Overview

Foundry Networks FastIron GS Series of Layer 2 switches provides a full featured, secure and resilient convergence solution in a cost-effective and high-performance compact design. Featuring field upgradeability to 10-Gigabit Ethernet and Power over Ethernet (PoE), the FastIron GS is ready for your network's growth.

The FastIron GS switches are designed for flexibility with modular upgradeability for PoE, 10-Gigabit Ethernet, and redundant power in a 1.5 rack unit height. This design allows the FastIron GS switches to be installed in wiring closets, and it offers a flexible and cost-effective high-performance convergence solution at the network's edge.

The FastIron GS Series is available in three PoE base models and three non-PoE base models. The 3 PoE models are the FastIron GS 624P-POE, FastIron GS 624XGP-POE, and FastIron GS 648P-POE. These switches support 24 and 48 10/100/1000 Mbps PoE ports, respectively.  The non-PoE models, FastIron GS 624P, FGS624XGP and FastIron GS 648P, support 24 and 48 10/100/1000 Mbps ports, respectively.  The two non-PoE switches are field-upgradeable to support PoE, offering customers a future- proof solution by allowing them to upgrade to POE after deployment.

Network convergence is driving the need for high availability solutions. The FastIron GS Series features 1+1 power redundancy, using hot-swappable and field replaceable power modules, which install into the rear of the unit. The power modules are load-sharing supplies providing full 1+1 redundancy for as many as 48 Class 1 and Class 2 PoE ports and 31 Class 3 (15.4 watts) ports.

For the 24-port FastIron GS 624P-POE model, the system can support full 1+1 redundancy for 24 Class 1, Class 2, or Class 3 PoE ports. The 48-port FastIron GS 648-POE supports up to 48 10/100/1000 Class 3 (15.4 watts) PoE ports in a non-redundant fashion–the highest Class 3 PoE port density in the industry for a compact switch.

The optional 10-Gigabit Ethernet (10-GbE) module is offered in three field upgradable models: the FGS-2XG supporting two small form factor pluggable XFP transceivers, the FGS-2XGC supporting two CX4 connectors, and the FGS-1XG1XGC supporting a combination of XFP transceiver and CX4 connector. Supported transceivers include SR, LR, ER, ZR, 1310-MM, and ZRD optics supporting fiber lengths up to 80Km. Network managers have the flexibility to upgrade to 10-GbE to future-proof the network and protect their network investment.

FastIron GS switches are powered by Foundry's IronWare operating software, which offers a rich set of Layer 2 switching services, an advanced security suite for network access control (NAC) and denial of service protection, and quality of service (QoS).  IronWare security features include protection against TCP and ICMP denial of service (DoS) attacks, Spanning Tree Root Guard and BPDU Guard to protect network spanning tree operation, and broadcast and multicast packet rate limiting.

IronWare advanced QoS controls include prioritizing, classifying, and marking Ethernet and IP traffic, enabling the switches to configure VoIP traffic using 802.1p priority and IP Type of Service and DiffServ Codepoints (TOS/DSCP).

Standards-based NAC enables network operators to deploy best-of-breed NAC solutions for authenticating network users and validating the security posture of a connecting device. Support for policy-based VLANs provides additional control of network access, allowing for policy-controlled assignments of devices to Layer 2 VLANs.

The FastIron GS Series supports Foundry's IronShield 360 security solution for detecting and mitigating zero-day (i.e. anomaly-based) and known (i.e. signature-based) network attacks. IronShield leverages hardware-based sFlow packet sampling technology embedded in FastIron GS switches. The combination of sFlow packet sampling, Foundry's IronView Network Manager (INM), and Snort intrusion detection protects the enterprise from network attacks. This advanced security capability provides a network-wide security umbrella without the added complexity and cost of ancillary sensors.

The FastIron GS Series can also be deployed in metro area networks. In this environment, important features include Foundry's Metro Ring Protocol for building resilient ring-based topologies, VLAN stacking, and advance multicast capabilities including IGMP and MLD v1/v2 snooping for controlling multicast traffic in high-bandwidth content distribution applications such as IPTV.

Target Applications

Offering a powerful set of Layer 2 switching capabilities, extensive security features, bandwidth scalability, and compact design, the FastIron GS Series is well suited to support a broad range of applications including:

• Enterprise – high bandwidth network access for desktop servers, PoE endpoints and wireless access point aggregation, and VoIP and wireless LAN deployment
• Education – Secure network access connectivity for K-12 and universities
• Metro networks – Cost-effective, in- building convergence MTU or CPR for unicast and multicast service delivery

Back to top

Features

Flexible and High-Capacity Architecture

• 24- and 48-port 10/100/1000-Mbps (RJ-45) Power over Ethernet (PoE) models
• 24- and 48-port 10/100/1000-Mbps (RJ-45) PoE upgradeable models
• Field upgradeable 2-port 10-GbE XFP/CX4 module that supports SR, LR, ER, ZR, and ZRD XFP optics
• Up to two redundant, removable, and load-sharing power supplies
• Efficient space-saving form factor with front-facing data ports and a built-in temperature monitor sensor

Robust Power over Ethernet

• Standards-based IEEE 802.3af PoE support
• Up to 48 ports of 10/100/1000 Mbps PoE, 15.4 watts per port using the 48-port model configured with two power supplies
• Fully redundant 1+1 power configurations:
  • 24-port PoE model with two power supplies supports up to 15.4W for each port
  • 48-port PoE model with two power supplies supports up to 10W for each port
• PoE auto-detection enables support for PoE and non-PoE devices without configuration changes
• Per-port LED indicators to easily identify power-consuming devices
• Per-port short circuit protection to supply system protection
• Software accessible system and per port power consumption
• Power redundancy for increased reliability
• Interoperability with popular VoIP equipment, including legacy Cisco IP phones
• Advanced QoS capabilities ensure high quality VoIP support

IronShield Advanced Security

• Multilevel access security for console access
• IronShield 360 - System-wide, automated closed-loop threat detection and mitigation solution
• Secure, Web-based management
• Terminal Access Controller Access Control Systems (TACACS/TACACS+) and RADIUS operator authentication
• Secure Shell (SSHv2), SCP, and SNMPv3 secure remote management access and communications
• MAC filters, Layer 3 /Layer 4 ACLs and binding the ACL to TELNET, Web management and SNMP interface for secure management access
• IEEE 802.1x authentication including multiple device authentication and dynamic VLAN, ACL, and MAC filter assignment for authenticated clients
• Private VLANs provide security and isolation between switch ports to help ensure that users cannot snoop on other users' traffic
• Denial of Service Protection - Monitoring, throttling, and locking out of ICMP and TCP SYN traffic both to the management address of the switch and for transit traffic

Advanced Quality of Service

• Packet classification, reclassification, policing, marking, and re-marking
• Identification, classification, and reclassification of traffic based on specific criteria such as port, source/destination MAC address, 802.1p priority bit, source/destination IP address, Type of Service (ToS), Differentiated Services Codepoints (DSCP), or TCP/UDP port
• Flexible queue servicing utilizing configurable Weighted Round Robin (WRR), Strict Priority (SP), or hybrid SP/WRR
• 8 hardware queues for flexible QoS management
• Ingress rate limiting – standard and extended ACL control
• Egress rate limiting - per port, per queue
• Support for up to 256 wire-speed ingress traffic policers with each policer supporting configurable metering with maximum and burst size settings, color aware and out-of- profile packet remarking or dropping
• sFlow and port mirroring on the same port

System and Network Resilience

• Internal, redundant, hot-swappable power supplies for increased PoE reliability
• Advanced Layer 2 service protection features: Metro Ring Protocol, Virtual Switch Redundancy Protocol, Rapid Spanning Tree, Per VLAN Spanning Tree, Protected Link groups, Link Fault Signaling (LFS), Remote Fault Notification (RFN)

Back to top

Specifications

Standards Compliance

• 802.1D-1998 Bridging
• 802.1q/p VLAN Tagging and Priority
• 802.1w Rapid Spanning Tree
• 802.1X Port-based Authentication, Dynamic VLAN, ACL, and MAC Filter Group Assignment
• 802.3 10Base-T
• 802.3 Ethernet Like MIB
• 802.3ad Link Aggregation (Dynamic and Static) and Trunk Groups
• 802.3af Power over Ethernet
• 802.3u 100Base-TX
• 802.3x Flow control
• 802.3z 1000Base-SX/LX/T
• 802.3ae 10 Gigabit Ethernet
• Auto MDI/MDIX

Layer 2 Features

• 4,096 VLANs
• 16,000 MAC Addresses
• Foundry's Protocol VLAN
• Private VLAN
• Protocol VLAN (802.1v), Subnet VLAN
• MAC-based VLANs
• Port Security (MAC Address Locking)
• Port-based Access Control Lists
• Dual Mode VLANs
• Fast Port Span
• BPDU Guard, Root Guard
• GARP VLAN Registration Protocol
• MAC-Layer Filtering
• Mirror/Monitor Ports
• Per VLAN STP (PVST/PVST+/PVRST)
• VLAN Groups
• Single-instance Spanning Tree
• Uni-Directional Link Detection (UDLD)
• Port speed downshift and selective auto-negotiation
• Dynamic Voice VLAN Assignment
• Jumbo Frames up to 9,216 bytes
• IGMP Snooping (v1/v2/v3)
• MLD Snooping (v1/v2)
• PIM–SM Snooping
• Private VLANs and uplink-switch

Layer 2 Metro Features

• VLAN stacking or Q-in-Q
• Metro Ring Protocol
• Virtual Switch Redundancy Protocol
• Topology Groups

Quality of Service

• 802.1p Mapping to Priority Queue
• MAC Address Mapping to Priority Queue
• ACL Mapping to Priority Queue
• ACL Mapping to ToS/DSCP
• ACL Mapping and Marking of ToS/DSCP
• DiffServ Support
• QoS Queue Management Using Weighted Round Robin (WRR), Strict Priority (SP), and a combination of WRR and SP

Traffic Management

• Inbound Rate Limiting per port
• Outbound Rate Limiting per port and per queue
• Broadcast, Multicast and unknown Unicast Rate Limiting
• ACL-based traffic policies

Management and Control

• Virtual Cable Tester
• 802.3 MAU MIB (RFC 2239)
• Architecture for Describing SNMP Framework (RFC 2571)
• BootP (RFC 951 & RFC 1542)
• BootP/DHCP Relay (RFC 2131)
• Bridge MIB (RFC 1493)
• Configuration Logging
• Ethernet Interface MIB (RFC 1643)
• Ethernet MIB (RFC 1643)
• Foundry Discovery Protocol (FDP)
• Embedded HTTP (RFC 2068)
• Embedded HTTPS (RFC 2818)
• Industry Standard Command Line Interface (CLI)
• Integration with HP OpenView for Sun Solaris, HP-UX, IBM's AIX, and Windows NT Standalone Windows NT
• IronView Network Manager (INM) Web-based graphical user interface
• Embedded Web Management
• sFlow (RFC 3176)
• MIB-II (RFC 1213)
• Repeater MIB (RFC 1516)
• RMON MIB (RFC 1757)
• SNMP Message Processing and Dispatching (RFC 2572)
• SNMP MIB II (RFC 1573)
• SNMP View-based Access Control Model SNMP (RFC 2575)
• SNMPv1/v2c (RFC 1157)
• SNMPv3 Applications (RFC 2573)
• SNMPv3 Intro to Framework (RFC 2570)
• SNMPv3 User-based Security Model (RFC 2574)
• SNTP Simple Network Time Protocol
• Support for Multiple syslog Servers
• TELNET Client and Server (RFC 854)
• TFTP (RFC 783)

Performance

• FastIron GS 624P / 624P-POE:
  Switching Capacity 108Gbps
  Forwarding Performance 161Mpps
• FastIron GS 648P / 648P-POE:
  Switching Capacity 216Gbps
  Forwarding Performance 202Mpps

Element Security Options

• Authentication, Authorization, & Accounting (AAA)
• Bi-level Access Mode (Standard and EXEC Level)
• Protection for Denial of Service attacks
• RADIUS
• Secure Copy (SCP)
• Secure Shell (SSHv2)
• TACACS/TACACS+
• Username/Password

Physical Dimensions

• All FastIron GS Models:
  2.63" (H) x 17.5" (W) x 19.6" (D)
  6.68cm (H) x 44.45cm (W) x 49.78cm (D)

Weight

• FastIron GS 624 Models:
  25 lbs (11.36 kg) Fully Loaded including dual redundant power
  17.5 lbs (7.95 kg) Empty
• FastIron GS 648 Models:
  29 lbs (11.36 kg) Fully Loaded including dual redundant power
  17.5 lbs (7.95 kg) Empty

Environmental Ranges

• Acoustic: 51dB
• Operating temperature: 32° to 104°F (0° to 40°C)
• Relative Humidity: 5% to 95%, non-condensing
• Storage temperature: -23° to 158°F (-25° to 70°C)
• Maximum Watts: 600W (2,047 BTU/Hr) per supply
• Storage altitude: 10,000ft (3,000m) maximum

MTBF

• FastIron GS 624P with 4 SFP, 2-port 10GbE, and 2 RPS-FGS – 267,411 hours
• FastIron GS 648P with 4 SFP, 2-port 10GbE, and 2 RPS-FGS – 218,140 hours
• FGS-2XG with 2 XFP (LRs) – 1,597,580 hours
• RPS-FGS – 346,230 hours

Power Requirements

• RPS-FGS, RPS-X448, RPS-X424-POE or RPS8:
  Operating 85VAC to 254VAC input, universal/wide input
  Rated 100 to 240 VAC ~ 50/60 Hz @ 8amp to 3.2amp
  600 watts of total output power
• RPSDC-FGS, RPSDC-X448, RPSDC-X424-POE or RPS8DC:
  Operating 40VDC to 60VDC input, universal/wide input Rated -48 to 60 VDC @ 18amp to 14.3 amp 600 watts of total output power

Safety Certifications

• EN 60950-1
• CAN/CS-C22.2 No. 60950-1-03
• EN 60825-1 Safety of Laser Products – Part 1
• EN 60825-2 Safety of Laser Products – Part 2
• IEC 950
• UL 1950 Third Edition
• UL 60950-1
• CSA 950

Electromagnetic Emission Certifications

• FCC Class A (Part 15)
• EN 55022/CISPR-22 Class A
• VCCI Class A

Immunity

• Generic: EN 50082-1

Warranty

• 5-Year Limited Lifetime Hardware Warranty
• 90-days Software
• RoHS Compliant (5 of 6)

Back to top

System Options

Features	FGS624P FGS624XGP	FGS648P	FGS624P-POE FGS624XGP-POE	FGS648P-POE
Switching Performance	108Gbps	216Gbps	108Gbps	216Gbps
Forwarding Performance	161Mpps	202Mpps	161Mpps	202Mpps
10/100/1000 Mbps Port Density	24 with 4-port Combo	48 with 4-port Combo	24 with 4-port Combo	48 with 4-port Combo
10/100/1000 Mbps POE Density with 15.4W Each	24 (optional)	48 (optional)	24 (1 PSU)	48 (2 PSU)
10/100/1000 Mbps PoE Density with 10W Each	24 (optional)	48 (optional)	24 (1 PSU)	48 (1 PSU)
100/1000 Mbps SFP Density	4 Combo Ports	4 Combo Ports	4 Combo Ports	4 Combo Ports
10-Gigabit Ethernet	2 (FGS624P) 3 (FGS624XGP)	2	2 (FGS624P-POE) 3 (FGS624XGP-POE)	2
100 Mbps Optics	100FX and 100Base-BX
Gigabit Ethernet Optics	SX, SX2, LX, LHA, LHB, 1000Base-BX, and CWDM
10 Gigabit Ethernet Optics	CX4, 1310-MM 1, SR, LR, ER, ZR, and ZRD
AC and DC Power Supply	Yes
Power Supply Redundancy	1+1 Load Sharing
Maximum Number of MAC addresses	16,384
Maximum Number of VLANs	4,096
Maximum Number of STP	255
IGMP Snooping	v1, v2 & v3
MLD Snooping	v1 & v2
PIM-SM Snooping	Yes
IGMP Proxy for Static Groups	Yes
Rate Limiting	Inbound & Outbound
L3/L4 Extended Access Control List	Yes
Aggregation Stability Features	BPDU & Root Guard
Number of Ports per Trunk	8
Number of Trunk Groups	13 (FGS624P,FGS624P-POE, FGS624XGP, FGS624XGP-POE)		25 (FGS648P, FGS648P-POE)
Multi-device Authentication & Dynamic VLAN Assignment	Yes
802.1X Authentication & Dynamic VLAN Assignment	Yes
MAC-based VLANs	Yes
Metro Features	Metro Ring Protocol, Virtual Switch Redundancy Protocol, VLAN Stacking (Q-in-Q) 2 & Topology Groups

¹ Foundry's 10G-XFP-1310-MM transceivers support 10-GbE operation on up to 200 meters of FDDI-grade MM fiber. This transceiver is compatible with 10GBase-LRM optics.

² Q-in-Q is supported on the FGS648P and FGS648P-POE only.

Back to top

Literature

Datasheets

• FastIron GS Series Datasheet (PDF 228K)
• Optics Family (PDF 171K)

White Papers

• Leveraging the Advantages of a Multi-vendor Network Strategy (PDF 181K)
• Multicast Deployment Guide (PDF 187K)

Reference Guides

• FastIron GS Series Quick Reference Guide (PDF 193K)

Back to top