
G-Series – Data Sheet 2
Making use of Extreme Networks’ policy capabilities, a network
administrator can define distinct roles or profiles that represent
specific operational groups within an organization. Each
defined role is granted individualized access to specific network
services and applications (e.g., manager, employee, guest) and
these access privileges remain associated with users as they
move across both wired and wireless network access points.
Users are authenticated via IEEE 802.1X, MAC address, or web
authentication, and then assigned a predefined operational role
ensuring that each user has access to appropriate information,
thus aligning network resource utilization with business goals
and priorities.
In order to sustain a secure, feature-rich and cost-eective
network well into the future, the G3 includes a lifetime warranty.
Features
SECURITY
• Business-oriented policy-based security by user, protocol,
port, or VLAN
• Technology-oriented ACL-based security by port and per
VLAN
• Better password security via increased complexity, history
tracking and aging. Passwords can now be encrypted using
a FIPS 1402 approved algorithm.
• Multiple user authentication via IEEE 802.1X, Web portal,
and/or MAC address simultaneously for up to 8 users/
devices per port
• Multiple user VLAN assignment via RFC 3580 for up to 8
users/devices per port
• Acceptable use policy enforcement when deployed with
Extreme Networks Network Management Suite (NMS)
• Rapid detection, isolation, and remediation of threats when
deployed with the Extreme Networks NMS and Intrusion
Prevention System (IPS)
• Proactive protection services:
• MAC address lockdown / lockout
• Worm & virus quarantine
• Source port pairing
• ARP broadcast protection
• BPDU port protection
• DHCP service protection
PERFORMANCE
• Crossbar capacity: the G3 provides a crossbar capacity of
up to 285.7 Mpps and 384 Gbps bandwidth
• Switch capacity: the G3 performs at wire speed per port
and provides switching capacity up to 214 Mpps throughput
with current IOMs
• Address table size: up to 32,000 addresses are supported
• Hardware queues: 8 hardware queues per port are
supported
MANAGEMENT
• Secure management: authenticated and encrypted SNMPv3
support in addition to SSHv2 and SSL
• Policy support: the G3 supports the creation of 31 profiles
and 1,536 unique policy rules per device; up to 8 roles or
profiles are supported per port
• Port mirroring: mirrors ingress trac from switch port(s)
to a local or remote device for further trac analysis or
compliance purposes
• RMON: provides advanced monitoring and reporting
capabilities for statistics, history, alarms, events, filter and
packet capture. Note: packet capture is sampling only;
packet capture/filter sampling is disabled by default and
cannot be enabled on the same interface concurrently with
port mirroring
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP):
automated device discovery protocol for easy mapping by
network management applications
• Alias/node table: dynamically updated local directory of
attached users and devices used to locate and resolve IP
addresses to MAC addresses throughout the network
CONVERGENCE
• LLDP-MED (Media Endpoint Discovery): a standard
extension of LLDP that stores values for parameters such as
QoS and VLAN to automatically configure network devices
such as IP phones
• IP multicast routing: optional advanced routing license
supports DVMRP and PIM sparse mode
• IP multicast snooping (data-driven IGMP): automatically
prevents flooding of IP multicast trac
CONNECTIVITY
• IEEE 802.3af Power over Ethernet: provides up to 15.4 W
per port to IEEE 802.3af compliant PoE powered devices
such as IP phones, wireless access points, and security
cameras
• PoE power management: prioritizes which ports receive
power and detects powered and non-powered end devices
to enable attachment of PoE and standard Ethernet devices
on a single switch. Class-based power management assigns
the maximum amount of power required for a PoE class
(0-4) to an attached device. Manual Mode distributes power
to PoE-powered I/O modules manually, allowing for extra
power to be distributed to designated ports.
• Jumbo frames: enables high-performance remote backup
and disaster-recovery services
• IPv6 capable: IPv4/IPv6 dual host management support
with IPv6 routing via an optional IPv6 routing license
Kommentare zu diesen Handbüchern