Allied Telesis AT-SBX8112 User Manual

Page of 8
2 | SwitchBlade x8100 Series with CFC400 
Switch
Blade x8100 Series (SBx81CFC400)
 | Intelligent Layer 3+ Chassis Switches
Key Features
Allied Telesis Management Framework (AMF)
 
» Allied Telesis Management Framework (AMF) is a 
sophisticated suite of management tools that provide 
a simplified approach to network  
management. Common tasks are automated, or 
made so simple that you can achieve the everyday 
running of a network without the need for highly 
trained network engineers. Powerful features like 
centralized management, auto-backup, auto-upgrade, 
auto-provisioning and auto-recovery enable plug-and-
play networking and zero-touch management.
 
» Any SwitchBlade x8100 Series switch can operate 
as the AMF network master, storing firmware and 
configuration backups for all other network nodes. 
The AMF master enables auto-provisioning and  
auto-upgrade by providing appropriate files to new 
network members.
 
» The CFC400 can manage AMF networks of up to 80 
nodes, which can be located locally or across WAN 
links.
EPSRing
 (Ethernet Protection Switched Ring)
 
» EPSRing and 10 Gigabit Ethernet allow several 
switches to form a high-speed protected ring capable 
of recovery within as little as 50ms. This feature is 
perfect for high performance and high availability at 
the core of enterprise or provider access networks. 
 
» Superloop Protection enables a link between two 
EPSR nodes to be in separate EPSR domains, 
improving redundancy and network fault resiliency.
Access Control Lists (ACLs)
 
» AlliedWare Plus
 delivers industry-standard 
access control functionality with ACLs. ACLs filter 
network traffic to control whether routed packets 
are forwarded or blocked at the port interface. This 
provides a powerful network security mechanism to 
select the types of traffic to be analyzed, forwarded, 
or otherwise influenced.
Industry-leading Quality of Service (QoS)
 
» Comprehensive low-latency wirespeed QoS provides 
flow-based traffic management with full classification, 
prioritization, traffic shaping and min/max bandwidth 
profiles. Enjoy boosted network performance and 
guaranteed delivery of business-critical Ethernet 
services and applications. Time-critical services 
such as voice and video take precedence over non-
essential services such as file downloads, maintaining 
responsiveness of enterprise applications.
Power over Ethernet Plus (PoE+)
 
» With PoE, a separate power connection to media 
end points such as IP phones and wireless access 
points is not necessary. PoE+ provides even greater 
flexibility, providing the capability to connect devices 
requiring more power (up to 30 Watts)—for example, 
tilt and zoom security cameras. 
Ease of management
 
» The AlliedWare Plus operating system incorporates an 
industry standard CLI, facilitating intuitive  
manageability. 
 
» You can automate configuration tasks since 
commands may be used in scripts. Triggers can also 
be utilized. These provide a powerful mechanism for 
automatic and timed management, by automating 
command execution in response to specific events.
 
» With three distinct user modes, the CLI is very secure, 
and the use of encrypted remote login sessions 
ensures CLI access is not compromised.
AlliedWare Plus licensing unlocks new features
 
» With AlliedWare Plus, a single license password is all 
that is necessary to unlock additional feature bundles 
that ship with the switch. The feature bundles provide 
a very simple upgrade path. 
Dynamic Host Configuration Protocol 
(DHCPv6) 
 
» DHCPv6 is used to dynamically assign IPv6 
addresses to hosts from a central location. Acting as 
DHCPv6 client enables the switch to receive an IPv6 
address, and acting as server enables the switch to 
dynamically allocate IPv6 addresses to hosts. The 
DHCPv6 server and client both support the Prefix 
Delegation feature which allocates a whole IPv6 
subnet to a DHCP client. The client, in turn, can 
allocate addresses from this subnet to the hosts that 
are connected to it. 
Virtual Router Redundancy Protocol (VRRPv3)
 
» VRRPv3 is a protocol for providing device redundancy, 
by connecting redundant WAN gateway routers or 
server access switches in an IPv6 network. It allows 
a backup router or switch to automatically take over if 
the primary (master) router or switch fails. 
sFlow
 
» sFlow is an industry standard technology for 
monitoring high-speed switched networks. It gives 
complete visibility into network use, enabling  
performance optimization, usage accounting/billing, 
and defence against security threats. Sampled 
packets sent to a collector ensure it always has a 
real-time view of network traffic.
Network Access Control (NAC)
 
» NAC allows for unprecedented control over user 
access to the network in order to mitigate threats to 
network infrastructure. Allied Telesis SwitchBlade 
x8100 Series switches use IEEE 802.1x port-based 
authentication in partnership with standards-
compliant dynamic VLAN assignment, to assess a 
user’s adherence to network security policies and 
either grant access or offer remediation. 
 
» If multiple users share a port, multi-authentication 
can be used. Different users on the same port can be 
assigned into different VLANs, and so given different 
levels of network access. Additionally, a Guest VLAN 
can be configured to provide a catch-all for users who 
aren’t authenticated.
Tri-authentication
 
» Authentication options on SwitchBlade x8100 
switches also include alternatives to IEEE 802.1x  
port-based authentication, such as Web  
authentication to enable guest access, and MAC 
authentication for end points that do not have an 
IEEE 802.1x supplicant. All three authentication 
methods—IEEE 802.1x, MAC-based and  
Web-based—can be enabled simultaneously on the 
same port. This is called tri-authentication.
Link aggregation
 
» Link aggregation allows a number of individual 
switch ports to be combined, forming a single logical 
connection of higher bandwidth. This provides a 
higher performance link, and redundancy for a 
reliable and robust network. The SwitchBlade x8100 
Series allow link aggregation groups to be created 
across line cards to maximize link resiliency.
Hardware performance
 
» Layer-3 switching and routing is performed in  
specialized ASIC hardware for wirespeed packet 
forwarding and maximum throughput.