System to process sFlow data from the switches, IronShield 360 provides closed loop threat detection and response. sFlow packet samples are scanned for known threat signatures. Upon a positive match, INM can automatically send a control command to the FastIron SuperX/SX switch to throttle or disable the port on which the threat has been detected. This advanced security capability provides a network- wide security umbrella without the added complexity and cost of ancillary sensors.
Resilient Design Ensures Business Continuity
A FastIron SuperX/SX networking solution is built for high-value environments. Featuring redundant management modules, redundant fans, redundant load-sharing switch fabrics, and power supply modules, the FastIron SX 800/1600 switches are designed for maximum system availability. Switch fabric failover preserves network connectivity in the event of a switch module failure. Automatic management failover quickly restores network connectivity in the event of a management module failure.
In the event of a topology change due to a port or facility failure, Layer 1 and Layer 2 protocols—e.g., Protected Link, Metro Ring Protocol (MRP), IEEE 802.3ad, UDLD, VSRP, and Rapid Spanning Tree Protocol—will restore service in sub-second time (tens to hundreds of milliseconds, depending on the protocol), protecting users from costly service disruption. Enhanced spanning tree features such as Root Guard and BPDU Guard prevent rouge hijacking of spanning tree root and maintain a contention and loop-free environment especially during dynamic network deployments. These high availability capabilities enable network deployments of a highly reliable network infrastructure that is resilient to, and tolerant of, network and equipment failures.
Deployment of IPv6 Capable Hardware
Networks are in the early stages of large-scale IPv6 production deployment, however few IPv6 innovative applications are currently on the market. Although the success of IPv6 will ultimately depend on the new applications that run over IPv6, a key part of the IPv6 design is the ability to integrate into and coexist with existing IPv4 switches within the network and across networks during the steady migration from IPv4 to IPv6.
The FastIron SuperX Series’ IPv6-capable management and interface modules, commencing with software release FSX 04.0.01, support an easy migration path by interworking between IPv4 and IPv6 switches with the existing network or across networks. The network manager can pick and choose which sites are upgraded with IPv6-capable modules, preparing the network for future IPv6 applications
Designed for medium to large enterprise backbones, the IPv6- capable FastIron SuperX Series are modular switches that provide the enterprise network with a complete, end-to-end enterprise LAN solution, ranging from the wiring closet to the LAN backbone.
Benefits of the IPv6-capable modules
include:
•The IPv6-capable FSX management modules are non-blocking, with a built-in switch fabric module and 12 combination
Gigabit Ethernet copper or fiber ports that provide connectivity to your existing management network.
•The IPv6-capable FSX 800 and FSX 1600 management modules have a console port and a 10/100/1000 port for out-of-band management. The management modules optionally support 2-port 10-GbE ports or
8-port GbE fiber and copper ports.
•The IPv6-capable FSX 800 and FSX 1600 management modules are interchangeable between devices.
•Redundant management modules on the IPv6-capable FSX 800 and FSX 1600 provide 100% redundancy.
•The crossbar (xbar) architecture enables the management module to switch 30 Gbps between each interface module and within the management module.
•The IPv6-capable interface modules and power supplies are interchangeable among FastIron SuperX Series switches.
•The IPv6-capable FSX 800 and FSX 1600 management, switch fabric, and interface modules are hot swappable, which means a module may be removed and replaced while the chassis is powered on and running.
