Data Sheets (EN)
Data Sheets (EN)
Data Sheets (EN)
x230 Series
Enterprise Gigabit Edge Switches
The Allied Telesis x230 Series of Layer 3 Gigabit switches offer
an impressive set of features in a compact design, making them
ideal for applications at the network edge.
ۼۼ
Key Features
Allied Telesis Autonomous ۼۼBandwidth limiting minimizes the effects of the UniDirectional Link Detection
Management Framework (AMF) storm by reducing the amount of flooding traffic. ۼۼUniDirectional Link Detection (UDLD) is useful
ۼۼAllied Telesis Autonomous Management ۼۼPolicy-based storm protection is more powerful for monitoring fiber-optic links between two
Framework (AMF) is a sophisticated suite of than bandwidth limiting. It restricts storm damage switches that use two single-direction fibers to
management tools that provide a simplified to within the storming VLAN, and it provides the transmit and receive packets. UDLD prevents
approach to network management. Common flexibility to define the traffic rate that creates a traffic from being sent across a bad link by
tasks are automated or made so simple that broadcast storm. The action the device should blocking the ports at both ends of the link in the
the every-day running of a network can be take when it detects a storm can be configured, event that either the individual transmitter or
achieved without the need for highly-trained, and such as disabling the port from the VLAN or receiver for that connection fails.
expensive, network engineers. Powerful features shutting the port down.
like centralized management, auto-backup, auto-
ۼۼPacket storm protection allows limits to be set on Optical DDM
upgrade, auto-provisioning and auto-recovery ۼۼMost modern optical SFP/SFP+/XFP
the broadcast reception rate, multicast frames and
enable plug-and-play networking and transceivers support Digital Diagnostics
destination lookup failures. In addition, separate
zero-touch management. Monitoring (DDM) functions according to the
limits can be set to specify when the device will
ۼۼAMF secure mode encrypts all AMF traffic, discard each of the different packet types. specification SFF-8472. This enables real
provides unit and user authorization, and time monitoring of the various parameters of
monitors network access to greatly enhance Loop protection the transceiver, such as optical output power,
network security. temperature, laser bias current and transceiver
ۼۼThrash limiting, also known as Rapid MAC
supply voltage. Easy access to this information
movement, detects and resolves network loops.
Power over Ethernet Plus (PoE+) simplifies diagnosing problems with optical
It is highly user-configurable — from the rate
ۼۼWith PoE, a separate power connection to media modules and fiber connections.
of looping traffic to the type of action the switch
endpoints such as IP phones and wireless access should take when it detects a loop.
points is not necessary. PoE+ reduces costs Active Fiber Monitoring
ۼۼWith thrash limiting, the switch only detects a
and provides even greater flexibility, providing
loop when a storm has occurred, which can ۼۼActive Fiber Monitoring prevents eavesdropping
the capability to connect devices requiring more on fiber communications by monitoring received
potentially cause disruption to the network. To
power (up to 30 Watts) such as tilt and zoom optical power. If an intrusion is detected, the
avoid this, loop detection works in conjunction
security cameras. link can be automatically shut down, or an
with thrash limiting to send special packets, called
Loop Detection Frames (LDF), that the switch operator alert can be sent.
Ethernet Protection Switched Ring listens for. If a port receives an LDF packet, one
(EPSRingTM) can choose to disable the port, disable the link, or VLAN Mirroring (RSPAN)
ۼۼEPSRing allows several x230 switches to join send an SNMP trap. ۼۼVLAN mirroring allows traffic from a port on
a protected ring capable of recovery within as a remote switch to be analysed locally. Traffic
little as 50ms. This feature is perfect for high Spanning Tree Protocol (STP) Root being transmitted or received on the port is
availability in enterprise networks. Guard duplicated and sent across the network on a
ۼۼSTP root guard designates which devices can special VLAN.
Access Control Lists (ACLs) assume the root bridge role in an STP network.
ۼۼThe x230 Series features industry-standard This stops an undesirable device from taking Find Me
access control functionality through ACLs. ACLs over this role, where it could either compromise ۼۼIn busy server rooms comprised of a large
filter network traffic to control whether packets network performance or cause a security number of equipment racks, it can be quite a
are forwarded or blocked at the port interface. weakness. job finding the correct switch quickly among
This provides a powerful network security many similar units. The “Find Me” feature
mechanism to select the types of traffic to be Bridge Protocol Data Unit (BPDU) is a simple visual way to quickly identify the
analyzed, forwarded, or influenced in some way. protection desired physical switch for maintenance or
An example of this would be to provide traffic other purposes, by causing its LEDs to flash in
flow control.
ۼۼBPDU protection adds extra security to STP. It
a specified pattern.
protects the spanning tree configuration by
preventing malicious DoS attacks caused by
VLAN ACLs spoofed BPDUs. If a BPDU packet is received on IPv6 Support
ۼۼSimplify access and traffic control across entire a protected port, the BPDU protection feature ۼۼWith the depletion of IPv4 address space, IPv6
segments of the network. Access Control Lists disables the port and alerts the network manager. is rapidly becoming a mandatory requirement for
(ACLs) can be applied to a Virtual LAN (VLAN) as many government and enterprise customers. To
well as a specific port. Tri-authentication meet this need, now and into the future, the x230
Series supports IPv6 forwarding in hardware
ۼۼAuthentication options on the x230 Series
Easy To Manage and features MLD snooping for efficient use of
include alternatives to 802.1x port-based
ۼۼThe AlliedWare Plus operating system network bandwidth.
authentication, such as web authentication, to
incorporates an industry standard CLI, facilitating enable guest access and MAC authentication for
intuitive manageability. end points that do not have an 802.1x supplicant. Precision Time Protocol (PTP)
ۼۼWith three distinct modes, the CLI is very secure, All three authentication methods—802.1x, ۼۼPTP (IEEE 1588v2) sychronizes clocks
and the use of SSHv2 encrypted and strongly MAC-based and Web-based—can be enabled throughout the network with micro-second
authenticated remote login sessions ensures CLI simultaneously on the same port, resulting in accuracy, supporting industrial automation and
access is not compromised. tri-authentication. control systems.
ۼۼAs a Layer 2+ switch, a static route can be added
to allow a user in a different subnet to manage TACACS+ Command Authorization Flexible deployment
the switch. ۼۼCentralize control of which commands may ۼۼThe x230-10GT and x230L* models are
be issued by a specific user of an AlliedWare fanless for silent operation. This enables switch
Plus device. TACACS+ command authorization placement in work spaces and on desktops with
Storm protection
complements authentication and accounting no interruption to network users.
Advanced packet storm control features protect the services for a complete AAA solution.
network from broadcast storms: *x230L-26GT available Q4 2018
Key Solutions
Network convergence
The convergence of network services in the
Enterprise has led to increasing demand for
highly available networks with minimal downtime.
Diagram 1 shows x230 switches with high
x2
30
performance EPSR connectivity to the x930
VCStack core. This topology provides recovery in
as little as 50ms, if required.
x2
x2
30
30
Network flexibility
Flexible network deployment is facilitated by the
compact 10 and 18 port x230 PoE+ models,
x2
30
as shown in the Campus network in diagram
2. With the growth of wireless networking and
x9 x60
30 0-2
digital security, the x230 PoE+ models are ideal Servers
4
supplying connectivity and power at the network
edge, supporting the full 30 watts of PoE+. The
fanless x230L models provide silent operation to
enable deployment in work areas.
Diagram 1
AMF provides an easy yet powerful solution
for managing multiple devices with
plug-and-play simplicity.
x2
30
x5 x60
10 0-2
4
x2
30
x2
30
0L
xx22330L
x5 x60
10 0-2
4
x2
30
Network Attached
00LL
xx2233 Storage
Campus
Data Center
0
SB
x5110
x8
11
x5
2
Server
Rack
Ro
Master
ut
er
10 Gigabit link
Internet
1 Gigabit link
Link aggregation
Diagram 2
Product Specifications
10/100/1000T (RJ-45) POE+ ENABLE
PRODUCT 100/1000X SFP PORTS TOTAL PORTS SWITCHING FABRIC FORWARDING RATE
COPPER PORTS PORTS
x230-10GP 8 2 10 8 20Gbps 14.9Mpps
x230-10GT 8 2 10 - 20Gbps 14.9Mpps
x230-18GP 16 2 18 16 36Gbps 26.8Mpps
x230-18GT 16 2 18 - 36Gbps 26.8Mpps
x230-28GP 24 4 28 24 56Gbps 41.7Mpps
x230-28GT 24 4 28 - 56Gbps 41.7Mpps
x230L-17GT 16 1 17 - 34Gbps 25.3Mpps
x230L-26GT* 24 2 26 - 52Gbps 38.7Mpps
341 x 231 x 44 mm 3.0 kg (6.6 lb) 43 x 36 x 15 cm 4.35 kg (9.6 lb) x230-28GP/GT 59µs 8.6µs 4.3µs
x230-18GP
(13.42 x 9.09 x 1.73 in) (16.93 x 14.17 x 5.90 in)
x230L-17GT 56µs 7.9µs 3.4µs
x230-18GT 341 x 231 x 44 mm 2.4 kg (5.3 lb) 43 x 36 x 15 cm 4.0 kg (8.8 lb)
(13.42 x 9.09 x 1.73 in) (16.93 x 14.17 x 5.90 in) x230L-26GT* 59µs 8.6µs 4.3µs
ۼۼDHCP snooping, IP source guard and Dynamic ARP Environmental specifications Electrical approvals and compliances
Inspection (DAI) ۼۼOperating temperature range: ۼۼEMC: EN55022 class A, FCC class A, VCCI class A
ۼۼDynamic VLAN assignment 0°C to 50°C (32°F to 122°F) ۼۼImmunity: EN55024, EN61000-3-levels 2
ۼۼMAC address filtering and MAC address lock-down 0°C to 40°C (32°F to 104°F) (x230L models) (Harmonics), and 3 (Flicker) – AC models only
ۼۼNetwork Access and Control (NAC) features Derated by 1°C per 305 meters (1,000 ft)
manage endpoint security Safety
ۼۼStorage temperature range:
ۼۼPort-based learn limits (intrusion detection) ۼۼStandards: UL60950-1, CAN/CSA-C22.2 No.
-20°C to 60°C (-4°F to 140°F) 60950-1-03, EN60950-1, EN60825-1, AS/NZS
ۼۼPrivate VLANs provide security and port isolation Operating relative humidity range: 60950.1
for multiple customers using the same VLAN
0% to 80% non-condensing ۼۼCertifications: UL, cUL, UL-EU
ۼۼSecure Copy (SCP)
ۼۼStorage relative humidity range:
ۼۼStrong password security and encryption Restrictions on Hazardous Substances
0% to 95% non-condensing
ۼۼTri-authentication: MAC-based, web-based and (RoHS) Compliance
IEEE 802.1x ۼۼOperating altitude: ۼۼEU RoHS compliant
ۼۼRADIUS group selection per VLAN or port 2,000 meters maximum (6,562 ft) ۼۼChina RoHS compliant
Country of origin
ۼۼChina
RFC 1239 Standard MIB RFC 2715 Interoperability rules for multicast routing RFC 3546 Transport Layer Security (TLS) extensions
RFC 1724 RIPv2 MIB extension protocols RFC 3579 RADIUS support for Extensible
RFC 2578 Structure of Management Information v2 RFC 3306 Unicast-prefix-based IPv6 multicast Authentication Protocol (EAP)
(SMIv2) addresses RFC 3580 IEEE 802.1x RADIUS usage guidelines
RFC 2579 Textual conventions for SMIv2 RFC 3376 IGMPv3 RFC 3748 PPP Extensible Authentication Protocol (EAP)
RFC 2580 Conformance statements for SMIv2 RFC 4541 IGMP and MLD snooping switches RFC 4251 Secure Shell (SSHv2) protocol architecture
RFC 2674 Definitions of managed objects for bridges RFC 4252 Secure Shell (SSHv2) authentication protocol
with traffic classes, multicast filtering and Quality of Service (QoS) RFC 4253 Secure Shell (SSHv2) transport layer protocol
VLAN extensions IEEE 802.1p Priority tagging RFC 4254 Secure Shell (SSHv2) connection protocol
RFC 2741 Agent extensibility (AgentX) protocol RFC 2211 Specification of the controlled-load network RFC 5246 Transport Layer Security (TLS) v1.2
RFC 2819 RMON MIB (groups 1,2,3 and 9) element service RFC 5280 X.509 certificate and Certificate Revocation
RFC 2863 Interfaces group MIB RFC 2474 DiffServ precedence for eight queues/port List (CRL) profile
RFC 3176 sFlow: a method for monitoring traffic in RFC 2475 DiffServ architecture RFC 5425 Transport Layer Security (TLS) transport
switched and routed networks RFC 2597 DiffServ Assured Forwarding (AF) mapping for Syslog
RFC 3411 An architecture for describing SNMP RFC 2697 A single-rate three-color marker RFC 5656 Elliptic curve algorithm integration for SSH
management frameworks RFC 2698 A two-rate three-color marker RFC 6125 Domain-based application service identity
RFC 3412 Message processing and dispatching for the RFC 3246 DiffServ Expedited Forwarding (EF) within PKI using X.509 certificates with TLS
SNMP RFC 6614 Transport Layer Security (TLS) encryption
RFC 3413 SNMP applications Resiliency Features for RADIUS
RFC 3414 User-based Security Model (USM) for IEEE 802.1AXLink aggregation (static and LACP) RFC 6668 SHA-2 data integrity verification for SSH
SNMPv3 IEEE 802.1D MAC bridges
RFC 3415 View-based Access Control Model (VACM) IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) Services
for SNMP IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) RFC 854 Telnet protocol specification
RFC 3416 Version 2 of the protocol operations for the IEEE 802.3ad Static and dynamic link aggregation RFC 855 Telnet option specifications
SNMP RFC 857 Telnet echo option
RFC 3417 Transport mappings for the SNMP Routing Information Protocol (RIP) RFC 858 Telnet suppress go ahead option
RFC 3418 MIB for SNMP RFC 1058 Routing Information Protocol (RIP) RFC 1091 Telnet terminal-type option
RFC 3621 Power over Ethernet (PoE) MIB RFC 2080 RIPng for IPv6 RFC 1350 Trivial File Transfer Protocol (TFTP)
RFC 3635 Definitions of managed objects for the RFC 2081 RIPng protocol applicability statement RFC 1985 SMTP service extension
Ethernet-like interface types RFC 2082 RIP-2 MD5 authentication RFC 2049 MIME
RFC 3636 IEEE 802.3 MAU MIB RFC 2453 RIPv2 RFC 2131 DHCPv4 client
RFC 4022 MIB for the Transmission Control Protocol RFC 2616 Hypertext Transfer Protocol - HTTP/1.1
(TCP) Security Features RFC 2821 Simple Mail Transfer Protocol (SMTP)
RFC 4113 MIB for the User Datagram Protocol (UDP) SSH remote login RFC 2822 Internet message format
RFC 4188 Definitions of managed objects for bridges SSLv2 and SSLv3 RFC 3315 DHCPv6 client
RFC 4292 IP forwarding table MIB TACACS+ Accounting, Authentication and Authorisation RFC 4330 Simple Network Time Protocol (SNTP)
RFC 4293 MIB for the Internet Protocol (IP) (AAA) version 4
RFC 4318 Definitions of managed objects for bridges IEEE 802.1X authentication protocols (TLS, TTLS, PEAP RFC 5905 Network Time Protocol (NTP) version 4
with RSTP and MD5)
RFC 4560 Definitions of managed objects for remote IEEE 802.1X multi-supplicant authentication VLAN support
ping, traceroute and lookup operations IEEE 802.1X port-based network access control IEEE 802.1ad Provider bridges (VLAN stacking, Q-in-Q)
RFC 5424 Syslog protocol RFC 2560 X.509 Online Certificate Status Protocol IEEE 802.1Q Virtual LAN (VLAN) bridges
(OCSP) IEEE 802.1v VLAN classification by protocol and port
Multicast support RFC 2818 HTTP over TLS (“HTTPS”) IEEE 802.3ac VLAN tagging
IGMP query solicitation RFC 2865 RADIUS authentication
IGMP snooping (IGMPv1, v2 and v3) RFC 2866 RADIUS accounting Voice over IP
IGMP snooping fast-leave RFC 2868 RADIUS attributes for tunnel protocol support LLDP-MED ANSI/TIA-1057
MLD snooping (MLDv1 and v2) RFC 2986 PKCS #10: certification request syntax Voice VLAN
RFC 1112 Host extensions for IP multicasting (IGMPv1) specification v1.7
RFC 2236 Internet Group Management Protocol v2
(IGMPv2)
Feature Licenses
AT-x230-18GT AT-SPSX/I
L3 switch with 16 x 10/100/1000T ports and 1000SX GbE multi-mode 850 nm fiber up to 550 m
2 x 100/1000X SFP ports industrial temperature
AT-x230-28GP AT-SPEX
L3 switch with 24 x 10/100/1000T PoE ports and 1000X GbE multi-mode 1310 nm fiber up to 2 km
4 x 100/1000X SFP ports
AT-SPLX10
AT-x230-28GT 1000LX GbE single-mode 1310 nm fiber up to
L3 switch with 24 x 10/100/1000T ports and 10 km
4 x 100/1000X SFP ports
AT-SPLXI0/I
AT-x230L-17GT 1000LX GbE single-mode 1310 nm fiber up to
L3 switch with 16 x 10/100/1000T ports and 10 km industrial temperature
1 x 100/1000X SFP port
AT-SPBDI0-13
AT-x230L-26GT* 1000LX GbE Bi-Di (1310 nm Tx, 1490 nm Rx) fiber
L3 switch with 24 x 10/100/1000T ports and up to 10 km
2 x 100/1000X SFP ports
AT-SPBDI0-14
AT-RKMT-J05 1000LX GbE Bi-Di (1490 nm Tx, 1310 nm Rx) fiber
Rack mount kit for x230-10GT up to 10 km
AT-RKMT-J13 AT-SPLX40
Rack mount kit for x230-18GP/18GT, x230L-17GT 1000LX GbE single-mode 1310 nm fiber up to 40 km
AT-RKMT-J14 AT-SPZX80
Rack mount kit for x230-10GP 1000ZX GbE single-mode 1550 nm fiber up to 80 km
NETWORK SMARTER
North America Headquarters | 19800 North Creek Parkway | Suite 100 | Bothell | WA 98011 | USA | T: +1 800 424 4284 | F: +1 425 481 3895
Asia-Pacific Headquarters | 11 Tai Seng Link | Singapore | 534182 | T: +65 6383 3832 | F: +65 6383 3830
EMEA & CSA Operations | Incheonweg 7 | 1437 EK Rozenburg | The Netherlands | T: +31 20 7950020 | F: +31 20 7950021
alliedtelesis.com
© 2018 Allied Telesis, Inc. All rights reserved. Information in this document is subject to change without notice. All company names, logos, and product designs that are trademarks or registered trademarks are the property of their respective owners.
617-000519 RevZH