Matrix 7H4385-49 | User manual | Enterasys Matrix® N-Series Platinum DFE

Add to my manuals
5 Pages

advertisement

Matrix 7H4385-49 | User manual | Enterasys Matrix® N-Series Platinum DFE | Manualzz

DATASHEET

Enterasys Matrix

®

N-Series Platinum DFE

Secure, Highly-Available Policy-based 10GbE Modular L2/L3/L4 Edge to

Core/Data Center Flow Switch

Multiple deployment scenarios for edge, distribution, core and data center

Distributed fault-tolerant architecture assures network reliability and business continuity

Industry leading ROI proven over more than 10 years

Secure Networks™ architecture embeds security into the infrastructure

Flow based architecture optimized for iSCSI and Server Virtualization

High-density, 10/100, 10/100/1000,

10-Gigabit Ethernet and Power-over-

Ethernet Modules utilize a total switching capacity of 1.68 Terabits per second

Product Overview

The Matrix ® N-Series Platinum Distributed Forwarding Engines (DFEs) support the full range of Secure Networks features, but are primarily designed for deployment in network edge and distribution roles, with support for up to 1000 downstream users/devices on a single port (2000 per chassis) with full distributed fault-tolerance capabilities. The advanced routing license and per-port policy capacity license can be purchased to provide similar multi-user authentication and routing scalability as the Diamond DFEs. Platinum DFEs provide a broad range of Ethernet connectivity ranging from 10/100 to 10 Gigabit Ethernet, including support for Power over Ethernet.

Unlike competing solutions, the Matrix N implements a granular flow-based architecture to intelligently manage individual user and applications—not just ports and VLANs. Policy rules combined with deep packet inspection can intelligently sense and automatically respond to security threats while improving reliability and quality of service.

The Matrix N features a distributed fault-tolerant architecture with scalable capacity that does not rely on centralized processors or fabric modules. Each DFE is an integrated switching, routing and management module that makes forwarding decisions, enforces security policies and classifies incoming traffic. This distributed architecture has proven itself in some of the largest and most complex networks in the world.

Platinum DFEs are interchangeable in any Matrix N-Series chassis, delivering leading performance, reliability, and security for today’s enterprise network. These modules intelligently integrate switching, routing and management functions to deliver visibility and control without sacrificing performance or QoS.

Benefits

Business Alignment

• Performance, reliability and security embedded into the architecture enable timely and reliable delivery of mission critical applications

• Open convergence support for voice, video and data networks enable automatic discovery, classification and prioritization of voice solutions from ANY of the leading

IP telephony vendors

• Policy-based networking ensures the network can automatically adapt every time there is an add, move or change

Operational Efficiency

• Policy-based approach eliminates configuration complexity and enables infrastructure independence from ACLs,

VLANs and subnets

• Flexible configuration and expansion options enable quick and cost effective connectivity enhancements while scaling performance and capacity with each new blade

• Automated configuration management improves serviceability

Security

• Only switch in the industry to provide multi-user authentication for discrete users sharing a high bandwidth link

• Policy rules combined with deep packet inspection intelligently sense and automatically respond to security threats while improving reliability and quality of the user experience

• Network, user and host security protect the business against network misuse and controls access to resources and confidential information

Support and Services

• Industry leading customer satisfaction and first call resolution rates

• Personalized services

There is nothing more important than our customers.

Density and Performance

The Matrix N-Series provides high performance and high density:

Platinum DFE

Performance (Mpps)

Capacity

10/100 Base-TX Ports

100 Base-FX Ports

10/100/1000 Base-TX Ports

10/100/1000 Base-TX Ports with PoE

1000 Base-X Ports

10G Base-X Ports

72

54

72

48

24

4

Matrix N1

13.5 Mpp

18 Gbps

Matrix N3

40.5 Mpps

54 Gbps

216

162

216

144

72

12

Performance/Capacity

Switching Fabric Bandwidth

18 Gbps per DFE

Switching Throughput

13.5 Mpps (Measured in 64-byte packets)

Routing Throughput

13.5 Mpps (Measured in 64-byte packets)

Address Table Size

65k MAC Addresses

VLANs Supported

4094

Transmit Queues

4/12

Standards and Protocols

Switching/VLAN Services

• Generic VLAN Registration Protocol (GVRP)

• 802.1Q VLANs

• 802.1D MAC Bridges

• 802.1w Rapid-reconvergence of Spanning Tree

• 802.1s Multiple Spanning Tree

• 802.3ad Link Aggregation

• 802.3ae Gigabit Ethernet

• 802.3x Flow Control

• IP Multicast (IGMP support v1, v2, per-VLAN querier offload)

• Jumbo Packet with MTU Discovery Support for Gigabit

• Link Flap Detection

• Dynamic Egress (Automated VLAN Port Configuration)

IP Routing

• RFC 1812 General Routing

• RFC 792 ICMP

• RFC 1256 ICMP Router Discovery Protocol

• RFC 826 ARP

• RFC 1027 Proxy ARP

• Static Routes

• RFC 1058 RIPv1

• RFC 1723 RIPv2 with Equal Cost Multipath Load Balancing

• RFC 1812 RIP Requirements

• RFC 1519 CIDR

• RFC 2338 Virtual Router Redundancy Protocol (VRRP)

• Standard ACLs

• DHCP Server RFC 1541/ Relay RFC 2131

Matrix N5

67.5 Mpps

90 Gbps

360

270

360

360

120

20

Classification Rules

57k/chassis

Memory

Main Memory: 256 Mb

Flash Memory: 32 Mb

Matrix N7

94.5 Mpps

126 Gbps

504

378

504

336

168

28

Extended IP Routing

Software upgrade package N-EOS-L3, licensed on a per-chassis basis.

• RFC 1583/RFC 2328 OSPFv2

• RFC 1587 OSPFv2 NSSA

• RFC 1745 OSPF Interactions

• RFC 1746 OSPF Interactions

• RFC 1765 OSPF Database Overflow

• RFC 2154 OSPF with Digital Signatures (Password & MD5)

• OSPF with Multipath Support

• OSPF Passive Interfaces

• RFC 2391 Load Sharing Using Network Address Translation

• Extended ACLs

• Policy-based Routing

• RFC 1112 IGMP

• RFC 2236 IGMPv2

• DVMRP v3-10

• RFC 2361 Protocol Independent Multicast - Sparse Mode

Network Security and Policy Management

• 802.1X Port-based Authentication

• Web-based Authentication

• MAC-based Authentication

• Convergence Endpoint Discovery with Dynamic Policy Mapping

(Siemens HFA, Cisco VoIP, H.323 and SIP)

• Multiple Authentication Types per Port Simultaneously

• Multiple Authenticated users per Port with unique policies per

user/End System (VLAN association independent)

• RFC 3580 IEEE 802.1 Radius Usage Guidelines, with VLAN

to Policy Mapping

Page 2

Standards and Protocols

• Worm Prevention (Flow Set-Up Throttling)

• Broadcast Suppression

• ARP Storm Prevention

• MAC-to-Port Locking

• Span Guard (Spanning Tree Protection)

• Stateful Intrusion Detection System Load

Balancing

• Stateful Intrusion Prevention System and

Firewall Load Balancing

• Behavioral Anomaly Detection/Flow

Collector (non-sampled Netflow)

• Static Multicast Group Provisioning

• Multicast Group, Sender and Receiver

Policy Control

Class of Service

• Stri ct Priority Queuing

• Weighted Fair Queuing with Shaping

• 16 Transmit Queues per Port (1000BaseX

SFP and 10 Gigabit Ethernet Modules)

• 4 Transmit Queues per Port

(10/100BaseTX, 100BaseFX and

1000BaseT modules)

• Up to 1024 Rate Limiters per DFE

• Packet Count or Bandwidth based Rate

Limiters. Bandwidth Thresholds between

64 Kbps and 4 Gbps

• IP ToS/DSCP Marking/Remarking

• 802.1D Priority-to-Transmit Queue Mapping

NetSight

®

Network Management

• NetSight Console

• NetSight Policy Manager

• NetSight Inventory Manager

• NetSight Automated Security Manager

• NetSight Sentinel

Management, Control and Analysis

• SNMP v1/v2c/v3

• Web-based Management Interface

• Industry Common Command Line Interface

• Multiple Software Image Support with

Revision Roll Back

• Multi-configuration File Support

• Editable Text-based Configuration File

• COM Port Boot Prom and Image Download via ZMODEM

• Telnet Server and Client

• Secure Shell (SSHv2) Server and Client

• Cabletron Discovery Protocol

• Cisco Discovery Protocol v1/v2

• Syslog

• FTP Client

• Simple Network Time Protocol (SNTP)

• Netflow version 5

• RFC 2865 Radius

• RFC 2866 Radius Accounting

• TACACS+ for Management Access Control

• Management VLAN

• 16 Many to-One-port, One-to-Many Ports,

VLAN Mirror Sessions (64 when DFE deployed with a Matrix N1 Chassis)

IETF and IEEE MIB Support

• RFC 1213 & RFC 2011 IP-MIB

• RFC 1493 Bridge MIB

• RFC 1659 RS-232 MIB

• RFC 1724 RIPv2 MIB

• RFC 1850 OSPF MIB

• RFC 2578 SNMPv2 SMI

• RFC 2579 SNMPv2-TC

• RFC 3417 SNMPv2-TM

• RFC 3418 SNMPv2 MIB

• RFC 2012 TCP MIB

• RFC 2013 UDP MIB

• RFC 2096 IP Forwarding Table MIB

• RFC 3411 SNMP Framework MIB

• RFC 3412 SNMP-MPD MIB

• RFC 3413 SNMPv3 Applications

• RFC 3414 SNMP User Based SM MIB

• RFC 2276 SNMP-Community MIB

• RFC 2613 SMON MIB

• RFC 2674 802.1p/Q MIB

• RFC 2737 Entity MIB

• RFC 2787 VRRP MIB

• RFC 2819 RMON MIB (Groups 1-9)

• RFC 3273 HC RMON MIB

• RFC 2863 IF MIB

• RFC 2864 IF Inverted Stack MIB

• RFC 2922 Physical Topology MIB

• RFC 3291 INET Address MIB

• RFC 3621 Power Ethernet MIB

• RFC 3415 SNMP View Based ACM MIB

• RFC 3635 EtherLike MIB

• RFC 3636 MAU MIB

• IEEE 8023 LAG MIB

• RSTP MIB

• USM Target Tag MIB

• U Bridge MIB

• Draft-ietf-idmr-dvmrp-v3-10 MIB

• Draft-ietf-pim-sm-v2-new-09 MIB

• SNMP-REARCH MIB

• IANA-ADDRESS-FAMILY-NUMBERS MIB

• IEEE 802.1PAE MIB

Private MIBs

• Ct-broadcast MIB

• Ctron-CDP MIB

• Ctron-Chassis MIB

• Ctron-igmp MIB

• Ctron-q-bridge-mib-ext MIB

• Ctron-rate-policying MIB

• Ctron-tx-queue-arbitration MIB

• Ctron-alias MIB

• Cisco-TC MIB

• Cisco-CDP MIB

• Cisco-netflow MIB

• Enterasys-configuration-management MIB

• Enterasys-MAC-locking MIB

• Enterasys-convergence-endpoint MIB

• Enterasys-notification-authorization MIB

• Enterasys-netfow MIB

• Enterasys-license-key MIB

• Enterasys-aaa-policy MIB

• Enterasys-class-of-service MIB

• Enterasys-multi-auth MIB

• Enterasys-mac-authentication MIB

• Enterasys-pwa MIB

• Enterasys-upn-tc MIB

• Enterasys-policy-profile MIB

Refer to DFE release notes for a complete list of supported MIBs

Page 3

Specifications

Physical Specifications

• Dimensions (H x W x D): 46.43 cm x 6.05 cm x 29.51 cm

(18.28” x 2.38” x 11.62”)

• Net weight: 4.1 kg (9 lbs)

Environmental Specifications

• Operating Temperature: +5 °C to +40 °C (41 °F to 104 °F)

• Storage Temperature: -30 °C to +73 °C (-22 °F to 164 °F)

• Operating Humidity: 5% to 90% relative humidity, noncondensing

• Power Consumption: 100 to 125 VAC or 200 to 250 VAC; 50 to 60 Hz

Agency and Standards Specifications

• Safety: UL 60950, CSA 60950, EN 60950, EN 60825 and

IEC 60950

• Electromagnetic compatibility: 47 CFR Parts 2 and 15, CSA

C108.8, EN 55022, EN 55024, EN 61000-3-2, EN 61000-3-3,

AS/NZS CISPR 22, and VCCI V-3

Power over Ethernet (PoE) Specifications

• IEEE 802.3af

• Total PoE Power: 4,800 W per chassis

• Supports Class 1 (4 W), Class 2 (7.5 W) and Class 3 (15.4 W)

PoE devices

• A fully populated chassis can power Class 2 PoE device on

all ports simultaneously

• Automated or manual PoE power distribution

• Per-port enable/disable, power level, priority safety, overload

and short-circuit protection

• System power monitor

Ordering Information

Part Number Description

Distributed Forwarding Engines

7K4297-04

7K4297-02

7K4290-02

7G4205-72

7G4202-72

7G4202-60

7G4285-49

7G4282-49

7G4282-41

7G4202-30

7G4280-19

7G4270-12

7G4270-10

7H4385-49

Platinum DFE with 4 10 Gigabit Ethernet 10GBase XFP optics slots

Platinum DFE with 2 10 Gigabit Ethernet 10GBase XFP optics slots

Platinum DFE with 2 10-Gigabit Ethernet 10GBase XenPak optics slot

Platinum DFE with 72 10/100/1000 ports via RJ45 connectors. Supports Power over Ethernet

Platinum DFE with 72 10/100/1000 Ethernet ports via RJ45 connectors

Platinum DFE with 60 10/100/1000 Ethernet ports via RJ45 connectors

Platinum DFE with 48 10/100/1000 ports via RJ45 connectors. Supports Power over Ethernet and NEM

Platinum DFE with 48 10/100/1000 Ethernet ports via RJ45 connectors. Supports Network Expansion Module

Platinum DFE with 40 10/100/1000 Ethernet ports via RJ45 with one expansion module slot

Platinum DFE with 30 10/100/1000 Ethernet ports via RJ45 connectors

Platinum DFE with 18 1000 Base-X ports via mini-GBIC connectors and one expansion module slot

Platinum DFE with 12 1000 Base-X ports via mini-GBIC connectors

Platinum DFE with 10 1000 Base-X ports via mini-GBIC connectors

Platinum DFE with 48 10/100 Ethernet ports via RJ45 connectors. Supports Power over Ethernet and NEM

7H4202-72

7H4203-72

7H4382-49

7H4383-49

Platinum DFE with 72 10/100 Ethernet ports via RJ45 connectors

Platinum DFE with 72 10/100 Ethernet ports via RJ21 connectors

Platinum DFE with 48 10/100 Ethernet ports via RJ45 connectors. Supports Matrix E7 backplane connectivity and NEM

Platinum DFE with 48 10/100 Ethernet ports via RJ21 connectors. Supports Matrix E7 backplane connectivity and NEM

7H4382-25 Platinum DFE with 24 10/100 Ethernet ports via RJ45 connectors. Supports Matrix E6 / E7 backplane connectivity and NEM

7H4284-49 Platinum DFE with 48 100Base-FX ports via MTRJ connectors

Network Expansion Modules and Network Security Modules

7G-6MGBIC-A A Network Expansion Module with 6 1000Base-X ports via mini-GBIC connectors

7G-6MGBIC-B

7K-2XFP-6MGBIC

7S-DSNA7-01

7S-NSTAG-01

NEM with 6 1000Base-X ports via MGBIC w/100FX MGBIC support

NEM with 2 ports 10 Gb Ethernet via XPF, 6 1000Base-X ports via MGBIC w/100 FX MGBIC support

Dragon ® Intrusion Detection/Prevention Network Security Module

Sentinel ® Trusted Access Gateway Network Security Module

Continued

Page 4

Mini-GBIC Modules

MGBIC-LC01

MGBIC-LC03

MGBIC-N-LC04

Mini-GBIC with 1000Base-SX port via LC connector

Mini-GBIC with 1000Base-LX/LH over multimedia fiber port via LC connector (2km long haul)

100BaseFX Mini GBIC w/LC connector for use with 7K-2XFP-6MGBIC and 7G-6MGBIC-B only

MGBIC-LC09

MGBIC-MT01

MGBIC-02

MGBIC-08

Software

N-EOS-L3

N-EOS-PPC

10GBASE-LX4

10GBASE-SR

10 Gigabit Ethernet XFPs

10GBASE-ER-XFP

Enterasys Operating System (EOS) Layer 3 routing upgrade for Matrix N-Series

Enterasys Operating System (EOS) Matrix Platinum DFE port capacity increase key

N-EOS-PUC Enterasys Operating System (EOS) Matrix Platinum DFE extra user capacity activation key

10 Gigabit Ethernet XENPACs

10GBASE-ER 10 Gigabit interface, 1550 nm, 9 micron single mode fiber via SC connector (40 km)

10GBASE-LR 10 Gigabit interface, 1310 nm, serial optic single mode fiber via SC connector (2-10 km)

10 Gigabit interface, 1310 nm, 62.5 and 50 micron multimode fiber via SC connector (33 m and 66 m)

10 Gigabit interface, 850 nm, 62.5 and 50 micron multimode fiber via SC connector (33 m and 66 m)

10GBASE-LR-XFP

10GBASE-SR-XFP

10GBASE-CX4-XFP

Other Options

DFE-256MB-UGK

Mini-GBIC with 1000Base-LX port via LC connector

Mini-GBIC with 1000Base-SX port via MTRJ connector

Mini-GBIC with 1000Base-TX port via RJ45 connector

Mini-GBIC with 1000Base-LX/LH SMF port via LC connector (70km long haul)

10 Gigabit interface, 1550nm,9micron single mode fiber via XFP connector (40km)

10 Gigabit interface, 1310nm,serial optic single mode fiber via XFP connector (2-10km)

10 Gigabit interface, 850nm, 62.5 and 50 micron multi mode fiber via XFP connector (33m and 82m)

10 Gigabit interface,Twin Axial, Copper SFF-8470 via XFP connector (15m)

256 MB DIMM memory module

Notes

1. Platinum DFEs can be installed in any slot of a Matrix N7, N5, N3, N1 or E7 chassis

2. Matrix N7 and E7 chassis support up to 7 DFE modules with the 1,600 W AC power

supply (p/n 6C207-3)

3. Matrix N5 chassis supports up to 5 DFE modules with the 1,200 W power AC supply (p/n 7C205-1)

4. Matrix N3 chassis supports up to 3 DFE modules with the 863 W power AC supply (p/n 7C203-1)

5. DFE p/n 7H4382-25, 7H4382-49 and 7H4383-49 can be used either to bridge the FTM1 and

FTM2 backplanes in the Matrix E7 chassis, or to support the Network Expansion Module (NEM).

6. The 256 MB memory upgrade (DFE-256MB-UGK) is required for PIM-SM and LS-NAT.

online, onsite or over the phone—to maintain your network reliability and performance.

Warranty

The Matrix N-Series comes with a one year hardware warranty. There is also a 90-day software and firmware warranty to cover patches, bug fixes, and feature upgrades with

8 x 5 telephone support. For full warranty terms and conditions please go to http://www.

enterasys.com/support/warranty.aspx

Service and Support

Enterasys understands that superior service and support is a critical component of Secure

Networks™. The Enterasys SupportNet Portfolio— a suite of innovative and flexible service and support offerings—completes the Enterasys solution. SupportNet offers all the postimplementation support services you need—

Additional Information

For additional information on Matrix N-Series, visit http://www.enterasys.com/products/switching .

Contact Us

For more information, call Enterasys Networks toll free at

1-877-801-7082,

or +1-978-684-1000 and visit us on the Web at

enterasys.com

Patented Innovation

© 2008 Enterasys Networks, Inc. All rights reserved. Enterasys Networks reserves the right to change specifications without notice. Please contact your representative to confirm current specifications.

Please visit http://www.enterasys.com/company/trademarks.aspx for trademark information.

07/08

Delivering on our promises. On-time. On-budget.

advertisement

Was this manual useful for you? Yes No
Thank you for your participation!

* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project

Related manuals

Download PDF

advertisement