Datasheet

© 2008 Extreme Networks, Inc. All rights reser ved. Summit X250e Series—Page 7
Extreme Networks Data Sheet
Technical Specifications
ExtremeXOS 12.1 Supported
Protocols
Switching
RFC 3619 Ethernet Automatic Protection •
Switching (EAPS) and EAPSv2
IEEE 802.1D – 1998 Spanning Tree Protocol •
(STP)
IEEE 802.1D – 2004 Spanning Tree Protocol •
(STP and RSTP)
IEEE 802.1w – 2001 Rapid Reconfiguration for •
STP, RSTP
IEEE 802.1Q – 2003 (formerly IEEE 802.1s) •
Multiple Instances of STP, MSTP
EMISTP, Extreme Multiple Instances of •
Spanning Tree Protocol
PVST+, Per VLAN STP (802.1Q interoperable)•
Draft-ietf-bridge-rstpmib-03.txt – Definitions of •
Managed Objects for Bridges with Rapid
Spanning Tree Protocol
Extreme Standby Router Protocol (ESRP)•
IEEE 802.1Q – 1998 Virtual Bridged Local Area •
Networks
IEEE 802.3ad Static load sharing configuration •
and LACP based dynamic configuration
Software Redundant Ports•
IEEE 802.1AB – LLDP Link Layer Discovery •
Protocol
LLDP Media Endpoint Discovery (LLDP-MED), •
ANSI/TIA-1057, draft 08
Extreme Discovery Protocol (EDP)•
Extreme Loop Recovery Protocol (ELRP)•
Extreme Link State Monitoring (ELSM)•
IEEE 802.1ag L2 Ping and traceroute, Connec-•
tivity Fault Management
Management and Traffic Analysis
RFC 2030 SNTP, Simple Network Time Protocol •
v4
RFC 854 Telnet client and server•
RFC 783 TFTP Protocol (revision 2)•
RFC 951, 1542 BootP•
RFC 2131 BOOTP/DHCP relay agent and DHCP •
server
RFC 1591 DNS (client operation)•
RFC 1155 Structure of Mgmt Information •
(SMIv1)
RFC 1157 SNMPv1•
RFC 1212, RFC 1213, RFC 1215 MIB-II, •
Ethernet-Like MIB & TRAPs
RFC 1573 Evolution of Interface•
RFC 1650 Ethernet-Like MIB (update of RFC •
1213 for SNMPv2)
RFC 1901 – 1908 SNMP v2c, SMIv2 and •
Revised MIB-II
RFC 2570 – 2575 SNMPv3, user based •
security, encryption and authentication
RFC 2576 Coexistence between SNMP Version •
1, Version 2 and Version 3
RFC 1757 RMON 4 groups: Stats, History, •
Alarms and Events
RFC 2021 RMON2 (probe configuration)•
RFC 2925 Ping/Traceroute MIB•
RFC 2668 802.3 MAU MIB•
draft-ietf-hubmib-mau-mib-v3-02.txt•
RFC 1643 Ethernet MIB•
RFC 1493 Bridge MIB•
RFC 1354 IPv4 Forwarding Table MIB•
RFC 2737 Entity MIB v2•
RFC 2233 Interface MIB•
RFC 3621 PoE-MIB (PoE switches only)•
Secure Shell (SSH-2) client and server•
Secure Copy (SCP-2) client and server•
Secure FTP (SFTP) server•
sFlow version 5•
Configuration logging•
Multiple Images, Multiple Configs•
RFC 3164 BSD Syslog Protocol with Multiple •
Syslog Servers
999 Local Messages (criticals stored across –
reboots)
Extreme Networks vendor MIBs (includes FDB, •
PoE, CPU, Memory MIBs)
XML APIs over Telnet/SSH and HTTP/HTTPS•
Web-based device management interface – •
ExtremeXOS ScreenPlay
Stacking – SummitStack (Summit products with •
SummitStack feature only)
Security, Switch and Network Protection
Secure Shell (SSH-2), Secure Copy (SCP-2) and •
SFTP client/server with encryption/authentica-
tion (requires expor t controlled encryption
module)
SNMPv3 user based security, with encryption/•
authentication (see above)
RFC 1492 TACACS+•
RFC 2138 RADIUS Authentication•
RFC 2139 RADIUS Accounting•
RFC 3579 RADIUS EAP support for 802.1x•
RADIUS Per-command Authentication•
Access Profiles on All Routing Protocols•
Access Policies for Telnet/SSH-2/SCP-2•
Network Login – 802.1x, web and MAC-based •
mechanisms
IEEE 802.1x – 2001 Port-Based Network Access •
Control for Network Login
Multiple supplicants with multiple VLANs for •
Network Login (all modes)
Fallback to local authentication database (MAC •
and Web-based methods)
Guest VLAN for 802.1x•
RFC 1866 HTML – Used for web-based Network •
Login and ScreenPlay
SSL/TLS transport – used for web-based Network •
Login and ExtremeXOS ScreenPlay, (requires
export controlled encr yption module)
MAC Security – Lockdown and Limit•
IP Security – RFC 3046 DHCP Option 82 with •
port and VLAN ID
IP Security – Trusted DHCP Server•
Layer 2/3/4 Access Control Lists (ACLs)•
RFC 2267 Network Ingress Filtering•
RPF (Unicast Reverse Path Forwarding) Control •
via ACLs
Wire-speed ACLs•
Rate Limiting / Shaping by ACLs•
IP Broadcast Forwarding Control•
ICMP and IP-Option Response Control•
SYN attack protection•
CPU DoS Protection with traffic rate-limiting to •
management CPU
Robust against common Network Attacks:•
CERT (http://www.cert.org) –
CA-2003-04: “SQL Slammer” –
CA-2002-36: “SSHredder” –
CA-2002-03: SNMP vulnerabilities –
CA-98-13: tcp-denial-of-service –
CA-98.01: smurf –
CA-97.28:Teardrop_Land -Teardrop and “LAND“ –
attack
CA-96.26: ping –
CA-96.21: tcp_syn_flooding –
CA-96.01: UDP_service_denial –
CA-95.01: IP_Spoofing_Attacks_and_Hijacked_ –
Terminal_Connections
IP Options Attack –
Host Attacks •
Teardrop, boink, opentear, jolt2, newtear, –
nestea, syndrop, smurf, fraggle, papasmurf,
synk4, raped, winfreeze, ping –f, ping of death,
pepsi5, Latierra, Winnuke, Simping, Sping,
Ascend, Stream, Land, Octopus
Security, Router Protection – Requires Edge
License or above
IP Security – DHCP enforcement via Disable •
ARP Learning
IP Security – Gratuitous ARP Protection•
IP Security – DHCP Secured ARP/ARP Validation•
Routing protocol MD5 authentication (see •
above)
IPv4 Host Requirements
RFC 1122 Host Requirements•
RFC 768 UDP•
RFC 791 IP•
RFC 792 ICMP•
RFC 793 TCP•
RFC 826 ARP•
RFC 894 IP over Ethernet•
RFC 1027 Proxy ARP•
RFC 2068 HTTP server•
IGMP v1/v2/v3 Snooping with Configurable •
Router Registration Forwarding
IGMP Filters•
Static IGMP Membership•
Multicast VLAN Registration (MVR)•
IPv4 Router Requirements – Requires Edge
License or above
RFC 1812 Requirements for IP Version 4 •
Routers
RFC 1519 CIDR•
RFC 1256 IPv4 ICMP Router Discovery (IRDP)•
Static Unicast Routes•
Static Multicast Routes•
RFC 1058 RIP v1•
RFC 2453 RIP v2•
Static ECMP•
RFC 1112 IGMP v1•
RFC 2236 IGMP v2•
RFC 3376 IGMP v3•
RFC 1354 IP Forwarding Table MIB•
RFC 1724 RIPv2 MIB•
IPv4 Router Requirements – Requires Advanced
Edge License or above
RFC 2338 VRRP•
RFC 2787 VRRP MIB•
RFC 2328 OSPF v2 (Edge-mode)•
OSPF ECMP•
OSPF MD5 Authentication•
RFC 1587 OSPF NSSA Option•
RFC 1765 OSPF Database Overflow•
RFC 2370 OSPF Opaque LSA Option•
RFC 3623 OSPF Graceful Restart•
RFC 1850 OSPFv2 MIB•
RFC 2362 PIM-SM (Edge-mode)•
RFC 3569, draft-ietf-ssm-arch-06.txt PIM-SSM •
PIM Source Specific Multicast
draft-ietf-pim-mib-v2-o1.txt•
IPv6 Host Requirements
RFC 2460, Internet Protocol, Version 6 (IPv6) •
Specification
RFC 2461, Neighbor Discovery for IP Version 6, •
(IPv6)