Allied Telesis AT-SBX8112 User Manual
2 | SwitchBlade x8100 Series with CFC400
Switch
Blade x8100 Series (SBx81CFC400)
| Intelligent Layer 3+ Chassis Switches
Key Features
Allied Telesis Management Framework (AMF)
» Allied Telesis Management Framework (AMF) is a
sophisticated suite of management tools that provide
a simplified approach to network
management. Common tasks are automated, or
made so simple that you can achieve the everyday
running of a network without the need for highly
trained network engineers. Powerful features like
centralized management, auto-backup, auto-upgrade,
auto-provisioning and auto-recovery enable plug-and-
play networking and zero-touch management.
» Any SwitchBlade x8100 Series switch can operate
as the AMF network master, storing firmware and
configuration backups for all other network nodes.
The AMF master enables auto-provisioning and
auto-upgrade by providing appropriate files to new
network members.
» The CFC400 can manage AMF networks of up to 80
nodes, which can be located locally or across WAN
links.
EPSRing
™
(Ethernet Protection Switched Ring)
» EPSRing and 10 Gigabit Ethernet allow several
switches to form a high-speed protected ring capable
of recovery within as little as 50ms. This feature is
perfect for high performance and high availability at
the core of enterprise or provider access networks.
» Superloop Protection enables a link between two
EPSR nodes to be in separate EPSR domains,
improving redundancy and network fault resiliency.
Access Control Lists (ACLs)
» AlliedWare Plus
™
delivers industry-standard
access control functionality with ACLs. ACLs filter
network traffic to control whether routed packets
are forwarded or blocked at the port interface. This
provides a powerful network security mechanism to
select the types of traffic to be analyzed, forwarded,
or otherwise influenced.
Industry-leading Quality of Service (QoS)
» Comprehensive low-latency wirespeed QoS provides
flow-based traffic management with full classification,
prioritization, traffic shaping and min/max bandwidth
profiles. Enjoy boosted network performance and
guaranteed delivery of business-critical Ethernet
services and applications. Time-critical services
such as voice and video take precedence over non-
essential services such as file downloads, maintaining
responsiveness of enterprise applications.
Power over Ethernet Plus (PoE+)
» With PoE, a separate power connection to media
end points such as IP phones and wireless access
points is not necessary. PoE+ provides even greater
flexibility, providing the capability to connect devices
requiring more power (up to 30 Watts)—for example,
tilt and zoom security cameras.
Ease of management
» The AlliedWare Plus operating system incorporates an
industry standard CLI, facilitating intuitive
manageability.
» You can automate configuration tasks since
commands may be used in scripts. Triggers can also
be utilized. These provide a powerful mechanism for
automatic and timed management, by automating
command execution in response to specific events.
» With three distinct user modes, the CLI is very secure,
and the use of encrypted remote login sessions
ensures CLI access is not compromised.
AlliedWare Plus licensing unlocks new features
» With AlliedWare Plus, a single license password is all
that is necessary to unlock additional feature bundles
that ship with the switch. The feature bundles provide
a very simple upgrade path.
Dynamic Host Configuration Protocol
(DHCPv6)
» DHCPv6 is used to dynamically assign IPv6
addresses to hosts from a central location. Acting as
DHCPv6 client enables the switch to receive an IPv6
address, and acting as server enables the switch to
dynamically allocate IPv6 addresses to hosts. The
DHCPv6 server and client both support the Prefix
Delegation feature which allocates a whole IPv6
subnet to a DHCP client. The client, in turn, can
allocate addresses from this subnet to the hosts that
are connected to it.
Virtual Router Redundancy Protocol (VRRPv3)
» VRRPv3 is a protocol for providing device redundancy,
by connecting redundant WAN gateway routers or
server access switches in an IPv6 network. It allows
a backup router or switch to automatically take over if
the primary (master) router or switch fails.
sFlow
» sFlow is an industry standard technology for
monitoring high-speed switched networks. It gives
complete visibility into network use, enabling
performance optimization, usage accounting/billing,
and defence against security threats. Sampled
packets sent to a collector ensure it always has a
real-time view of network traffic.
Network Access Control (NAC)
» NAC allows for unprecedented control over user
access to the network in order to mitigate threats to
network infrastructure. Allied Telesis SwitchBlade
x8100 Series switches use IEEE 802.1x port-based
authentication in partnership with standards-
compliant dynamic VLAN assignment, to assess a
user’s adherence to network security policies and
either grant access or offer remediation.
» If multiple users share a port, multi-authentication
can be used. Different users on the same port can be
assigned into different VLANs, and so given different
levels of network access. Additionally, a Guest VLAN
can be configured to provide a catch-all for users who
aren’t authenticated.
Tri-authentication
» Authentication options on SwitchBlade x8100
switches also include alternatives to IEEE 802.1x
port-based authentication, such as Web
authentication to enable guest access, and MAC
authentication for end points that do not have an
IEEE 802.1x supplicant. All three authentication
methods—IEEE 802.1x, MAC-based and
Web-based—can be enabled simultaneously on the
same port. This is called tri-authentication.
Link aggregation
» Link aggregation allows a number of individual
switch ports to be combined, forming a single logical
connection of higher bandwidth. This provides a
higher performance link, and redundancy for a
reliable and robust network. The SwitchBlade x8100
Series allow link aggregation groups to be created
across line cards to maximize link resiliency.
Hardware performance
» Layer-3 switching and routing is performed in
specialized ASIC hardware for wirespeed packet
forwarding and maximum throughput.