System to process sFlow data from the
switches, IronShield 360 provides closed
loop threat detection and response. sFlow
packet samples are scanned for known
threat signatures. upon a positive match,
INm can automatically send a control
command to the FastIron Superx/Sx switch
to throttle or disable the port on which the
threat has been detected. This advanced
security capability provides a network-
wide security umbrella without the added
complexity and cost of ancillary sensors.
Resilient design Ensures Business
Continuity
A FastIron Superx/Sx networking solution
is built for high-value environments.
Featuring redundant management modules,
redundant fans, redundant load-sharing
switch fabrics, and power supply modules,
the FastIron Sx 800/1600 switches are
designed for maximum system availability.
Switch fabric failover preserves network
connectivity in the event of a switch module
failure. Automatic management failover
quickly restores network connectivity in the
event of a management module failure.
In the event of a topology change due to a
port or facility failure, layer 1 and layer 2
protocols—e.g., protected link, metro Ring
protocol (mRp), IEEE 802.3ad, uDlD, VSRp,
and Rapid Spanning Tree protocol—will
restore service in sub-second time (tens to
hundreds of milliseconds, depending on
the protocol), protecting users from costly
service disruption. Enhanced spanning tree
features such as Root Guard and BpDu
Guard prevent rouge hijacking of spanning
tree root and maintain a contention and
loop-free environment especially during
dynamic network deployments. These high
availability capabilities enable network
deployments of a highly reliable network
infrastructure that is resilient to, and
tolerant of, network and equipment failures.
Future-Proofing the Network Through
deployment of IPv6 Capable Hardware
Networks are in the early stages of
large-scale Ipv6 production deployment,
however few Ipv6 innovative applications
are currently on the market. Although the
success of Ipv6 will ultimately depend on
the new applications that run over Ipv6, a
key part of the Ipv6 design is the ability to
integrate into and coexist with existing Ipv4
switches within the network and across
networks during the steady migration from
Ipv4 to Ipv6.
The FastIron Superx Series’ Ipv6-capable
management and interface modules,
commencing with software release FSx
04.0.01, support an easy migration path
by interworking between Ipv4 and Ipv6
switches with the existing network or across
networks. The network manager can pick
and choose which sites are upgraded
with Ipv6-capable modules, preparing the
network for future Ipv6 applications
Designed for medium to large enterprise
backbones, the Ipv6- capable FastIron
Superx Series are modular switches
that provide the enterprise network with
a complete, end-to-end enterprise lAN
solution, ranging from the wiring closet
to the lAN backbone.
Benefits of the IPv6-capable modules
include:
The Ipv6-capable FSx management
modules are non-blocking, with a built-in
switch fabric module and 12 combination
Gigabit Ethernet copper or fiber ports
that provide connectivity to your existing
management network.
The Ipv6-capable FSx 800 and FSx 1600
management modules have a console port
and a 10/100/1000 port for out-of-band
management. The management modules
optionally support 2-port 10-GbE ports or
8-port GbE fiber and copper ports.
The Ipv6-capable FSx 800 and FSx
1600 management modules are
interchangeable between devices.
Redundant management modules on
the Ipv6-capable FSx 800 and FSx 1600
provide 100% redundancy.
The crossbar (xbar) architecture enables
the management module to switch 30
Gbps between each interface module and
within the management module.
The Ipv6-capable interface modules
and power supplies are interchangeable
among FastIron Superx Series switches.
The Ipv6-capable FSx 800 and FSx 1600
management, switch fabric, and interface
modules are hot swappable, which
means a module may be removed and
replaced while the chassis is powered on
and running.
•
•
•
•
•
•
•
