Extreme Networks Policy Manager Instrukcja Użytkownika

Extreme Networks Confidential and ProprietaryExtreme Networks Metro SolutionsOlaf HagemannSenior Network [email protected]

© 2005 Extreme Networks, Inc. All Rights Reserved ExtremeWare XOS,Tested by Tolly Group Key Findings of Tolly Group:Modularity has benefits:•Extensibl

© 2005 Extreme Networks, Inc. All Rights Reserved EVC1CE-VLAN CoS 6CE-VLAN CoS 4CE-VLAN CoS 2EVC2UNIEVC3Ingress ProfilePer COS ID 6Ingress ProfilePer

© 2005 Extreme Networks, Inc. All Rights Reserved Advanced Traffic Management EngineBi-directional (ingress and egress) rate limiting• On egress, “pha

© 2005 Extreme Networks, Inc. All Rights Reserved QoS CharacteristicDual Rate Limiter2K Limiters per Physical Port8 Limiters per Ingress Service ID1Gb

© 2005 Extreme Networks, Inc. All Rights Reserved Egress QoS “Queue”Ingress and Egress3-tier Hierarchical Rate Limiting3rdlevel Limiter(Port CIR/PR)1s

© 2005 Extreme Networks, Inc. All Rights Reserved Extreme: Ingress and Egress Strict QueuingI/O ModuleBackplane Switching FabricLow Priority TrafficH

© 2005 Extreme Networks, Inc. All Rights Reserved Carrier Ethernet ProtectionQuelle:Scalability• Services and Bandwidth• 100,000’s of EVC’s• From Mbps

© 2005 Extreme Networks, Inc. All Rights Reserved Protecting the NetworkDetection of anomalies Æ Extreme’s CLEAR-Flow:• is an ASIC-based technology b

© 2005 Extreme Networks, Inc. All Rights Reserved Implications for Day-Zero attacksAttack Traffic (packets/sec)Attack Traffic (packets/sec)TimeTimeFoc

© 2005 Extreme Networks, Inc. All Rights Reserved Smarter AlternativeAttack Traffic (packets/sec)Attack Traffic (packets/sec)Detect & mitigate Det

© 2005 Extreme Networks, Inc. All Rights Reserved Provider installations with Extreme

© 2005 Extreme Networks, Inc. All Rights Reserved CLEAR-FlowFirst order threats that can be mitigatedSmurf attackPing of deathPing sweepPing floodPort

© 2005 Extreme Networks, Inc. All Rights Reserved Virtual Router BD10kLayer 3 Virtual Switch #1Layer 3 Virtual Switch #1Subnet 1Subnet 1 Subnet 2Subne

© 2005 Extreme Networks, Inc. All Rights Reserved Protecting the Network: IllustrationMeasure Analyze- Pre-Filter Data- Maintain Counters- Sample Flow

© 2005 Extreme Networks, Inc. All Rights Reserved EAPSEthernet Automatic Protection SwitchingProven sub-50ms failover timesFeatured on all Extreme pro

© 2005 Extreme Networks, Inc. All Rights Reserved EAPS v2: redundant ring connectionsAvoids „super loop“ problem if a common link betwenn 2 EAPS rings

© 2005 Extreme Networks, Inc. All Rights Reserved Carrier Ethernet ManagementQuelle:Scalability• Services and Bandwidth• 100,000’s of EVC’s• From Mbps

© 2005 Extreme Networks, Inc. All Rights Reserved “EPICenter” OverviewProduct focus: Network / Device Monitoring, Element ManagementInventory Manager

© 2005 Extreme Networks, Inc. All Rights Reserved “EPICenter Policy Manager”Functionality upgrade to EPICenter•License key only• Enables two additiona

© 2005 Extreme Networks, Inc. All Rights Reserved Converged Network Analyzer (CNA)VoIP Monitoring & Resolution for Extreme NetworksExtreme Switche

© 2005 Extreme Networks, Inc. All Rights Reserved CNA Dashboard: Managing applications in the Operations CenterApplication performance(e.g., VoIP, VPN

© 2005 Extreme Networks, Inc. All Rights Reserved Triple Play Solutions GmbH Lab Oct. 2005 in Munich-Dornachhttp://www.tp-alliance.net http://www.trip

© 2005 Extreme Networks, Inc. All Rights Reserved sFlow Traffic Analysisone part of the Clearflow functionalityProtocol for traffic accounting:•Usage-

© 2005 Extreme Networks, Inc. All Rights Reserved IP Mediation – Web Services(1) Network connections from the mobile network to PSDN / Internet (2)

© 2005 Extreme Networks, Inc. All Rights Reserved IP Mediation – VoIP (1) Network connections from the mobile network to PSDN / Internet (2) Subscri

© 2005 Extreme Networks, Inc. All Rights Reserved Seamless Real-Time and Historical Drilldown for SLAsDrill--Downto technical detailsService Level Vio

© 2005 Extreme Networks, Inc. All Rights Reserved Open integration with Fault Management toolsEasy High-resolution, Real-time AnalysisPerformance Anal

© 2005 Extreme Networks, Inc. All Rights Reserved Carrier Ethernet TDM SupportQuelle:Scalability• Services and Bandwidth• 100,000’s of EVC’s• From Mbp

© 2005 Extreme Networks, Inc. All Rights Reserved TDM ready - ExtremeWare XOS and P-ASICsOpen architecture with UNIX-like scale and availability• Memo

© 2005 Extreme Networks, Inc. All Rights Reserved Supporting Business ServicesMetroMetroCarrier EthernetCarrier EthernetIPIPMetroMetroCarrier Ethernet

© 2005 Extreme Networks, Inc. All Rights Reserved MPLS TLS: Simplifying ProvisioningSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitch

© 2005 Extreme Networks, Inc. All Rights Reserved MPLS TLS: Simplifying ProvisioningTransport Layer SecuritySwitchSwitchSwitchSwitchSwitchSwitchSwitch

© 2005 Extreme Networks, Inc. All Rights Reserved Extreme Standards LeadershipIndustry Affiliations802.1ad/ah Provider Bridging• Steve Haddock 802.1 –

© 2005 Extreme Networks, Inc. All Rights Reserved SwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchCustomer Site ACustomer Site

© 2005 Extreme Networks, Inc. All Rights Reserved vMAN: Simplifying ProvisioningSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwit

© 2005 Extreme Networks, Inc. All Rights Reserved SwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchSwitchCustomer Site ACustomer Site

© 2005 Extreme Networks, Inc. All Rights Reserved Supporting Transport for IP NetworkMetroMetroCarrier EthernetCarrier EthernetMetroMetroCarrier Ether

© 2005 Extreme Networks, Inc. All Rights Reserved Supporting TV Distribution ServiceMetroMetroCarrier EthernetCarrier EthernetMetroMetroCarrier Ethern

© 2005 Extreme Networks, Inc. All Rights Reserved Supporting VoD ServiceMetroMetroCarrier EthernetCarrier EthernetMetroMetroCarrier EthernetCarrier Et

© 2005 Extreme Networks, Inc. All Rights Reserved Supporting VoIP ServiceMetroMetroCarrier EthernetCarrier EthernetMetroMetroCarrier EthernetCarrier E

© 2005 Extreme Networks, Inc. All Rights Reserved Carrier Ethernet StandardsProtection• MEF 2 – Ethernet Protection • MEF 4 – Architecture FrameworkQu

© 2005 Extreme Networks, Inc. All Rights Reserved MetroMetroCarrier EthernetCarrier EthernetMetroMetroCarrierCarrierEthernetEthernetMetro Metro Carrie

© 2005 Extreme Networks, Inc. All Rights Reserved Extreme’s Key StrengthsKey Strengths BenefitQuality Connections• Ingress and Egress QoS for low late

© 2005 Extreme Networks, Inc. All Rights Reserved Produktportfolio for ConvergenceBlackDiamondBlackDiamondFamiliyFamiliyAlpine Alpine FamiliyFamiliySu

© 2005 Extreme Networks, Inc. All Rights Reserved Metro Ethernet Network OverviewStandard based and flexibleCustomer EdgeProvider EdgeMetro CoreWifi-N

© 2005 Extreme Networks, Inc. All Rights Reserved

Extreme Networks Confidential and ProprietaryThank YouThis product roadmap represents Extreme Network’s current strategic direction. All ExtremeWare®

© 2005 Extreme Networks, Inc. All Rights Reserved ExtremeWare Device ManagementCommunity stringRS-232, Telnet,SSH2HTTPSNMP v1/v2c/v3Command Line Inter

© 2005 Extreme Networks, Inc. All Rights Reserved What’s Carrier Ethernet ?Quelle:Scalability• Services and Bandwidth• 100,000’s of EVC’s• From Mbps t

© 2005 Extreme Networks, Inc. All Rights Reserved Policy-Based QoSTraffic Grouping Classification + QoS Profile => Policy• Classifications: L1-L4 i

© 2005 Extreme Networks, Inc. All Rights Reserved Scalable and Available Unix based Operating SystemModularity Æ Availability and scale• Memory protec