1.2 Features of the Switch

(1) Supports high-speed and diverse VLAN functions

<>Layer 2 VLAN function

• Equipped with port VLAN, protocol VLAN, and MAC VLAN functionality

• Enables purpose-built VLANs

<>Spanning tree protocol

• Supports the Spanning Tree Protocol (IEEE 802.1D), the Rapid Spanning Tree Protocol (IEEE 802.1w), PVST+, and Multiple Spanning Tree (IEEE 802.1s)

<>VLAN tunneling to achieve L2-VPN

(2) Strong security features

<>Authentication and quarantine solutions

• With the Layer 2 authentication function (IEEE802.1X,Web authentication, MAC authentication), one PC1 can be authenticated and subscribed to VLAN while maintaining the degree of freedom in the physical configuration of the edges.

• By combining a quarantine server and authentication server, a quarantine solution can be implemented whereby a PC is automatically connected to an enterprise VLAN only if it has passed a quarantine check.

<>High-performance and fine-grained packet filtering

• Hardware-based high-performance filtering processes

• Partial specification of L2, L3, or L4 headers

<>Allow RADIUS/TACACS+ to authenticate login/password to the appliance and to restrict executable commands per user

<>Elimination of illegal DHCP servers/fixed IP addressing terminals

• Unauthorized DHCP servers and terminals with fixed IP addresses can be blocked using DHCP snooping.

(3) Hardware-Enabled Strong QoS for Quality-of-Communication

• High-performance hardware-based QoS processing

• Precise QoS control by specification of detailed parameters (L2, L3, and L4 headers)

• Wide range of QoS control functionality

  L2-QoS (including IEEE 802.1p, bandwidth controls, priority controls, and drop controls) and IP-QoS (including Diff-Serv, bandwidth controls, priority controls, and drop controls)

• Wealth of the hierarchical shaper functionality for an integrated voice and data network

  Clear audio in which VoIP packets are preferentially transmitted.

(4) 10G/40G/100G Ethernet compatible

<>10G/40G/100G Ethernet compatible

• Combined with AX8600S/AX8300S/AX4600S series in a campus network, it provides a high-performance 10G/40G/100G network.

• An SFP+ transceiver can be used as a 10G Ethernet transceiver, which is compatible with both 1G and 10G Ethernet ports.

• QSFP+ is used as a transceiver for 40G Ethernet.

• 100G Ethernet transceiver uses a QSFP28 compatible with 100G Ethernet (AX3660S-48XT4QW,AX3660S-24X4QW,AX3660S-48X4QW).

• Connection solutions are available at a low cost by using a directly attached cable.

• Provides a 10GBASE-T(UTP that is ideal for 10G servers (AX3660S-48XT4QW).

(5) Stacking capability that provides fault-tolerant switches

<>Scalable fault-tolerant switch

• By configuring multiple devices, communication can be continued even for some failures.

• The number of available ports can be expanded by adding devices.

<>Traffic forwarding independent of stack port bandwidth

• If a destination is a link aggregation where ports are handled by multiple member switches, data can be transferred from the link aggregation port of the member switch handling the line that has received data.

<>Non-stop software update

• Software can be updated by switching between the master switch and the backup switch, without interrupting network communication.

<>Cost reduction through unification of management

• Centralized management can be achieved by operating multiple switches as one switch.

(6) Proven routing capabilities

<>Stable, high-performance routing

• Each model provides a site-to-site connection based on wide-area Ethernet and IP-VPN services with reliable routing based on OSPF and BGP functionality and load distribution based on multipaths.

• The routing software implements the equivalent of our proven top models.

<>IPv6 multicast support

• The same peak performance for both IPv4 and IPv6

• IPv6 routing at full-wire speed over 10G Ethernet

• Wealth of IPv6 routing protocols (static, RIPng, OSPFv3, BGP4+, PIM-SM, PM-SSM, and MLD) for building flexible IPv6 networks of every description

• Rich functionality including IPv4/IPv6 Dual Stack and network management for IPv6-only environments (SNMP over IPv6)

<>Rich IPv4 routing protocols

• Supports a wealth of proven IPv4 routing protocols

  (static, RIP, OSPF, BGP4, PIM-SM and PIM-SSM, IGMP)

<>Policy-based routing

• Supports policy-based routing in which optimal routes are selected according to the status of a forwarding destination.

(7) Network partition support

<>Reducing costs through horizontal and vertical integration of networks

• The VRF functionality virtually handles logically divided multiple switches in one switch, thus integrating multiple networks that are normally physically divided into a single physical network.

• Implemented networks can be easily configured, operated, and managed by aggregating Layer 3 devices at a data center and locating Layer 2 devices in offices and branches.

(8) High reliability for mission-critical networking

<>High equipment quality

• High reliability assured through exacting component selection and strict design and testing standards

• Stable routing processing based on software used successfully by carriers and ISPs

<>High reliability as a single unit by power supply redundancy

<>To build a variety of redundant networks

• High-speed path switching

  High-speed Spanning Tree Protocol (IEEE802.1w,IEEE802.1s), GSRP #1, Autonomous Extensible Ring Protocol #2 (hereafter referred to as Ring Protocol), link aggregation (IEEE802.1AX), hot standby (VRRP), static /VRRP polling #3, etc.

• Load balancing

  Equal traffic balancing at the IP level based on OSPF equal-cost multipath routing

Note #1

Gigabit Switch Redundancy protocol. For more information, see the Configuration Guide Vol.2 "13 GSRP Description".

Note #2

For more information about Ring Protocol, see "28 Description of Ring Protocol".

Note #3

A monitoring functionality that polls a node on a specified path to check its reachability, and dynamically selects a new route in conjunction with the Virtual Router Redundancy protocol (VRRP) or static routing.

(9) Supports flexible virtual networking VXLAN capabilities

• Flexible and scalable VXLAN fabrics can be built within datacenters.

• Extended L2 connectivity between datacenters and implemented BCP/DR(Business Continuity Plan/Disaster Recovery measures using existing networking.

(10) High reliability and high availability system through high-speed redundancy switching

• Ring Protocol allows fast switching of 50 ms or less.

• Proprietary multi-core CPU optimization techniques provide high-speed redundancy switching.

(11) Superior network management, maintenance and operation

• Offers IPv4/v6 Dual Stack and full network management functionality for IPv6 environments, including SNMP over IPv6.

• In addition to the basic MIB-II, supports a wide range of MIBs including IPv6 MIB and RMON.

• Supports port mirroring to monitor and analyze traffic (through both receiving and sending ports).

• Supports policy-based mirroring to monitor traffic on a per-tenant basis

• Capable of analyzing traffic characteristics using sFlow and the sFlow-MIB.

• Online maintenance

  Partial reboot when the configuration is changed ensures continuous communication.

• Support for SD memory cards

  • Users can easily back up the configuration and save error information.

  • Maintenance tasks are simplified.

• All Ethernet ports, console ports, management ports, and memory card slots are located on the front.

• Supports the Ethernet Connectivity Fault Management (CFM) functionality for network maintenance and management.

(12) Power saving measures

<>Reduced power consumption during architecture design and component selection. Contributing to reduced TCO(Total Cost of Ownership after implementation