Nortel Ethernet Switch 470-24T-PWR AL2012A53-E5 用户手册
产品代码
AL2012A53-E5
5
Custom Autonegotiation
Advertisements (CANA)
Advertisements (CANA)
This feature enables the network
manager to tune the capabilities that a
particular Ethernet port can advertise
via autonegotiation. The capabilities
include half-duplex and full-duplex
modes with speeds of 10 or 100 Mbps.
Autonegotiated Ethernet ports establish
a connection based upon the highest
common capabilities. This feature saves
the network manager from having to go
to each workstation and switch to
configure a “fixed” speed.
manager to tune the capabilities that a
particular Ethernet port can advertise
via autonegotiation. The capabilities
include half-duplex and full-duplex
modes with speeds of 10 or 100 Mbps.
Autonegotiated Ethernet ports establish
a connection based upon the highest
common capabilities. This feature saves
the network manager from having to go
to each workstation and switch to
configure a “fixed” speed.
Auto MDI/MDIX
The Ethernet Switch 470 can be
connected to other switches or devices
using either a straight through or a
crossover cable. When a cable is connected
to one of the 10/100 ports on the
switch, the switch port automatically
can detect the energy on the cable and
configures itself accordingly. This feature
makes configuration easier, eliminating
the need for a dedicated MDI/MDIX
port and saves the confusion of selecting
the right type of patch cable.
connected to other switches or devices
using either a straight through or a
crossover cable. When a cable is connected
to one of the 10/100 ports on the
switch, the switch port automatically
can detect the energy on the cable and
configures itself accordingly. This feature
makes configuration easier, eliminating
the need for a dedicated MDI/MDIX
port and saves the confusion of selecting
the right type of patch cable.
Quality of Service (QoS)
The QoS features allow you to not just
utilize bandwidth more efficiently, opti-
mizing existing network resources and
capabilities, but also provide packet clas-
sification and marking at the edge of the
network — simplifying the QoS deploy-
ment at the aggregation and core of the
network. By classifying, prioritizing,
policing and marking LAN traffic,
networks can offer reliable connectivity
and required bandwidth for mission-
critical applications like IP Telephony
and mission-critical data applications to
specific groups and users, and to indi-
vidual devices.
utilize bandwidth more efficiently, opti-
mizing existing network resources and
capabilities, but also provide packet clas-
sification and marking at the edge of the
network — simplifying the QoS deploy-
ment at the aggregation and core of the
network. By classifying, prioritizing,
policing and marking LAN traffic,
networks can offer reliable connectivity
and required bandwidth for mission-
critical applications like IP Telephony
and mission-critical data applications to
specific groups and users, and to indi-
vidual devices.
For each of these applications, advanced
QoS features support Internet Engi-
neering Task Force (IETF) standard
QoS features support Internet Engi-
neering Task Force (IETF) standard
DiffServ QoS architecture — a packet
classification based on the content of
packet header fields (voice, video, data),
traffic policing and remote sniffing.
classification based on the content of
packet header fields (voice, video, data),
traffic policing and remote sniffing.
Queuing function
The Ethernet Switch 470 provides
network availability for mission-critical
applications, devices and users. This is
done by classifying, prioritizing and
marking LAN IP traffic using up to
eight hardware-based IP service class
queues (on the Gigabit uplink ports)
based on the following parameters:
network availability for mission-critical
applications, devices and users. This is
done by classifying, prioritizing and
marking LAN IP traffic using up to
eight hardware-based IP service class
queues (on the Gigabit uplink ports)
based on the following parameters:
• ToS/DSCP marking
• IP source address/destination address
or subnets
• TCP/UDP source/destination port/
port range
• IEEE 802.1p priority bits
• Ingress physical source port
• IP Protocol ID (eg., TCP, UDP, IGMP)
• EtherType (eg., IP, IPX)
• IEEE 802.1Q VLAN ID
User Based Policies
This feature enables network services
(i.e. QoS) to follow the user regardless
of the PC logged into or the port
connected to. The switch requires a user
to be authenticated using EAP and
sends username/password information
to the RADIUS server. The RADIUS
server provides the user’s role/group
attributes to the switch that allows user
access to the port with the default
configuration. The switch then passes
role/group/port information to the
Enterprise Policy Manager that config-
ures the user port based on the specific
policy information.
(i.e. QoS) to follow the user regardless
of the PC logged into or the port
connected to. The switch requires a user
to be authenticated using EAP and
sends username/password information
to the RADIUS server. The RADIUS
server provides the user’s role/group
attributes to the switch that allows user
access to the port with the default
configuration. The switch then passes
role/group/port information to the
Enterprise Policy Manager that config-
ures the user port based on the specific
policy information.
Security features
The Ethernet Switch 470 offers the
highest level of security with features
including Secure Shell (SSH), IEEE
802.1x-based security (also known as
highest level of security with features
including Secure Shell (SSH), IEEE
802.1x-based security (also known as
Extensible Authentication Protocol -
EAP), Simple Network Management
Protocol (SNMPv3), IP Manager’s list,
MAC address-based security and
RADIUS authentication.
EAP), Simple Network Management
Protocol (SNMPv3), IP Manager’s list,
MAC address-based security and
RADIUS authentication.
SSHv2 supports strong authentication
and encrypted communications. It
allows a user to log into the switch from
an SSH client and perform a secure
Telnet session using CLI commands.
This feature is ideal for security-conscious
customers such as federal governments.
and encrypted communications. It
allows a user to log into the switch from
an SSH client and perform a secure
Telnet session using CLI commands.
This feature is ideal for security-conscious
customers such as federal governments.
For added security, the Ethernet Switch
470 supports the IEEE 802.1x-based
security feature — EAP. Based on the
IEEE 802.1x standard, EAP limits
access to the network based on user
credentials. A user is required to “login”
to the network using a username/pass-
word; the user database is maintained
on the authentication server (not the
switch). EAP prevents network connec-
tivity without password authorization
for added security and control in physi-
cally non-secure areas. It is used where
the network is not 100 percent physi-
cally secure or where physical security
needs enhancement — for example,
banks, trading rooms or classroom
training facilities. EAP supports client
access to the network and interoperates
with Microsoft Windows XP and other
standards-based clients.
470 supports the IEEE 802.1x-based
security feature — EAP. Based on the
IEEE 802.1x standard, EAP limits
access to the network based on user
credentials. A user is required to “login”
to the network using a username/pass-
word; the user database is maintained
on the authentication server (not the
switch). EAP prevents network connec-
tivity without password authorization
for added security and control in physi-
cally non-secure areas. It is used where
the network is not 100 percent physi-
cally secure or where physical security
needs enhancement — for example,
banks, trading rooms or classroom
training facilities. EAP supports client
access to the network and interoperates
with Microsoft Windows XP and other
standards-based clients.
SNMPv3 provides user authentication
and data encryption for higher security.
It also offers secure configuration and
monitoring.
and data encryption for higher security.
It also offers secure configuration and
monitoring.
IP Manager List limits access to the
management features of Ethernet Switch
470 by a defined list of IP addresses,
providing greater network security and
manageability.
management features of Ethernet Switch
470 by a defined list of IP addresses,
providing greater network security and
manageability.
The Ethernet Switch 470 features MAC
address-based security, which allows
authentication of all access, not only to
the switches for management and
address-based security, which allows
authentication of all access, not only to
the switches for management and