffic types across the stack. Traffic is prioritized according to 802.1p, DSCP, IP precedence and TCP/UDP port number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict
The Edge-Core ECS4660-28F offers advance QoS for
best-in-class performance for data, voice, and video traffic at wire speed. Eight egress queues per port enable differentiated management of up to eight traffic types across the stack. Traffic is prioritized according to
traffic and limits bandwidth-intensive video traffic to only the subscribers.
For IP multicast traffic, the ECS4660-28F uses IGMP snooping to provide fast client joins and leaves of multicast streams. It prevents flooding of IP multicast traffic and limits bandwidth-intensive video traffic to only the subscribers.
binding table between client's IP, MAC address, port, and VLAN.
Simplified ManagementFor IP multicast traffic, the ECS4660-28F uses IGMP snooping to provide fast client joins and leaves of multicast streams. It prevents flooding of IP multicast traffic and limits bandwidth-intensive video traffic to only
IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between client's IP, MAC address, port,
Simplified ManagementFor IP multicast traffic, the ECS4660-28F uses IGMP
802.1X port-based access control ensures dynamic, port-based security and user authentication for network
IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between client's IP, MAC address, port,
used to restrict access to sensitive network resources by denying packets based on L2/L3/L4 headers. SSH and RADIUS authentication protects management access to the switch, providing secure network management. IEEE 802.1X port-based access control ensures dynamic, port-based security and user authentication for network
TEL: 886-3-5638888 FAX: 886-3-6686111 No.1, Creation Rd. III, Hsinchu Science Park, Taiwan 30077 [email protected] www.edge-core.com
Security MAC limiting Allowed MAC addresses-configurable per port Dynamic ARP inspection (DAI) Proxy ARP Static ARP support DHCP snooping IP source guard 802.1X port-based 802.1X multiple supplicants 802.1X with VLAN assignment 802.1X with authentication bypass access (based on host MAC address) Web authentication Management interface access filtering 802.1X with VoIP VLAN support 802.1X dynamic ACL based on RADIUS attributes 802.1X Supported EAP types: Message Digest 5 (MD5), Transport Layer Security (TLS), Tunneled Transport Layer Security (TTLS), Protected Extensible Authentication Protocol (PEAP) Access control lists (ACLs) Port-based ACL (PACL)-ingress ACL entries (ACE) in hardware per system: 2K ACL counter for denied packets ACL counter for permitted packets L2-L4 ACL Static MAC authentication Control plane DoS protection
High Availability Dual hot-swappable power supplies Link Aggregation 802.3ad (LACP) support: ■ Number of LAGs supported: 32 ■ Maximum number of ports per LAG: 8 LAG load sharing algorithm-Bridged Unicast Traffic: ■ IP: S/D MAC, S/D IP ■ TCP/UDP: S/D MAC, S/D IP, S/D Port ■ Non-IP: S/D MAC LAG sharing algorithm-Routed Unicast Traffic: ■ IP: S/D IP ■ TCP/UDP: S/D IP, S/D Port LAG load sharing algorithm-Bridged Multicast Traffic: ■ IP: S/D MAC, S/D IP ■ TCP/UDP: S/D MAC, S/D IP, S/D Port ■ Non-IP: S/D MAC LAG sharing algorithm-Routed Multicast Traffic: ■ IP: S/D IP ■ TCP/UDP: S/D IP, S/D Port Tagged ports support in LAG
Quality of Service (QoS) Layer 2 QoS Ingress policing: 1 rate 2 color Hardware queues per port: 8 Scheduling methods (egress): Strict Priority (SP) 802.1p, DSCP /IP precedence trust and marking L2-L4 classification criteria: Interface, MAC address, Ethertype, 802.1p, VLAN, IP address, DSCP/IP precedence, TCP/UDP port numbers, etc. Congestion avoidance capabilities: Tail drop
Services and Manageability Web Interface Out-of-band management: Serial, 10/100BASE-TX Ethernet ASCII configuration Configuration rollback Dual image booting Element management tools: Network and Security Manager Simple Network Management Protocol (SNMP): v1, v2c, v3 Remote monitoring (RMON) (RFC 2819) Groups 1, 2, 3, 9 Network Time Protocol (NTP) DHCP server DHCP client and DHCP proxy DHCP relay and helper RADIUS authentication TACACS+ authentication SSHv2 PPPoE IA DSL Forum TR-101 IP Clustering Auto upgrade Port mirroring HTTP/HTTPs DNS resolver Syslog logging Temperature sensor Configuration backup via FTP/secure copy
Supported MiBs RFC 1155 Structure of Management Information (SMI) RFC 1157 SNMPv1 RFC 1905 RFC 1907 SNMP v2c, SMIv2 and revised MIB-II RFC 2572, 2574, 2575 SNMPv3, user-based security, encryption, and authentication RFC 2576 Coexistence between SNMP Version 1, Version 2 and Version 3 RFC 1213, RFC 1215 MIB-II, Ethernet-like MIB, and TRAPs RFC 2578 SNMP Structure of Management Information MIB RFC 2925 Ping/traceroute MIB RFC 2665 Ethernet-like interface MIB RFC 1493 Bridge MIB RFC 2096 IPv4 Forwarding Table MIB RFC 2011 SNMPv2 for IP using SMIv2 RFC 2012 SNMPv2 for transmission control protocol using SMIv2 RFC 2013 SNMPv2 for user datagram protocol using SMIv2 RFC 2863 Interface MIB RFC 3413 SNMP Application MIB RFC 3414 User-based security model for SNMPv3 RFC 3415 View-based Access Control Model for SNMP RFC 3621 PoE-MIB (PoE switches only) RFC 1724 RIPv2 MIB RFC 2863 Interface Group MIB RFC 2819 RMON MIB
Troubleshooting Debugging: CLI via console, Telnet, or SSH Diagnostics: Show and debug command statistics Traffic mirroring (port) Mirroring destination ports per system: 1 Multiple destination ports monitored to 1 mirror (N:1) Maximum number of mirroring sessions: 1 Mirroring to remote destination (over L2): 1 destination VLAN IP tools: Extended ping and trace
TEL: 886-3-5638888 FAX: 886-3-6686111 No.1, Creation Rd. III, Hsinchu Science Park, Taiwan 30077 [email protected] www.edge-core.com
For More Information To find out more about Edge-Core Networks products and solutions, visit www.edge-core.com
About Edge-Core Networks Edge-Core Networks is in the business of providing innovative network solutions. In the service provider network, in the data center or in the cloud, Edge-Core Networks delivers the software and systems that transform the way the world connects. Edge-Core Networks serves customers and partners worldwide. Additional information can be found at www.edge-core.com.
To purchase Edge-Core Networks solutions, please contact your Edge-Core Networks representative at 886 3 563 8888 or authorized reseller.
Mechanical Dimensions (H x W x D): 1.5U height, 67 x 440 x 254 mm (2.64 x 17.32 x 10 in.) LED Indicators: Port, Uplink, System, Diagnostic AC Power Input: 100 ~ 240VAC, 50 ~ 60Hz DC Power Input: -48V Weight: 4.65 kg (10.65 lbs)
Safety UL60950-1 & CSA 60950-1 IEC 60950-1 & EN 60950-1
Warranty Please check www.edge-core.com for the warranty terms in your country.
Model Number Switches ECS4660-28F
Pluggable Optics ET-3203-BX20
ET-3203-BX20D
ET-4201-RF45
ET4203-BX20
ET4203-BX20D
Network Management System
Product Description
24-port 1000BASE-X Ethernet Switch with two 10 Gigabit Ethernet XFP ports and two optional 10 Gigabit XFP uplink modules.