redes wired e wireless Arquitetura de Acesso
Transcrição
redes wired e wireless Arquitetura de Acesso
Arquitetura de Acesso Unificado para redes wired e wireless Environmental EN60068 to Extreme IEC68 schedule Temperature monitoring: warnings at > 60 degrees C and shutdown at > 70 degrees C Fan warnings when speed drops <=50% of normal speed Reliability Minimum 93,350 hrs MTBF with 1 PSU to Mil HDBK 217F Notice 1, Parts Stress Method Minimum 103,390 hrs MTBF with 2 PSU to Mil HDBK 217F Notice 1, Parts Stress Method Fan Redundancy, Resilient to up to 2 fan failures Ordering Information Part Number Description 15431 Altitude 300 802.11a/b/g with dual radio, integrated 2.4 & 5 GHz antennas, AES, and 10/100BASE-TX Power over Ethernet port; includes mounting accessories 15432 Altitude 300 802.11a/b/g with dual radio, detachable RP-TNC (2.4 GHz) & RP-SMA (5 GHz) antenna connectors, AES, and 10/100BASE-TX Power over Ethernet port; includes mounting accessories 15434 Altitude 300 Translucent paintable plastic cover 15435 Altitude 300 Cool Grey paintable plastic cover 15436 Altitude 300 Cream paintable plastic cover 15401 Summit 300-48 Layer 2/Layer 3/WLAN Switch with 48 10/100BASE-TX Power over Ethernet ports, four 1000BASE-T and mini-GBIC-based 1000BASE-X slots (unpopulated), Unified Access ExtremeWare Layer 3 switching with WLAN switching, single 600W AC power supply. Includes power cord for US and Japan. 15402 Summit 300-48 600W AC power supply. Second power supply or spare. 15403 ExtremeWare Summit 300-48 Advanced Unified Access Software License Voucher - includes Mobile IP, Resiliency, Ethernet Automatic Protection Switching (EAPS) and BGP 15404 Summit 300-48 option slot cover. Spare only. 10051 Extreme Mini-GBIC, SFP, 1000Base-SX, LC Connector, for use with multi-mode fiber with distances up to 550 meters. 10052 Extreme Mini-GBIC, SFP, 1000Base-LX, LC Connector, for use with single mode fiber, distances up to 10 Km. 10053 Extreme Mini-GBIC, SFP, extra long distance SMF 70 Km/21 dB budget, LC Connector, for use with single mode fiber, distances up to 10 Km. A Arquitetura de Acesso Unificado da Extreme Networks® introduz o primeiro switch com a capacidade de disponibilizar aplicações wired e wireless por uma infra-estrutura corporativa completamente integrada. O Switch Summit 300-48™ e o Altitude 300™ wireless port definem o padrão para wireless switching, fornecendo incomparável segurança, escalabilidade e flexibilidade. Além disso, a Arquitetura de Acesso Unificado estende o gerenciamento de rede centralizado do EPICenter™ e o Gerenciamento de Políticas do ExtremeWare® para os usuários wired e wireless de forma única. Conjunto de características do Altitude 300 e Summit 300-48 Hardware O Altitude 300 wireless port não é sobrecarregado por caras CPUs, memória, software • As interfaces suportam simultaneamente 802.11a e 802.11g (compatível de sistemas e fontes de alimentação. Ao invés disto, a tecnologia única de AccessAdapt com 802.11b) da Extreme permite o Altitude 300 herde as informações de software e de configuração • Antenas integradas para operação a 2.4 GHz e 5 GHz; interface de antena destacável para no momento em que for conectado com o Summit 300-48. Assim, se roubado, o ambas as operações de 2.4 GHz e 5 GHz Altitude-300 se torna imediatamente inoperável. • Multi-purpose mounting bracket for wall, ceiling and tabletop • Plenum rated for above ceiling installation O Altitude 300 realiza encriptação diretamente no hardware, superando tradicionais • 48 portas 10/100 Ethernet auto-negotiating com 2 RU permite mais conexões de rede pontos de acesso de encriptação baseada em software. A porta wireless implementa o por polegada de espaço em rack government-endorsed Advanced Encryption Standard (AES) e Wi-Fi • 4 portas 10/100/1000 (UTP e SFP) fornece uplinks ativos redundantes que podem formar Protected Access (WPA) para assegurar maior segurança. O Altitude 300 e trunk para melhor throughput, flexibilidade e confiabilidade Summit 300-48 trabalham juntos na autenticação de usuários, empregando • IEEE 802.3af PoE em todas as portas 10/100 simplifica a distribuição VoIP e rede IEEE 802.1x e servidor RADIUS (Remote Authentication Dial-In User Service) para wireless permitir ou bloquear acesso a rede. Antenas integradas ou destacáveis estabelecem • Switching Wire speed Nível 2/Nível 3 ligação de frequência de rádio entre o Altitude 300 e terminais rodando 802.11a/b/g. • Fontes de alimentação redundantes maximizam o uptime da rede e disponibilidade da rede O poderoso e compacto (2 RU) Summit 300-48 é equipado com 48 portas 10/100 • Slot de expansão para upgrade e added application support Ethernet e portas Gigabit Ethernet, 4 UTP e 4 GBIC. Com backplane nonblocking • Interoperabilidade com todos os dispositivos que atendem o padrão 802.3af o Summit 300-48 trabalha em full wire speed em todas as portas. Fontes modulares load-sharing e hot-swappable, bem como o integrado Software 802.3af Power over Ethernet (PoE), fornecem ao Summit 300-48 a confiabilidade Segurança necessária para serviços de classe corporativa, incluindo voice-over-IP (VoIP) e • Rogue Access Point Detection: detecção end-to-end com bloqueio seletivo outras aplicações PoE. de pontos de acesso não autorizados • Access Intrusion Detection com características de gerenciamento para previnir As excelentes características do EPICenter™ e ExtremeWare® permitem o acesso suspeito de usuário e address spoofing Altitude 300 e o Summit 300-48 identificar e localizar pontos de acesso • Autenticação para disposisivos legados utilizando Network Login com SSL* e para dispositivos e bloquear intrusos utilizando configurações default de firewall para bloquear qualquer 802.1x utilizando PEAP, EAP-TLS, EAP-TTLS e EAP-MD5 acesso que não possa ser autenticado. Access Intrusion Detection adiciona • Encriptação utilizando Wired Equivalent Privacy (WEP), 802.11i draft, Wi-Fi Protected mais um nível de proteção configurando as políticas e thresholds que monitoram Access (WPA), Advanced Encryption Standard (AES), e Temporal Key Integrity e gerenciam serviços baseado em comportamento depois da autenticação dos Protocol (TKIP) usuários. Combinado com as características denial of service (DoS) do ExtremeWare, • Controle de Acesso com access control lists (ACLs), VLANs e através de proteção DoS os dois fornecem excelente segurança—desde o nível de acesso até o core. Escalabilidade • Além disso, o ExtremeWare realiza um papel chave em escalabilidade e política de controle—essencial para redes corporativas. Ele trabalalha com AccessAdapt • para centralizar a configuração de todas as portas wireless. E, com a potencialidade • de Reconfiguração Dinâmica, segurança, Quality of Service (QoS) e outras políticas podem ser imediatamente aplicadas para apenas uma ou um grupo de • portas wireless simultaneamente, garantindo que o tráfego de alta prioridade e delay-sensitive sejam processadas propriamente em ambas as portas wired e wireless. A Arquitetura de Acesso Unificado testa o link RF entre um cliente e uma porta wireless tão simples como checar a qualidade de um cabo de conexão, fornecendo habilidade de troubleshoot de usuários que encontram problemas e frequêntes disconexões. Informação de Nível 1, como força do sinal é recolhida, além de informações de nível superior como channel ID e encryption ID. For more product information from Extreme Networks, please call 1.888.257.3000. 3585 Monroe Street, Santa Clara, CA 95051-1450 Phone 408.579.2800 Fax 408.579.3000 Email [email protected] Web www.extremenetworks.com © 2003 Extreme Networks, Inc. All rights reserved. Extreme Networks, BlackDiamond, Summit, Summit7i, ExtremeWare, ServiceWatch, Extreme Ethernet Everywhere, Ethernet Everywhere, Extreme Velocity, Extreme Turbodrive and the color purple are registered trademarks of Extreme Networks, Inc. in certain jurisdictions. Alpine, ExtremeWare Vista, Extreme Standby Router Protocol, ESRP, Summit1i, Summit4, Summit4/FX, Summit5i, Summit24, Summit24e2, Summit24e3, Summit48, Summit48i, SummitLink, SummitGbX, SummitRPS, SummitPx1, PxSilicon, EPICenter, vMAN, the BlackDiamond logo, the Alpine logo and the Extreme Networks logo are trademarks of Extreme Networks, Inc., which may be registered or pending registration in certain jurisdictions. ExtremeWorks, the Extreme Turbodrive logo and the Go Purple-Extreme Solution Partner logo are service marks of Extreme Networks, Inc., which may be registered or pending registration in certain jurisdictions. All other registered trademarks, trademarks and service marks are property of their respective owners. Specifications are subject to change without notice. L-DS-UAA-304 A tecnologia AccessAdapt fornece personalidade adaptável para portas WLAN baseadas em perfis definidos de usuário Reconfiguração dinâmica com mecanismo de segurança rollback Troubleshooting remoto com isolamento de falha para evitar pobre desempenho e usuários desconectados Upgrades de software simplificado com uma única imagem de software para o Summit 300-48 que é mapeada para cada Altitude 300 wireless port conectado Confiabilidade • Auto configuração QoS • Intrasubnet e intersubnet roaming (via software upgrade) • SmartRedundancy™ e Spanning Tree Protocol (STP) • Open Shortest Path First (OSPF) para redes grandes e complexas (via software upgrade) Desempenho • Full line rate bandwidth em todas as portas Finalmente, o software de gerenciamento de rede EPICenter da Extreme assegura que • Suporte a Jumbo frame para aplicações especiais com alto throughput a Arquitetura de Acesso Unificado seja realmente unificada, gerenciando e monitorando todos os elementos de rede wired e wireless a partir de uma única console—incluindo Gerenciamento switches e portas de acesso de terceiros. Também fornece uma visão de gerenciamento • Gerenciamento extensivo através de HTTP, SNMP, RMON e command-line interface avançado que pode ser selecionada por dispositivo, usuário, ação, tempo ou localização. • Porta serial de gerenciamento no painel frontal para facilitar a instalação Políticas avançadas de rede podem ser criadas baseadas em informação de topologia • Gerenciamento avançado e baseado em prioridade PoE de Nível 2/Nível 3 incorporando ambos os domínios broadcast wired e wireless. Ainda, as portas wireless do Altitude 300 podem ser ativadas automaticamente ou manualmente. Altitude 300 Especificações do Produto Geral Station to station bridging: Configurable (Enable/Disabled within each wireless port) Collision avoidance: Configurable RTS/CTS threshold (request to send handshake, clear to send handshake) Configurable transmission rate for broadcasting packets Configurable fragmentation threshold: Maximum length of 802.11 fragments Transmit power control for coverage area adjustment Long/short preamble support Uplink Autosensing 10/100BASE-T PoE 802.3x Pause support Air Interface Standards IEEE 802.11a (5 GHz) IEEE 802.11b (2.4 GHz) IEEE 802.11g (2.4 GHz) (draft) IEEE 802.11i (draft) Configurações de Radio Dual band 802.11a/g: provides simultaneous support for 802.11a/g operation with backward compatibility with 802.11b (inherent to 802.11g) Bandas de Frequência 802.11a: 5.15 to 5.25 GHz (FCC UNII-low, Japan, Singapore, Americas) 5.25 to 5.35 GHz (FCC UNII-middle, Taiwan, Americas) 5.725 to 5.850 GHz (FCC UNII-high, Americas) 5.470 to 5.725 GHz (Europe) 802.11b/(g): 2.400 to 2.4835 (FCC ISM, Europe, MII, Israel, Americas) 2.400 to 2.497 GHz (Japan) Some countries or regions may only allow 802.11b operation in the above 2.4 GHz bands. Canais de Operação 5 GHz Band for 802.11a – non-overlapping: FCC: 12 Europe: 11 Japan: 4 Singapore: 4 Taiwan: 4 2.4 GHz Band for 802.11b/(g) – nonoverlapping: FCC: 3 Europe: 4 Japan: 4 Israel: 2 MII: 3 Taxas de Dados 802.11a: 6, 9, 12, 18, 24, 36, 48, and 54 Mbps 802.11b: 1, 2, 5.5, and 11 Mbps 802.11g: 1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48, and 54 Mbps Modulação 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) BPSK @ 6 and 9 Mbps QPSK @ 12 and 18 Mbps 16QAM @ 24 and 36 Mbps 64QAM @ 48 and 54 Mbps 802.11b: Direct sequence spread spectrum DSSS/Complementary code keying (CCK): DSSS-DBPSK @ 1 Mbps DSSS-DQPSK @ 2 Mbps CCK-DBPSK @ 5.5 Mbps CCK-DQPSK @ 11 Mbps 802.11g: DSSS/CCK/OFDM DSSS-DBPSK @ 1 Mbps DSSS-DQPSK @ 2 Mbps CCK-DBPSK @ 5.5 Mbps CCK-DQPSK @ 11 Mbps OFDM-BPSK @ 6 and 9 Mbps OFDM-QPSK @ 12 and 18 Mbps OFDM-16QAM @ 24 and 36 Mbps OFDM-64QAM @ 48 and 54 Mbps Receive sensitivity 802.11a: 6 Mbps: -88 dBm 9 Mbps: -87 dBm 12 Mbps: -86 dBm 18 Mbps: -84 dBm 24 Mbps: -81 dBm 36 Mbps: -77 dBm 48 Mbps: -73 dBm 54 Mbps: -69 dBm 802.11b/g: 1 Mbps: -91 dBm 2 Mbps: -88 dBm 5.5 Mbps: -87 dBm 11 Mbps: -85 dBm 6 Mbps: -89 dBm 9 Mbps: -88 dBm 12 Mbps: -87 dBm 18 Mbps: -85 dBm 24 Mbps: -82 dBm 36 Mbps: -79 dBm 48 Mbps: -74 dBm 54 Mbps: -71 dBm Energia máxima de transmissão 802.11a: 5.15 to 5.25 GHz: 16 dBm 5.25 to 5.35 GHz: 19 dBm 5.725 to 5.850 GHz: 19 dBm 802.11b: 17 dBm 802.11g: 15 dBm Nota: As configurações máximas de energia variam de acordo com o país Transmissão de Energia disponível 802.11a: 100% (full) 50% 25% 12.5% 6.25% (minimum) 802.11b: 100% (full) 50% 25% 12.5% 6.25% (minimum) 802.11g: 100% (full) 50% 25% 12.5% 6.25% (minimum) Antenas Integradas e Destacáveis Integrated selection diversity antenna frequency range: 5.15 to 5.850 GHz for 802.11a 2.400 to 2.4835/(2.497) for 802.11b/(g) Detachable selection diversity antenna frequency range: 5.25 to 5.850 GHz band for 802.11a 2.400 to 2.4835/(2.497) for 802.11b/(g) (5.15 to 5.25 GHz band operation is disabled when detachable antennas are used) Detachable antenna connectors: RP-SMA connectors for 802.11a RP-TNC connectors for 802.11b/g Typical range at Maximum Power Setting 802.11a Antena Integrada Indoor: 60 ft (18.3 m) @ 54 Mbps 150 ft (45.7 m) @ 18 Mbps 210 ft (64 m) @ 6 Mbps Outdoor: 100 ft (30.5 m) @ 54 Mbps 550 ft (167.6 m) @ 18 Mbps 1100 ft (335.3 m) @ 6 Mbps 802.11a Antena Destacável 802.11b/g Antena Integrada Indoor: 160 ft (48.8 m) @ 11 Mbps 240 ft (73.2 m) @ 5.5 Mbps 340 ft (103.6 m) @ 2 Mbps 500 ft (152.4 m) @ 1 Mbps 65 ft (19.8 m) @ 54 Mbps 150 ft (45.7 m) @ 18 Mbps 200 ft (61 m) @ 6 Mbps Outdoor: 450 ft (137.2 m) @ 11 Mbps 780 ft (237.7 m) @ 5.5 Mbps 1000 ft (304.8 m) @ 2 Mbps 1600 ft (487.7 m) @ 1 Mbps 110 ft (33.5 m) @ 54 Mbps 340 ft (103.6 m) @ 18 Mbps 650 ft (198.1 m) @6 Mbps Antena Destacável Regulatory Standards Compliance Safety: UL 1950 CSA 22.2 No. 950-95 IEC 60950 EN 60950 Radio Approvals: FCC Part 15.247, 15.401-15.407 RSS-210 (Canada) EN 301.893 (Europe) ARIB STD-T71 (Japan) AS 4268.2 (Australia) RSS-139-1, RSS-210 (Canada) EN 300.328 (Europe) Telec 33B (Japan) AS/NZS 3548 (Australia and New Zealand) EMI and Susceptibility (Class B): FCC Part 15.107 and 15.109 ICES-003 (Canada) VCCI (Japan) EN 301.489-1 and -17 (Europe) Outros: IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.3af FCC Bulletin OET-65C RSS-102 Wi-Fi member Dimensões (com revestimento seguro de plástico) 8.4 in. (21.3 cm) wide; 6.3 in. (16 cm) deep; 1.6 in. (4 cm) high Mounting bracket adds 0.8 in. (2 cm) to the height Peso (com revestimento) 22.4 oz (635g) add 0.71 oz (20g) for mounting bracket Ambiental Operational temperature: -32º to 131ºF (0º to 55ºC) Humidity: 5 to 95% non-condensing Consumo de energia 9 watts, when both 802.11a and 802.11g are at full power operation. Altitude 300 is powered by PoE. LEDs Power (up-ON; fault-BLINKING) Ethernet (link-ON; activity-BLINKING) Radio 1 – 802.11a (working-ON; activity-BLINKING) Radio 2 – 802.11b/g (working-ON; activity-BLINKING) Garantia One year Ambiental Plenum rated – UL 2043 Summit 300-48 Product Specifications Note: Items marked * are available with a software upgrade • RED • Bi directional rate shaping General RFC 783 TFTP RFC 951 BootP RFC 1542 BootP RFC 2131 BootP/DHCP helper RFC 1591 DNS (client operation) RFC 1122 Host requirements RFC 768 UDP RFC 792 ICMP RFC 826 ARP Trunking Mirroring Jumbo Frame support* FDB bridging and aging IGMP 802.1D Extreme Discovery Protocol (EDP) Route Failover* Extreme Standby Router Protocol (ESRP)* Management • RFC 1157 SNMPv1/v2c • RFC 1907 SNMPv2 • RFC 1757 RMON 4 groups: Stats, History, Alarms & Events • RFC 2021 RMON2 (probe config) • RFC 2668 MAU • RFC 1493 Bridge MIB • RFC 1213 MIB-II • RFC 2037 Entity MIB • RFC 2233 Interface MIB • RFC 2096 IP Forwarding* • RFC 1724 RIPv2 MIB* • RFC2613 SMON MIB • RFC2668 MAUMIB • RFC2695 Ping MIB • ExtremeWare private MIB (includes ACL, QoS policy and VLAN config) • RFC 1866 HTML • RFC 2068 HTTP • RFC 854 Telnet • HTML and telnet management • Configuration logging • Multiple images, multiple configs • Multiple Syslog servers • 999 local messages, criticals stored across reboots • RFC 1769 Ver 3 Simple Network • Time Protocol • Ping and traceroute • DNS Client • TACACS+ login accounting and CLI authentication • Web configuration via ports, switch or TFTP download • Statistics pages for switch, event log, FDB, or ARP, port statistics, errors and utilization • IPv4 Stack management* • DOS detection and prevention per CERT (see below) IEEE General IEEE 802.1D Spanning Tree Protocol (STP) IEEE 802.1Q VLAN tagging IEEE 802.3ad draft - static config Power Capacity and Management IEEE 802.3af Each port supports up to 15W Over-subscription: no-connect and disconnect thresholds When no-connect threshold exceeded, no more power is supplied but all powerconnected ports remain enabled When disconnect threshold exceeded, ports are disconnected based on priority Routing* RFC 1812 Router requirements RFC 791 IP (IP routing with static routes between directly attached VLANs) RIP V1/V2 OSPF RFC 2338 VRRP RRFC 793 TCP IP Multicast • IGMP Snooping with configurable router registration forwarding • RFC 2362 PIM-SM* • PIM-DM Draft IETF PIM Dense Mode v2-dm-03* • RFC 1122 DVMRP Host req* • DVMRP v3 draft IETF DVMRP v3-07* • RFC 2236 IGMP v2* Quality of Service • IEEE 802.1Q - 1998 (802.1p) packet priority • RFC 2474 DiffServ Precedence • RFC 2598 DiffServ Expedited Forwarding • RFC 2597 DiffServ Assured Forwarding • RFC 2475 DiffServ Core and Edge router functions VLAN Support 802.1d/802.1q VLANs Port based VLANs • SYN attack protection • Uni-directional session control • CERT and "rootshell" immunity testing including:- CERT (http://www.cert.org) – CA-97.28.Teardrop_Land Teardrop and "LAND" attack – IP Options Attack – CA-98-13-tcp-denial-of-service – CA-98.01.smurf – CA-96.26.ping – CA-96.21.tcp_syn_flooding – CA-96.01.UDP_service_denial – CA95.01.IP_Spoofing_ Attacks_and_Hijacked_ Terminal _Connections • Host Attacks (http://www.rootshell.org/beta/ exploits.html) – Syndrop – Nestea – Latierra – Newtear – Bonk – Winnuke – Simping – Sping – Ascend – Stream – Raped Support for static and dynamic IEEE 802.11 WEP keys of 40 bits and 128 bits TKIP WEP enhancements: key hashing (per-packet keying), message integrity check (MIC), broadcast key rotationperVLAN broadcast key for VLAN isolation • Authentication based on source MAC address • Report authentication events using Syslog Security: Authentication Features 802.1X support including PEAP, EAP-TLS, EAP-TTLS, and EAP-MD5 to yield mutual authentication and dynamic, per-user, per-session encryption keys Network login with SSL* MAC address and standard 802.11 WEP authentication mechanisms Username/password support Ability to re-authenticate clients on timeout Beacon frequency control, and ability to send beacon with or without SSID Rogue access point detection Guest mode support Regulatory Safety UL 1950 3rd Edition, listed EN60950:1992/A1-4:1997 plus ZB/ZC Deviations IEC 950CB Low Voltage Directive (LVD) CSA 22.2#950-95 AS/NZS 3260 EN60825-1 FCC CFR 21 Physical and Environmental Summit 300-48 Dimensions (H) 3.5 in x (W) 17.25 in (D) x 18.25 in (Including PSU handle) (H) 8.9 cm (W) 43.87 cm x (D) 46.41 cm Weight: 14 lbs (6.35 Kg) (1 PSU) Altitude Wireless Port Support PSU Weight: 2 lbs (0.9 Kg) For additional information on the WLAN Operating Temperature: 0 C to 40 C services, refer to Altitude 300 data sheet. (32 F to 104 F) Storage Temperature: -10 C to 70 C Switching Support (14 F to 158 F) 4 priority queues on WLAN interface Humidity: 10% to 95% non-condensing Multiple priority transmit queue Power: 100-240 VAC, 50-60 Hz, 802.1p support 3.0-6.0 A max. Per-VLAN broadcast key Heat Dissipation: 631 BTU/hr Support for up to 256 VLANs (185 watts) Security • FIPS-186 (Federal Information Processing Standards Publication 186) Secure Shell 2 (SSH2) • RFC 1851 3DES-CBC cipher • RFC 2792 DSA key exchange • TACACS+ • RFC 2138 RADIUS • RFC 2139 RADIUS Accounting* • RADIUS per-command Authentication • Access Profiles on all routing protocols Security: Encryption Features • Access Profiles on all management AES and WPA methods* WPA1 based on 802.11i Draft 3 (WPA2 • MAC Address Lockdown and Limit support via software upgrade) per VLAN • Access Control Lists (ACL): Layer 2-4, Ingress and Egress Denial of Service Protection • RFC 2267 Network Ingress Filtering • RPF (Unicast Reverse Path Forwarding) control • Wire-speed ACLs • Rate Limiting by ACLs Management Integration with Radius Servers and MS active directory Integration with HP Openview of CA Unicenter MAC based VLAN Policy management: – User-based – Time-based – Location-based EMI/EMC FCC Part 15 Class A ICES-0003 A/C108.8-M1983 Class A VCCI Class A AS/NZS 3548 EN55022 Class A CISPR 22 Class A EN50082 -1:1997 include ENV 50204 EN55024:1998 includes IEC 61000-4-2, 3, 4, 5, 6, 8, 11 EN 61000-3-2, 3 CNS 13438 Class A Continued on Back Altitude 300 General Station to station bridging: Configurable (Enable/Disabled within each wireless port) Collision avoidance: Configurable RTS/CTS threshold (request to send handshake, clear to send handshake) Configurable transmission rate for broadcasting packets Configurable fragmentation threshold: Maximum length of 802.11 fragments Transmit power control for coverage area adjustment Long/short preamble support Uplink Autosensing 10/100BASE-T PoE 802.3x Pause support Air Interface Standards IEEE 802.11a (5 GHz) IEEE 802.11b (2.4 GHz) IEEE 802.11g (2.4 GHz) (draft) IEEE 802.11i (draft) Radio Configurations Dual band 802.11a/g: provides simultaneous support for 802.11a/g operation with backward compatibility with 802.11b (inherent to 802.11g) Frequency Bands 802.11a: 5.15 to 5.25 GHz (FCC UNII-low, Japan, Singapore, Americas) 5.25 to 5.35 GHz (FCC UNII-middle, Taiwan, Americas) 5.725 to 5.850 GHz (FCC UNII-high, Americas) 5.470 to 5.725 GHz (Europe) 802.11b/(g): 2.400 to 2.4835 (FCC ISM, Europe, MII, Israel, Americas) 2.400 to 2.497 GHz (Japan) Some countries or regions may only allow 802.11b operation in the above 2.4 GHz bands. Operating Channels 5 GHz Band for 802.11a – non-overlapping: FCC: 12 Europe: 11 Japan: 4 Singapore: 4 Taiwan: 4 2.4 GHz Band for 802.11b/(g) – nonoverlapping: FCC: 3 Europe: 4 Japan: 4 Israel: 2 MII: 3 Data Rates 802.11a: 6, 9, 12, 18, 24, 36, 48, and 54 Mbps Summit 300-48 Product Specifications 802.11b: 1, 2, 5.5, and 11 Mbps 802.11g: 1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48, and 54 Mbps Modulation 802.11a: Orthogonal Frequency Division Multiplexing (OFDM) BPSK @ 6 and 9 Mbps QPSK @ 12 and 18 Mbps 16QAM @ 24 and 36 Mbps 64QAM @ 48 and 54 Mbps 802.11b: Direct sequence spread spectrum DSSS/Complementary code keying (CCK): DSSS-DBPSK @ 1 Mbps DSSS-DQPSK @ 2 Mbps CCK-DBPSK @ 5.5 Mbps CCK-DQPSK @ 11 Mbps 802.11g: DSSS/CCK/OFDM DSSS-DBPSK @ 1 Mbps DSSS-DQPSK @ 2 Mbps CCK-DBPSK @ 5.5 Mbps CCK-DQPSK @ 11 Mbps OFDM-BPSK @ 6 and 9 Mbps OFDM-QPSK @ 12 and 18 Mbps OFDM-16QAM @ 24 and 36 Mbps OFDM-64QAM @ 48 and 54 Mbps Receive sensitivity 802.11a: 6 Mbps: -88 dBm 9 Mbps: -87 dBm 12 Mbps: -86 dBm 18 Mbps: -84 dBm 24 Mbps: -81 dBm 36 Mbps: -77 dBm 48 Mbps: -73 dBm 54 Mbps: -69 dBm 802.11b/g: 1 Mbps: -91 dBm 2 Mbps: -88 dBm 5.5 Mbps: -87 dBm 11 Mbps: -85 dBm 6 Mbps: -89 dBm 9 Mbps: -88 dBm 12 Mbps: -87 dBm 18 Mbps: -85 dBm 24 Mbps: -82 dBm 36 Mbps: -79 dBm 48 Mbps: -74 dBm 54 Mbps: -71 dBm Maximum Transmit Power 802.11a: 5.15 to 5.25 GHz: 16 dBm 5.25 to 5.35 GHz: 19 dBm 5.725 to 5.850 GHz: 19 dBm 802.11b: 17 dBm 802.11g: 15 dBm Note: Maximum power setting will vary according to individual country regulations. Available Transmit Power Settings 802.11a: 100% (full) 50% 25% 12.5% 6.25% (minimum) 802.11b: 100% (full) 50% 25% 12.5% 6.25% (minimum) 802.11g: 100% (full) 50% 25% 12.5% 6.25% (minimum) Integrated and Detachable Antennas Integrated selection diversity antenna frequency range: 5.15 to 5.850 GHz for 802.11a 2.400 to 2.4835/(2.497) for 802.11b/(g) Detachable selection diversity antenna frequency range: 5.25 to 5.850 GHz band for 802.11a 2.400 to 2.4835/(2.497) for 802.11b/(g) (5.15 to 5.25 GHz band operation is disabled when detachable antennas are used) Detachable antenna connectors: RP-SMA connectors for 802.11a RP-TNC connectors for 802.11b/g Typical range at Maximum Power Setting 802.11a Integrated Antenna Indoor: 60 ft (18.3 m) @ 54 Mbps 150 ft (45.7 m) @ 18 Mbps 210 ft (64 m) @ 6 Mbps Outdoor: 100 ft (30.5 m) @ 54 Mbps 550 ft (167.6 m) @ 18 Mbps 1100 ft (335.3 m) @ 6 Mbps 802.11a Detachable Antenna 802.11b/g Integrated Antenna Indoor: 160 ft (48.8 m) @ 11 Mbps 240 ft (73.2 m) @ 5.5 Mbps 340 ft (103.6 m) @ 2 Mbps 500 ft (152.4 m) @ 1 Mbps 65 ft (19.8 m) @ 54 Mbps 150 ft (45.7 m) @ 18 Mbps 200 ft (61 m) @ 6 Mbps Outdoor: 450 ft (137.2 m) @ 11 Mbps 780 ft (237.7 m) @ 5.5 Mbps 1000 ft (304.8 m) @ 2 Mbps 1600 ft (487.7 m) @ 1 Mbps 110 ft (33.5 m) @ 54 Mbps 340 ft (103.6 m) @ 18 Mbps 650 ft (198.1 m) @6 Mbps 802.11b/g Detachable Antenna Regulatory Standards Compliance Safety: UL 1950 CSA 22.2 No. 950-95 IEC 60950 EN 60950 Radio Approvals: FCC Part 15.247, 15.401-15.407 RSS-210 (Canada) EN 301.893 (Europe) ARIB STD-T71 (Japan) AS 4268.2 (Australia) RSS-139-1, RSS-210 (Canada) EN 300.328 (Europe) Telec 33B (Japan) AS/NZS 3548 (Australia and New Zealand) EMI and Susceptibility (Class B): FCC Part 15.107 and 15.109 ICES-003 (Canada) VCCI (Japan) EN 301.489-1 and -17 (Europe) Other: IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.3af FCC Bulletin OET-65C RSS-102 Wi-Fi member Dimensions (with secured plastic cover) 8.4 in. (21.3 cm) wide; 6.3 in. (16 cm) deep; 1.6 in. (4 cm) high Mounting bracket adds 0.8 in. (2 cm) to the height Weight (with cover) 22.4 oz (635g) add 0.71 oz (20g) for mounting bracket Environmental Operational temperature: -32º to 131ºF (0º to 55ºC) Humidity: 5 to 95% non-condensing Power Consumption 9 watts, when both 802.11a and 802.11g are at full power operation. Altitude 300 is powered by PoE. LEDs Power (up-ON; fault-BLINKING) Ethernet (link-ON; activity-BLINKING) Radio 1 – 802.11a (working-ON; activity-BLINKING) Radio 2 – 802.11b/g (working-ON; activity-BLINKING) Warranty One year Environmental Plenum rated – UL 2043 Especificações do Produto Note: ítens marcados com * estão disponíveis • RED com upgrade de software 15403 • Bi directional rate shaping Geral RFC 783 TFTP RFC 951 BootP RFC 1542 BootP RFC 2131 BootP/DHCP helper RFC 1591 DNS (client operation) RFC 1122 Host requirements RFC 768 UDP RFC 792 ICMP RFC 826 ARP Trunking Mirroring Jumbo Frame support* FDB bridging and aging IGMP 802.1D Extreme Discovery Protocol (EDP) Route Failover* Extreme Standby Router Protocol (ESRP)* IEEE Geral IEEE 802.1D Spanning Tree Protocol (STP) IEEE 802.1Q VLAN tagging IEEE 802.3ad draft - static config Capacidade de Energia e Gerenciamento IEEE 802.3af Each port supports up to 15W Over-subscription: no-connect and disconnect thresholds When no-connect threshold exceeded, no more power is supplied but all powerconnected ports remain enabled When disconnect threshold exceeded, ports are disconnected based on priority Roteamento* RFC 1812 Router requirements RFC 791 IP (IP routing with static routes between directly attached VLANs) RIP V1/V2 OSPF RFC 2338 VRRP RRFC 793 TCP IP Multicast • IGMP Snooping with configurable router registration forwarding • RFC 2362 PIM-SM* • PIM-DM Draft IETF PIM Dense Mode v2-dm-03* • RFC 1122 DVMRP Host req* • DVMRP v3 draft IETF DVMRP v3-07* • RFC 2236 IGMP v2* Qualidade de Serviço • IEEE 802.1Q - 1998 (802.1p) packet priority • RFC 2474 DiffServ Precedence • RFC 2598 DiffServ Expedited Forwarding • RFC 2597 DiffServ Assured Forwarding • RFC 2475 DiffServ Core and Edge router functions • SYN attack protection • Uni-directional session control • CERT and "rootshell" immunity testing including:- CERT (http://www.cert.org) – CA-97.28.Teardrop_Land Teardrop and "LAND" attack – IP Options Attack – CA-98-13-tcp-denial-of-service – CA-98.01.smurf – CA-96.26.ping – CA-96.21.tcp_syn_flooding – CA-96.01.UDP_service_denial – CA95.01.IP_Spoofing_ Attacks_and_Hijacked_ Terminal _Connections • Host Attacks (http://www.rootshell.org/beta/ exploits.html) – Syndrop – Nestea – Latierra – Newtear – Bonk – Winnuke – Simping – Sping – Ascend – Stream – Raped Support for static and dynamic IEEE 802.11 WEP keys of 40 bits and 128 bits TKIP WEP enhancements: key hashing (per-packet keying), message integrity check (MIC), broadcast key rotationperVLAN broadcast key for VLAN isolation • Authentication based on source MAC address • Report authentication events using Syslog Gerenciamento • RFC 1157 SNMPv1/v2c • RFC 1907 SNMPv2 • RFC 1757 RMON 4 groups: Stats, History, Alarms & Events • RFC 2021 RMON2 (probe config) • RFC 2668 MAU • RFC 1493 Bridge MIB • RFC 1213 MIB-II • RFC 2037 Entity MIB • RFC 2233 Interface MIB Gerenciamento • RFC 2096 IP Forwarding* Integration with Radius Servers and MS • RFC 1724 RIPv2 MIB* active directory • RFC2613 SMON MIB Integration with HP Openview of CA • RFC2668 MAUMIB Unicenter • RFC2695 Ping MIB MAC based VLAN • ExtremeWare private MIB (includes Policy management: ACL, QoS policy and VLAN config) – User-based • RFC 1866 HTML – Time-based • RFC 2068 HTTP – Location-based • RFC 854 Telnet • HTML and telnet management Físico e Ambiental • Configuration logging Dimensões do Summit 300-48 • Multiple images, multiple configs (H) 3.5 in x (W) 17.25 in (D) x 18.25 in • Multiple Syslog servers (Including PSU handle) • 999 local messages, criticals stored (H) 8.9 cm (W) 43.87 cm x across reboots (D) 46.41 cm • RFC 1769 Ver 3 Simple Network Weight: 14 lbs (6.35 Kg) (1 PSU) • Time Protocol Altitude Wireless Port Support PSU Weight: 2 lbs (0.9 Kg) • Ping and traceroute For additional information on the WLAN Operating Temperature: 0 C to 40 C • DNS Client services, refer to Altitude 300 data sheet. (32 F to 104 F) • TACACS+ login accounting and Storage Temperature: -10 C to 70 C CLI authentication Switching Support (14 F to 158 F) • Web configuration via ports, switch or 4 priority queues on WLAN interface Humidity: 10% to 95% non-condensing TFTP download Multiple priority transmit queue Power: 100-240 VAC, 50-60 Hz, • Statistics pages for switch, event log, 802.1p support 3.0-6.0 A max. FDB, or ARP, port statistics, errors Per-VLAN broadcast key Heat Dissipation: 631 BTU/hr and utilization Support for up to 256 VLANs (185 watts) • IPv4 Stack management* • DOS detection and prevention per Segurança: características de autenticação Regulatory CERT (see below) 802.1X support including PEAP, Safety EAP-TLS, EAP-TTLS, and UL 1950 3rd Edition, listed VLAN Support EAP-MD5 to yield mutual EN60950:1992/A1-4:1997 plus 802.1d/802.1q VLANs authentication and dynamic, per-user, ZB/ZC Deviations Port based VLANs per-session encryption keys IEC 950CB Network login with SSL* Low Voltage Directive (LVD) Segurança MAC address and standard 802.11 WEP CSA 22.2#950-95 • FIPS-186 (Federal Information authentication mechanisms AS/NZS 3260 Processing Standards Publication 186) Username/password support EN60825-1 Secure Shell 2 (SSH2) Ability to re-authenticate clients FCC CFR 21 • RFC 1851 3DES-CBC cipher on timeout • RFC 2792 DSA key exchange Beacon frequency control, and ability to EMI/EMC • TACACS+ send beacon with or without SSID FCC Part 15 Class A • RFC 2138 RADIUS Rogue access point detection ICES-0003 A/C108.8-M1983 Class A • RFC 2139 RADIUS Accounting* Guest mode support VCCI Class A • RADIUS per-command Authentication AS/NZS 3548 • Access Profiles on all routing protocols Segurança: Características de encriptação EN55022 Class A • Access Profiles on all management AES and WPA CISPR 22 Class A methods* WPA1 based on 802.11i Draft 3 (WPA2 EN50082 -1:1997 include ENV 50204 • MAC Address Lockdown and Limit support via software upgrade) EN55024:1998 includes IEC 61000-4-2, per VLAN 3, 4, 5, 6, 8, 11 • Access Control Lists (ACL): Layer 2-4, EN 61000-3-2, 3 Ingress and Egress CNS 13438 Class A Proteção Denial of Service • RFC 2267 Network Ingress Filtering • RPF (Unicast Reverse Path Forwarding) control • Wire-speed ACLs • Rate Limiting by ACLs Continua Ambiental EN60068 to Extreme IEC68 schedule Temperature monitoring: warnings at > 60 degrees C and shutdown at > 70 degrees C Fan warnings when speed drops <=50% of normal speed Unified Access Architecture for Wired and Wireless Networks Confiabilidade Minimum 93,350 hrs MTBF with 1 PSU to Mil HDBK 217F Notice 1, Parts Stress Method Minimum 103,390 hrs MTBF with 2 PSU to Mil HDBK 217F Notice 1, Parts Stress Method Fan Redundancy, Resilient to up to 2 fan failures The Unified Access Architecture from Extreme Networks® introduces the first switch capable of delivering wired and wireless applications across a completely integrated enterprise infrastructure. The Summit 300-48™ switch and the Altitude 300™ wireless port set the standard for wireless switching, furnishing unmatched security, scalability and manageability. What’s more, the Unified Access Architecture seamlessly extends the centralized network management of EPICenter™ and the unparalleled policy management of ExtremeWare® to wired and wireless users alike. Ordering Information Part Number Description 15431 Altitude 300 802.11a/b/g with dual radio, integrated 2.4 & 5 GHz antennas, AES, and 10/100BASE-TX Power over Ethernet port; includes mounting accessories 15432 Altitude 300 802.11a/b/g with dual radio, detachable RP-TNC (2.4 GHz) & RP-SMA (5 GHz) antenna connectors, AES, and 10/100BASE-TX Power over Ethernet port; includes mounting accessories 15434 Altitude 300 Translucent paintable plastic cover 15435 Altitude 300 Cool Grey paintable plastic cover 15436 Altitude 300 Cream paintable plastic cover 15401 Summit 300-48 Layer 2/Layer 3/WLAN Switch with 48 10/100BASE-TX Power over Ethernet ports, four 1000BASE-T and mini-GBIC-based 1000BASE-X slots (unpopulated), Unified Access ExtremeWare Layer 3 switching with WLAN switching, single 600W AC power supply. Includes power cord for US and Japan. 15402 Summit 300-48 600W AC power supply. Second power supply or spare. 15403 ExtremeWare Summit 300-48 Advanced Unified Access Software License Voucher - includes Mobile IP, Resiliency, Ethernet Automatic Protection Switching (EAPS) and BGP 15404 Summit 300-48 option slot cover. Spare only. 10051 Extreme Mini-GBIC, SFP, 1000Base-SX, LC Connector, for use with multi-mode fiber with distances up to 550 meters. 10052 Extreme Mini-GBIC, SFP, 1000Base-LX, LC Connector, for use with single mode fiber, distances up to 10 Km. 10053 Extreme Mini-GBIC, SFP, extra long distance SMF 70 Km/21 dB budget, LC Connector, for use with single mode fiber, distances up to 10 Km. The Altitude 300 wireless port is unburdened by expensive CPUs, memory, system software and power supplies. Instead, Extreme’s unique AccessAdapt technology lets the Altitude 300 "inherit" software and configuration information as soon as it’s connected to a Summit 300-48. If stolen, the Altitude 300 is immediately rendered inoperable. The Altitude 300 handles encryption directly in hardware, outperforming access points that rely on software-based encryption. The wireless port implements the government-endorsed Advanced Encryption Standard (AES) and Wi-Fi Protected Access (WPA) to ensure superior security. The Altitude 300 and Summit 300-48 work together to authenticate users, employing IEEE 802.1x and a RADIUS (Remote Authentication Dial-In User Service) server to grant or deny network access. Integrated or detachable antennas establish radiofrequency links between the Altitude 300 and terminals running 802.11a/b/g. The powerful yet compact (2 RU) Summit 300-48 is equipped with 48 10/100 Ethernet ports and four copper and GBIC ports. With a nonblocking backplane, the Summit 300-48 performs at full wire speed on every port. Modular, hot-swappable load-sharing power supplies, as well as integrated 802.3af Power over Ethernet (PoE), give the Summit 300-48 the reliability required for enterprise-class services, including voice-over-IP (VoIP) and other PoE applications. The uncompromising features of EPICenter and ExtremeWare enable the Altitude 300 and the Summit 300-48 to identify and locate rogue access points, and lock out intruders using the default firewall-like settings to deny access to anyone who can’t be authenticated. Access Intrusion Detection adds an additional layer of protection by setting heuristic policies and thresholds that monitor and manage behavior-based services after users have been authenticated. When Combined with ExtremeWare’s denial-of-service (DoS) features, the two deliver uncompromised security—from the access layer to the core. In addition, ExtremeWare plays a key role in scalability and policy enforcement—an essential consideration for enterprise networks. It works with AccessAdapt to centralize the configuration of all wireless ports. And, with the template-driven Dynamic Reconfiguration capability, security, quality of service (QoS) and other policies can be applied immediately to just one or to a group of wireless ports simultaneously, guaranteeing that high priority and delaysensitive traffic will be processed properly on both wired and wireless ports. The Unified Access Architecture makes testing the RF link between a client and a wireless port as simple as checking the quality of a cabled connection, providing the ability to troubleshoot users who are experiencing performance problems or frequent disconnects. Layer 1 information, such as signal strength, is gathered, along with upper layer information such as channel ID and encryption ID. For more product information from Extreme Networks, please call 1.888.257.3000. 3585 Monroe Street, Santa Clara, CA 95051-1450 Phone 408.579.2800 Fax 408.579.3000 Email [email protected] Web www.extremenetworks.com © 2003 Extreme Networks, Inc. All rights reserved. Extreme Networks, BlackDiamond, Summit, Summit7i, ExtremeWare, ServiceWatch, Extreme Ethernet Everywhere, Ethernet Everywhere, Extreme Velocity, Extreme Turbodrive and the color purple are registered trademarks of Extreme Networks, Inc. in certain jurisdictions. Alpine, ExtremeWare Vista, Extreme Standby Router Protocol, ESRP, Summit1i, Summit4, Summit4/FX, Summit5i, Summit24, Summit24e2, Summit24e3, Summit48, Summit48i, SummitLink, SummitGbX, SummitRPS, SummitPx1, PxSilicon, EPICenter, vMAN, the BlackDiamond logo, the Alpine logo and the Extreme Networks logo are trademarks of Extreme Networks, Inc., which may be registered or pending registration in certain jurisdictions. ExtremeWorks, the Extreme Turbodrive logo and the Go Purple-Extreme Solution Partner logo are service marks of Extreme Networks, Inc., which may be registered or pending registration in certain jurisdictions. All other registered trademarks, trademarks and service marks are property of their respective owners. Specifications are subject to change without notice. L-DS-UAA-304 Finally, Extreme’s EPICenter network management software ensures that the Unified Access Architecture is truly unified, managing and monitoring all wired and wireless networking elements from a single console—including third-party wireless switches and ports. It also provides advanced management views that can be selected per device, user, action, time or location. Network-wide advanced policies can be set based on Layer 2/Layer 3 topology information, incorporating both the wired and wireless broadcast domains. In addition, Altitude 300 wireless ports can be activated automatically or manually. Altitude 300 and Summit 300-48 Industry-Leading Feature Set Hardware • Air interfaces simultaneously support 802.11a and 802.11g (backward compatible to 802.11b) • Integrated antennas for 2.4 GHz and 5 GHz operation; detachable antenna interface for both 2.4 GHz and 5 GHz operation • Multi-purpose mounting bracket for wall, ceiling and tabletop • Plenum rated for above ceiling installation • 48 10/100 auto-negotiating Ethernet ports in a 2 RU footprint allow more network connections per inch of rack space • 4 10/100/1000 ports (UTP and SFP) deliver redundant active uplinks that can be trunked for greater throughput, flexibility, and reliability • IEEE 802.3af PoE on all 10/100 ports simplifies wireless network and VoIP deployments • Wire speed Layer 2/Layer 3 switching • Hot-swappable redundant power supplies maximize network uptime and network availability • Expansion slot for upgradeability and added application support • Interoperable with all devices that meet the 802.3af standard Software Security • Rogue Access Point Detection: end-to-end detection with selective lock down for unauthorized access points • Access Intrusion Detection with heuristic management features for preventing suspicious off-premise users and address spoofing • Authentication for legacy devices using Network Login with SSL* and for 802.1x compliant devices using PEAP, EAP-TLS, EAP-TTLS and EAP-MD5 • Encryption using Wired Equivalent Privacy (WEP), 802.11i draft, – Wi-Fi Protected Access (WPA), Advanced Encryption Standard (AES), and Temporal Key Integrity Protocol (TKIP) • Access control with access control lists (ACLs), VLANs and thorough DoS protection Scalability • AccessAdapt technology provides adaptive personality for WLAN ports based on user-definable profiles • Dynamic reconfiguration with rollback safety mechanism • Remote “Air” troubleshooting with air fault isolation to provide defense against poor performance and disconnected users • Simplified software upgrades with a single software image for Summit 300-48 that maps to each Altitude 300 wireless port device upon connection Reliability • QoS auto configuration • Intra-subnet and inter-subnet* roaming • SmartRedundancy™ and Spanning Tree Protocol (STP) • Open Shortest Path First (OSPF) for large meshed (via software upgrade) Performance • Full line rate bandwidth on every port • Jumbo frame support for special high-throughput applications Management • Extensive management through HTTP, SNMP, RMON and command-line interface • Serial management port on the front panel for ease of installation • Advanced and priority-based PoE management
Documentos relacionados
3Com® Switch 4200 Family Data Sheet
Local management of switch passwords; web-based management; command line interface (CLI); serial connector ((9-pin D-type) ); Telnet; SNMP v1; works with 3Com management applications, including 3Co...
Leia maisSummit X670 series - CT
managing your network. Ridgeline network and service management provides fault, configuration, accounting, performance and security functions, allowing more effective management of Extreme Networks...
Leia mais