Summit X460 Series
High Performance Switching and Routing
- 52-port, 48-port or 28-port Gigabit Ethernet (GbE) connectivity in a 1RU form factor
- Optional two-port 10 GbE to provide 20 Gbps uplinks
- Voice-grade SummitStack™ 40 Gbps and SummitStack-V8080 Gbps high-speed stacking plus SummitStack-V, longer distance stacking
- Flexible IEEE 802.3at Power over Ethernet Plus (PoE-plus) to meet the growing demand of converged network applications
- Advanced Layer 2/Layer 3 switching and MPLS/H-VPLS support
Comprehensive Security Management
- User policy and host integrity enforcement, and identity management
- Universal Port Dynamic Security Profiles to provide fine granular security policies in the network
- Threat detection and response instrumentation to react to network intrusion with CLEAR-Flow Security Rules Engine
- Denial of Service (DoS) protection and IP security against man-in-the-middle and DoS attacks to harden the network infrastructure
Performance, Availability and Convergence
- Modular ExtremeXOS Operating System (OS)
- Ethernet Automatic Protection Switching (EAPS) resiliency protocol
- Dual, hot-swappable AC/DC power supplies and hot swappable fan tray
The Summit X460 series is based on Extreme Networks® revolutionary ExtremeXOS, a highly resilient OS that provides continuous uptime, manageability and operational efficiency. Each switch offers the same high-performance, non-blocking hardware technology, in the Extreme Networks tradition of simplifying network deployments through the use of common hardware and software throughout the network.
The Summit X460 switches are ideal campus edge switches with IEEE 802.3at PoE-plus and ideal aggregation switches for traditional enterprise networks. The Summit X460 series is a great option
for DSLAM or CMTS aggregation, or for active Ethernet access.
The Summit X460 is also purpose-built as a top-of-rack switch for many data center environments with features such as high-density Gigabit Ethernet for concentrated data center environments; XNV™ (ExtremeXOS Network Virtualization) for centralized network-based Virtual Machine (VM) inventory, VM location history and VM provisioning; Direct Attach™ to offload VM switching from servers, thereby improving performance; high-capacity Layer 2/Layer 3 scalability for highly virtualized data centers; and intra-rack and cross-rack stacking with industry-leading flexibility.
Target Applications
- Advanced campus networks or core switch for small networks
- Aggregation switch in a traditional three-tiered network
- Top-of-rack switch for data centers with optional high-speed 80 Gbps cross-rack stacking at up to 100 meters
- Interconnect switch providing low latency connections for High Performance Cluster Computing (HPCC)
- DSLAM aggregation, active Ethernet access or access aggregation device in a Carrier Ethernet network
- Access or access aggregation switch in a business E-Line or E-LAN over VPLS network
High-Performance and Scalable Switching and Routing
Summit X460 offers sophisticated intelligent switching and routing with exceptional port density, scalability and virtualization support plus high-performance stacking technology powered by the ExtremeXOS modular OS. Summit X460 helps enhance the data center, Carrier Ethernet and enterprise campus edge and aggregation network.
High-Performance Switching and Routing
Summit X460 is available in six different port configuration options: 28-port Gigabit Ethernet (Summit X460-24t/24p/24x), 48-port fiber Gigabit Ethernet (Summit X460-48x), or 52-port Gigabit Ethernet (Summit X460-48t/48p). All ports run at non-blocking, wire-speed performance and can carry wire-rate traffic to the option slots, which allow flexible configuration. Option slot A supports a two-port 10 GbE module (XGM3-2sf). For SummitStack stacking ports, a two-port SummitStack module or two-port SummitStack-V80 module can be installed in option slot B (See Figure 1: Port configuration options for Summit X460 switches).
Figure 1: Port Configuration Options for Summit X460 Switches
|
|
None (default option)
|
Option Slot A
|
Option Slot Â
|
|
Dedicated
|
Shared
|
XGM3-2sf
|
SummitStack
|
SummitStack-V80
|
|
Summit X460-24t
|
20 x 10/100/1000BASE-T (RJ45)
4 x 100/1000BASE-X (SFP)
|
4 x 100/1000BASE-X SFP or 10/100/1000BASE-T
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-48t
|
44 x 10/100/1000BASE-T (RJ45)
4 x 100/1000BASE-X (SFP)
|
4 x 100/1000BASE-X SFP or 10/100/1000BASE-T
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-24p
|
20 x 10/100/1000BASE-T PoE-plus (RJ45)
4 x 100/1000BASE-X (SFP)
|
4 x 100/1000BASE-X SFP or 10/100/1000BASE-T PoE-plus
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-48p
|
44 x 10/100/1000BASE-T PoE-plus (RJ45)
4 x 100/1000BASE-X (SFP)
|
4 x 100/1000BASE-X SFP or 10/100/1000BASE-T PoE-plus
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-24x
|
4 x 10/100/1000BASE-T (RJ45)
20 x 100/1000BASE-X (SFP)
|
4 x 100/1000BASE-X SFP or 10/100/1000BASE-T
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-48x
|
48 x 100/1000BASE-X (SFP)
|
-
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-24tDC
|
20 x 10/100/1000BASE-T (RJ45)
4 x 100/1000BASE-X (SFP)
|
4 x 100/1000BASE-X SFP or 10/100/1000BASE-T
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-48tDC
|
44 x 10/100/1000BASE-T (RJ45)
4 x 100/1000BASE-X (SFP)
|
4 x 100/1000BASE-X SFP or 10/100/1000BASE-T
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-24xDC
|
4 x 10/100/1000BASE-T (RJ45)
20 x 100/1000BASE-X (SFP)
|
4 x 100/1000BASE-X SFP or 10/100/1000BASE-T
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
|
Summit X460-48xDC
|
48 x 100/1000BASE-X (SFP)
|
-
|
2 x 10GBASE-X (SFP+)
|
2 x SummitStack
|
2 x SummitStack-V80
|
Flexible Port Configuration
Summit X460 offers flexible port configu¬rations. For Summit X460-24t/24p, with four dedicated Gigabit Ethernet fiber ports and four shared Gigabit Ethernet fiber ports, the switch can have up to 8 fiber GbE ports, while still providing 20 Gigabit Ethernet copper ports (PoE-plus or non-PoE). If higher density copper ports are required, the switch can provide up to 24 Gigabit Ethernet copper ports while providing 4 Gigabit Ethernet fiber ports. Through the two option slots, Summit X460 switches can be equipped with an additional two 10 Gigabit Ethernet and/or SummitStack stacking ports. For stacking, depending upon the needs for bandwidth across the units in a stack, Summit X460 supports 40 Gbps SummitStack or 80 Gbps SummitStack-V80 stacking option modules (see Figure 2: Summit X460-24t flexible port configuration).
|
|
Figure 2: Summit X460-24t Flexible Port Configuration
|
SummitStack and SummitStack-V80— High-Performance Stacking
Summit X460 supports SummitStack, which provides 40 Gbps (SummitStack module) or 80 Gbps (SummitStack-V80 module) of stacking bandwidth. The SummitStack module offers high-speed 40 Gbps stacking performance, and provides compatibility with the Summit X250e, X450a/e, X480 and X650 stackable switches running the same version of ExtremeXOS.
Alternatively, you may choose high-speed 80 Gbps stacking, which is ideal for demanding applications where a high volume of traffic traverses through the stacking links, yet bandwidth is not compromised through stacking.
SummitStack-V80 also breaks the distance limitation for stacking technology by using QSFP+ technology. SummitStack-V80 can support passive copper cable (up to 5m), active multi-mode fiber cable (up to 100m), and QSFP+ optical transceivers which will be the standard technology for 40 GbE. With SummitStack-V80, the Summit X460 provides a flexible stacking solution inside the data center or central office to create a virtualized switching infrastructure across rows of racks. (See Figure 3: SummitStack-V80 across Rows of Racks and Figure 4: 40 GbE Cabling for SummitStack-V80)
|
|
Figure 3: SummitStack-V80 Stacking Across Rows of Racks
|
|
|
Passive Copper Cable
|
Active Fiber Cable
|
SR
|
|
Image
|
|
|
|
|
Media Type
|
Copper
|
MMF
|
MMF
|
|
Connector Type
|
Not Applicable
|
Not Applicable
|
MPO
|
|
Distance Range
|
Up to 5m
|
Up to 100m
|
Up to 100m
|
Figure 4: SummitStack-V80 Cabling
SummitStack-V— Flexible Stacking Over 10 Gigabit Ethernet
ExtremeXOS supports the new SummitStack-V capability to utilize 10 GbE ports as stacking ports, enabling the use of standard cabling and optics technologies used for 10 GbE such as XFP, SFP+, 10GBASE-T and XENPAK. SummitStack-V provides long-distance stacking connectivity of up to 40 km while reducing the cable complexity of implementing a stacking solution. SummitStack-V is compatible with Summit X450e, X450a, X460, X480 and X650 switches running the same version of ExtremeXOS (version 12.5 or greater).. SummitStack-V enabled 10 GbE ports must be physically direct-connected.
Intelligent Switching and MPLS/ H-VPLS Support
Summit X460 supports sophisticated and intelligent Layer 2 switching, as well as Layer 3 IPv4/IPv6 routing including policy-based switching/routing, Provider Bridges, bidirectional ingress and egress. Access Control Lists, and bandwidth control by 8 Kbps granularity both for ingress and egress. To provide scalable network architectures used mainly for Carrier Ethernet network deployment, Summit X460 supports MPLS LSP-based Layer 3 forwarding and Hierarchical VPLS (H-VPLS) for transparent LAN services. With H-VPLS, transparent Layer 3 networks can be extended throughout the Layer 3 network cloud by using a VPLS tunnel between the regional transparent LAN services typically built by Provider Bridges (IEEE 802.1ad) technology (See Figure 5: Summit X460 in a Carrier Ethernet application).
|
|
Figure 5: Summit X460 in a Carrier Ethernet Application
|
IEEE 802.3at PoE-plus
IEEE 802.3af Power over Ethernet has been widely used in the campus enterprise edge network for Ethernet-powered devices such as wireless access points, Voice over IP phones, and security cameras. Ethernet port extenders such as Extreme Networks ReachNXT™ 100-8t can also utilize PoE, making installation and management easier and reducing maintenance costs. The newer IEEE 802.3at PoE-plus standard expands upon Power over Ethernet by increasing the power limit up to 30 watts, and by standardizing power negotiation by using LLDP. Summit X460 supports IEEE 802.3at PoE-plus and supports standards-compli¬ant PoE devices today and into the future.
Comprehensive Security Management
Implementing a secure network means providing protection at the network perimeter as well as the core. Extreme Networks security offerings encompass three key areas: user and host integrity, threat detection and response, and hardened network infrastructure. Furthermore, with policy-based routing, measures can be taken to provide confidentiality of selective data in transit between internal network nodes.
User Authentication and Host Integrity Checking
-
Network Login and Dynamic Security Profile
Network Login capability implemented in ExtremeXOS enforces user admission and usage policies. Summit X460 series switches support a comprehensive range of Network Login options by providing an 802.1X agent-based approach, a Web-based (agent-less) login capability for guests, and a MAC-based authentication model for devices. With these modes of Network Login, only authorized users and devices can connect to the network and be assigned to the appropriate VLAN. The Universal Port scripting framework available in Summit X460 lets you imple¬ment Dynamic Security Profiles, which in sync with Network Login allow you to implement fine-grained and robust security policies. Upon authentication, the switch can load dynamic ACLs/QoS profiles for a user or group of users, to deny/allow the access to the application servers or segments within the network.
-
Multiple Supplicant Su
Shared ports represent a potential vulner¬ability in a network. Multiple supplicant capability on a switch allows it to uniquely authenticate and apply the appropriate policies and VLANs for each user or device on a shared port. Multiple supplicant support secures IP Telephony and wireless access. Converged network designs often involve the use of shared ports.
-
Media Access Control (MAC) Lockdown
MAC lockdown secures printers, wireless APs and servers. The MAC address security/lockdown feature allows Summit X460 to block access to any Ethernet port when the MAC address of a station attempting to access the port is different from the configured MAC address. This feature is used to “lock down” a device to a specific port.
-
Host Integrity Checking
Host integrity checking helps keep infected or noncompliant machines off the network. Summit X460 series switches support a host integrity or endpoint integrity solution that is based on the model from the Trusted Computing Group. Summit X460 interfaces with the Sentriant® AG200 endpoint security appliance from Extreme Networks to verify that each endpoint meets the security policies that have been set and to quarantine those that are not in compliance.
-
Identity Manager
Identity Manager allows network managers to track users who access their network. User identity is captured based on NetLogin authentication, LLDP discovery and Kerberos snooping. ExtremeXOS uses the information to then report on the MAC, VLAN, computer hostname, and port location of the user.
Further, Identity Manager can create both roles and policies, and then bind them together to create role-based profiles based on organizational structure or other logical groupings, and apply them across multiple users to allow appropriate access to network resources. In addition, support for Wide Key ACLs further improves security by going beyond the typical source/ destination and MAC address as identifica¬tion criteria access mechanism to provide filtering capabilities.
Network Intrusion Detection and Response
-
Hardware-based sFlow Sampling
sFlow® is a sampling technology that provides the ability to continuously monitor application-level traffic flows on all interfac¬es simultaneously. The sFlow agent is a software process that runs on Summit X460 and packages data into sFlow datagrams that are sent over the network to an sFlow collector. The collector gives an up-to-the-minute view of traffic across the entire network, providing the ability to trouble¬shoot network problems, control congestion and detect network security threats.
-
IPFIX Hardware Support
IPFIX (Internet Protocol Flow Information eXport) defines an Internet standards-track protocol for a follow-on protocol to the proprietary Netflow. The technology is a complimentary protocol to sFlow. IPFIX gathers information about network flows through the switch and sends the informa¬tion to an external collector. Summit X460 includes hardware support to keep track of the flow records.
-
Port Mirroring
To allow threat detection and prevention, Summit X460 switches support many-to-one and one-to-many port mirroring. This allows the mirroring of traffic to an external network appliance such as an intrusion detection device for trend analysis or for utilization by a network administrator for diagnostic purposes. Port mirroring can also be enabled across switches in a stack.
-
Line-Rate ACLs
ACLs are one of the most powerful components used in controlling network resource utilization as well as protecting the network. Summit X460 switches support 2,048 centralized ACLs per 24 or 28-port block based on Layer 2, 3 or 4 header information such as the MAC or IP source/destination address. ACLs are used for filtering the traffic, as well as classify¬ing the traffic flow to control bandwidth, priority, mirroring and policy-based routing/switching.
-
Denial of Service Protection
Summit X460 switches effectively handle DoS attacks. If the switch detects an unusually large number of packets in the CPU input queue, it will assemble ACLs that automatically stop these packets from reaching the CPU. After a period of time, these ACLs are removed, and reinstalled if the attack continues. ASIC-based LPM routing eliminates the need for control plane software to learn new flows, allowing more network resilience against DoS attacks.
Secure Management
To prevent management data from being intercepted or altered by unauthorized access, Summit X460 switches support SSH2, SCP and SNMPv3 protocols. The MD5 hash algorithm used in authentication prevents attackers from tampering with valid data during routing sessions.
Extreme Networks has developed tools that help save you time and resources in managing your network. EPICenter® management suite provides fault, configura¬tion, accounting, performance and security functions, allowing more effective management of Extreme Networks multi-layer switching equipment in a converged network.
Performance, Availability and Convergence
Powered by the ExtremeXOS OS, Summit X460 supports process recovery and application upgrades without the need for a system reboot. Summit X460 provides the high network availability required for mission-critical servers and applications through its advanced modular OS, highly available hardware architecture and carrier-grade network redundancy protocols.
Modular Operating System for Continuous Operatio
-
Preemptive Multitasking and Protected Memory
Summit X460 series switches allow each of many applications—such as Open Shortest Path First (OSPF) and Spanning Tree Protocol (STP)—to run as separate OS processes that are protected from each other. This drives increased system integrity and inherently protects against DoS attacks.
-
Process Monitoring and Restart
ExtremeXOS increases network availability using process monitoring and restart. Each independent OS process is monitored in real time. If a process becomes unrespon¬sive or stops running, it can be automati¬cally restarted.
-
Loadable Software Modules
The modular design of ExtremeXOS OS allows the upgrading of individual software modules, should this be necessary, leading to higher availability in the network (See Figure 7: ExtremeXOS modular design).
|
|
Figure 7: ExtremeXOS Modular Design
|
High Availability Network Protocols
-
Ethernet Automatic Protection Switching (EAPS)
EAPS allows the IP network to provide the level of resiliency and uptime that users expect from their traditional voice network. EAPS is more adaptable than Spanning Tree or Rapid Spanning Tree Protocols and offers sub-second (less than 50 milliseconds) recovery that delivers consistent failover regardless of the number of VLANs, network nodes or network topology. Since EAPS allows the network to recover almost transparently, Voice-over-IP (VoIP) calls will not drop and digital video feeds will not freeze or pixelize in most situations.
-
Spanning Tree/Rapid Spanning Tree Protocols
Summit X460 supports Spanning Tree (802.1D), Per VLAN Spanning Tree (PVST+), Rapid Spanning Tree (802.1w) and Multiple Instances of Spanning Tree (802.1s) protocols for Layer 2 resiliency.
-
Software-Enhanced Availability
Software-enhanced availability allows users to remain connected to the network even if part of the network infrastructure is down. Summit X460 continuously checks for problems in the uplink connections using advanced Layer 3 protocols such as OSPF, VRRP and Extreme Standby Router Protocol™ (ESRP, supported in Layer 2 or Layer 3), and dynamically routes traffic around the problem.
-
Equal Cost Multipath
Equal Cost Multipath (ECMP) routing allows uplinks to be load balanced for performance and cost savings while also supporting redundant failover. If an uplink fails, traffic is automatically routed to the remaining uplinks and connectivity is maintained.
-
Link Aggregation (802.3ad)
Link aggregation (LAG) allows trunking of up to eight links on a single logical connection. A maximum of 128 link aggregation groups can be created.
-
Multi-Switch LAG (Ì-LAG)
M-LAG can address bandwidth limitations and improve network resiliency, in part by routing network traffic around bottlenecks, reducing the risks of a single point of failure, and allowing load balancing across multiple switches.
Voice-Grade Stacking with SummitStack
Summit X460 provides high-speed 40 Gbps stacking and 80 Gbps stacking through optional stacking modules, as well as 10 GbE stacking through SummitStack-V. The SummitStack stacking architecture is designed to support mission-critical applications through its highly available, rapid failover capability with n-1 master redundancy, distributed Layer 2 and Layer 3 switching, link aggregation across the stack, and distributed uplinks. SummitStack supports up to eight units in a stack, including any mix of Summit X460, X480, X650, X450a, X450e, and X250e, and provides 50 milliseconds failover for path failure and hitless master/backup failover along with hitless protocol support such as OSPF graceful restart and Network Login user authentication. Summit X460 provides chassis-like management and availability with its SummitStack stacking technology (See Figure 8: SummitStack stacking architecture).
|
|
Figure 8: SummitStack stacking architecture
|
Hardware Redundancy
Summit X460 supports a dual redundant AC/ DC power supply to provide high availability. The power supply can be hot-swapped and replaced should it fail. For non-PoE models, Summit X460 allows AC and DC power supplies to be mixed in the same switch to provide a DC-powered main power source and AC power from a UPS backup. Summit X460 supports a hot-swappable, field replaceable fan.
|
|
Figure 6: Summit X460 High Availability Design
|
Target Applications
Data Center Top-of-Rack Switch
Virtualization, rack servers and blade servers have enabled a high degree of consolidation within the enterprise data center rack. Data center consolida¬tion has led to a need for higher switch density and advanced virtualization capabilities in the top-of-rack switch. Summit X460 provides an ideal combination of Layer 2/Layer 3 scale, port density and virtualization support for the highly virtualized and cloud-based enterprise data center.
High-Performance 10 Gigabit Core Switch for a Small Network and Aggregation Switch in a Traditional Three-Tiered Network
Summit X460 offers superior aggregation-class scalability for both Layer 2 and Layer 3 switching. Summit X460 can support up to 32,000 Layer 2 MAC addresses and 12,000 IPv4 longest prefix matching routes.
Edge Switch for High-Bandwidth Applications
Here, the Summit X460 switch is deployed as an edge switch, extending the benefits of the ExtremeXOS operating system to the network edge. This uniformity provides consistent quality and performance through¬out your converged network while reducing operation¬al inefficiencies. With line-rate performance and low latency, the Summit X460 edge switch connects wireless devices, LAN telephony, PDAs and other equipment without compromising security, scalability, availability, mobility or management.
Carrier Ethernet Network Switch that can Aggregate Connectivity for First Mile Access Concentrators
Summit X460 switches are an ideal service delivery platform for Carrier Ethernet networks. The advanced traffic management, resiliency and scalability features give it the flexibility to be deployed at the Provider Edge or as an aggregation switch. By supporting scalable Layer 2 and Layer 3 features along with MPLS/H-VPLS in hardware, the Summit X460 switches simplify network deployment.
|
