Summit X650 Series

• 24-port 10 Gigabit Ethernet non-blocking switching in 1 Rack Unit (RU) form factor with standard option to provide 40 Gbps SummitStack™ stacking and 4-port Gigabit SFP ports
• Optional 8-port 10 Gigabit Ethernet module to provide 80 Gbps uplinks and 40 Gbps SummitStack
• Optional 256 Gbps stacking for up to 192 10 Gigabit Ethernet ports in one logically integrated unit, or optional SummitStack-V long-reach stacking via 10 GbE ports
• Optional 512 Gbps stacking for connecting two Summit X650 switches to provide 48 non-blocking 10 Gigabit Ethernet ports

• ExtremeXOS® Operating System—a highly available, secure, open and extensible network foundation
• 10 Gigabit Ethernet over UTP cable and SFP+ for fiber and passive copper direct host attach installation
• Dual Speed support on 10 Gigabit Ethernet and Gigabit Ethernet on 10GBASE-T and SFP+ ports providing smooth migration from Gigabit Ethernet to 10 Gigabit Ethernet

• ExtremeXOS modular OS for highly available network operation
• Extends high availability across switches with Multi-Switch Link Aggregation (M-LAG)
• Carrier-grade redundant networking protocol including Ethernet Automatic Protection Switching (EAPS)
• Internal redundant AC/DC power supply and field replaceable fan tray

• Robust MAC and IP security framework
• Threat detection and response with CLEAR-Flow Security Rules Engine

• Top-of-rack switch for servers in enterprise data centers
• High-performance 10 GbE core switch for a small network
• High-performance 10 GbE aggregation switch in a traditional three-tiered network
• An ideal choice for 10 GbE Carrier Ethernet access and PON OLT aggregation
• Interconnect switch providing low latency connections for High Performance Cluster Computing (HPCC)

High-Performance Switching and Routing

Figure 2: Summit X650 High Speed Uplink Option

Versatile Architecture

SFP+ Optics	10GBASE-CR SFP+ Passive Copper Cable

High Availability

• Preemptive Multitasking and Protected Memory
  Summit X650 series switch allows each of many applications—such as Open Shortest Path First (OSPF) and Spanning Tree Protocol (STP)—to run as separate OS processes that are protected from each other. This drives increased system integrity and inherently protects against DoS attacks.


• Process Monitoring and Restart
  ExtremeXOS increases network availability using process monitoring and restart. Each independent OS process is monitored in real time. If a process becomes unresponsive or stops running, it can be automatically restarted.


• Loadable Software Modules
  The modular design of ExtremeXOS OS allows the upgrading of individual software modules, should this be necessary, leading to higher availability in the network (see Figure 4).

Figure 4: ExtremeXOS Modular Design

• Ethernet Automatic Protection Switching (EAPS)
  EAPS allows the IP network to provide the level of resiliency and uptime that users expect from their traditional voice network. EAPS is more adaptable than Spanning Tree or Rapid Spanning Tree protocols and offers sub-second (less than 50 milliseconds) recovery that delivers consistent failover regardless of the number of VLANs, network nodes or network topology. Since EAPS allows the network to recover almost transparently, Voice-over-IP (VoIP) calls will not drop and digital video feeds will not freeze or pixelize in most situations.


• Spanning Tree/Rapid Spanning Tree Protocols
  Summit X650 supports Spanning Tree (802.1D), Per VLAN Spanning Tree (PVST+), Rapid Spanning Tree (802.1w) and Multiple Instances of Spanning Tree (802.1s) protocols for Layer 2 resiliency.


• Software-Enhanced Availability
  Software-enhanced availability allows users to remain connected to the network even if part of the network infrastructure is down. Summit X650 continuously checks for problems in the uplink connections using advanced Layer 3 protocols such as OSPF, VRRP and Extreme Standby Router Protocol™ (ESRP, supported in Layer 2 or Layer 3), and dynamically routes traffic around the problem.


• Equal Cost Multipath
  Equal Cost Multipath (ECMP) routing allows uplinks to be load balanced for performance and cost savings while also supporting redundant failover. If an uplink fails, traffic is automatically routed to the remaining uplinks and connectivity is maintained.


• Link Aggregation (802.3ad)
  Link aggregation allows trunking of up to eight links on a single logical connection, for up to 80 Gbps of redundant bandwidth per logical connection.


• Multi-Switch LAG (Ì-LAG)
  M-LAG can address bandwidth limitations and improve network resiliency, in part by routing network traffic around bottlenecks, reducing the risks of a single point of failure, and allowing load balancing across multiple switches.

Figure 5: SummitStack Stacking Architecture

Comprehensive Security

• Media Access Control (MAC) Lockdown
  MAC security allows the lockdown of a port to a given MAC address and to limit the number of MAC addresses on a port. This can be used to dedicate ports to specific hosts or devices such as VoIP phones or printers and avoid abuse of the port—a capability that can be especially useful in environments such as hotels. In addition, an aging timer can be configured for the MAC lockdown, protecting the network from the effects of attacks using (often rapidly) changing MAC addresses.


• IP Security
  ExtremeXOS IP security framework protects the network infrastructure, network services such as DHCP and DNS and host computers from spoofing and man-in-the-middle attacks. It also protects the network from statically configured and/or spoofed IP addresses and builds an external trusted database of MAC/IP/port bindings providing the traffic’s source from a specific address for immediate defense.


• Identity Manager
  Identity Manager allows network managers to track users who access their network. User identity is captured based on NetLogin authentication, LLDP discovery and Kerberos snooping. ExtremeXOS uses the information to then report on the MAC, VLAN, computer hostname, and port location of the user.
  Further, Identity Manager can create both roles and policies, and then bind them together to create role-based profiles based on organizational structure or other logical groupings, and apply them across multiple users to allow appropriate access to network resources. In addition, support for Wide Key ACLs further improves security by going beyond the typical source/destination and MAC address as identification criteria access mechanism to provide filtering capabilities.

• CLEAR-Flow Security Rules Engine
  CLEAR-Flow Security Rules Engine provides first order threat detection and mitigation, and mirrors traffic to security appliances for further analysis of suspicious traffic in the network.


• sFlow
  sFlow® is a sampling technology that provides the ability to sample application level traffic flows on all interfaces simultaneously.


• Port Mirroring
  To allow threat detection and prevention, Summit X650 supports many-to-one and one-to-many port mirroring. This allows the mirroring of traffic to an external network appliance such as an intrusion detection device for trend analysis or for utilization by a network administrator for diagnostic purposes. Port mirroring can also be enabled across switches in a stack.


• Line-Rate ACLs
  ACLs are one of the most powerful components used in controlling network resource utilization as well as protecting the network. Summit X650 supports up to 2,048 centralized ACLs per 12-port block based on Layer 2-, 3- or 4-header information such as the MAC or IP source/ destination address. ACLs are used for filtering the traffic, as well as classifying the traffic flow to control bandwidth, priority, mirroring, and policy-based routing/switching.


• Denial of Service Protection
  Summit X650 effectively handles Denial of Service (DoS) attacks. If the switch detects an unusually large number of packets in the CPU input queue, it assembles ACLs that automatically stop these packets from reaching the CPU. After a period of time, these ACLs are removed, and reinstalled if the attack continues. ASIC-based LPM routing eliminates the need for control plane software to learn new flows, allowing more network resilience against DoS attacks.


• Secure and Comprehensive Network Management
  As the network becomes a foundation of the enterprise application, network management becomes an important piece of the solution. Summit X650 supports comprehensive network management through Command Line Interface (CLI), SNMP v1, v2c, v3, and ExtremeXOS ScreenPlay™ embedded XML-based Web user interface. With a variety of management options and consistency across other Extreme Networks modular and stackable switches, Summit X650 series switches provide ease of management for demanding converged applications.
  Extreme Networks has developed tools that help save you time and resources in managing your network. EPICenter® management suite provides fault, configuration, accounting, performance and security functions, allowing more effective management of Extreme Networks multi-layer switching equipment in a converged network.
  For carrier networks, Extreme Networks Ridgeline™ Service Advisor enables the shift from reactive circuit monitoring to proactive service monitoring. Ridgeline Service Advisor unifies service fulfillment, service assurance, and service engineering so carriers can effectively manage next-generation residential triple play, business Ethernet and mobile Ethernet backhaul services.

Target Applications