allied telesis corporate template...

1/108

AlliedWare Plus

2/108

►

► AlliedWare AlliedWare Plus

► AlliedWare Plus

► AlliedWare Plus

► AlliedWare Plus

► AlliedWare Plus 5.4.7

► AlliedWare Plus

3/108

►

► (Cooperative Multitasking)

►

Allied Telesis AlliedWare -

Allied Telesis AlliedWare Plus Linux /

Cisco IOS -

Cisco Modular IOS IOS, QNX Catalyst 6500

Cisco IOS XE IOS, Linux ASR1000, Catalyst 4500

Cisco IOS XR QNX CRS-1

Extreme Networks ExtremeWare -

Extreme Networks ExtremeXOS Linux

Force10 (Dell) FTOS NetBSD

Juniper JUNOS FreeBSD /

Huawei (H3C) VRP (Comware) VxWorks /

4/108

►

Pre-emptive Multitasking Co-operative

Multitasking Linux

►

Switch)

*,

► AlliedWare Plus Linux Linux 3. .x,

-1 Linux 4. .x

* Symmetric

Multiprocessing (SMP) Linux 2.6

5/108

AlliedWare AlliedWare Plus

►

►

►

►

►

►

AlliedWare

► Allied Telesis

►

►

►

► debugging)

►

AlliedWare Plus

6/108

► Linux Kernel

TCP/IP

► Third-party Code

► Open Source Code

openSSH, openSSL, DHCP, BusyBox

► Allied Telesis Code

AMF, EPSR, VCStack, Triggers, QoS

AlliedWare Plus

Third-party code

7/108

AlliedWare Plus

(CLI)

8/108

AlliedWare Plus

X-

NGFW

VPN Firewall

AR Firewall, NAT, VPN, Antivirus,

IDS/IPS, DPI

CentreCOM

IE

DIN-

9/108

AlliedWare Plus

x210

x510

x610

SBx908 XEMv2

SBx8100 CFC400

SBx8100 CFC960

DC2552XS/L3

IE200

x310

x230

x930

AR3050S AR4050S

IX5-28GPX

IE510-28GSX AR2010V AR2050V

GS900MX

XS900MX

IE300

FS980M

GS970M

10/108

AlliedWare Plus

5.3.2

2009

5.4.1

2011

5.3.3

2009

5.2.2

2008

5.3.1

2008

5.2.1

2008

5.4.2

2012

5.3.4

2010

5.4.3

2013

SBx908

NAC

Web)

Loop Protection

IPv6

RIPng

MLDv1 Snooping

GUI

EPSR Enhanced Recovery

Policy-Based Routing

LLDP

Query Solicitation

PoE

LLDP-MED

Voice VLAN

Roaming Authentication

VCStack Fast Failover

XEM-2XP

sFlow

DHCP Snooping

Gracefull Restart RIP, RIPng, OSPF, BGP

BGP

XEM-2XT

PoE+ , x600

TACACS+

VRF-Lite

DNS Relay

OSPFv3

VCStack Long Distance

XEM-2XS, XEM-12v2

EPSR Super Loop Prot

PIM-SSM

DDM SFP/SFP+/XFP

DNS Realay, DHCP Relay, NTP IPv6

EEE 802.3az

SBx8100, x510, x210, XEM-24T

PIM-SMv6, MLDv2

DHCPv6, VRRPv3, BGP4+

OSPFv3

Allied Telesis Management Framework (AMF)

11/108

AlliedWare Plus

5.4.4-1

2014

In-Service Software Upgrade SBx8100

CFD)

AMF

AMF

EPSR ( )

VCStack Plus SBx8100

AMF

AMF WAN

SBx8100 SBx908

: FC960 XS16, x310,

x230, IE200, DC2552XS/L3

5.4.4

2014

AMF Controller SBx8100

Wireless Controller SBx8100, SBx908

OpenFlow x930, x510, DC2552XS/L3

x310

Dual rate SFP+

5.4.5

2015

5.4.5-2

2015

AT-x9EM/XT4

AMF (VAA)

AMF Starter ( 3 )

Active Fiber Monitoring

UDLD

AMF

AMF Cloud Amazon Web Services (AWS)

QoS, PPPoE AC

Q-in-Q, RIP, DHCP relay

OpenFlow

VLAN

Microsoft NLB Clustering

CentreCOM

5.4.6

2016

5.4.6-1

2016

IE300

AMF

SBx81XLEM

VLAN Mirroring (RSPAN)

RESTful API

12/108

AlliedWare Plus

5.4.7

2017

VRF-Lite

AMF

TACACS+

High Availability Network Power (HANP)

(Per-VLAN ACL)

-

5.4.6-2

2016

(Multi-tenant) AMF

ERPS G.8032

PTP Transparent Clock (IEEE1588)

RJ45 S900MX

Dynamic DNS

OpenVPN AR4050S

13/108

AlliedWare Plus v5.4. v5.4.3

► sFlow

► EPSRing

► EPSRing Superloop Protection

► VCStack with Fast Failover

► VCStack Long-Distance-Stacking

► Virtual Routing and Forwarding (VRF-Lite)

► DNS-relay, DHCP-relay

► IPv6, OSPFv3, RIPng, MLDv1

► PoE+

► Loop protection

► RADIUS/TACACS+

► Tri-Authentication (802.1x, MAC-based, Web)

► DHCP Snooping

► VLAN Double Tagging (Q-in-Q)

► Private VLANs

► LLDP-MED

► IGMP, IGMP Proxy

► PIM, PIM-SSM

► BGP-4 ASN

► Policy Based Routing

► xSTP

► Digital Diagnostics Monitoring (DDM) for SFP/SFP+/XFP

► Triggers

► Eco-friendly mode

► Energy Efficient Ethernet (802.3az)

► Graceful restart (BGP,OSPF,RIP)

AlliedWare Plus v5.4.2

►Allied Telesis Management Framework (AMF)

►SBx8100, x210, XEM-24T

► IPv6:

PIMv6

MLDv2 (Querier)

VRRPv3

DHCPv6

OSPFv3

BGP4+

►IPv6

►Find Me ( )


14/108


► VCStack Plus 2- SBx8100

CFC960

►

► AMF WAN AMF

► In-Service Software Upgrade (ISSU)

- CFC960

► AT-SBx81CFC960 SBx8100

► AT-SBx81XS16 10G SFP+ SBx8100

► IE200

► DC2552XS/L3

► - : x310, x230

15/108

AlliedWare Plus v5.4.4 SBx81CFC960 & SBx81XS16

SBx8100

►

SBx81CFC960 960 , 1.2 , 2 RAM, 256M

80 bidirectional), 160 -

4

SBx8112 1.92 T

►

SFP+ Direct Attach

8 SBx8106 ( )

CFC960

5.4.4

16/108

AlliedWare Plus v5.4.4 VCStack Plus

SB 8100, SBx81CFC960

► 2 SBx8100

► 4 SFP+ ( bidirectional)

► CFC960

►CFC960

►

4 x SFP+

G SFP+ Direct Attach

17/108


AT-SBx8112 AT-SBx8106

•

•

• xSTP,

VRRP

• LAG)

•

18/108


AT-SBx8112

SFP+

19/108

AlliedWare Plus v5.4.4 In-Service Software Upgrade

1.

2.

3.

(Failover

SBx8100

ISSU major

-CFC960

-

20/108

AlliedWare Plus v5.4.4 CFL)

Cable Fault

Locator

Time-Domain Reflectometry (TDR)

-

TX

open)

awplus# test cable-diagnostics tdr interface port1.0.1,port1.0.2 Link will go down while test is in progress. Continue? (y/n): y Select y to continue. awplus# y Test started. This will take several seconds to complete. Use "show test cable-diagnostics tdr" to print results. awplus# show test cable-diagnostics tdr Last test run at Mon Sep 08 12:14:01 2014 ------------------------------------------ Port Pair Length Status ------------------------------------------ 1.0.1 A 53 +/- 2 m Short B 51 +/- 2 m Short C 50 +/- 2 m Open D 50 +/- 2 m Open 1.0.2 A - OK B - OK C 5 +/- 5 m Open D 5 +/- 5 m Open

21/108


AMF Controller (area -

Wireless Manager Unified Wireless Controller

dual-rate

PIM-

L3 x930

Next-Generation Firewall (NGFW) AR3050S AR4050S

CentreCOM GS900MX/MPX

22/108

AlliedWare Plus v5.4.5 x930 L3 , 28

► - (VCStack, VCStack LD)

► StackQS c 2 QSFP+ 40G

►Allied Telesis Management Framework (AMF) AMF Master, 4

► Wi-Fi Unified Wireless Controller (UWC) TQ *

► VLAN IP-

►64000 - L2 FDB, 32000 IP- L3

► RIP OSPF (64 ) VRRP RIPng, BGP v4/4+, OSPF v2/3, PIM, VRF-Lite, Q-in-Q

► IEEE 802.3at PoE+ 1480 c 2- 4 (30 ) 48

► -

*

23/108

AlliedWare Plus v5.4.5 x930

► AT-x930

00 0 PoE

00 450 c PoE

4 SFP+ 2 SFP+ 1G

10G ( SFP/SFP+)

2 SFP+ (1G/10G) 10G ( 40G

)

eth0

USB- SD-

7-

Eco-Friendly

2 x SFP+

USB

2 x SFP+

PoE+

24/108


SFP+

*

AT-x930-28GTX 24 x 10/100/1000T 2/4 x 1G/10G 2 x SFP+

2 QSFP+ 2 AC/DC

AT-x930-28GPX 24 x 10/100/1000T POE+ 2/4 x 1G/10G 2 x SFP+

2 QSFP+ 2 AC

AT-x930-52GTX 48 x 10/100/1000T 2/4 x 1G/10G 2 x SFP+

2 QSFP+ 2 AC/DC

AT-x930-52GPX 48 x 10/100/1000T POE+ 2/4 x 1G/10G 2 x SFP+

QSFP+ 336 2 AC

AT-x930-28GSTX 24 x 10/100/1000T

24 x 100/1000 SFP 2/4 x 1G/10G

2 x SFP+

2 QSFP+ 28 2 AC/DC

*

25/108


PoE

AT-PWR150

AC 150 ,

PoE

AT-PWR250

AT-x9EM/XT4

10GBASE-T,

a

26/108


AT-SP10SR

AT-SP10LR

AT-SP10LR20

AT-SP10ER40

..

SFP+,

AT-SP10TW1

AT-SP10TW3

AT-SP10TW7 Direct Attach

, 3

27/108


► 2 QSFP+ 40

► 16

40G x 2)

► -

►

QSFP+ (AT-QSFPSR4, AT-QSFPLR4)

► SFP+

►

G

AT-StackQS

AT-StackQS

AT-QSFP1CU

Direct Attach

28/108

AlliedWare Plus v5.4.5 x930 PSU 1 PSU 2 POE

15.4

POE 3

30

POE+ 4

AT-x930-28GPX

PWR800 - 370 24 12

PWR800 PWR800 740 POE POE+ 24 24

PWR800 PWR800 740 24 12

PWR1200 - 740 24 24

PWR1200 PWR1200 1480 24 24

AT-x930-52GPX

PWR800 - 370 24 12

PWR800 PWR800 740 48 24

PWR800 PWR800 740 24 12

PWR1200 - 740 48 24

PWR1200 PWR1200 1480 POE POE+ 48 48

PWR1200 PWR1200 1480 48 24

29/108

AlliedWare Plus v5.4.5 Wi-Fi

AT-x310 POE AT-x930 POE

UWC CLI

AT-TQ2450

AT-TQ3600

AT-TQ4600

AT-TQ4400e

SBx8100 SBx908

x930 POE

AT-SBx8100

UWC CLI

wireless enable discovery vlan-list 10 ip address 192.168.10.1/24 network 20 ssid Guest vlan 20 security mode none ap profile 1 hwtype tq4600 radio 1 vap 0 network 20

30/108

AlliedWare Plus v5.4.5 AMF

Area 0

Area 60 Area 2 Area 1

AMF

Controller

AMF

Master 1

AMF

Master 2

AMF

Master 60

area links

► Area)

AMF, Area 0

► AMF Controller 60

AMF Master

► AMF 7320

► AMF Controller

SBx8100

SBx8100 SBx8100 SBx8100

31/108

AlliedWare Plus v5.4.5 AR3050S/AR4050S

1989

Packet Filter Firewall

1995

Stateful Inspection Firewall

1998

VPN, QoS

2005

Unified Threat Management

2010

Next-Generation Firewall

ARxxx AlliedWare

NGWF AR3050S/AR4050S AlliedWare Plus

► Packet Filter Firewall L4

OSI ( TCP/UDP)

► Stateful Inspection Firewall

L4

► Unified Threat Management (UTM)

L7 OSI ( ), Deep Packet Inspection (DPI)

Intrusion Prevention System (IPS), Anti-Virus, Anti-Spam, VPN, (URL)

► Next-Generation Firewall (NGFW) UTM

32/108


AT-AR3050S AT-AR4050S

WAN, 10/100/1000T X SFP 2 2

LAN, 10/100/1000T 8 8

0 - 500 0 - 500

RIP RIPng

OSPFv4 OSPFv6

BGP4 BGP4+

PIMv4 PIMv6

PPPoE

DHCPv4/v6

VRRP VRRPv3

QoS, Traffic shaping

Web, CLI, SSH/Telnet, SNMP, AMF

-

AMF Master -

► Firewall c DPI

► Application Web control

► IDS/IPS

► IP Reputation

► Malware

► VPN

► IPv4 IPv6

► NAT

►QoS

►

► WAN-

► USB-3G/4G

► AMF

►

33/108


USB

3G/4G

8 LAN

10/100/1000T

210 - RU)

2 WAN

SFP T

SD-

34/108

AlliedWare Plus v5.4.5 AR3050S/AR4050S ► Firewall c Deep Packet Inspection (DPI)

(Application Control)

► URL (Web Control)

-

► Intrusion Detection/Prevention System (IDS/IPS)

► IP Reputation IPS IP

IP Reputation

► Antivirus, Malware Protection adware, spyware

c

35/108


AT-AR3050S AT-AR4050S

2- 4-

- 4

750 1,900

700 1,800

100,000 300,000

3,600 12,000

IPS 220 750

IP Reputation 350 1,000

Malware

protection 300 1,300

VPN 450 1000

IPsec VPN 50 200

SSL VPN 100 200

36/108

AlliedWare Plus v5.4.5 CentreCOM GS900MX/MPX

► L2+ 510)

L2+

xSTP, LACP, DHCP Snooping, Loop Protection, Voice VLAN, ACL

- (VCStack) C Direct Attach SP10TW1

EPSR

Allied Telesis Management Framework

UDLD

Ethernet (Energy Efficient Ethernet EEE, 802.3az)

Jumbo

K

Ethernet (PoE) IEEE 802.3at PoE+ 70

37/108

AlliedWare Plus v5.4.5 CentreCOM GS900MX/MPX

10/100/1000T

10/100/1000T

100/1000X SFP

POE+

AT-GS924MX 24 2 2 x SFP+ - 92 1 AC

AT-GS948MX 48 2 2 x SFP+ - 140 1 AC

AT-GS924MPX 24 2 2 x SFP+ 24 92 1 AC

AT-GS948MPX 48 2 2 x SFP+ 48 140 1 AC

POE

7.5

POE 2

15.4

POE 3

30

POE+ 4

AT-GS924MPX 370 24 24 12

AT-GS948MPX 370 48 24 12

38/108


► Allied Telesis Management Framework (AMF)

►AMF Cloud AMF Master/Controller Amazon Web Services (AWS)

► Vista Manager

► QoS), PPPoE AC Next-Generation Firewall (NGFW) VPN Firewall

► Q-in-Qrelay .

► OpenFlow

► Management ACL)

►

► Microsoft NLB Clustering

►VLAN Mirroring (RSPAN)

► SBx81XLEM SBx8100

► 10G CentreCOM XS900MX

► 100M CentreCOM FS980M

► VPN Firewall AR2010V AR2050V

►IE300

39/108

AlliedWare Plus v5.4.6 G

SBx8100

SBx81CFC960*

► SBx81XLEM

1

X SFP

SBx81XLEM/Q2

G QSFP+)

SBx81XLEM/XS8

(8 G SFP+)

SBx81XLEM/XT4

(4 G RJ45)

SBx81XLEM/GT8

(8 RJ45)

* SBx81XLEM, K MAC, 16K IPv4 prefixes

40/108

AlliedWare Plus v5.4.6 CentreCOM XS900MX

► G

16K -

L3 16 / RIP

G

40G

AMF

EPSR

0

RJ45

100/1000/10GBASE-T

SFP/SFP+

1G/10G

AT-XS916MXT 12 4 320Gbps 238Mpps

AT-XS916MXS 4 12 320Gbps 238Mpps

210 - RU)

41/108

AlliedWare Plus v5.4.6 CentreCOM FS980M

► 100M L2+


- (VCStack)* C Direct Attach SP10TW1

EPSR

Allied Telesis Management Framework

UDLD

Ethernet (PoE) IEEE 802.3at PoE+ 75

Jumbo

K *

00C 500C

42/108

AlliedWare Plus v5.4.6 CentreCOM FS980M

10/100TX

10/100/1000T

100/1000X SFP

POE+

AT-FS980M/9 8 1 - - 1 AC

AT-FS980M/18 16 2 - - 1 AC

AT-FS980M/28 24 4 2 x SFP - 1 AC

AT-FS980M/52 48 4 2 x SFP - 1 AC

AT-FS980M/9PS 8 1 - 8 1 AC

AT-FS980M/18PS 16 2 - 16 1 AC

AT-FS980M/28PS 24 4 2 x SFP 24 1 AC

AT-FS980M/52PS 48 4 2 x SFP 48 1 AC

POE

7.5

POE 2

15.4

POE 3

30

POE+ 4

AT-FS980M/9PS 150 8 8 4

AT-FS980M/18PS 250 16 16 8

AT-FS980M/28PS 375 24 24 12

AT-FS980M/52PS 37 48 24 12

43/108

AlliedWare Plus v5.4.6 AR2050V

210 - RU)

USB

3G/4G

4 LAN

10/100/1000T 1 WAN

10/100/1000T

44/108

AlliedWare Plus v5.4.6 AR2010V

140

USB

3G/4G 1 LAN

10/100/1000T

1 WAN

10/100/1000T DC

45/108

AlliedWare Plus v5.4.6 AR2010V AR2050V

AT-AR2010V AT-AR2050V

WAN, 10/100/1000T 1 1

LAN, 10/100/1000T 1 4

AC DC AC

0 - 500 0 - 500

RIP RIPng

OSPFv4 OSPFv6

BGP4 BGP4+

PIMv4 PIMv6

PPPoE

DHCPv4/v6

VRRP VRRPv3

QoS, Traffic shaping

Web, CLI, SSH/Telnet, SNMP, AMF

- -

- -

DIN- -

► Firewall

► IDS/IPS

► VPN

► IPv4 IPv6

► NAT

►

QoS

►

► WAN-

(AR2050V)

► USB-

3G/4G

► AMF

►

46/108

AlliedWare Plus v5.4.6 AMF GUI

►

► AMF

►

►

► AMF

►

47/108

AlliedWare Plus v5.4.6 AMF Guest Node ( )

1.

DHCP

Snooping)

2.

3.

AMF,

Guest Node

( )

Member

Master

48/108


m a s t e r

V i r t u a l

m a s t e r

Virtual

controller

cont ro l le r m a s t e r

AMF Master/Controller

Amazon Web Services

(AWS)

49/108


AMF

AMF Starter

AMF

Master

AMF

Controller,

FS980M, GS900MX/MPX, XS900MX - - -

x210, IE200 - - -

x230 - - -

x310, IE300 - - -

IX5-28GPX, IE510 - - -

x510, x510L, x510DP -

x610 -

x900 - - -

x930 -

DC2552XS/L3 -

SwitchBlade x908 -

SwitchBlade x8100 CFC400 -

SwitchBlade x8100 CFC960 80, 120, 300 10, 30, 6

NGFW AR4050S -

NGFW AR3050S - - -

VPN Firewall AR2050V, AR2010V - - -

10 - 10 - 6

50/108

AlliedWare Plus v5.4.6 SDN-Ready

Data Plane (

)

SDN

Controller

Control Plane

STP, OSPF,

Management Plane

SSH/Telnet, SNMP,

GUI, NMS, CLI

Data Plane (

)

Control Plane

Management Plane

SSH/Telnet, SNMP,

GUI, NMS, CLI

STP, OSPF, BGP,

Allied Telesis, Open Networking Foundation (ONF),

Control Plane, SDN

Controller OpenFlow v1.3 AMF.

* DC2552XS/L3, x310, x230

51/108

AlliedWare Plus v5.4.6 VLAN Translation (Mapping)

► VLAN

VLAN ID

►

► A, B, C B

VID 100 VID 300 VLAN 200

►

► IE510, IX5,

Switch_B# configure terminal

awplus(config)# vlan database

awplus(config-vlan)# vlan 200

awplus(config)# interface port1.0.1

awplus(config-if)# switchport mode trunk

awplus(config-if)# switchport trunk allowed vlan add 200

awplus(config-if)# switchport vlan translation vlan 100 vlan 200

awplus(config)# interface port1.0.2

awplus(config-if)# switchport mode trunk

awplus(config-if)# switchport trunk allowed vlan add 200

awplus(config-if)# switchport vlan translation vlan 300 vlan 200

52/108

AlliedWare Plus v5.4.6 VLAN Mirroring (RSPAN)

VLAN 5

Switch_A

Switch_B

sw_b# conf t sw_b(config)# vlan database sw_b(config-vlan)# vlan 5 mode remote-mirror-vlan sw_b(config-vlan)# interface port1.0.28 sw_b(config-int)# switchport mode trunk sw_b(config-int)# switchport trunk allowed vlan add 5 sw_b(config-int)# interface port1.0.23 sw_b(config-int)# switchport remote-mirror-egress vlan 5

Switch_B

sw_a# conf t sw_a(config)# vlan database Sw_a(config-vlan)# vlan 5 mode remote-mirror-vlan sw_a(config-vlan)# interface port1.0.28 sw_a(config-int)# switchport mode trunk sw_a(config-int)# switchport trunk allowed vlan add 5 sw_a(config-int)# remote-mirror interface port1.0.10, port1.0.22 direction both vlan 5

Switch_A

53/108


► AMF Cloud - (Multi-tenant

► CentreCOM FS980M

►

► Non-stop PoE PoE IE-

► Ethernet Ring Protection Switching

► Precision Time Protocol Transparent Clock (IEEE 1588) IE-

► NGFW, VPN Firewall:

Dynamic DNS (DDNS)

Double Subnet-based NAT

OpenVPN

- - OpenVPN

Unified Threat Management (UTM)

►

CentreCOM GS970M

54/108

AlliedWare Plus v5.4.7 CentreCOM GS970M

00C 500C

► 1G L2+

Unidirectional Link Detection (UDLD)


EPSR


Web)

Ethernet (Energy Efficient Ethernet EEE, 802.3az)

VLAN

K

Jumbo 10

IEEE 802.3at PoE+ 0

SD-

AT-RKMT-J05, 13, 14*

* /28 x230

55/108

AlliedWare Plus v5.4.7 Multi-tenant AMF Cloud

►Virtual AMF Appliance (VAA)

►,

►AlliedWare Plus

► /- AMF

► -

►

►VAA

56/108

AlliedWare Plus v5.4.7 ERPS (G.8032 v2)

► ITU

► EPSR

►G.8032v2)

► VLAN Ring-Automatic Protection Switching (R-APS)

► VLAN Ring Protection Link (RPL

► RPL RPL Owner RPL Neighbor

► ( LAG) East West

57/108

AlliedWare Plus v5.4.7 PTP Transparent Clock IEEE1588

► Precision Time Protocol (PTP)

Master Slave Ethernet

► NTP,

►,

Ethernet (, )

► Transparent Clock

Residence Time (RT) Correction Field (CF)

► Slave ∑CF Master

58/108


* 100 NAS (Network Access Server)

x230 x310 x510 x610 x930 DC2552XS/L3 SBx908 SBx8100 CFC400 SBx8100 CFC960

RIP

FL-x310-

01

FL-x510-

01

OSPF-64

OSPF-Full FL-x610-01 FL-x930-01 FL-DC25-01 FL-SBx9-01 FL-CFC400-01 FL-CFC960-01

PIMv4-SM, DM & SSM

EPSR Master

UDLD UDLD

BGP4

VRF Lite

VLAN Double Tagging (Q-in-Q) QinQ

RIPng

FL-x610-02 FL-SBx9-02

OSPFv3

MLDv1(Snooping), v2(Querier)

PIMv6-SM, SSM

RADIUS Server 5000 Users * FL-RADIUS-

FULL

FL-RADIUS-

FULL RADIUS Server 1000 NAS *

AMF Master 20- AM20 AM40, 80, 120 AM40 AM40, 80 AM80, 120, 300

AMF Controller 10,30, 60 AC10, 30, 60

VCStack Plus FL-CF9-VCSPL

PTP (IEEE 1588)

ERPS (G.8032) G8032 G8032

VLAN Translation (Mapping)

OpenFlow OpenFlow

59/108


IE200 IE300 IE510

CentreCOM (FS980M,

GS970M,

GS900MX/MPX,

XS900MX)

C

RIP FL-IE3-L3-01 FL-IE5-L3-01

OSPF

PIMv4-SM, DM & SSM

VRRP

EPSR Master FL-IE2-L2-01 FL-IE3-L2-01 FL-IE5-L2-01

UDLD UDLD

VLAN Double Tagging (Q-in-Q)

RIPng

OSPFv3

PIMv6-SM, SSM

PTP (IEEE 1588) PTP

VLAN Translation (Mapping)

ERPS (G.8032) FL-IE2-G8032 FL-IE3-G8032 FL-IE5-G8032

60/108


IDS/IPS App Control Web Control URL Filtering IP Reputation Malware

Protection Anti-virus

Suricata Procera Digital Arts Kaspersky Emerging

Threats Kaspersky Kaspersky

AT-AR2010V - - - - - -

AT-AR2050V - - - - - -

AT-AR3050S AT-FL-AR3-NGFW-y

(Next-Generation Firewall)

AT-FL-AR3-ATP-y

(Advanced Threat Protection) -

AT-AR4050S AT-FL-AR4-NGFW-y

(Next-Generation Firewall)

AT-FL-AR4-ATP-y

(Advanced Threat Protection)

y = (1, 3 5 )

AT-AR4050S

AMF Master ( 20 AMF) AT-FL-AR4-AM20-y

y = 1 5 )

61/108

AlliedWare Plus

62/108

AlliedWare Plus ►

Network Access Control (NAC) (Tri-authentication)

Two-step Authentication Roaming Authentication

sFlow

Digital Diagnostics Monitoring (DDM)

► VCStack Fast Failover

Q-in-Q (802.1ad)

►

EPSRing Superloop Protection

Virtual Routing and Forwarding (VRF-Lite)

Control Plane Prioritization (CPP) DoS

Loop protection, MAC Thrash Limiting (Storm Control)

IGMP Proxy Query Solicitation

63/108

►

IPv6

Advanced QoS)

iSCSI Intelligent flow control)

Energy Efficient Ethernet (802.3az)

AlliedWare Plus

►

AlliedWare Plus, CLI),

GUI), SD,

USB),

Linux


64/108

AlliedWare Plus:

65/108

AlliedWare Plus:

► Network Access Control (NAC)

Microsoft (NAP) Symantec (SNAC)

► Allied Telesis

802.1x

MAC (802.1x )

66/108

AlliedWare Plus:

► Two-step Authentication 2-

-

-

RADIUS -

67/108

AlliedWare Plus:

► Roaming Authentication

, Web

VCStack ad

68/108

AlliedWare Plus: ► sFlow

69/108

AlliedWare Plus:

► SFP, SFP+, XFP Digital Diagnostics Monitoring (DDM*) SFF-8472.

► AlliedWare Plus:

awplus#show system pluggable detail

Port1.0.3

==========

Vendor Name: ATI

Device Name: AT-SP10SR

Device Type: 10GBASE-SR

Serial Number: A04440R111900040

Manufacturing Datecode: 11050200

SFP Laser Wavelength: 850nm

Link Length Supported

Single Mode Fiber : -

OM1 (62.5um) Fiber: 30m

OM2 (50um) Fiber : 80m

Diagnostic Calibration: Internal

awplus#show system pluggable diagnostics

System Pluggable Information Diagnostics

Port1.0.3 Status Alarms Warnings

Reading Alarm Max Min Warning Max Min

Temp: (Degrees C) 31.105 - 78.000 -13.00 - 73.000 -8.000

Vcc: (Volts) 3.307 - 3.800 2.800 - 3.500 3.100

Tx Bias: (mA) 2.872 - 7.848 0.348 - 6.348 1.348

Tx Power: (mW) 5.699 - 11.749 1.995 - 9.333 2.512

Rx Power: (mW) - Low 12.589 0.490 Low 10.000 0.617

Rx LOS: Rx Up

* DDM Digital Optical Monitoring (DOM)

70/108

AlliedWare Plus:

► Active Fiber Monitoring

Active Fiber Monitoring SFP DDM

SNMP

71/108

AlliedWare Plus:

72/108

AlliedWare Plus:

► Virtual Chassis Stacking

1GbE GbE

LAG

►

SBx8100, x610, x510, IX5, IE510

G, SFP+

73/108

AlliedWare Plus:

► Virtual Chassis Stacking (VCStack)

VCStack Fast Failover)

xSTP VRRP

Active-Standby

Switch Switch

Master Slave

Switch

Static Active-Active

Switch Switch

Master

Slave

Slave

Master

Switch

True Active-Active

Использование всех каналов

Динамическое

распределение трафика

Простота настройки

74/108

AlliedWare Plus:

IP L3

ARP

192.168.1.0/24

192.168.2.0/24

75/108

AlliedWare Plus:

►(VCStack Fast Failover)

VCStack Fast Failover

- - ACL

Test Case 1 RIP 10 0

Test Case 2 OSPF 10 0

Test Case 3 Static 10 0





76/108

AlliedWare Plus:

►

Rolling-Reboot (

)

►

►

77/108

AlliedWare Plus:

► Q-in-Q (802.1ad)

VLAN VLAN ID

Customer ID (CID),

VLAN ID (VID)

78/108

AlliedWare Plus:

79/108

AlliedWare Plus:

► Ethernet Protection Switching Ring (EPSRing)

xSTP

2- EPSR Enhanced Recovery

RFC3619, EAPS Extreme Networks

Superloop Protection (SLP -

VLAN

80/108

AlliedWare Plus

81/108

AlliedWare Plus

EPSR Enhanced Recovery:

EPSR

EPSR Enhanced Recovery

EPSR

82/108

AlliedWare Plus SuperLoop Protection:

(Superloop), SLP Link Down

VLAN

83/108

AlliedWare Plus:

► Virtual Routing and Forwarding (VRF-Lite)*

L3 IP

) VRF

* x610, x930, DC2552XS/L3, SBx908, SBx8100 c CFC960

84/108

AlliedWare Plus:

► Virtual Routing and Forwarding (VRF-Lite)

L3 IP

) VRF

-

VRF Firewall

85/108

AlliedWare Plus:

► Control Plane Prioritization (CPP)

DoS

► DoS 6 IP Options, Land, Ping-of-Death, Smurf, Synflood and Teardrop

►Thrash limiting)

–MAC

► Loop Protection) –

VLAN

►(Storm Control)

broadcast, multicast unknown unicast Thrash limiting

86/108

AlliedWare Plus:

► IGMP Proxy

–

PIM

–PIM,

IGMP Proxy

– (upstream

downstream)

– IGMP Proxy IGMP Report (Join) Leave upstream

– IGMP Proxy IGMP Querier dowstream

87/108

AlliedWare Plus:

Query

Solicitation

(Multicast,

IPTV)

EPSR xSTP.

,

(General Query IGMP

Querier

88/108

AlliedWare Plus:

89/108

AlliedWare Plus:

► AlliedWare Plus

(CLI)

(GUI)

SD, USB)

powershutdown.scp enable

configure terminal

ecofriendly led

int port1.0.1-1.0.24

shutdown

exit

awplus# configure terminal

awplus(config)# trigger 1

awplus(config-trigger)# type time 20:00

awplus(config-trigger)# day mon tue wed thur fri

awplus(config-trigger)# script 1 powershutdown.scp

90/108

AlliedWare Plus:

► Network in a Box

RADIUS

Storm control

DHCP IP

Timekeeper,

Loop protection

x930, x610, x510

91/108

AlliedWare Plus:

► debug [module]

► show platform

► show cpu

► show process

► show memory

► show log

► show tech-support

► tcpdump

► terminal monitor

CLI

► netstat

► tcpdump

► iptraf

► ps

► top

► strace

► …

Linux

► Linux

Linux, ash

92/108

AlliedWare Plus:

Allied Telesis Management Framework (AMF) ,

►

►

AMF

►

93/108

AlliedWare Plus:


►

[ ]

AMF Member

AMF Member

Master

×

Master1# atmf working-set Node3, Node4

Working set join

atmf1[2]# configure terminal

atmf1[2](config)# interface port1.0.20

atmf1[2](config-if)# switchport access vlan 10

94/108

AlliedWare Plus:


►

[ ]

CLI

AMF Member

AMF Member

AMF Member

AMF Member

[ ]

Master Master

95/108

AlliedWare Plus:


►

AMF Member

AMF Member

AMF Member

AMF Member

Master

Master

96/108

AlliedWare Plus:


► AMF

AMF Member

AMF Member

Rolling Reboot)

SD/USB

Master

Master1# atmf working-set group all

Working set join

atmf1[9]# atmf reboot-rolling card:/5.4.3/x*-5.4.3-*.rel

97/108

AlliedWare Plus:


► AMF

L2 AMF L3 L2TPv3 AMF

AlliedWare Plus

, ,

AMF

98/108

AlliedWare Plus:

( ) AMF (Provisioning)

AMF

port port1.0.3, Member2 Member ,

AMF

master_1# atmf working-set member_4 atmf1[1]# configure terminal atmf1[1](config)# interface port1.0.3 atmf1[1](config-if)# switchport atmf-crosslink atmf1[1](config-if)# atmf provision future_node atmf1[1](config-if)# exit atmf1[1]# atmf working-set group local master1#

99/108

AlliedWare Plus:

AMF SSH

USB/SD -

-

SSHFS

x8100#show atmf backup ... Backup Media .......... FILE SERVER (Total 503837.5MB, Free 186818.0MB) Server Config ......... Synchronization ..... Synchronized Last Run .......... 19 May 2014 11:09:50 1 .................. Configured (Mounted) Host .............. 10.36.150.54 Username .......... user_1 Path .............. temp/x8100

100/108

AlliedWare Plus:

► AMF Vista Manager

► AMF

►

►

► AMF

►

101/108

AlliedWare Plus:

102/108

AlliedWare Plus:

IPv6 (Native IPv6)

► IPv6

► (ACL) IPv6 ( x210)

► IPv4 IPv6

► IPv6 IPv4 to4) ► IPv6 ► Graceful Restart RIP,

OSPF, BGP IPv6 ► Forum:

https://www.ipv6ready.org/db/index.php/public/search/?vn=allied+telesis

Ready Phase-2 http://www.ipv6ready.org/?page=phase-2-about



http://www.ipv6ready.org/?page=phase-2-about





103/108

AlliedWare Plus:

►

IP

X-

• PoE PoE+ *;

• LLDP for Media Endpoint Devices (LLDP-MED); IP

VLAN, QoS 802.1p DSCP

• Voice VLAN; VLAN,

QoS

* x210, SBx908

104/108

AlliedWare Plus:

►(Advanced QoS)

Two-rate, three-color bandwidth metering (RFC2698)

8 (4 )

64Kbps

Weighted Round Robin Strict Priority

DSCP

105/108

AlliedWare Plus:

► iSCSI Flow Control

iSCSI, iSCSI Flow Control

Flow Control

Avg

Tra

ffic

rat

e

Avg

Tra

ffic

rat

e

AlliedWare Plus

106/108

AlliedWare Plus:

107/108

AlliedWare Plus:

► IEEE 802.3az Energy Efficient Ethernet (EEE) *

Ethernet

(Idle)

Ethernet (EEE)

Low Power Idle (LPI)

EEE

az

►

Eco Friendly Mode

* GS900MX, x230, x310, x510, x610, x930, SBx908 c XEM-12Tv2, XEM- , SBx8100

allied telesis corporate template...

Documents