ΤΦ7
ΤΦ7
ΤΦ7
Voice-Class Availability
ExtremeXOS on the Summit X450 switches supports process recovery and application upgrades without the need for a
system reboot. The versatile Summit X450 switches, with the high network availability required for converged applica-
tions, can be used to connect switches at the aggregation layer or at the core of a small network.
© 2005 Extreme Networks, Inc. All rights reserved. Summit X450 Series—Page 2
Extreme Networks Data Sheet
High Bandwidth, Non-Blocking Access Control Lists (ACLs) for greatest feature set to include important core
deployment flexibility. features such as:
Architecture for Demanding
Edge Applications Link Redundancy Protocols • Full OSPF for much greater extensibil-
When deployed as an access switch, a Because of its location in the network at the ity than RIP can provide
Summit X450 series switch provides the crossroads of high-density traffic from many • BGP for support of inter-autonomous
bandwidth required by the most demanding users, every connection to and from an system forwarding
application, thanks to its modular 10 aggregation switch must be redundant to
allow a safe failover of traffic to a secondary • PIM, sparse and dense modes for
gigabit ports and integrated fiber gigabit
path in case of link or device failure. routing of multicast streams
ports. With more than 20 gigabits of
uplink capacity, bottlenecks don’t exist, Summit X450 series switches support • OSPFv3 for IPv6 slow path support
and with line-rate throughput and superior link redundancy to provide a highly • IPv6 tunnels, IPv6-to-IPv4 translation,
support for jumbo frames up to 9,216 available aggregation layer. IPv6 multicast discovery for extensive
bytes, transfers complete in minimal time.
IPv6 support
For example, where voice-grade resiliency is
High Density Gigabit Ports with required, only EAPS allows links to failover
Optional 10 Gigabit Uplinks rapidly enough that voice call sessions are Exceptional Quality of Service
not dropped. Other link resiliency services in and Traffic Management for
That Enable a High-Performance Summit X450 series switches include OSPF
Aggregation Layer ECMP and VRRP, providing standards-based
Triple Play Services
Layer 3 dual homing; ESRP that offers dual Metro deployments require exceptional
Gigabit to 10 Gigabit Aggregation
homing at both Layer 2 and Layer 3; and QoS, an area where Summit X450 series
Summit X450 series switches provide a
significant performance and feature unique Software Redundant Port that allows switches excel, with eight hardware queues
upgrade for the aggregation layer. They easy-to-configure port redundancy without per port to support granular traffic classifi-
eliminate the need to funnel traffic requiring any loop detection protocol. cation, and 128 classifiers per ingress port
through a low bandwidth gigabit trunk by that can use information from Layers 1
providing non-blocking 10 gigabit links to Advanced Routing Protocols through 4 to prioritize and meter incoming
the core. Summit X450 series switches packets at line-rate. When metering traffic,
for Small Network Core Summit X450 series switches can drop out
also provide superior network manage-
ment with sFlow statistical sampling that Supporting core deployments requires full of spec traffic or flag it for later action. To
samples traffic passing through the switch protocol support. The Summit X450 series expedite upstream traffic handling, a
to facilitate detecting, diagnosing, and switches provide the advanced protocol packet’s classification can be carried forward
fixing network problems, congestion environment for an efficient and productive with Layer 2 (802.1p) and Layer 3
management, trending, and capacity small network core. Summit X450 series (DiffServ) markings. Summit X450 series
planning. Summit X450 switches offer switches provide static and RIP routing for switches’ advanced traffic management
comprehensive traffic classification and simple Layer 3 deployment. An optional features enable support for delivering the
security with their powerful Layers 2 – 4 ExtremeXOS core license extends the triple play of voice, video and data services.
© 2005 Extreme Networks, Inc. All rights reserved. Summit X450 Series—Page 3
Extreme Networks Data Sheet
User and Host Integrity Media Access Control (MAC) minute view of traffic across the network,
MAC lockdown secures printers, wireless which can be used to troubleshoot
Intelligent Network Access APs and servers. The MAC address network problems, control congestion and
Intelligent network access enforces user security/lockdown feature enables to detect network security threats.
admission and usage policies. Summit X450 Summit X450 series switches to block
series switches support a comprehensive access to any Ethernet port when the MAC Port Mirroring
range of Network Login options by address of a station attempting to access In order to provide intrusion detection and
providing an 802.1x agent-based the port is different from the configured prevention, Summit X450 series switches
approach, a web-based (agentless) login MAC address. This feature is used to “lock support many-to-one port mirroring. This can
capability for guests, and a MAC-based down” any device to a specific port. be used to mirror traffic to an external net-
authentication model for devices. With work appliance such as an intrusion detection
these modes of Network Login, only Host Integrity Checking device for trend analysis or be utilized by a
authorized users and devices can Host integrity checking helps keep network administrator as a diagnostic tool
connect to the network and assigned to infected or non-compliant machines off when fending off a network attack.
the appropriate VLAN. the network. Summit X450 series switches
support a host integrity or end point Line Rate ACLs
Multiple Supplicant Support integrity solution that is based on the ACLs are one of the most powerful tools to
Multiple supplicant support secures IP model from the Trusted Computing Group. control network resource utilization and to
Telephony and wireless access. Converged secure and protect the network.
network designs often involve the use of Summit X450 series switches support
shared ports. Examples include: Detection and Response to
ACLs based on Layer 2, 3 or 4-header
Network Intrusion information such as the MAC address or IP
• PC plugging into an IP telephone sFlow source/destination address.
• Multiple users connecting to a wire- Providing powerful network visibility,
less Access Point (AP) over the air and sFlow is a sampling technology that Network Infrastructure Hardened
thereby sharing the same physical port provides the ability to continuously
Against Attacks
monitor application level traffic flows on all
Shared ports represent a potential interfaces simultaneously. The sFlow agent Denial of Service Protection
vulnerability in a network. Multiple is a software process that runs on Summit X450 switches handle Denial of
supplicant capability on a switch allows Summit X450 series switches, and Service (DoS) attacks gracefully. If the
it to uniquely recognize and apply the packages data into sFlow datagrams that switch detects an unusually large number
appropriate policies for each user or are sent over the network to an sFlow of packets in the CPU input queue, it will
device on a shared port. Collector. The Collector has an up-to-the- assemble ACLs that automatically stop
these packets from reaching the CPU.
After a period of time, the ACLs are
IPv6 Forwarding removed. If the attack continues, they are
reinstalled. ASIC-based LPM routing
For more than a decade, a new version of the ubiquitous Internet Protocol (IP) that powers eliminates the need for control plane
global network interconnectivity has been under development, with the primary goal of software to learn new flows and allows the
expanding IP’s address range to allow a unique IP address for any device in the world that network to be resilient under a DoS attack.
might some day need to be addressable. Summit X450 series switches offer this next
generation IP, forwarding both IPv4 and IPv6 traffic, with IPv6 being forwarded in software. Secure Management
The following is just a sample of IPv6 features that are supported with the optional The use of protocols like SSH2, SCP and
core license:
SNMPv3 supported by Summit X450
• IPv6 ACLs series switches prevents the interception
• IPv4/IPv6 dual mode IP stack of management communications and man-
• RIPng—RIP Next Generation, IPv6 enabled in-the middle attacks. MD5 authentication
• OSPFv3—OSPF for IPv6 of routing protocols prevents attackers
• Multicast Listener Discovery (MLD) for IPv6
from tampering valid messages and
• Path MTU Discovery for IPv6
• IPv6 to IPv4 translation
attacking routing sessions.
• IPv6 Tunnels
• ICMPv6 messaging, traceroute, ping, SSH2
ExtremeXOS on Summit X450 series switches deliver more than just IPv6 forwarding; it
provides the power to control undesired IPv6 traffic to assure network uptime in the
presence of IPv6. The Summit X450 series switches help provide investment protection by
enabling the rollout of IPv6 in your network now or in the future, when needed.
© 2005 Extreme Networks, Inc. All rights reserved. Summit X450 Series—Page 4
Extreme Networks Data Sheet
Target Applications
STACK NO
CONSOLE
Summit X450-24t
features including resilient operating system,
memory protection, and redundant power supplies
to preserve user productivity. BlackDiamond BlackDiamond
BlackDiamond BlackDiamond
10808 10808 10808 10808
Summit X450 series switches are ideal small Summit 200-48 Summit 200-48
network core switches. Their optional 10 gigabit
ports are perfect to set up a high bandwidth 10
gigabit backbone, or multiples of gigabit ports can
be aggregated for inter-switch connectivity. All STACK NO
1 2 3 4 7 8 11 12 13 14 15 16 17 18 19 20 21 24
FAN =
STACK NO
1 4 5 6 7 8 9 10 11 12 16 17 18 22 23 24
PSU-E =
CONSOLE CONSOLE
Summit Summit
X450-24t
BGPv4 and IPv6. With non-blocking performance, X450-24t
STACK NO
STACK NO
FAN =
PSU =
PSU-E =
CONSOLE
CONSOLE
Summit Summit
routing, and superior management including X450-24t X450-24t
sFlow, a Summit X450 series switch is designed
from the ground up to be a small core switch.
STACK NO STACK NO
CONSOLE CONSOLE
bandwidth services
scalability features give them the flexibility to be and low latency to
CONSOLE
1 2 3 4 5 8 9 12 13 14 15 16 19 20 21 22 23 24
STACK NO
CONSOLE
support voice-
deployed at the CE or as an aggregation switch at video-data Same switch at 24-ports = more
the PE. By supporting both CE and PE service CE & PE reduces aggregation
costs per RU
delivery requirements, Summit X450 series STACK NO
1 2 3 4 5 6 8 9 13 14 15 16 19 20 21 22 23 24
CONSOLE
© 2005 Extreme Networks, Inc. All rights reserved. Summit X450 Series—Page 5
Extreme Networks Data Sheet
Technical Specifications
ExtremeXOS V11.3 Supported • RFC 2796 BGP Route Reflection (supersedes • 999 Local Messages (criticals stored across
RFC 1966) reboots)
Protocols • RFC 1997 BGP Communities Attribute • ExtremeWare vendor MIBs (includes FDB, CPU,
General Routing and Switching • RFC 1745 BGP4/IDRP for IP---OSPF Interaction Memory MIBs)
• RFC 1812 Requirements for IP Version 4 • RFC 2385 TCP MD5 Authentication for BGPv4 Security
Routers • RFC 2439 BGP Route Flap Damping • Routing protocol MD5 authentication (see above)
• RFC 1519 CIDR • RFC 2842 Capabilities Advertisement with BGP-4 • Secure Shell (SSH-2),Secure Copy (SCP-2) and SFTP
• RFC 1256 IPv4 ICMP Router Discovery (IRDP) • RFC 2918 Route Refresh Capability for BGP-4 client/server with encryption/authentication
• RFC 1122 Host Requirements IP Multicast (requires export controlled encryption module)
• RFC 768 UDP • RFC 2362 PIM-SM TX 8.3.3.20 & 8.3.3.21 • SNMPv3 user based security, with encryption/
• RFC 791 IP • PIM-DM Draft IETF PIM Dense Mode draft-ietf-idmr- authentication (see above)
• RFC 792 ICMP pim-dm-05.txt, draft-ietf-pim-dm-new-v2-04.txt • RFC 1492 TACACS+ TX 8.3.3.37
• RFC 793 TCP • RFC 1112 IGMP v1 • RFC 2138 RADIUS Authentication
TX 8.3.3.38
• RFC 826 ARP • RFC 2236 IGMP v2 TX 8.3.3.18 • RFC 2139 RADIUS Accounting
• RFC 894 IP over Ethernet • RFC 3376 IGMP v3 • RADIUS Per-command Authentication
• RFC 1027 Proxy ARP • IGMP v1/v2/v3 Snooping with Configurable • Access Profiles on All Routing Protocols
• RFC 1866 HTML – Used for web-based Network Router Registration Forwarding • Access Policies for Telnet/SSH-2/SCP-2
Login • IGMP Filters TX 8.3.3.19 • Network Login - 802.1x, web and MAC-based
• RFC 2068 HTTP server – Used for web-based • Static IGMP Membership mechanisms
Network Login Management and Traffic Analysis TX 8.3.3.31 • IEEE 802.1x – 2001 Port-Based Network Access
• RFC 2338 VRRP • RFC 2030 SNTP, Simple Network Time Protocol v4 Control for Network Login TX 8.3.3.39
• RFC 3619 Ethernet Automatic Protection • RFC 854 Telnet client and server • Multiple supplicants for Network Login (all modes)
Switching (EAPS) and EAPSv2 TX 8.3.3.32 • RFC 783 TFTP Protocol (revision 2) • Fallback to local database (MAC and Web-based
• IEEE 802.1D – 1998 Spanning Tree Protocol • RFC 951, 1542 BootP methods)
(STP) TX 8.3.3.12 • RFC 2131 BOOTP/DHCP relay agent and DHCP • Guest VLAN for 802.1x
• IEEE 802.1w – 2001 Rapid Reconfiguration for server TX 8.3.3.29 • SSL/TLS transport – used for for webbased Network
STP, RSTP TX 8.3.3.13 • RFC 1591 DNS (client operation) Login, (requires export controlled encryption
• IEEE 802.1Q – 1998 Virtual Bridged Local Area • RFC 1155 Structure of Mgmt Information module)
Networks (SMIv1) • MAC Address Security – Lockdown and Limit TX 8.3.3.43
• IEEE 802.1AB – LLDP Link Layer Discovery • RFC 1157 SNMPv1 TX 8.3.3.22 • IP Address Security – DHCP Option 82 and
Protocol TX 8.3.3.11 • RFC 1212, RFC 1213, RFC 1215 MIB-II, Gratuitous ARP Protection
• EMISTP, Extreme Multiple Instances of Ethernet-Like MIB & TRAPs • Layer 2/3/4 Access Control Lists (ACLs)
Spanning Tree Protocol • RFC 1573 Evolution of Interface TX 8.3.3.24 • CLEARflow, threshold based alerts and actions
• PVST+, Per VLAN STP (802.1Q interoperable) • RFC 1650 Ethernet-Like MIB (update of RFC (BlackDiamond 10808 only)
• Extreme Standby Router Protocol (ESRP) 1213 for SNMPv2) TX 8.3.3.27 Denial of Service Protection
• Extreme Discovery Protocol (EDP) • RFC 1901 – 1908 SNMP v2c, SMIv2 and • RFC 2267 Network Ingress Filtering
Revised MIB-II TX 8.3.3.22 • RPF (Unicast Reverse Path Forwarding) Control via
• Static Unicast Routes
• Loop detection via Layer 2 ELRP • RFC 2570 – 2575 SNMPv3, user based ACLs
• Software Redundant Ports security, encryption and authentication • Wire-speed ACLs
VLANs • RFC 2576 Coexistence between SNMP Version • Rate Limiting/Shaping by ACLs
• IEEE 802.1Q VLAN Tagging 1, Version 2 and Version 3 • IP Broadcast Forwarding Control TX 8.3.3.41
• IEEE 802.3ad Static configuration • RFC 1757 RMON 4 groups: Stats, History, • ICMP and IP-Option Response Control
• IEEE 802.1v: VLAN classification by Protocol Alarms and Events TX 8.3.3.25 • SYN attack protection
and Port • RFC 2021 RMON2 (probe configuration) TX 8.3.3.26 • CPU DoS Protection with traffic rate limiting to
• Port-based VLANs • RFC 2668 802.3 MAU MIB management CPU
• Protocol-based VLANs • RFC 1643 Ethernet MIB Robust against common Network Attacks
• Multiple STP domains per VLAN • RFC 1493 Bridge MIB TX 8.3.3.23 • CERT (http://www.cert.org)
• Virtual MANs (vMANs) • RFC 1354 IPv4 Forwarding Table MIB • CA-2003-04: “SQL Slammer”
Quality of Service and Policies • RFC 2737 Entity MIB v2 • CA-2002-36: “SSHredder”
• IEEE 802.1D -1998 (802.1p) Packet Priority • RFC 2233 Interface MIB • CA-2002-03: SNMP vulnerabilities
• RFC 2474 DiffServ Precedence, including 8 • RFC 1354 IP Forwarding Table MIB • CA-98-13: tcp-denial-of-service
queues/port TX 8.3.3.45 • RFC 1724 RIPv2 MIB • CA-98.01: smurf
• RFC 2598 DiffServ Expedited Forwarding (EF) • RFC 1850 OSPFv2 MIB • CA-97.28:Teardrop_Land -Teardrop and “LAND “
• RFC 2597 DiffServ Assured Forwarding (AF) • RFC 1657 BGP-4 MIB attack
• RFC 2475 DiffServ Core and Edge Router • Draft-ietf-idr-bgp4-mibv2-02.txt – Enhanced BGP- • CA-96.26: ping
Functions TX 8.3.3.46
4 MIB • CA-96.21: tcp_syn_flooding
RIP • draft-ietf-pim-mib-v2-o1.txt • CA-96.01: UDP_service_denial
• RFC 1058 RIP v1 • RFC 2787 VRRP MIB • CA-95.01: IP_Spoofing_Attacks_and_Hijacked_
• RFC 2453 RIP v2 TX 8.3.3.53 • RFC 2925 Ping/Traceroute/NSLOOKUP MIB Terminal_Connections
OSPF • Draft-ietf-bridge-rstpmib-03.txt – Definitions of • IP Options Attack
• RFC 2328 OSPF v2 (including MD5 authentica- Managed Objects for Bridges with Rapid Host Attacks
tion) TX 8.3.3.52 Spanning Tree Protocol • Teardrop, boink, opentear, jolt2, newtear, nestea,
• RFC 1587 OSPF NSSA Option • Secure Shell (SSH-2) client and server syndrop, smurf, fraggle, papasmurf, synk4, raped,
• RFC 1765 OSPF Database Overflow • Secure Copy (SCP-2) client and server winfreeze, ping –f, ping of death, pepsi5, Latierra,
• RFC 2370 OSPF Opaque LSA Option • Secure FTP (SFTP) server Winnuke, Simping, Sping, Ascend, Stream, Land,
• RFC 3623 OSPF Graceful Restart • SFlow version 5 Octopus
BGP4 • Configuration logging
• RFC 1771 Border Gateway Protocol 4 TX 8.3.3.51 • Multiple Images, Multiple Configs
• RFC 1965 Autonomous System Confederations • BSD System Logging Protocol (SYSLOG), with
for BGP Multiple Syslog Servers
© 2005 Extreme Networks, Inc. All rights reserved. Summit X450 Series—Page 6
Extreme Networks Data Sheet
Technical Specifications
© 2005 Extreme Networks, Inc. All rights reserved. Summit X450 Series—Page 7
Extreme Networks Data Sheet
Technical Specifications
IPv6 TX 8.3.3.56 • RFC 2464, Transmission of IPv6 Packets over Warranty
• RFC 2460, Internet Protocol, Version 6 (IPv6) Ethernet Networks
Specification • RFC 2710, IPv6 Multicast Listener Discovery v1 • 1-year on Hardware
• RFC 2461, Neighbor Discovery for IP Version (MLDv1) Protocol • 90-days on Software
6, (IPv6) • RFC 3810, IPv6 Multicast Listener Discovery v2
• RFC 2462, IPv6 Stateless Address Auto (MLDv2) Protocol
configuration - Router Requirements • RFC 2740, OSPF for IPv6
• RFC 2463, Internet Control Message Protocol • RFC 2080, RIPng
(ICMPv6) for the IPv6 Specification • RFC 2893, Configured Tunnels
• RFC 2466, MIB for ICMPv6 • RFC 3056, 6to4
• RFC 1981, Path MTU Discovery for IPv6, • Static Unicast routes for IPv6
August 1996 - Router requirements • Telnet over IPv6 transport
• RFC 3513, Internet Protocol Version 6 (IPv6) • SSH-2 over IPv6 transport
Addressing Architecture • Ping over IPv6 transport
• RFC 3587, Global Unicast Address Format • Traceroute over IPv6 transport
Ordering Information
Part
Number Name Description
16121 Summit X450-24x 24 mini-GBIC, 4 10/100/1000BASE-T ports, option slot for XGM-2xn 10 gigabit
module, ExtremeXOS Adv Edge License, 1 AC PSU, connector for EPS-160
16122 ExtremeXOS Core license, ExtremeXOS Core license feature upgrade for Summit X450-24x
Summit X450-24x
16123 Summit X450-24t 24 10/100/1000BASE-T, 4 mini-GBIC ports, option slot for XGM-2xn 10 gigabit
module, ExtremeXOS Adv Edge License, 1 AC PSU, connector for EPS-160
16124 ExtremeXOS Core license, ExtremeXOS Core license feature upgrade for Summit X450-24t
Summit X450-24t
16111 XGM-2xn Option module with two unpopulated XENPAK ports for Summit X450 series and
Summit 400-48t
10906 EPS-T External Power System power tray. Accepts up to two EPS-T power modules
10907 EPS-160 External Power System power module for EPS-T, 160 Watts, with cable
10110 SR XENPAK 10 Gigabit Ethernet XENPAK Transceiver, 850nm, up to 300m on multimode
fiber, SC connector
10111 LR XENPAK 10 Gigabit Ethernet XENPAK Transceiver, 1310nm, up to 10km on single-mode fiber,
SC connector
10112 ER XENPAK 10 Gigabit Ethernet XENPAK Transceiver, 1550nm, up to 40km on single-mode fiber,
SC connector
10113 ZR XENPAK 10 Gigabit Ethernet XENPAK Transceiver, 1550nm, up to 80km on single-mode fiber,
SC connector
10114 LX4 XENPAK 10 Gigabit Ethernet WWDM XENPAK Transceiver, 1310 nm, up to 300 m on
multi-mode fiber and up to 10 km on a single-mode fiber, SC connector
10051 SX mini-GBIC Mini-GBIC, SFP, 1000BASESX, LC Connector
10052 LX mini-GBIC Mini-GBIC, SFP, 1000BASELX, LC connector
10053 ZX mini-GBIC Mini-GBIC, SFP, Extra long distance SMF 70 Km/21 dB budget, LC connector