Allied Telesis AT-x230-10GP 990-004031-50 User Manual

x230-GP Series 

| Enterprise PoE+ Gigabit Edge Switches

2 | x230-GP Series 

Key Features

 

» With PoE, a separate power connection to media 

endpoints such as IP phones and wireless access 

points is not necessary. PoE+ reduces costs and 

provides even greater flexibility, providing the capa-

bility to connect devices requiring more power (up to 

30 Watts) such as tilt and zoom security cameras.

 

» Allied Telesis Management Framework (AMF) is a 

sophisticated suite of management tools that provide 

a simplified approach to network management. 

Common tasks are automated or made so simple that 

the every-day running of a network can be achieved 

without the need for highly-trained, and expensive, 

network engineers. Powerful features like centralized 

management, auto-backup, auto-upgrade, auto-

provisioning and auto-recovery enable plug-and-play 

networking and zero-touch management.

 

» EPSRing allows several x230-GP switches to join a 

protected ring capable of recovery within as little as 

50ms. This feature is perfect for high availability in 

enterprise networks.

 

» The x230-GP Series features industry-standard 

access control functionality through ACLs. ACLs 

filter network traffic to control whether packets are 

forwarded or blocked at the port interface. This 

provides a powerful network security mechanism to 

select the types of traffic to be analyzed, forwarded, or 

influenced in some way. An example of this would be 

to provide traffic flow control.

 

» The AlliedWare Plus operating system incorporates 

an industry standard CLI, facilitating intuitive 

manageability. 

 

» With three distinct modes, the CLI is very secure, 

and the use of SSHv2 encrypted and strongly 

authenticated remote login sessions ensures CLI 

access is not compromised.

 

» As a Layer 2+ switch, a static route can be added 

to allow a user in a different subnet to manage the 

switch.

Advanced packet storm control features protect the 

network from broadcast storms:

 

» Bandwidth limiting minimizes the effects of the storm 

by reducing the amount of flooding traffic.

 

» Policy-based storm protection is more powerful 

than bandwidth limiting. It restricts storm damage 

to within the storming VLAN, and it provides the 

flexibility to define the traffic rate that creates a 

broadcast storm. The action the device should take 

when it detects a storm can be configured, such as 

disabling the port from the VLAN or shutting the port 

down.

 

» Packet storm protection allows limits to be set on 

the broadcast reception rate, multicast frames and 

destination lookup failures. In addition, separate limits 

can be set to specify when the device will discard 

each of the different packet types.

 

» Thrash limiting, also known as Rapid MAC movement, 

detects and resolves network loops. It is highly 

user-configurable — from the rate of looping traffic 

to the type of action the switch should take when it 

detects a loop.

 

» With thrash limiting, the switch only detects a loop 

when a storm has occurred, which can potentially 

cause disruption to the network. To avoid this, loop 

detection works in conjunction with thrash limiting to 

send special packets, called Loop Detection Frames 

(LDF), that the switch listens for. If a port receives 

an LDF packet, one can choose to disable the port, 

disable the link, or send an SNMP trap.

 

» STP root guard designates which devices can 

assume the root bridge role in an STP network. This 

stops an undesirable device from taking over this 

role, where it could either compromise network 

performance or cause a security weakness.

 

»  BPDU protection adds extra security to STP. It 

protects the spanning tree configuration by 

preventing malicious DoS attacks caused by spoofed 

BPDUs. If a BPDU packet is received on a protected 

port, the BPDU protection feature disables the port 

and alerts the network manager.

 

» Authentication options on the x230-GP Series  

include alternatives to 802.1x port-based 

authentication, such as web authentication, to enable 

guest access and MAC authentication for end points 

that do not have an 802.1x supplicant. All three 

authentication methods—802.1x, MAC-based and 

Web-based—can be enabled simultaneously on the 

same port, resulting in tri-authentication.

 

» DHCP servers allocate IP addresses to clients, and 

the switch keeps a record of addresses issued on 

each port. IP source guard checks this against the 

DHCP snooping database to ensure only clients 

with specific IP and/or MAC addresses can access 

the network. Combining DHCP snooping with other 

features, like dynamic ARP inspection, increases 

security in Layer 2 switched environments. This 

also provides a traceable history, which meets 

the growing legal requirements placed on service 

providers.

 

» Enforcing strong passwords for key networking 

equipment users allows network administrators to 

increase security, and ensure a robust and reliable 

infrastructure.

 

» Link aggregation allows a number of individual 

switch ports to be combined, forming a single logical 

connection of higher bandwidth. This provides 

a higher performance link, and also provides 

redundancy for a more reliable and robust network.

 

» Voice VLAN automatically separates voice and data 

traffic into two different VLANs. This automatic 

separation places delay-sensitive traffic into a voice 

dedicated VLAN, simplifying Quality of Service (QoS) 

configuration.

 

» In busy server rooms comprised of a large number 

of equipment racks, it can be quite a job finding the 

correct switch quickly among many similar units. The 

“Find Me” feature is a simple visual way to quickly 

identify the desired physical switch for maintenance 

or other purposes, by causing its LEDs to flash in a 

specified pattern.

 

» With the depletion of IPv4 address space, IPv6 is 

rapidly becoming a mandatory requirement for many 

government and enterprise customers. To meet this 

need, now and into the future, the x230-GP Series 

supports IPv6 forwarding in hardware and features 

MLD snooping for efficient use of network bandwidth.