System Description

Bandwidth optimization (BoD) & Dial on Demand (DoD)

Bandwidth Allocation Protocol (BAP)

Security: PAP/CHAP

Call monitoring

Multilink PPP (MLPPP)

Per call activation for NTT switches

Frame Relay over ISDN

Quality of Service (QoS)

Traffic classification using IP Precedence and DiffServ Code Point (DSCP) bits, and multiple- field (L3, L4 and other headers) inspection. Match-anyand match-alloptions also define a class- map.

Priority Queuing or Class-based Weight Fair Queueing (CBWFQ) to specify the policy-map

Random and Weighted Early Detection (RED/WRED) and Tail Drop congestion avoidance

QoS over VPN

QoS on Input

Virtual Private Network (VPN)

Site-to-Site application

200 tunnels with standard 64-Mbyte DIMM

IPSec/IKE with pre-shared secrets

IPSec/IKE with Certificates (PKI)

EZ-IPsec with PKI or pre-shared secrets:

Network Extension Mode (NEM)

Client mode

Remote Access application

200 tunnels with standard 64-Mbyte DIMM installed

L2TP/IPSec protocols

Certificate and PKI environment

MS-ChapV2, EAP user authentication:

Username/Password (local database & RADIUS)

SecurID (third-party plug-in)

Certificates (embedded/smart cards) – Microsoft only

PPTP protocol

MS-ChapV2, EAP user authentication

Local Database & RADIUS

1-8 Overview

Page 28
Image 28
Enterasys Networks XSR-3020 manual Quality of Service QoS, Virtual Private Network VPN

XSR-3020 specifications

Enterasys Networks XSR-3020 is a sophisticated Layer 2 and Layer 3 switch designed to meet the demands of modern networking environments. Known for its robust performance and versatility, the XSR-3020 is an ideal solution for enterprises that require high efficiency, comprehensive security, and network reliability.

This switch supports a variety of advanced technologies, making it suitable for both data center and edge deployments. One of its standout features is its scalability. The XSR-3020 can accommodate growing network demands by allowing for easy integration of additional modules. This capacity for expansion ensures that organizations can adapt their networks without the need for complete hardware replacements.

The XSR-3020 offers high-speed connectivity through its multiple gigabit Ethernet ports, providing up to 48 10/100/1000BASE-T ports in a single chassis. This high-density design optimizes the physical space and ensures that organizations can connect numerous devices simultaneously without sacrificing performance. Additionally, it supports Power over Ethernet (PoE), allowing users to power network devices, such as IP cameras and access points, directly through the switch. This feature streamlines installations and reduces the clutter of electrical wiring.

Security is a critical consideration in today’s network landscape, and the XSR-3020 addresses this need with robust security features. It incorporates advanced access control capabilities, enabling administrators to segment traffic and enforce policies effectively. The switch also supports 802.1X authentication, ensuring that only authorized devices can connect to the network.

In terms of management, the XSR-3020 is designed to simplify operations through its user-friendly interface and extensive support for management protocols. It offers native support for Simple Network Management Protocol (SNMP) and can be easily integrated with various network management systems, allowing for efficient monitoring and troubleshooting.

Another key characteristic of the XSR-3020 is its reliability. With features such as redundant power supplies and fans, the switch ensures high availability, minimizing downtime for critical applications. It is also built to withstand harsh conditions, making it suitable for diverse environments.

Overall, the Enterasys Networks XSR-3020 combines high performance, scalability, and security, making it an excellent choice for organizations looking to enhance their network infrastructure. Its comprehensive set of features positions it as a reliable backbone for any modern enterprise network, ensuring that businesses can operate efficiently and securely.