The Fiberstore FS S5850 Series Routing Switches are high performance Ethernet switches to meet next generation Metro, Data Center and Enterprise network requirements. FS S5850 is designed based on the fourth generation high-end scalable chipset , which support L2/L3/Data Center/Metro features. The FS S5850 comes with complete system software with comprehensive protocols and applications to facilitate rapid service deployment and management for both traditional L2/L3 networks and Data Center networks.
Презентация для доклада, сделанного в рамках конференции Juniper New Network Day 01.01.2014.
Докладчик -- Product Line Manager компании Juniper Networks Дмитрий Шокарев.
Видеозапись этого доклада с онлайн-трансляции конференции вы можете увидеть здесь:
http://www.youtube.com/watch?v=G96VHB4vfsw
Презентация для доклада, сделанного в рамках конференции Juniper New Network Day 01.01.2014.
Докладчик -- Product Line Manager компании Juniper Networks Дмитрий Шокарев.
Видеозапись этого доклада с онлайн-трансляции конференции вы можете увидеть здесь:
http://www.youtube.com/watch?v=G96VHB4vfsw
IGRP and EIGRP.
Comparison between traditional Distance Vector Routing Protocols and Enhanced Distance Vector Routing Protocols.
EIGRP Message Format and Packet Header.
EIGRP Parameters (K1,K2, K3, K4, K5, Reserved, and Hold Time).
Protocol Dependent Modules (PDM).
Reliable Transport Protocol (RTP).
EIGRP Packet Types (Hello Packets, Update packets, Acknowledgment packets, Query and Reply packets).
EIGRP Bounded Updates.
Introduction to DUAL Algorithm.
EIGRP Administrative Distance.
The router eigrp Command, the network command with a Wildcard Mask, Verifying EIGRP and using the Bandwidth command
EIGRP Metric Calculation, EIGRP uses Bandwidth, delay, reliability, and load in its metric.
DUAL Concepts, successor, Feasible distance (FD), Feasible successor (FS), Reported distance (RD)/ AD and Feasibility Condition (FC).
DUAL Finite State Machine, Null0 Summary Route, Disabling Automatic Summarization, Manual Summarization and EIGRP default route
The Secret Sauce is the Control Plane, not the Encapsulation
Host Route Distribution decoupled from the Underlay protocol
Use MultiProtocol-BGP (MP-BGP) on the Leaf nodes to distribute internal Host/Subnet Routes and external reachability information
Route-Reflectors deployed for scaling purposes
VXLAN terminates its tunnels on VTEPs (Virtual Tunnel End Point).
Each VTEP has two interfaces, one is to provide bridging function for local hosts, the other has an IP identification in the core network for VXLAN encapsulation/decapsulation.
VXLAN Encapsulation and De-encapsulation occur on T2
Bridging and Gateway are independent of the port type (1/10/40G ports)
Encapsulation happens on the egress port
Decapsulation happens on the ingress port
Service Oriented Architecture
2 or 3 layer network to Leaf & Spine
High density and bandwidth required
Layer 3 ECMP
No oversubscription
Low and uniform delay characteristic
Wire & configure once network
Uniform network configuration
Workload Mobility
Workload Placement
Segmentation
Scale
Automation & Programmability
L2 + L3 Connectivity
Physical + Virtual
Open
1) Describe the three primary options for enabling inter-VLAN routing.
2) Configure legacy inter-VLAN routing.
3) Configure router-on-a-stick inter-VLAN routing.
4) Troubleshoot common inter-VLAN configuration issues.
5) Troubleshoot common IP addressing issues in an inter-VLAN-routed environment.
6) Configure inter-VLAN routing using Layer 3 switching.
7) Troubleshoot inter-VLAN routing in a Layer 3-switched environment.
IGRP and EIGRP.
Comparison between traditional Distance Vector Routing Protocols and Enhanced Distance Vector Routing Protocols.
EIGRP Message Format and Packet Header.
EIGRP Parameters (K1,K2, K3, K4, K5, Reserved, and Hold Time).
Protocol Dependent Modules (PDM).
Reliable Transport Protocol (RTP).
EIGRP Packet Types (Hello Packets, Update packets, Acknowledgment packets, Query and Reply packets).
EIGRP Bounded Updates.
Introduction to DUAL Algorithm.
EIGRP Administrative Distance.
The router eigrp Command, the network command with a Wildcard Mask, Verifying EIGRP and using the Bandwidth command
EIGRP Metric Calculation, EIGRP uses Bandwidth, delay, reliability, and load in its metric.
DUAL Concepts, successor, Feasible distance (FD), Feasible successor (FS), Reported distance (RD)/ AD and Feasibility Condition (FC).
DUAL Finite State Machine, Null0 Summary Route, Disabling Automatic Summarization, Manual Summarization and EIGRP default route
The Secret Sauce is the Control Plane, not the Encapsulation
Host Route Distribution decoupled from the Underlay protocol
Use MultiProtocol-BGP (MP-BGP) on the Leaf nodes to distribute internal Host/Subnet Routes and external reachability information
Route-Reflectors deployed for scaling purposes
VXLAN terminates its tunnels on VTEPs (Virtual Tunnel End Point).
Each VTEP has two interfaces, one is to provide bridging function for local hosts, the other has an IP identification in the core network for VXLAN encapsulation/decapsulation.
VXLAN Encapsulation and De-encapsulation occur on T2
Bridging and Gateway are independent of the port type (1/10/40G ports)
Encapsulation happens on the egress port
Decapsulation happens on the ingress port
Service Oriented Architecture
2 or 3 layer network to Leaf & Spine
High density and bandwidth required
Layer 3 ECMP
No oversubscription
Low and uniform delay characteristic
Wire & configure once network
Uniform network configuration
Workload Mobility
Workload Placement
Segmentation
Scale
Automation & Programmability
L2 + L3 Connectivity
Physical + Virtual
Open
1) Describe the three primary options for enabling inter-VLAN routing.
2) Configure legacy inter-VLAN routing.
3) Configure router-on-a-stick inter-VLAN routing.
4) Troubleshoot common inter-VLAN configuration issues.
5) Troubleshoot common IP addressing issues in an inter-VLAN-routed environment.
6) Configure inter-VLAN routing using Layer 3 switching.
7) Troubleshoot inter-VLAN routing in a Layer 3-switched environment.
FS S5800 Series 48xGigabit SFP with 4x10GbE SFP+ Switch Katherine Wang
FS S5800 Series is high performance Ethernet switches to meet next generation Metro, Data Center and Enterprise Ethernet network requirements designed based on highend scalable chipset with integration of Layer 2 to Layer 4 packet processing engine, traffic management and fabric interface.
Veryx ATTEST range of testing solutions enable NEMs and NSPs reduce the time taken to test with automated test suites in an integrated testing framework providing many tester-friendly features such as flexible DUT control, GUI or CLI-based access, easy debugging and detailed reporting.
The Fiberstore FS S5850 Series Routing Switches are high performance Ethernet switches to meet next generation Metro, Data Center and Enterprise network requirements. FS S5850 is designed based on the fourth generation high-end scalable chipset , which support L2/L3/Data Center/Metro features. The FS S5850 comes with complete system software with comprehensive protocols and applications to facilitate rapid service deployment and management for both traditional L2/L3 networks and Data Center networks.
The Fiberstore FS S5850 Series Routing Switches are high performance Ethernet switches to meet next generation Metro, Data Center and Enterprise network requirements. FS S5850 is designed based on the fourth generation high-end scalable chipset , which support L2/L3/Data Center/Metro features. The FS S5850 comes with complete system software with comprehensive protocols and applications to facilitate rapid service deployment and management for both traditional L2/L3 networks and Data Center networks.
The Fiberstore FS S5850 Series Routing Switches are high performance Ethernet switches to meet next generation Metro, Data Center and Enterprise network requirements.
The FS S5850 Series are cost-effective Ethernet access and aggregation platform to Enterprise, Data Center and Metro application. The FS S5850 Series Switches currently includes four configurations: S5850-48S2Q4C/S5850-48S6Q/FS S5850 and S5850-32S2Q.
The Fiberstore FS S5850 Series Routing Switches are high performance Ethernet switches
to meet next generation Metro, Data Center and Enterprise network requirements. FS
S5850 is designed based on the fourth generation high-end scalable chipset , which support L2/L3/Data Center/Metro features.
Loose tube vs. tight-buffered fiber optic cableTeresa Huang
Selecting the right type of fiber optic cable boils down to the applications and the installation. This post will introduce and compare two fiber optic cable types based on different cable constructions—loose-tube and tight-buffered fiber optic cable.
40 g short distance transmission solutionsTeresa Huang
There are various types of 40G QSFP+ transceivers available on the market, such as 40GBase-SR4, 40GBase-CSR4, 40GBase-LR4, etc, and each of them is designed to support long or short distance transmission. In this post, I am going to introduce some effective 40G short-reach transmission solutions, including 40GBase-SR4, QSFP-40G-CSR4, QSFP-40G-CR4.
Choosing 24 fiber mpomtp cabling for 40100 g migrationTeresa Huang
Running 40G requires 8 fibers, with 4 fibers each transmitting at 10Gbit/s and 4 fibers each receiving at 10Gbit/s. Running 100G requires a total of 20 fibers, with 10 transmitting at 10Gbit/s and 10 receiving at 10Gbit/s. Both scenarios call for high-density MPO-style connectors, which can be either 12-fiber or 24-fiber. However, 24-fiber MPO/MTP cabling is often considered to be the better solution for 40/100G migration. Why? Reading this post and you will get the reasons.
In order to respond to improve data security in high-performance networks, many physically discrete fiber connection systems have emerged. Among these systems, keyed LC connectivity system is a good choice.
Have you chose the right rack mount fiber enclosure for projectTeresa Huang
Rack mount fiber enclosure—a high-density cable management tool which can provide easy-to-manage environment and protection for fiber optic cables, has been well received by data center managers. There are various types of rack mount fiber enclosures available in different design and for different applications on the market.
Introduction to two common qsfp+ cable types for 40 g ethernetTeresa Huang
In order to satisfy the increasing demand for greater bandwidth and the growing amount of data transmission in today’s enterprise data center and networking environments, various kinds of high-performance and reliable cables are designed, like QSFP+ cables.
Fiber media converter is a cost-effective solution to this issue. It dramatically increases the bandwidth and transmission distance of the local area network (LAN) by allowing the use of fiber and integrating new equipment into existing cabling infrastructure.
Generating a custom Ruby SDK for your web service or Rails API using Smithyg2nightmarescribd
Have you ever wanted a Ruby client API to communicate with your web service? Smithy is a protocol-agnostic language for defining services and SDKs. Smithy Ruby is an implementation of Smithy that generates a Ruby SDK using a Smithy model. In this talk, we will explore Smithy and Smithy Ruby to learn how to generate custom feature-rich SDKs that can communicate with any web service, such as a Rails JSON API.
State of ICS and IoT Cyber Threat Landscape Report 2024 previewPrayukth K V
The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development.
The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers:
State of global ICS asset and network exposure
Sectoral targets and attacks as well as the cost of ransom
Global APT activity, AI usage, actor and tactic profiles, and implications
Rise in volumes of AI-powered cyberattacks
Major cyber events in 2024
Malware and malicious payload trends
Cyberattack types and targets
Vulnerability exploit attempts on CVEs
Attacks on counties – USA
Expansion of bot farms – how, where, and why
In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East
Why are attacks on smart factories rising?
Cyber risk predictions
Axis of attacks – Europe
Systemic attacks in the Middle East
Download the full report from here:
https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/
Securing your Kubernetes cluster_ a step-by-step guide to success !KatiaHIMEUR1
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
DevOps and Testing slides at DASA ConnectKari Kakkonen
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Tobias Schneck
As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other?
Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.
UiPath Test Automation using UiPath Test Suite series, part 3DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 3. In this session, we will cover desktop automation along with UI automation.
Topics covered:
UI automation Introduction,
UI automation Sample
Desktop automation flow
Pradeep Chinnala, Senior Consultant Automation Developer @WonderBotz and UiPath MVP
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Ramesh Iyer
In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf91mobiles
91mobiles recently conducted a Smart TV Buyer Insights Survey in which we asked over 3,000 respondents about the TV they own, aspects they look at on a new TV, and their TV buying preferences.
Assuring Contact Center Experiences for Your Customers With ThousandEyes
S5850 3-datasheet
1. Optical Communication System
1
Datasheet
FS S5850 Series Routing Switches
OOOOOOOOOOOOOOOOOOOOOverview
The Fiberstore FS S5850 Series Routing Switches are high performance Ethernet switches
to meet next generation Metro, Data Center and Enterprise network requirements. FS
S5850 is designed based on the fourth generation high-end scalable chipset , which
support L2/L3/Data Center/Metro features. The FS S5850 comes with complete system
software with comprehensive protocols and applications to facilitate rapid service
deployment and management for both traditional L2/L3 networks and Data Center
networks.
The FS S5850 Series are cost-effective Ethernet access and aggregation platform to
Enterprise, Data Center and Metro application.
The FS S5850 Series Switches currently includes four configurations: S5850-48S2Q4C/
S5850-48S6Q/FS S5850 and S5850-32S2Q.
Primary Features and Benefits
I.Multiple Software Images to Provide Flexible Deployment Options
The Fiberstore FS S5850 Series offers 2 different FiberstoreOS software images: IP Base
and IP Services. The system vendors can choose the image with features for today
and have the option for smoothly upgrading in the future.
Table 1- Primary Features in FiberstoreOS Software Images
2. Optical Communication System
2
Datasheet
IP Base IP Services
L2 Switching/VLAN/Vlan Classification IP Base +
Static Link Aggregation/LACP
STP&RSTP&MSTP/Smart Link/ MLAG
OSPF/BGP/Route Map/PBR/ VRF/ BFD for
Static Route& OSPF
IGMP Snooping v1&v2&v3 IGMP v1&v2&v3/PIM-SM&SSM
Static IPv4 Routing/RIPv1&v2/VRRP QinQ/ERPS
ACL, QoS
NVGRE/VXLAN/GENEVE
Storm Control/Port Security/DHCP
Snooping/IP Source Guard/ARP
Inspection/ CPU Storm
Protection/802.1x/Radius
Telnet/TFTP/NTP/SSH/DNS/SNMPv1&v2&v3/
RMON/Port&Vlan Mirror/sFlow
II.System Design for Green and Energy Saving
The FS S5850 Series supports the fans with speed control as well as power consumption
adjustment which is based on the flow status of the ports (According to the
temperature inside the box). Both can highly save the energy and go for green.
III.Customized Profile for Different Deployment Scenarios
The Flexible Table Management (FTMTM) technology employed by Fiberstore FS S5850
Series offers multiple table size configuration profiles as optimized choices for different
network scenarios. FS S5850 could support up to 128K MAC address table or 8K IP
routing table.
Besides these pre-defined profiles, application-specific profile is also applicable with
Fiberstore Advanced Service.
IV.Data Center Features
FS S5850 support many new Data Center features, such as NVGRE/VXLAN/GENEVE,
Priority Flow Control (PFC), Enhanced Transmission Selection (ETS), Quantized
Congestion Notification (QCN), and Data Center TCP. MLAG features are also good
candidates for TOR switch in data center network.
V.Uninterrupted Performance Assurance and Multi-Node Redundancy and Robust
Fault Protection System
3. Optical Communication System
3
Datasheet
l Hardware
−Hot-swappable power modules.
−Power module supports AC 1+1 redundancy.
−Fans support N+1 redundancy.
−Real-time environment monitoring for chipset temperature, status of fan and power,
etc.
l Software
−LACP, ECMP, VRRP, VARP, STP/RSTP/MSTP, Smart Link, BFD, ERPS and load-balancing.
−Fiberstore-patented Sysmon for CPU status monitoring and protection upon
unpredictable fault.
VI.Outstanding QoS Control with Flexible Classification and Queuing Mechanism
Rich QoS mechanisms are implemented in Fiberstore FS S5850 Series including flow
classification based on source/destination MAC, source/destination IP address,
protocol type, TCD/UDP port number to meet complicated network requirements.
Moreover, Fiberstore FS S5850 Series provides 8 hardware queues per port to support
multi-stage scheduling (WDRR, SP) and Tail Drop/WRED. 3-stage shaping
(queue/group/port) can be applied for flow management. Meanwhile, ingress and
egress policer provide bandwidth monitoring with a granularity of up to 32Kbps. Both
srTCM (Single Rate Three Color Marker) and trTCM (Two Rate Three Color Marker) can
be supported.
VII. Triple-play Service Support with Bandwidth Guaranty for High Quality Application
The Fiberstore FS S5850 Series offers high bandwidth for Triple-Play services such as IPTV,
video monitoring. The built-in QoS capabilities and flexible queuing technologies
guarantee high quality of services.
Rich multicast protocol set (IGMP Snooping, IGMP v1/v2, PIM-SM) supports up to 16K
multicast groups, 1K physical replications and 4K logical replications per group. With
FiberstoreOS software, IPTV service and multicast time-delay control is fully supported.
VIII.Comprehensive Network Security Policy
The Fiberstore FS S5850 Series supports subscriber-class, switch-class and network-class
security control.
Basic IPv4/IPv6/MAC ACL is employed to filter IPv4/IPv6/Non-IP packet respectively
and can be applied to both port and VLAN. Besides that, extended IPv4/IPv6 ACL is
also available. In a single ACL rule, both IP and MAC ACE can take effect to filter IP
and Non-IP packets simultaneously.
Fiberstore ARP Inspection and IP Source Guard features prevent network from
malicious ARP attack. CPU Traffic Protection, Storm Control features optimize CPU load.
Centralized 802.1x authentication forbids illegal user access to the network.
4. Optical Communication System
4
Datasheet
Product Features and Benefits
Table 2-Descriptions and Specifications
Feature Benefit
Triple-Play Services
l Advanced QoS functionalities provide differentiated class of service
treatment to support triple-play service.
l Multicast VLAN Registration (MVR) continuously sends multicast
streams in a multicast VLAN while isolating the streams from
subscriber VLANs to reduce overall bandwidth requirement for
multicast distribution in ring based network.
l Comprehensive security solution to provide protection of subscribers,
switch, and network at the network edge.
Layer 2 VPN
Service
l Fiberstore Selective QinQ feature strictly conforms to 802.1Q and
802.1ad and provides more flexibility to customers while classifying
VLAN based on port, original VLAN or L2/L3 information for the
purpose of segregating subscriber traffic in the network.
l VLAN translation in both ingress and egress translates VLAN IDs
carried in the data packets between different virtual LANs or
between VLAN and non-VLAN encapsulating interfaces at Layer 2.
Data Center
l 802.1Qbb PFC (Priority Flow Control)
l 802.1Qaz ETS (Enhanced Transmission Selection)
l 802.1Qau QCN (Quantized Congestion Notification)
l Layer 2 network scalability: MLAG
l NVGRE/VXLAN/GENEVE
Availability and Reliability
Superior
Redundancy for
Fault Backup
l IEEE 802.1d Spanning Tree Protocol (STP) support for redundant
backbone connections and loop-free networks simplifies network
configuration and improves fault tolerance.
l IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) allows a spanning-
tree instance per VLAN, for Layer 2 load sharing on redundant links.
l IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) provides rapid
spanning-tree convergence independent of spanning-tree timers
and also offers the benefit of distributed processing.
l Link Aggregation Control Protocol (LACP) allows the creation of
Ethernet channeling with devices that conform to IEEE 802.3ad.
l Equal-Cost MultiPath (ECMP) works for routing packets along multiple
paths of equal cost for load balancing and redundancy.
l Virtual Router Redundancy Protocol (VRRP) is supported to create
redundant, failsafe routing topologies.
l Fiberstore-patented Sysmon mechanism monitors real-time CPU
status and pauses switch work while unexpected fault happens.
l ERPS (Ethernet Ring Protection Switching) is used to create a fault
tolerant topology by configuring a primary and secondary path for
5. Optical Communication System
5
Datasheet
each VLAN.
l SmartLink is a fault tolerant topology for two uplink application, can
provide < 50ms protection time.
l Virtual-ARP(VARP) allows multiple switches to simultaneously route
packets from a common IP address in an active-active router
configuration.
l Multi-Chassis Link Aggregation(MLAG) is supported to logically
aggregate ports across two switches.
High-Performance
IP Routing
l Basic IP unicast routing protocols (static, Routing Information Protocol
Version 1 [RIPv1], and RIPv2) are supported for small-network routing
applications.
l Advanced IP unicast routing protocols (Open Shortest Path First [OSPF]
and Border Gateway Protocol Version 4 [BGPv4]) is supported for
load balancing and constructing scalable LANs.
l Protocol Independent Multicast sparse mode (PIM-SM) for IP multicast
routing is supported.
l Up to 256 switch virtual interfaces (SVIs) are supported; all physical
ports can be routed port.
l Proxy Address Resolution Protocol (ARP) allows to answer the ARP
queries from a network host.
l Gratuitous Address Resolution Protocol (ARP) assists in the updating of
other machines' ARP tables and helps detect IP conflicts and ensure
load balancing on incoming traffic in some cases.
l IPv6 routing support in hardware for maximum performance.
l VRRP provides dynamic load balancing and failover for routed links.
Robust Multicast
Control
l Internet Group Management Protocol (IGMP) snooping provides fast
client joins and leaves of multicast streams and limits bandwidth-
intensive video traffic to only the requestors.
l IGMP Snooping TCN provides quick response capability to topology
changes so that the service provider’s multicast service will not be
paused even the topology is altered temporarily.
l IGMP immediate leave overrides the normal checks to see if there
are other hosts or proxy devices on the local segment interested in
the multicast group and shorten the time of changing channels for
IPTV services.
l IGMP filtering provides multicast authentication by filtering out
nonsubscribers and limits the number of concurrent multicast streams
available per port.
l IGMP proxy enables the system to issue IGMP host messages on
behalf of hosts that the system discovered through standard IGMP
interfaces to allow users on any downstream network to join an
upstream sourced multicast group.
l Multicast VLAN Registration (MVR) allows one single multicast VLAN to
be shared among different subscriber VLANs on the network which
improves bandwidth utilization by reducing multicast traffic in the
subscriber VLANs and simplifies multicast group management.
6. Optical Communication System
6
Datasheet
Bandwidth
Optimization
l Per-port broadcast, multicast, and unicast storm control prevents
faulty end stations from degrading overall systems performance.
l Equal-cost routing facilitates Layer 3 load balancing and redundancy
across the stack.
l Switch-port autorecovery automatically attempts to reactivate a link
that is disabled because of a network error.
l Up to 55 Link Aggregation groups are supported with 16 member
ports per group.
QoS and Control
Advanced QoS
l Fiberstore QoS queuing mechanism differentiates flows according to
any L2/L3/L4 identity and enqueues flexibly; meanwhile modifies
CoS/DSCP and limits throughput.
l Ingress and egress policer is provided based on 802.1p Class of
Service (CoS), Differentiated Services Code Point (DSCP), VLAN ID
and QoS ACLs (IP ACLs or MAC ACLs), which can include source and
destination IP address, source and destination MAC address, Layer 4
TCP/UDP information, or any combination of these fields.
l Ingress and egress aggregate policer reinforces traffic policing across
all of the applied ports. QoS applies the bandwidth limits specified in
an aggregate policer cumulatively to all the flows matching the
criteria.
l Weighted Random Early Detection (WRED) generally drops packets
selectively based on IP precedence and packets with a higher IP
precedence are less likely to be dropped than packets with a lower
precedence; WRED ensures higher priority traffic to be delivered with
a higher probability than lower priority traffic.
l In contrast to WRED, Tail Drop provides per QoS class congestion
avoidance at the queues before a disruption occurs.
l Queue, service and port based three-level traffic shaping contributes
to up to 64Kbps granularity.
l Weighted Deficit Round Robin (WDRR) extends the quantum idea
from the DRR to provide weighted throughput for each queue.
Different queues have different weights and the quantum assigned
to each queue in its round is proportional to the relative weight of the
queue among all the queues serviced by that scheduler.
l Strict Priority queue (SP) provides strict-priority queuing for a traffic
class that enables delay-sensitive data, such as voice, to be sent
before packets in other queues are sent. The priority queue is serviced
first until it is empty.
l Strict priority queuing helps ensure that the highest-priority packets
are serviced ahead of all other traffic.
l 8 egress queues per port help enable differentiated management of
up to 8 traffic types across the stack.
l Support 8 differ-service domain, could provide flexible differ service
for the ports.
7. Optical Communication System
7
Datasheet
l There is no performance loss when using advanced QoS
functionalities.
Network Security
Comprehensive
Security Solutions
l Subscriber Security
−IEEE 802.1x allows dynamic, port-based security by providing user
authentication.
−IEEE 802.1x and port security are provided to authenticate the port
and manage network access for all MAC addresses, including that of
the client.
−DHCP Snooping prevents malicious users from spoofing a DHCP server
and sending out bogus addresses. This feature is used by other primary
security features to prevent a number of other attacks such as
Address Resolution Protocol (ARP) poisoning.
−DHCP Snooping helps administrators with consistent mapping of IP to
MAC addresses. This can be used to prevent attacks that attempt to
poison the DHCP binding database and to rate-limit the amount of
DHCP traffic that enters a switch port.
−Dynamic ARP Inspection helps ensure user integrity by preventing
malicious users from exploiting the insecure nature of the ARP protocol.
−IP Source Guard prevents a malicious user from spoofing or taking
over another user's IP address by creating a binding table between
client's IP and MAC address, port, and VLAN.
l Switch Security
−Secure Shell (SSH) Protocol, Kerberos, and Simple Network
Management Protocol Version 3 (SNMPv3) provide network security
by encrypting administrator traffic during Telnet and SNMP sessions.
−Multilevel security on console access prevents unauthorized users
from altering the switch configuration.
−RADIUS authentication facilitates centralized control of the switch and
restricts unauthorized users from altering the configuration.
−Three MAC based security mechanisms are offered to control access:
MAC filtering
MAC port binding
MAC number limitation per port
CPU traffic protection refuses abnormal data flow to avoid malicious
attack.
l Network Security
−Fiberstore ACLs allows for multiple layer rules coexistence such L2 with
L3, or even with L4.
−Fiberstore security VLAN ACLs on all VLANs prevent unauthorized data
flows from being bridged within VLANs.
−Port-based ACLs for Layer 2 interfaces allow security policies to be
applied on individual switch ports.
−Three different mechanisms are supported to protect the STP
topology from loops or undesired topology changes caused by
8. Optical Communication System
8
Datasheet
addition of switches, mis-configuration of devices or even malicious
attempts to override the current Spanning Tree Root Bridge.
−Bridge Protocol Data Unit (BPDU) Guard
−Bridge Protocol Data Unit (BPDU) Filtering
−Root Guard
−BPDU Guard and BPDU Filtering protect against possible loops
created by switches added on ports configured with the STP Port Fast
feature.
Root Guard protect against added switches attempting to become
the Root Bridge.
Manageability
Superior
Manageability
l FiberstoreOS Software CLI support provides common user interface
and command set with all Fiberstore routing switches.
l Layer 2 traceroute eases troubleshooting by identifying the physical
path that a packet takes from source to destination.
l Network Timing Protocol (NTP) client guarantees accurate and
consistent time synchronization with the whole network.
l File Transfer Protocol (FTP) / Trivial File Transfer Protocol (TFTP) reduce
the cost of administering software upgrades by downloading from a
centralized location.
l Dynamic Host Configuration Protocol (DHCP) Relay allows a DHCP
relay agent to broadcast DHCP requests to the network DHCP server.
l Multifunction LEDs per port for port status; half-duplex and full-duplex
mode; and 10BASE-T, 100BASE-TX, 1000BASE-T, 10GBASE-LR indication
as well as switch-level status LEDs for system, redundant-power supply,
and bandwidth utilization provide a comprehensive and convenient
visual management system.
Applications
I. Network Application 1: Metro L2 Ring Network
Ring network topology allows service provider to establish robust network and
operate multiple services.
Figure 1 shows the deployment example using the Fiberstore FS S5850 Series for Metro
L2 ring network topology as Aggregation or Access devices. FS S5850 mainly use
QinQ/ERPS etc. features to deliver Metro Ethernet service.
Figure1-Metro L2 Ring Network Topology with the FS S5850 Series
9. Optical Communication System
9
Datasheet
II.Network Application 2: Enterprise Data Center Network
FS S5850 Series can provide access ports for high density 10GE servers, and 40GE uplink
ports to Aggregation or Core switches.
Figure 2 shows a deployment example using the Fiberstore FS S5850 Series for Data
Center Access network topology as TOR access devices. FS S5850 may use the
following features: VLAN, LACP, RSTP&MSTP, MLAG, DCB Features (PFC/QCN/ETS, Data
Center TCP), OSPF, QoS, NVGRE/VXLAN/GENEVE etc.
Figure 2-Data Center Servers Access Network with FS S5850 Series
10. Optical Communication System
10
Datasheet
Product Specifications
S5850-48X2Q4Z S5850-48X6Q S5850-32X2Q
S5850-32X
(Out Of Stock)
Total SFP+ Ports 48 48 32 32
Total QSFP+ Ports 2 6 2 -
Total QSFP28 Ports 4 - - -
Max 10GbE Ports 72 72 40 32
Max 40GbE Ports 6 6 2 -
Max 100GbE Ports 4 - - -
Throughput 1.92Tbps 1.44Tbps 800Gbps 640Gbps
Packets/Second 1200Mpps
Table 3-Model Comparison
11. Optical Communication System
11
Datasheet
Forwarding
Technology
Store and Forward/Cut-Through
Latency 612ns
CPU Freescale PowerPC P1010
System Memory 2 GB
Flash Storage
Memory
2 GB
Packet Buffer
Memory
9 MB
100/1000 Mgmt Ports 1
RS-232 Serial Ports 1 (RJ-45)
USB Ports 1
Hot-swap Power
Supplies
2 (1+1 redundant)
Hot-swappable Fans 4 (N+1 redundant)
Airflow Option F-R
Size(WxHxD)
44.0 x 4.36 x 47.0
cm (17.5 x 1.73 x
18.5 in.)
44.0 x 4.36 x 47.0
cm (17.5 x 1.73 x
18.5 in.)
44.0 x 4.36 x
40.0 cm
(17.5 x 1.73
x 15.9 in.)
44.0 x 4.36 x 40.0
cm (17.5 x 1.73 x
15.9 in.)
Typical/Max Power
Draw
160W/200W 150W/190W 120W/150W 120W/150W
Weight(With one PSU) 22lbs (8.3kg) 22lbs (8.3kg) 15lbs (7.0kg) 15lbs (7.0kg)
MTBF(Hours) 99,936.04 97,210.07 108,822.22 108,822.22
Max VLANs 4094
Max MAC Entries 128K
Jumbo Frames 9600 Bytes
Max routes 8K
12. Optical Communication System
12
Datasheet
Max ARP Entries 20K
Max Multicast
Groups
8K
Table 4-Environmental Characteristics
Description Specification
Operating Temperature l 0 to 45 ºC (Long term) -5 to 55 ºC (Short term)
Storage Temperature l -40 to 70 ºC
Relative Humidity l 0 to 95% (non-condensing)
Acoustic Noise
l International Organization for Standardization (ISO) 7779: <
50dB
Table 5-Safety and Compliance
Description Specification
Safety Certifications
l Ready to UL to UL 60950, Third Edition
l Ready to CE Marking
l Ready to NEBS level 3
Electromagnetic
Emissions Certifications
l Ready to FCC Part 15 Class A
l Ready to CE
Warranty l Limited lifetime warranty
Table 6- Supported Modules
Image Part Numnber ID NO. Description
10G SFP
Transceiver
SFP-10GSR-85 #58773
10GBASE-SR SFP+ 850nm 300m DOM IND
Transceiver
SFP-10GLRM-31 #11590
10GBASE-LRM SFP+ 1310nm 220m DOM
Transceiver
SFP-10GLR-31 #58774
10GBASE-LR SFP+ 1310nm 10km DOM
IND Transceiver
SFP-10GER-55 #11592
10GBASE-ER SFP+ 1550nm 40km DOM
Transceiver
13. Optical Communication System
13
Datasheet
SFP-10GZR-55 #11595
10GBASE-ZR SFP+ 1550nm 80km DOM
Transceiver
SFP-10GZRC-55 #29799
10G SFP+ 1550nm 100km DOM
Transceiver
40G SFP+
Transceiver
QSFP-SR4-40G #17931
40GBASE-SR4 QSFP+ Transceiver 4 lanes
850nm,150m MPO
QSFP-CSR4-40G #34912 40G QSFP+ CSR4, 400m MPO
QSFP-LX4-40G #35205
40GBASE-LX4 QSFP+ 1310nm 2km
Transceiver for SMF&MMF
QSFP-IR4-40G #34913
40GBASE-IR4-Lite QSFP+ 1310nm 2km LC,
SMF
QSFP-PIR4-40G #34917
40GBASE-IR4-Lite QSFP+ 1310nm 1.4km
MTP/MPO,SMF
QSFP-LR4-40G #24422
40GBASE-LR4 QSFP+ 1310nm 10km LC
Transceiver,SMF
QSFP-PLR4-40G #35209
40GBASE-LR4-Lite PLR4 QSFP+ 1310nm
10km MPO,SMF
QSFP-ER4-40G #35211
40GBASE-ER4 QSFP+ 1310nm 40km
LC,SMF
100G
QSFP28
Transceiver
QSFP28-SR4-100G #35182
100GBASE-SR4 QSFP28 850nm 100m
Transceiver
QSFP28-LR4-100G #39025
100GBASE-LR4 QSFP28 1310nm 10km
Transceiver
Ordering Information
Part Number Description
S8050 -20Q4Z
l Standard 1U 19'' rack mountable
l 4x10GE SFP+ Ports(Combo)
l 20x40GE QSFP+ Ports
l 4x100GE QSFP28 Ports
l Dual modular power supply
S5850-48S2Q4C
l Standard 1U 19'' rack mountable
l 48x10GE SFP+ Ports
l 2x40GE QSFP+ Ports
l 4x100GE QSFP28 Ports
l Dual modular power supply