Specifications

3
WWW.EXTREMENETWORKS.COM
Complementing Layer 2 Metro Ethernet capabilities is a
powerful suite of MPLS capabilities and services, including
MPLS-TE , Fast ReRoute (FRR), MPLS Virtual Leased Line
(VLL), Virtual Private LAN Service (VPLS), BGP/MPLS VPNs
(MPLS Layer 3 VPNs), and Dynamic Inter-VRF. Routing over
VPLS provides Layer 3 forwarding functionality on the VPLS
endpoints, thus simplifying management and operations
by allowing a single access point for both switching and
routing applications. This is ideal for inter-data center
connectivity and Virtual Machine (VM) migration in the
cloud. The combination of Layer 2/3 features and advanced
MPLS capabilities enables the routers to function in the
data center core and connect geographically distributed
data centers using standardsbased technology such as
VPLS. Within the data center, advanced network resiliency
features, such as MCT, eliminate the need for spanning tree
while enabling ecient usage of network resources through
active-active load balancing.
Data Security Without Compromising
Network Performance
The ExtremeRouting MLX 4-port 10 GbE IPsec module for
the MLXe provides inline IPsec encryption capabilities at
wire speed, ensuring data privacy without compromising
performance or complicating deployment models. With
support for four additional ports of 10 GbE/1 GbE (combo)
and four ports of 1 GbE, it supports an industry leading
capacity of more than 44 Gbps encrypted trac per half-
slot module and up to 128 IPsec ports of 10 GbE in a single
MLXe system. The inline ports for IPsec deliver unmatched
performance by requiring no service module to be used,
freeing up slots in the chassis to be used for other routing
applications. This programmability enables one of the
strongest cryptographic suites for IPsec—Suite B— available
in hardware of the MLXe. For additional security, the
module supports IEEE 802.1AE (MACsec), which provides
128-bit Layer 2 hop-by-hop encryption for Local Area
Network (LAN) use cases.
The ExtremeRouting MLX 20-port 10/1 GbE module for
the MLXe provides inline IEEE 802.1AE (MACsec), which
provides 128-bit MAC layer hop-by-hop encryption for LAN
use cases, with up to 640 10 GbE/1 GbE MACsec
ports per chassis.
Scalable and Intelligent
Network Visibility
The MLXe provides visibility capabilities to non-disruptively
and transparently tap into a production network with no
loss in performance.
It filters and extracts relevant network trac based on the
rules configured statically or dynamically on it. Industry-
leading port density, low latency, high throughput, and
scalability make the MLXe router a powerful solution
for carrierclass environments. By implementing network
visibility with the MLXe, network operators can
increase eciency and scale of analytics into network data
and trac, process captured data to evaluate network and
application conditions, and generate actionable metrics and
reports used for network planning.
Simplified Service Management
Delivering eective MPLS services on Carrier
Ethernet infrastructure requires fast fault identification
and isolation. The MLXe supports MPLS Labeled
Switch Path (LSP) ping and trace route features to
isolate any MPLSrelated connectivity issues. In addition, it
supports all the capabilities of IEEE 802.1ag (Connectivity
Fault Management), including Connectivity Check
Messages, Loopback Message/Response, and LinkTrace
Message/Response.
IEEE 802.1ag, in conjunction with the MPLS OAM features,
provides the capabilities to monitor, isolate, and identify
connectivity problems and reduce the time to repair
business VPN services. For performance management on
Carrier Ethernet infrastructure, the MLX Series supports
Y.1731 to measure roundtrip delay and jitter characteristics
between two points in the network. To diagnose link layer
connectivity issues, the routers also support the IEEE
802.3ah Link OAM feature.
In addition, the MLXe supports standards-based
sFlow trac monitoring technology, which provides
unprecedented visibility into network usage. Integrated
into the line module hardware, the sFlow technology
enables the monitoring of high-speed links without
impacting performance.