Gigabit M

etro Ethernet S

witch

www.edge-core.com

For a world always connected…

ECS4660-28FL2/L3/L4 Gigabit Metro Ethernet Switch Product OverviewThe Edge-Core ECS4660-28F is a standalone L2/L3/L4 Gigabit Metro Ethernet routing switch with 24 1000BASE-X SFP slots, two 10G XFP uplink slots, and two 10G module slots that can support two additional 10G uplinks. With up to 107 Mpps performance, the ECS4660-28F is ideal for service provider aggregation deployment, providing wire-speed L2 switching and L3 unicast and multicast routing. To maintain high availability, the ECS4660-28F provides redundant power, a hot swappable fan tray, configuration rollback, and G.8032 ring protection.

DATASHEET

Key Features and BenefitsHigh AvailabilityWith IEEE 802.1w Rapid Spanning Tree Protocol, the Edge-Core ECS4660-28F provides a loop-free network with redundant links to the core network and rapid convergence in less than 2 seconds. IEEE 802.1s Multiple Spanning Tree Protocol allows a spanning-tree instance per VLAN and Layer 2 load sharing on redundant links.

The ECS4660-28F supports IEEE 802.3ad Link Aggregation Control Protocol (LACP). It increases bandwidth by automatically aggregating several physical links together as a logical trunk and offers load balancing and fault tolerance for uplink connections.

Adding an optional redundant power supply ensures that the ECS4660-28F receives stable power support for today’s high-availability, mission-critical environments.

Comprehensive QoSThe Edge-Core ECS4660-28F offers advance QoS for marking, classification, and scheduling to deliver best-in-class performance for data, voice, and video traffic at wire speed. Eight egress queues per port enable differentiated management of up to eight traffic types across the stack. Traffic is prioritized according to 802.1p, DSCP, IP precedence and TCP/UDP port number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict priority ensure differential prioritization of packet flows and avoid congestion of ingress and egress queues.

With bidirectional rate-limiting, per port or per traffic class, the ECS4660-28F preserves network bandwidth and allows full control of network resources.

Advanced IPv4 and IPv6 RoutingThe Edge-Core ECS4660-28F supports hardware-based IPv4 and IPv6 routing for maximum performance. It provides a seamless migration path from IPv4 to IPv6 for future network upgrades and investment protection.

Advanced routing protocols such as RIP and OSPF provide dynamic routing by exchanging routing information with other Layer 3 switches or routers. Multicast routing is supported under independent multicast protocols, including PIM-DM and PIM-SM. DVMRP is also supported to interconnect two multicast-enabled networks across non-multicast networks. VRRP prevents your system from failing by dynamically backing up multiple L3 switches for routing.

Enhanced SecurityThe Edge-Core ECS4660-28F provides enhanced security features for connectivity and access control, including Access Control Lists (ACLs), authentication, and port-level security with IEEE 802.1X. ACLs can be used to restrict access to sensitive network resources by denying packets based on L2/L3/L4 headers. SSH and RADIUS authentication protects management access to the switch, providing secure network management. IEEE 802.1X port-based access control ensures dynamic, port-based security and user authentication for network access.

IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between client's IP, MAC address, port, and VLAN.

Simplified ManagementFor IP multicast traffic, the ECS4660-28F uses IGMP snooping to provide fast client joins and leaves of multicast streams. It prevents flooding of IP multicast traffic and limits bandwidth-intensive video traffic to only the subscribers.

The ECS4660-28F supports IPv6 management functions for SNMP, HTTP, Telnet, TFTP, ICMP, SSH, RADIUS/TACACS+ authentication, and IPv6 QoS remapping when connecting to the switch.

The ECS4660-28F can be managed through an industry-standard Command Line Interface (CLI) with a common industry look and feel that reduces training and operating costs. The switch also provides an easy-to-use web GUI interface through a standard web browser.

With four-group RMON, the ECS4660-28F can easily backup and restore firmware and configuration files via TFTP.

and allows full control of network resources.

Advanced IPv4 and IPv6 RoutingThe Edge-Core ECS4660-28F supports hardware-based IPv4 and IPv6 routing for maximum performance. It provides a seamless migration path from IPv4 to IPv6 for future network upgrades and

With bidirectional rate-limiting, per port or per traffic class, the ECS4660-28F preserves network bandwidth and allows full control of network resources.

Advanced IPv4 and IPv6 RoutingThe Edge-Core ECS4660-28F supports

number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict priority ensure differential prioritization of packet flows and avoid congestion of ingress and egress queues.

With bidirectional rate-limiting, per port or per traffic class, the ECS4660-28F preserves network bandwidth and allows full control of network resources.

802.1p, DSCP, IP precedence and TCP/UDP port number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict priority ensure differential prioritization of packet flows and avoid congestion of ingress and egress queues.

traffic at wire speed. Eight egress queues per port enable differentiated management of up to eight traffic types across the stack. Traffic is prioritized according to 802.1p, DSCP, IP precedence and TCP/UDP port number to provide optimal performance to real-time applications. Weight Round Robin (WRR) and strict

The Edge-Core ECS4660-28F offers advance QoS for

best-in-class performance for data, voice, and video traffic at wire speed. Eight egress queues per port enable differentiated management of up to eight traffic types across the stack. Traffic is prioritized according to

traffic and limits bandwidth-intensive video traffic to only the subscribers.

For IP multicast traffic, the ECS4660-28F uses IGMP snooping to provide fast client joins and leaves of multicast streams. It prevents flooding of IP multicast traffic and limits bandwidth-intensive video traffic to only the subscribers.

binding table between client's IP, MAC address, port, and VLAN.

Simplified ManagementFor IP multicast traffic, the ECS4660-28F uses IGMP snooping to provide fast client joins and leaves of multicast streams. It prevents flooding of IP multicast traffic and limits bandwidth-intensive video traffic to only

IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between client's IP, MAC address, port,

Simplified ManagementFor IP multicast traffic, the ECS4660-28F uses IGMP

802.1X port-based access control ensures dynamic, port-based security and user authentication for network

IP source guard prevents a malicious user from spoofing or taking over another user's IP address by creating a binding table between client's IP, MAC address, port,

used to restrict access to sensitive network resources by denying packets based on L2/L3/L4 headers. SSH and RADIUS authentication protects management access to the switch, providing secure network management. IEEE 802.1X port-based access control ensures dynamic, port-based security and user authentication for network

www.edge-core.comFeatures - Hardware Specifications

TEL: 886-3-5638888 FAX: 886-3-6686111 No.1, Creation Rd. III, Hsinchu Science Park, Taiwan 30077 sales_ec@edge-core.com www.edge-core.com

Features

TEL: 886-3-5638888 FAX: 886-3-6686111 No.1, Creation Rd. III, Hsinchu Science Park, Taiwan 30077 sales_ec@edge-core.com www.edge-core.com

Hardware Specifications Switching Engine Model: Store and forward SDRAM: 512 MB Flash: 128 MB CPU: 8347 667 MHz GbE port density per system: ■ 28 (24 host ports, 2 10 GbE XFP uplinks, 2 optional 10 GbE XFP modules)

Optics GbE SFP optic/connector type: LC fiber supporting SX (multimode), LX (single-mode), and LH/ZX (single-mode) 10 GbE XFP optic/connector type: LC fiber supporting SR (multimode), LR (single-mode), ER (single-mode)

Physical Layer Physical port redundancy: Redundant Trunk Group (RTG)

Packet Switching Capacity 128 Gbps

Layer 2 Throughput (Mpps) 95 Mpps (wire speed)

Layer 2 Switching Maximum MAC addresses per system: 32K Static MAC entries: 1K Jumbo frames: 12K bytes Number of VLANs: 4K Port-based VLAN MAC-based VLAN Voice VLAN IEEE 802.1AB: Link Layer Discovery Protocol (LLDP) IEEE 802.1D: Spanning Tree Protocol IEEE 802.1p: CoS prioritization IEEE 802.1Q: VLAN tagging IEEE 802.1Q-in-Q: VLAN Stacking IEEE 802.1s: Multiple Spanning Tree Protocol (MSTP) Number of MST instances supported: 32 IEEE 802.1w: Rapid Spanning Tree Protocol (RSTP) IEEE 802.1X: Port Access Control IEEE 802.3: 10BASE-T IEEE 802.3u: 100BASE-TX IEEE 802.3ab: 1000BASE-T IEEE 802.3z: 1000BASE-X IEEE 802.3x: Pause Frames/Flow Control IEEE 802.3ad: Link Aggregation Control Protocol (LACP) ERPS ITU-T G.8032/Y.1344 Amendment 1 IEEE 802.1.ag CFM DDM

Layer 3 Features: IPv4 Maximum number of Address Resolution Protocol (ARP) entries: 2,000 Maximum number of IPv4 unicast routes in hardware: 6500 Routing protocols: ■ RIP v1/v2 ■ OSPF v1/v2 (with 4 active interfaces) ■ CIDR (Classless Inter-Domain Routing) ■ VRRP Static routing

Layer 3 Features: IPv6 Management Functionality Neighbor discovery, Syslog, Telnet, SSH, SNMP L3 Routing (IPv6), OSPFv3, Static Routing MLD, PIM-DM6, MVR6 HTTP, TFTP, Remote IP6 Ping, Ping over IPv6 ,Traceroute over IPv6 IPv6 DHCP relay sflow over IPv6 MLD snooping, DNS Resolver

Supported RFCs RFC 1122 Host requirements RFC 768 UDP RFC 791 IP RFC 783 Trivial File Transfer Protocol (TFTP) RFC 792 Internet Control Message Protocol (ICMP) RFC 793 TCP RFC 826 ARP RFC 894 IP over Ethernet RFC 1027 Proxy ARP RFC 1131 OSPFv1 RFC 2328 OSPFv2 RFC 2740 OSPFv3 RFC 1112 IGMPv1 RFC 2236 IGMPv2 RFC 3376 IGMPv3 RFC 4541 IGMP Snooping (v1, v2, v3) RFC 2068 HTTP server RFC 1812 Requirements for IP Version 4 routers RFC 1519 Classless Interdomain Routing (CIDR) RFC 1256 IPv4 ICMP Router Discovery (IRDP) RFC 1058 RIP v1 RFC 2453 RIP v2 RFC 2925 MIB for remote ping trace RFC 1492 TACACS+ RFC 2138 RADIUS authentication RFC 2139 RADIUS accounting RFC 3579 RADIUS Extensible Authentication Protocol (EAP) support for 802.1X RFC 2267 Network ingress filtering RFC 2030 Simple Network Time Protocol (SNTP) RFC 854 Telnet client and server RFC 951 1542 BOOTP RFC 2131 BOOTP/DHCP relay agent and DHCP server RFC 1591 Domain Name System (DNS) RFC 2474 DiffServ Precedence, including 8 queues/port RFC 2598 DiffServ Expedited Forwarding (EF) RFC 2597 DiffServ Assured Forwarding (AF) RFC 2710 MLDv1 RFC 2768 VRRP RFC 2925 Ping over IPv6, Remote IPv6 ping, traceroute over IPv6 RFC 3176 sFlow RFC 3315 IPv6 DHCP relay RFC 3810 MLDv2 RFC 4541 MLD Snooping RFC 3973 PIM-DM, PIM-DM6 RFC 4601 PIM-SM, PIM-SM6 RFC 2597 AF PHB Group

www.edge-core.comFeatures - Hardware Specifications

Features

TEL: 886-3-5638888 FAX: 886-3-6686111 No.1, Creation Rd. III, Hsinchu Science Park, Taiwan 30077 sales_ec@edge-core.com www.edge-core.com

Security MAC limiting Allowed MAC addresses-configurable per port Dynamic ARP inspection (DAI) Proxy ARP Static ARP support DHCP snooping IP source guard 802.1X port-based 802.1X multiple supplicants 802.1X with VLAN assignment 802.1X with authentication bypass access (based on host MAC address) Web authentication Management interface access filtering 802.1X with VoIP VLAN support 802.1X dynamic ACL based on RADIUS attributes 802.1X Supported EAP types: Message Digest 5 (MD5), Transport Layer Security (TLS), Tunneled Transport Layer Security (TTLS), Protected Extensible Authentication Protocol (PEAP) Access control lists (ACLs) Port-based ACL (PACL)-ingress ACL entries (ACE) in hardware per system: 2K ACL counter for denied packets ACL counter for permitted packets L2-L4 ACL Static MAC authentication Control plane DoS protection

High Availability Dual hot-swappable power supplies Link Aggregation 802.3ad (LACP) support: ■ Number of LAGs supported: 32 ■ Maximum number of ports per LAG: 8 LAG load sharing algorithm-Bridged Unicast Traffic: ■ IP: S/D MAC, S/D IP ■ TCP/UDP: S/D MAC, S/D IP, S/D Port ■ Non-IP: S/D MAC LAG sharing algorithm-Routed Unicast Traffic: ■ IP: S/D IP ■ TCP/UDP: S/D IP, S/D Port LAG load sharing algorithm-Bridged Multicast Traffic: ■ IP: S/D MAC, S/D IP ■ TCP/UDP: S/D MAC, S/D IP, S/D Port ■ Non-IP: S/D MAC LAG sharing algorithm-Routed Multicast Traffic: ■ IP: S/D IP ■ TCP/UDP: S/D IP, S/D Port Tagged ports support in LAG

Quality of Service (QoS) Layer 2 QoS Ingress policing: 1 rate 2 color Hardware queues per port: 8 Scheduling methods (egress): Strict Priority (SP) 802.1p, DSCP /IP precedence trust and marking L2-L4 classification criteria: Interface, MAC address, Ethertype, 802.1p, VLAN, IP address, DSCP/IP precedence, TCP/UDP port numbers, etc. Congestion avoidance capabilities: Tail drop

Multicast IGMP snooping entries: 4K IGMP: v1, v2, v3 IGMP snooping PIM-SM, PIM-DM

Services and Manageability Web Interface Out-of-band management: Serial, 10/100BASE-TX Ethernet ASCII configuration Configuration rollback Dual image booting Element management tools: Network and Security Manager Simple Network Management Protocol (SNMP): v1, v2c, v3 Remote monitoring (RMON) (RFC 2819) Groups 1, 2, 3, 9 Network Time Protocol (NTP) DHCP server DHCP client and DHCP proxy DHCP relay and helper RADIUS authentication TACACS+ authentication SSHv2 PPPoE IA DSL Forum TR-101 IP Clustering Auto upgrade Port mirroring HTTP/HTTPs DNS resolver Syslog logging Temperature sensor Configuration backup via FTP/secure copy

Supported MiBs RFC 1155 Structure of Management Information (SMI) RFC 1157 SNMPv1 RFC 1905 RFC 1907 SNMP v2c, SMIv2 and revised MIB-II RFC 2572, 2574, 2575 SNMPv3, user-based security, encryption, and authentication RFC 2576 Coexistence between SNMP Version 1, Version 2 and Version 3 RFC 1213, RFC 1215 MIB-II, Ethernet-like MIB, and TRAPs RFC 2578 SNMP Structure of Management Information MIB RFC 2925 Ping/traceroute MIB RFC 2665 Ethernet-like interface MIB RFC 1493 Bridge MIB RFC 2096 IPv4 Forwarding Table MIB RFC 2011 SNMPv2 for IP using SMIv2 RFC 2012 SNMPv2 for transmission control protocol using SMIv2 RFC 2013 SNMPv2 for user datagram protocol using SMIv2 RFC 2863 Interface MIB RFC 3413 SNMP Application MIB RFC 3414 User-based security model for SNMPv3 RFC 3415 View-based Access Control Model for SNMP RFC 3621 PoE-MIB (PoE switches only) RFC 1724 RIPv2 MIB RFC 2863 Interface Group MIB RFC 2819 RMON MIB

Troubleshooting Debugging: CLI via console, Telnet, or SSH Diagnostics: Show and debug command statistics Traffic mirroring (port) Mirroring destination ports per system: 1 Multiple destination ports monitored to 1 mirror (N:1) Maximum number of mirroring sessions: 1 Mirroring to remote destination (over L2): 1 destination VLAN IP tools: Extended ping and trace

www.edge-core.comFeatures - Hardware Specifications

EC-DS-0112-01

Features

Ordering Information

TEL: 886-3-5638888 FAX: 886-3-6686111 No.1, Creation Rd. III, Hsinchu Science Park, Taiwan 30077 sales_ec@edge-core.com www.edge-core.com

For More Information To find out more about Edge-Core Networks products and solutions, visit www.edge-core.com

About Edge-Core Networks Edge-Core Networks is in the business of providing innovative network solutions. In the service provider network, in the data center or in the cloud, Edge-Core Networks delivers the software and systems that transform the way the world connects. Edge-Core Networks serves customers and partners worldwide. Additional information can be found at www.edge-core.com.

To purchase Edge-Core Networks solutions, please contact your Edge-Core Networks representative at 886 3 563 8888 or authorized reseller.

© Copyright 2012 Edge-Core Networks Corp. The information contained herein is subject to change without notice. This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered by Edge-Core Networks. Edge-Core Networks shall not be liable for technical or editorial errors or omissions contained herein.

Electromagnetic Compatibility CE Mark (EN55022 (CISPR 22) Class A) EN 61000-3/2/3 FCC Class A VCCI Class A

Environmental Specifications Temperature: ■ IEC 68-2-14 ■ -40ºC to 65ºC (Standard Operating) ■ -40ºC to 70ºC (Non-Operating) ■ Humidity:5% to 95% (Non-condensing) Vibration: IEC 68-2-36, IEC 68-2-6 Shock: IEC 68-2-29 Drop: IEC 68-2-32

Mechanical Dimensions (H x W x D): 1.5U height, 67 x 440 x 254 mm (2.64 x 17.32 x 10 in.) LED Indicators: Port, Uplink, System, Diagnostic AC Power Input: 100 ~ 240VAC, 50 ~ 60Hz DC Power Input: -48V Weight: 4.65 kg (10.65 lbs)

Safety UL60950-1 & CSA 60950-1 IEC 60950-1 & EN 60950-1

Warranty Please check www.edge-core.com for the warranty terms in your country.

Model Number Switches ECS4660-28F

Pluggable Optics ET-3203-BX20

ET-3203-BX20D

ET-4201-RF45

ET4203-BX20

ET4203-BX20D

Network Management System

Product Description

24-port 1000BASE-X Ethernet Switch with two 10 Gigabit Ethernet XFP ports and two optional 10 Gigabit XFP uplink modules.

1 Mbps Transceiver, LC connector (Distance: 20 km; Wavelengths: TX 1310 nm/ RX 1550 nm)

1 Mbps Transceiver, LC connector (Distance: 20 km; Wavelengths: TX 1550 nm/ RX 1310 nm)

10/100/1000BASE-T copper RJ-45 Transceiver (Distance: 100 m)

1 Gbps Transceiver, LC connector (Distance 20 km; Wavelengths: TX 1310 nm/ RX 1490 nm)

1 Gbps Transceiver, LC connector (Distance 20 km; Wavelengths: TX 1550 nm/ RX 1310 nm)

ECView Pro Network Management Software