Datasheet

Alcatel-Lucent OmniSwitch 6850 | Data Sheet 4
Monitoring and troubleshooting
• Local (on the flash) and remote server logging:
Syslog and command log
• Port-based mirroring for troubleshooting and
lawful interception; supports four sessions with
multiple sources-to-one destination
• Policy-based mirroring allows selection of the
type of traffic to mirror by using QoS policies
• Remote port mirroring facilitates passing mir-
rored traffic through the network to a remotely
connected device
• Port monitoring feature allows capture
of Ethernet packets to a file to assist in
troubleshooting
• sFlow v5 and RMON for advanced monitoring
and reporting of statistics, history, alarms,
and events
• IP extended tools: ping and trace route
• Y.1731 and IEEE 802.1ag Ethernet operations,
administration and maintenance (OA&M):
Connectivity Fault Management and per-
formance measurements (layer-2 ping and
link trace)
• IEEE 802.3ah Ethernet in the First Mile (EFM)
for link monitoring, remote fault detection,
and loopback control (layer-1 ping)
• Unidirectional Link Detection (UDLD) detects
and disables unidirectional links on fiber optic
interfaces
• Digital Diagnostic Monitoring (DDM) provides
real-time diagnostics of fiber connections for
early detection of optical signal deterioration
Network configuration
• Auto-negotiating 10/100/1000 ports automati-
cally configure port speed and duplex setting
• Auto MDI/MDIX automatically configures
transmit and receive signals to support
straight-through and crossover cabling
• BOOTP/DHCP client with option 60 allows
auto-configuration of the switch for
simplified deployment
• DHCP relay to forward client requests to a
DHCP server
• Alcatel-Lucent Mapping Adjacency Protocol
(AMAP) for building topology maps
• IEEE 802.1AB LLDP with MED extensions for
automated device discovery and IP phone
provisioning
• Multiple VLAN Registration Protocol (MVRP
and GVRP) for 802.1Q/1ak-compliant VLAN
pruning and dynamic VLAN creation
• Auto QoS for switch management and IP
phone traffic
• Network Time Protocol (NTP) for network-wide
time synchronization
Resiliency and high availability
• ITU-T G.8032 Ethernet Ring Protection designed
for loop protection and fast convergence times
(sub 50 ms) in ring topologies
• Ring Rapid Spanning Tree Protocol (RRSTP)
optimized for ring topology to provide less than
100-ms convergence time
• IEEE 802.1s Multiple Spanning Tree Protocol
(MSTP) encompasses IEEE 802.1D STP and IEEE
802.1w Rapid Spanning Tree Protocol (RSTP)
• Per-VLAN spanning tree (PVST+) and
Alcatel-Lucent 1x1 STP mode
• IEEE 802.3ad Link Aggregation Control Protocol
(LACP) and static Link Aggregation Groups
(LAGs) across modules
• Dual-home link support for sub-second link
protection without STP
• Virtual Router Redundancy Protocol (VRRP) to
provide highly available routed environments
• Bidirectional Forwarding Detection (BFD)
for fast failure detection and reduced
re-convergence times in a routed environment
• Broadcast, unknown unicast and multicast
storm control to avoid degradation in overall
system performance
• Redundant and hot-swappable power supplies,
transceiver modules offering uninterruptible
service
• Dual image and dual configuration file storage
provides backup
Advanced security
Access control
• AOS Access Guardian framework for
comprehensive user-policy-based network
access control (NAC)
• Autosensing 802.1X multi-client, multi-VLAN
support for per-port authentication and VLAN
assignment
• MAC-based authentication for non-802.1X hosts
• Web-based authentication (captive portal):
Customizable web portal residing on the switch
• IEEE 802.1X and MAC-based authentication,
with group mobility and “guest” VLAN support
• Host integrity check (HIC) agent on each switch
makes it an HIC enforcer and facilitates end-
point device control for company policy compli-
ance (quarantine and remediation supported,
as required)
• User Network Profile (UNP) simplifies NAC
by providing dynamic policy configuration for
authenticated clients – VLAN, ACL, HIC
• SSH for secure CLI session with public key
infrastructure (PKI) support
• TACACS+ client allows for authentication,
authorization, and accounting (AAA) with
a remote TACACS+ server
• Centralized RADIUS and Lightweight
Directory Access Protocol (LDAP) user
authentication
Containment, monitoring and quarantine
• Support for Alcatel-Lucent OmniVista 2500
Quarantine Manager and quarantine VLAN
• Learned Port Security (LPS) or MAC address
lockdown secures network access on user
or trunk ports based on MAC address
• DHCP Snooping, DHCP IP/Address Resolution
Protocol (ARP) Spoof protection
• Embedded traffic anomaly detection (TAD)
monitors traffic patterns typical of worm-like
viruses and either shuts down the port or
reports to the management system
• ARP poisoning detection
• Support of Microsoft
®
Network Access
Protection (NAP)
• Bridge Protocol Data Unit (BPDU) blocking with
auto-recovery automatically shuts down user
ports to prevent topology loops if an STP BPDU
packet is seen
• STP Root Guard prevents edge devices from
becoming STP root nodes
Traffic filtering
• ACLs to filter out unwanted traffic including
denial of service (DoS) attacks; flow-based
filtering in hardware (layer 1 to layer 4)
Converged networks
PoE
• Dynamic PoE allocation, delivers only the power
needed up to the total power budget for most
efficient power consumption
• PoE models support Alcatel-Lucent IP phones
and WLAN access points, as well as any IEEE
802.3af-compliant end device
• Configurable per-port PoE priority and max
power for power allocation
QoS
• Priority queues: Eight hardware-based queues
per port for flexible QoS management
• Traffic prioritization: Flow-based QoS
with internal and external prioritization
(also known as re-marking)
• Bandwidth management: Flow-based
bandwidth management, ingress/egress
rate limiting; egress rate shaping per port
and per class of service (CoS) queue
• Queue management: Configurable schedul-
ing algorithms – Strict Priority Queuing (SPQ),
Weighted Round Robin (WRR), and Deficit
Round Robin (DRR) or combination of algorithms
• Congestion avoidance: Support for End-to-End
Head-of-Line (E2E-HOL) Blocking prevention
and flow control
• LLDP network polices for dynamic designation
of VLAN-ID and layer-2/layer-3 priority for
IP phones
• Auto-QoS for switch management traffic as
well as traffic from Alcatel-Lucent IP phones
Layer-3 routing and multicast
IPv4 routing
• Multiple virtual routing and forwarding (VRF)
for network segmentation
• Static routing, Routing Information Protocol
(RIP) v1 and v2
• Open Shortest Path First (OSPF) v2, Intermediate
System-to-Intermediate System (IS-IS), Border
Gateway Protocol (BGP) v4
• Generic Routing Encapsulation (GRE) tunneling
• Graceful restart extensions for OSPF and BGP
• VRRP v2
• DHCP relay (including generic UDP relay)
• ARP
• IP SLA measurement
IPv6 routing
• Static routing
• Routing Information Protocol Next Generation
(RIPng)
• OSPF v3
• BGP v4 (with extensions to IPv6 routing)
• Graceful restart extensions for OSPF and BGP
• VRRP v3
• Neighbor Discovery Protocol (NDP)
IPv4/IPv6 Multicast
• Internet Group Management Protocol (IGMP)
v1/v2/v3 snooping for optimized multicast traffic
• Protocol Independent Multicast - Sparse Mode
(PIM-SM)/Protocol Independent Multicast -
Dense Mode (PIM-DM)
• Distance Vector Multicast Routing Protocol
(DVMRP)
• Multicast Listener Discovery (MLD) v1/v2
snooping for optimized multicast traffic