Specifications

ManualsBrandsExtreme Networks ManualsComputers & AccessoriesPowerful WAN access platform that seamlessly and securely extends Fabric Connect services and micro-segments to remote locations

WWW.EXTREMENETWORKS.COM

Two models of the ExtremeAccess Platform 1400 Series

are available: the XA 1440 and the XA 1480. Both are

x86-based hardware appliances equipped with six (6)

Gigabit Ethernet RJ45 copper ports and two (2) 10 Gigabit

Ethernet SFP+ ﬁber ports. They also include serial and USB

ports for management, as well as external ﬂash use.

ExtremeAccess Platform 1440 (aka XA 1440): This model

is intended for small site or branch applications in cases

where up to 100 Mbps of WAN throughput is required. This

model includes a 4-core Intel processor, 8Gb RAM and

32Gb Solid State Drive (SSD).

ExtremeAccess Platform 1480 (aka XA 1480): This model

is intended for mid-sized branch or head-end appliance

uses cases where up to 500 Mbps of WAN throughout is

required. This model includes an 8 core Intel processor, 8Gb

RAM and 64GB Solid State Drive (SSD).

Typical Deployment Scenarios

The ExtremeAccess Platform 1400 will typically be

deployed to extend secure Fabric Connect services from a

head-end or campus location to a remote site. Connection

can be over a Service Provider WAN or Public Internet

using either Fabric Extend or IPSec encrypted tunnels.

In either case, Fabric Connect services can be securely

extended to the remote location. Each scenario is further

described below.

Fabric Services over Service Provider WANs with Fabric

Extend. In this scenario, remote sites with ExtremeAccess

Platform 1400 appliances are connected over a Service

Provider WAN (e.g., MPLS, Ethernet, or DSL) to the central

campus or head-end site (see Figure 1). Since the Service

Provider WAN is private and generally has its own built-

in security, IPSec encryption is not required. Here, VSP

7000 or 8000 Series switches in the central site can act as

the aggregation devices for Fabric Extend tunnels to the

ExtremeAccess Platform 1400 appliances in the remote

sites. In this scenario, secure Fabric Connect services (or

segments) are run across Fabric Extend tunnels using a

VXLAN overlay.

VSP 7000 or VSP 8000 Series

VSP 4000

XA 1400 Series

Fabric Connect

Segments over

VXLAN

Fabric Extend Secure Zone

Head End

VM-1

VM-2

VM-3VM-1 VM-2

VM-3

Remote locations

Figure 1: Secure Fabric Services over a Service Provider WAN using

Fabric Extend

Fabric Services over the Public Internet with IPSec. In

this scenario, remote sites with Extreme Access Platform

1400 appliances connect over the Public Internet to the

central campus or head-end site (see Figure 2). Since the

Internet is less secure than a Service Provider WAN, IPSec

encryption on the ExtremeAccess Platform 1400 can be

used to ensure a secure link. Here, ExtremeAccess Platform

1400 appliances would be deployed in both Campus (or

head-end) and remote sites to perform IPSec encryption, as

well as any needed fragmentation and reassembly. Secure

Fabric Connect services (or segments) can then be run

across the IPSec tunnels across the Public Internet.

XA 1400 series

Encrypted Secure Zone

Fabric Connect

Segments encrypted

in IPSec tunnels

Head End

Remote locations

VM-1 VM-2

VM-3

VM-1 VM-2VM-3

Figure 2: Secure Fabric Services over the Public Internet using

IPSec encryption