Performance and Scalability

Today's enterprise organizations require cost-effective, flexible, and secure solutions for delivering data and unified communication services on a network architecture that can scale and evolve to meet their ever-changing needs. The FastIron GS Series is designed to meet these requirements. Its wire-speed architecture delivers non-blocking performance for high-speed Gigabit Ethernet desktops while providing QoS assurances at VoIP endpoints.

For cost-effective and rapid scaling at the network edge, the FastIron GS is upgradeable with the Brocade IronStack stacking technology, which supports stacking up to eight units in a virtual chassis. The FastIron GS IronStack system supports 40-Gbps switching capacity between stacked units providing a high-capacity interconnect across the stack. FastIron GS IronStack supports stacking over copper and fiber cables. This provides for flexible stack configurations in which stacked units can be separated by more than several hundred meters of fiber.

Convergence planning and deployment can occur over an extended period, and budget constraints may require phased deployments. The FastIron GS Series makes it easy to deploy a solution today that can be upgraded later to support PoE,10-GbE, and stacking as needed.

Each power supply, within a FastIron GS switch, delivers up to 480 watts of PoE power. In a dual power supply configuration, up to 48 10/100/1000 Mbps PoE ports of 15.4 watts per port (full Class 3) can be supported. This scalability enables the network manager to size the installation to meet current needs and have room for future growth.

As network traffic increases, network managers can easily upgrade to 10-GbE to provide high-capacity connectivity to the network backbone and/or high-performance server. The FastIron GS can be upgraded in the field with a two-port 10-GbE XFP/CX4 module.

The optional 10-GbE module is offered in three field upgradable models: the FastIron GS-2XG supporting two small form factor pluggable XFP transceivers, the FastIron GS-2XGC supporting two CX4 connectors, and the FastIron GS-1XG1XGC supporting a combination of XFP transceiver and CX4 connector. Supported XFP transceivers include SR, LR, ER, ZR, and ZRD optics supporting fiber lengths up to 80Km. Network managers have the flexibility to upgrade to 10-GbE to future-proof the network and protect their network investment.

High Availability Hardware Features

Convergence solutions such as VoIP require high availability, especially for the power supplies that power the PoE interfaces. FastIron GS switches fulfill this requirement with dual, hot-swappable AC or DC power supplies. Both redundant AC and redundant DC power configurations are included.

The FastIron GS Series features 1+1 power redundancy, using hot-swappable and field replaceable power modules, which install into the rear of the unit. The power modules are load-sharing supplies providing full 1+1 redundancy for as many as 48 Class 1 and Class 2 PoE ports and 31 Class 3 (15.4 watts) PoE ports.

Additional design features include intake and exhaust temperature sensors and fan spin detection to aid in rapid detection of abnormal or failed operating conditions to help minimize mean time to repair.

Brocade Ironstack Solution

The FastIron GS series may be ordered pre-configured with the Brocade IronStack stacking technology or upgraded in the field. IronStack is the Brocade advanced stacking technology that supports stacked configurations in which as many as eight FastIron GS and/or FastIron LS switches can be interconnected and maintain the operational simplicity of a single switch. An IronStack stack can be a mix-and-match of different FastIron GS and FastIron LS switch models providing for very flexible stack configurations. Each IronStack enabled FastIron GS or LS model can support up to 40Gbps of stacking bandwidth per unit. IronStack configurations can be built using 10-GbE CX4 copper or XFP-based fiber connections. When XFP-based fiber connections are used, an IronStack configuration can be extended between racks, floors, and buildings with fiber lengths up to several hundred meters.

The FastIron GS STK models are pre-configured with a two-port 10-GbE CX4 module, expanded CPU memory, and IronStack license (IronStack PROM) and software. The CX4 module in the STK models can be replaced in the field with any of the optional 10-GbE modules available for the FastIron GS.

An IronStack system operates as a single logical chassis (with a single IP management address) and supports cross-member trunking, mirroring, switching, static routing, sFlow, multicast snooping and other switch functions across the stack. An IronStack stack has a single configuration file and supports remote console access from any stack member. Support for active-standby controller failover, stack link failover, and hot insertion/removal of stack members delivers the resilience that is typical of higher end modular switches.

High Density and Full Class 3 Power Over Ethernet (POE)

When configured with PoE, the FastIron GS switches support IEEE 802.3af standards-based PoE on all ports. The FastIron GS switches' capability to deliver high-density, full-power PoE on all ports reduces the need to purchase additional hardware to support the higher power requirements.

For the 24-port FastIron GS 624P-POE model, the system can support full 1+1 redundancy for 24 Class 1, Class 2, or Class 3 PoE ports. When configured with dual power supplies, the 48-port FastIron GS 648-POE supports up to 48 10/100/1000 Class 3 (15.4 watts) PoE ports, which is one of the highest Class 3 PoE port density for a compact switch in the industry. These capacities are a significant advantage for environments that require full Class 3 power for devices such as surveillance cameras, color LCD phones, point-of-service terminals, and other powered endpoints.

An IronStack configuration of eight FastIron GS switches can support as many as 384 PoE ports supporting full Class 3 PoE power without the need for external power supplies. Other solutions require external power supplies adding installation and operational complexity.

Ease of Use: Plug and Play

The FastIron GS Series supports the IEEE 802.1AB LLDP and ANSI TIA 1057 LLDP-MED standards that enable organizations to deploy interoperable multi-vendor solutions for unified communications. Configuring IP endpoints, such as VoIP, stations can be a complex task requiring manual and time-consuming configuration. LLDP and LLDP-MED address these challenges, providing organizations with a standard and open method for configuring, discovering, and managing their network infrastructure. The LLDP protocols help reduce operations costs by simplifying and automating network operations. For example, LLDP-MED provides an open protocol for configuring QoS, security policies, VLAN assignments, PoE power levels, and service priorities. Additionally, LLDP-MED provides for the discovery of device location and asset identity, information that is used for inventory management and by emergency response services, such as Enhanced 911 (E911). These sophisticated features make converged networks services easier to deploy and operate while enabling new and critical services.

Comprehensive Enterprise-Class Security

FastIron GS switches are powered by Brocade IronWare™ operating software, which offers a rich set of Layer 2 switching services, Base Layer 3 functionality, an advanced security suite for network access control (NAC), and DoS protection. IronWare security features include protection against TCP SYN and ICMP DoS attacks, Spanning Tree Root Guard and BPDU Guard to protect network spanning tree operation, and broadcast and multicast packet rate limiting.

Network Access Control

Network managers can rely on features such as multi-device and 802.1X authentication with dynamic policy assignment to control network access and perform targeted authorization on a per-user level. Additionally, the FastIron GS supports enhanced MAC policies with the ability to deny traffic to and from a MAC address on a per-VLAN basis. This powerful tool allows network administrators to control access policies per endpoint device.

Standards-based NAC enables network operators to deploy best-of-breed NAC solutions for authenticating network users and validating the security posture of a connecting device. Support for policy-controlled MAC-based VLANs provides additional control of network access, allowing for policy-controlled assignments of devices to Layer 2 VLANs.

Traffic Monitoring and Lawful Intercept

Organizations may need to set up traffic intercept, i.e., lawful intercept, due to today's heightened security environment. For example, in the United States, the Communications Assistance for Law Enforcement Act (CALEA) requires businesses be able to intercept and replicate data traffic directed to a particular user, subnet, port, etc. This capability is particularly essential in networks implementing IP phones. The FastIron GS provides the capability necessary to support this requirement through ACL-Based Mirroring, MAC filter-Based Mirroring, and VLAN-Based Mirroring. Network managers can apply a “mirror ACL” on a port and mirror a traffic stream based on IP source/destination address, TCP/UDP source/destination ports, and IP protocols such as ICMP, IGMP, TCP, and UDP. A MAC filter can be applied on a port and mirror a traffic stream based on a source/destination MAC address. VLAN-Based mirroring is another option for CALEA compliance. Many enterprises have service-specific VLANs, such as voice VLANs. With VLAN mirroring all traffic on an entire VLAN within a switch can be mirrored or specific VLANs can be transferred to a remote server.

Threat Detection and Mitigation

Support for embedded, hardware-based sFlow traffic sampling extends the Brocade IronShield 360 security shield to the network edge. This unique and powerful closed loop threat mitigation solution uses best-of-breed intrusion detection systems to inspect sFlow traffic samples for possible network attacks. In response to a detected attack, IronView® Network Manager (INM) can apply a security policy to the compromised port. This automated threat detection and mitigation stops network attacks in real time, without human intervention. This advanced security capability provides a network-wide security umbrella without the added complexity and cost of ancillary sensors.

Advanced Multicast Features

FastIron GS switches support a rich set of Layer 2 multicast snooping features that enable advanced multi-cast services delivery. Internet Group Management Protocol (IGMP) snooping for IGMP version 1, 2, and 3 is supported. Support for IGMPv3 source-based multicast snooping improves bandwidth utilization and security for multicast services.

To enable multicast service delivery in IPv6 networks, the FastIron GS supports Multicast Listener Discovery (MLD) version 1 and 2 snooping, the multicast protocols used in IPv6 environments.

Building Resilient Networks With Advanced Layer 2 and Base Layer 3 Protocols

Software features such as Virtual Switch Redundancy Protocol, Brocade Metro Ring Protocol, Rapid Spanning Tree Protocol, protected link groups, and 802.3ad Link Aggregation, and trunk groups provide alternate paths for traffic in the event of a link failure. Sub-second fault detection utilizing Link Fault Signaling and Remote Fault Notification ensures rapid fault detection and recovery.

Enhanced Spanning Tree features such as Root Guard and BPDU Guard prevent rogue hijacking of Spanning Tree root and maintain a contention and loop free environment especially during dynamic network deployments. Additionally, the FastIron GS supports Port Loop Detection on edge ports that do not have spanning tree enabled. This capability protects the network from broadcast storms and other anomalies that can result from layer 1 or layer 2 loopbacks on Ethernet cables or endpoints.

Base Layer 3 functionality enhances the capability of the FastIron GS as an edge platform. Base Layer 3 allows enterprises to use simple Layer 3 features such as IPv4 static routes, virtual interfaces (VE), routing between directly connected subnets, RIPv1/v2 announce, VRRP, DHCP Relay, and routed interfaces. Network managers can remove complexity from an end-to-end Layer 3 network design and eliminate the cost required for a full Layer 3 edge switch.

Unified and Secure Element Management

Brocade INM provides unified network management for the FastIron GS Series. INM greatly simplifies network operations, provisioning, troubleshooting, and alarm reporting. INM offers multilevel access security on the console and a secure Web management interface that prevents unauthorized users from accessing or changing the switch configuration.

INM employs a Java-based network configuration and management tool that displays, in graphical detail, network and application level traffic information. Network managers can accurately monitor overall networking operation, zero in on hot spots, and quickly diagnose and troubleshoot difficulties before they develop into widespread network problems.

The FastIron GS Series includes Secure Shell (SSHv2), Secure Copy, and SNMPv3 to restrict and encrypt management communications to the system. Additionally, support for Terminal Access Controller Access Control System (TACACS/TACACS+) and RADIUS authentication ensure secure operator access.

Fault Detection

The FastIron GS switches support logical fault detection through software features such as Link Fault Signaling (LFS), Remote Fault Notification (RFN), Protected Link Groups, and Unidirectional Link Detection (UDLD).

• Link Fault Signaling (LFS) is a physical layer protocol that enables communication on a link between two 10-GbE switches. When configured on a 10-GbE port, the port can detect and report fault conditions on transmit and receive ports.
• Remote Fault Notification (RFN) enabled on 1Gb transmit ports notifies the remote port whenever the fiber cable is either physically disconnected or has failed. When this occurs the device disables the link and turns OFF both LEDs associated with the ports.
• Protected Link Groups minimize disruption to the network by protecting critical links from loss of data and power. In a protected link group, one port in the group acts as the primary or active link, and the other ports act as secondary or standby links. The active link carries the traffic. If the active link goes down, one of the standby links takes over.
• UDLD monitors a link between two FastIron GS switches and brings the ports on both ends of the link down if the link goes down at any point between the two devices.

In addition, the FastIron GS supports stability features such as Port Flap Dampening, single link LACP, and Port Loop Detection. Port Flap Dampening increases the resilience and availability of the network by limiting the number of port state transitions on an interface. This reduces the protocol overhead and network inefficiencies caused by frequent state transitions occurring on misbehaving ports. Single link LACP provides a fast detection scheme for unidirectional or bi-directional faults. This standards-based solution works with other switch vendors. The Port Loop Detection feature enables network managers to detect and prevent Layer 1 and Layer 2 loops without using STP. Enterprises that do not enable a Layer 2 Protocol, such as STP to detect physical loops at the edge, can use Port Loop detection. Port Loop detection can be used to detect loops occurring on a port and within an entire network.