Foundry Backbone Switches

Foundry Networks FastIron Family - FastIron Edge Switch

Foundry Network Products

Foundry Networks FastIron Range

Foundry Network’s FastIron family of Enterprise and Service Provider products includes the FastIron 4802, the FastIron Edge Switch, the FastIron Edge Switch POE, the FastIron Workgroup X Series, the FastIron Edge X Series, the FastIron SuperX and the FI 400, 800, 1500.

Foundry Network’s FastIron family is purpose-built to deliver high density 10/100 with Power Over Ethernet, 10/100/1000 with Power Over Ethernet, Gigabit Ethernet, and 10-Gigabit Ethernet for high performance networking solutions with advanced security features. Foundry’s FastIron family is built with high-performance ASICs and Foundry’s IronWare™ that includes advanced Layer 2 features such as Foundry’s award winning Metro Ring Protocol (MRP), and full Layer 3 features such as Border Gateway Protocol 4 (BGP4). Foundry’s FastIron family ensures increase in return on investment (ROI) and a much lower total cost of ownership (TCO) for both Enterprises and Service Providers.

Foundry FastIron Edge Switch Specifications

Delivering More for Less…
The FastIron® Edge Switch (FES) series provides greater flexibility, higher reliability, enhanced security, extensive redundancy, and expanded resiliency -- while simplifying network management complexity and reducing on-going training expenses. The FES increases your network's Return on Investment (ROI) and decreases its Total Cost of Ownership (TCO) by using common sparing components and offering improved functionality through a common feature set controlled by industry standard Command Line Interface (CLI) syntax, all in a compact (1.5 - 2.5 Rack Units) form factor at industry leading prices. With an advanced hardware platform to provide user-selectable Layer 2 switching - upgradeable to full Layer 3 multiprotocol routing - the FastIron Edge Switch is the ideal networking platform for today's Enterprise wiring closet and server farm applications.

The Foundry Networks® FastIron Edge Switch (FES) family establishes the next benchmark in edge connectivity by delivering the most adaptable feature set combined with the highest 10/100Base-TX and Gigabit Ethernet port densities. Specifically, the FES9604 resets the industryhigh-water mark by offering 50% more

ports and built-in 1000Base-T (or 1000Base-X mini-GBIC) in a stackable 2.5 RU switch - port densities matched only by the competition's modular chassis. To meet existing and emerging network requirements, the FES delivers a full complement of standards-based, feature-rich switching and Layer 3 multiprotocol routing capabilities, comprehensive hardware and software redundancy, complete QoS controls including prioritization and rate limiting, standard and extended ACLs, integrated Copper Gigabit Ethernet ports, and more. The extensive feature set supports network requirements ranging from basic connectivity to multicast-enabled full streaming audio/video applications for converged services including Voice over IP (VoIP).

The FES Intelligent Edge Products include the following configurations:

Figure 1: FastIron Edge 12GCF

FES12GCF: 12 Combo ports that supports 10/100/1000Base-TX or fiber ports using mini-GBIC optics, allowing a choice between fixed RJ-45 ports or 1000Base-X (mini-GBIC), Full Layer 2 & Base Layer 3 Switching, and one hot-swappable, field replaceable AC power supply; Occupies 1.5 rack units (RU).

FES12GCF-PREM: 12 Combo ports that supports 10/100/1000Base-TX or fiber ports using mini-GBIC optics, allowing a choice between fixed RJ-45 ports or 1000Base-X (mini-GBIC), Full Layer 3 Routing, and one hot-swappable, field replaceable AC power supply; Occupies 1.5 rack units (RU)

Figure 2: FastIron Edge 2402

FES2402: 24 ports 10/100Base-TX plus 2 ports of media-flexible Gigabit Ethernet, allowing a choice between fixed 1000Base-T (included) or 1000Base-X (mini-GBIC), Full Layer 2 & Base Layer 3 Switching, and one hot-swappable, field replaceable AC power supply; Occupies 1.5 rack units (RU)

FES2402-PREM: 24 ports 10/100Base-TX plus 2 ports of media-flexible Gigabit Ethernet, allowing a choice between fixed 1000Base-T (included) or 1000Base-X (mini-GBIC), Full Layer 2 Switching, Full Layer 3 Routing, and one hot-swappable, field replaceable AC power supply; Occupies 1.5 rack units (RU)

Figure 3: FastIron Edge 4802

FES4802: 48 ports 10/100Base-TX plus 2 ports of media-flexible Gigabit Ethernet, allowing a choice between fixed 1000Base-T (included) or 1000Base-X (mini-GBIC), Full Layer 2 & Base Layer 3 Switching, and one hot-swappable, field replaceable AC power supply; Occupies 1.5 rack units (RU)

FES4802-PREM: 48 ports 10/100Base-TX plus 2 ports of media-flexible Gigabit Ethernet, allowing a choice between fixed 1000Base-T (included) or 1000Base-X (mini-GBIC), Full Layer 2 Switching, Full Layer 3 Routing, and one hot-swappable, field replaceable AC power supply; Occupies 1.5 rack units (RU)

Figure 4: FastIron Edge 9604

FES9604: 96 ports 10/100Base-TX plus 4 ports of media-flexible Gigabit Ethernet, allowing a choice between fixed 1000Base-T (included) or 1000Base-X (mini-GBIC), Full Layer 2 & Base Layer 3 Switching, and one hot-swappable, field replaceable AC power supply; Occupies 2.5 rack units (RU)

FES9604-PREM: 96 ports 10/100Base-TX plus 4 ports of media-flexible Gigabit Ethernet, allowing a choice between fixed 1000Base-T (included) or 1000Base-X (mini-GBIC), Full Layer 2 Switching, Full Layer 3 Routing, and one hot-swappable, field replaceable AC power supply; Occupies 2.5 rack units (RU)

IronShield™ Security - Complete Network Protection
The FastIron Edge Switch supports configurable levels of user-selectable security starting with support for MAC address lockdown. The network administrator can assign a single MAC address or a group of addresses to an individual port in order to prevent unauthorized users from plugging into open RJ45 wall outlets. For more complex networking environments using Remote Authentication Dial-In User Service (RADIUS) authentication servers, the network manager can enable 802.1x port-based authentication - ensuring that the FES first authenticates the user before allowing the port to transmit data onto the network. This also grants users secure mobility while still maintaining the integrity and security of the network against unwarranted breaches.

Once the port is operational, the network administrator can use both regular and extended ACLs to control access to and through the network, enabling control policies that can permit or deny traffic based on a wide variety of identification characteristics, such as source/destination MAC addresses, source/destination IP addresses, and TCP/UDP ports/sockets or well-known port numbers - further protecting and restricting network access from malicious users. The FES implements ACL lookups in hardware so that providing security and protection for the network does not adversely affect switching or routing performance.

By deploying the FES, network managers can provide layered levels of access to the management console. Multilevel access security on the console and web-based management interface prevents unauthorized users from accessing or changing the switch configuration. By using Terminal Access Controller Access Control Systems (TACACS/TACACS+) as well as RADIUS authentication, the network administrator can enable considerable centralized control and restrict malevolent users from altering network configurations. The FES also supports Secure Shell (SSHv1) and SNPMv3 to further restrict and encrypt communications to the management interface and system, thereby assuring highly secure network management access. For an added level of protection, the network administrator can use ACLs and provide fine-tuned access and control to the system by binding the ACL to TELNET, web-management, and SNMP interfaces.

To protect the network against Denial of Service (DoS) attacks, the network manager can disable the forwarding of ICMP PING messages and also enable the option to rate limit ICMP and TCP SYN packets. The FES can monitor, throttle, and lockout ICMP and TCP SYN traffic both to the management address of the switch and for traffic transiting the system - enabling this feature can secure and protect the network from suffering from or aiding a user-generated DoS attack.

JetScope - "Always-On" Wire-Speed Network Monitoring
All versions of the FastIron Edge Switch support JetScope™ - Foundry's unique solution to simplify network management. Deploying switches in a networking infrastructure increases overall network performance but essentially eliminates the network administrator's ability to receive a total picture of network capacity, bandwidth consumption, utilization, and overall network health. JetScope illuminates the network and grants visibility about what is actually transpiring in real time to the traffic flowing throughout the network. JetScope uses the built-in capability of the FES ASICs to collect and aggregate details on traffic flows from Layer 2 through Layer 7 and automatically delivers that information to the IronView Network Management station - a Java-based network configuration and management tool that displays, in detail and graphically, network and application level traffic information. With this insight, the network manager can now quickly and accurately review overall networking operations, zero in on hot spots, quickly diagnose, and troubleshoot difficulties before they develop into widespread problems. JetScope also automatically delivers accurate SNMP/RMON statistics to reduce the administrative burden normally associated with proactive network management, design, and capacity planning.

Increasing Network Value with Converged (Voice, Video, and Data) Deployments
The FastIron Edge Switch series establishes a high performance platform on which to build flexible and converged voice, video, and data services that can easily adapt to changes and the introduction of future technologies. Deployed in the wiring closet, the FES products provide the capabilities and functionalities required for supporting robust telephony integration within existing networking infrastructures. Providing multiple levels of redundancy and topology fault tolerance, IP phone systems and other converged technologies such as desktop video, built using the FES products, deliver advanced QoS features required to ensure the same level of reliability and availability your end users expect from their existing legacy telephone and video systems.

Intelligent Traffic Control to Manage QoS and Bandwidth Consumption
The FastIron Edge Switch offers superior QoS features to enable network administrators to provide and ensure high-quality services throughout the network from end to end. Foundry's QoS implementation uses the most efficient methodology to classify and prioritize network traffic to avoid widespread network congestion. The FES supports Dual-Mode operation - the ability to identify both 802.1Q tagged and untagged data streams, and places these into their appropriately assigned VLANs. The integration of Voice and Data services onto one common structured cabling plant further reduces the network's TCO - a single FES switch port supports both the handset and PC, thereby reducing the number of switch ports needed within a converged networking infrastructure. Dual-Mode operation segments and prioritizes 802.1Q tagged IP voice packets, while properly assigning untagged data traffic to the appropriate VLAN, isolating the voice from the data traffic for troubleshooting and traffic monitoring purposes.

Enhancing QoS to Ensure High Availability and Superior Data Traffic Integrity
The FastIron Edge Switch can classify, reclassify, police, and mark the traffic prior to delivery. Network administrators can classify traffic generated by different networking characteristics or devices, such as VoIP handsets, executive management, or bandwidth critical applications, to discriminate among various traffic flows and enforce bandwidth policies on Layer 2 and Layer 3 QoS fields. The FES can identify, classify, and reclassify traffic based on specific criteria such as port, source/destination Media Access Control (MAC) address, 802.1p priority bit, source/destination IP address, Type of Service (ToS) or Differentiated Services Control Point (DSCP) fields, or the Transmission Control Protocol/User Datagram Protocol (TCP/UDP) port.

Once classified, the traffic is queued and scheduled for delivery - the network administrator has complete control over how the system services the queues: Weighted, adjustable Round Robin (WRR) queuing ensures that all packets have the ability to be delivered and ensures that lower-priority packets are not starved for bandwidth; Strict Priority (SP) queuing ensures that the highest-priority traffic always gets serviced first, ahead of all other traffic (which could result in lower-priority bandwidth starvation); or combined SP with WRR guarantees highest-priority traffic delivery while equally servicing the lower priority queues.

The FES is capable of performing rate limiting optimization including input-port rate limiting controlled by regular and extended ACLs. Rate limiting gives the network administrator the granular control needed to regulate how end users consume bandwidth. Using rate limiting together with the multiple queuing techniques enables the network manager to fairly balance, fine-tune, and control bandwidth consumption, providing the foundation for end-to-end QoS parameters to regulate traffic flows across the entire network. Voice, video, and high-speed data services can be combined and delivered throughout a unified network without suffering from reduced performance or negatively impacting the end-user experience.

Increasing Network Reliability with Load-Balanced and Redundant Power

Figure 5: FastIron Edge Switch Rear View - Redundant Slot for Second Power Supply

Every FastIron Edge Switch ships with either a single AC or DC power supply. Each FES supports two hot-swappable, load-sharing AC and DC power supply units for unbeatable power redundancy and deployment flexibility. AC and DC power supplies can be combined in the same FES. All FES share the same common AC (RPS5) and -48vDC (RPS5-DC) power supply units, further reducing equipment sparing costs and decreasing administrative expenses while, at the same time, increasing overall network serviceability, reliability, and availability. All of the power redundancy features normally available only from a modular chassis are built-in to the FES - a compact, easy to install and manage, fixed-port device.

Enhancing Network Resilience with Redundant Uplink Options
The 1000Base-X (mini-GBIC) Gigabit Ethernet interfaces support a wide range of mini-GBIC transceivers for the full breadth of networking interconnectivity including 1000Base-SX, 1000Base-LX, and 1000Base-LHA for Gigabit Ethernet links up to 550m over Multimode Fiber (MMF), 10km over Single Mode Fiber (SMF), and 70km over SMF, respectively. Higher levels of link resilience can be implemented by deploying dual-homed and redundant Gigabit Ethernet uplinks enabled with Fast Port/Fast Uplink, Per-VLAN Spanning Tree (PVST/PVST+), Per-VLAN Group Spanning Tree (PVGST), or load-sharing 802.1Q trunks or Equal Cost Multi Path (ECMP) data center connections. This unmatched selection of redundancy, quick recovery, and load balancing options grants the network administrator the widest range of implementation choices, making the FES the ideal intelligent Enterprise edge device to maximize stability and increase network reliability with sub-second failover and recovery. It equally complements the features and functionality available through the rest of Foundry's JetCore™-based modular and fixed-port configuration devices.

Expansive Switching and Routing Options
The FES2402, FES4802, FES9604, and FES12G all support wire-speed Layer 2 switching and Basic Layer 3 functionality upgradeable to full multiprotocol Layer 3 routing. The PREM version of the FastIron Edge Switch supports a more in-depth set of multiprotocol routing features including hardware based IP and IPX routing, AppleTalk, RIPv1, RIPv2, OSPF, multicast routing (including PIM-SM/DM, IGMPv2, and DVMRP), hardware-based inbound and outbound Access Control Lists (ACLs) and Extended ACLs, along with Virtual Router Redundancy Protocol (VRRP) and VRRP-Enhanced (VRRPE). All FastIron Edge Switches are upgradeable from complete Layer 2/Basic Layer 3 to Full Layer 3 capability - providing a "pay as you go" strategy, enabling the built-in advanced Full Layer 3 feature set only to those portions of the network that require it.

Finally, the FES allows up to two software code images to be stored in memory, an advanced capability found across Foundry's entire product line. The second storage location provides the network administrator an additional level of assurance in the event the primary image becomes corrupted during an upgrade cycle.

With this outstanding suite of features, functions, and capabilities, an infrastructure built using Foundry's FastIron Edge Switch is a highly available, fully redundant, easily manageable, and secure networking environment that delivers the highest ROI unified with the lowest TCO available today and for well into the future.

Technical Specifications:

Ordering Information

Although Foundry has attempted to provide accurate information in these materials, Foundry assumes no legal responsibility for the accuracy or completeness of the information. More specific information is available on request from Foundry. Please note that Foundry's product information does not constitute or contain any guarantee, warranty or legally binding representation, unless expressly identified as such in a duly signed writing.