Overview

FastIron LS series layer 2 switches provide a full-featured, secure and resilient edge solution in a cost-effective and compact design.  These high-performance edge switches are designed for 10/100/1000 Mbps desktop and server network access with field upgradeability to 10 Gigabit Ethernet for high-bandwidth network connectivity.

The FastIron LS series switches are designed to conserve space and power.  Their one rack unit height and shallow depth (~33 cm/ 13 inches) allow them to be installed in locations such as server racks and cabinets in which larger systems are not supported.  In particular, the FastIron LS is well-suited for data center "top of rack" applications where low latency, wire-speed switching is required for high-performance server connectivity.

The FastIron LS series is offered in two base models.  The FastIron LS 624 supports twenty-four 10/100/1000 Mbps RJ-45 Ethernet ports.  Four ports are implemented as combination RJ45-SFP ports in which the port may be used as either a copper 10/100/1000 Mbps Ethernet or as a fiber 100/1000 Mbps when using an SFP transceiver in the corresponding SFP port.  The FastIron LS 624 includes three 10-Gigabit Ethernet slots that are configurable with single-port 10-Gigabit Ethernet pluggable modules.

The FastIron LS 648 supports forty-eight 10/100/1000 Mbps RJ-45 Ethernet ports.  Four of these ports are implemented as combination RJ45-SFP ports.  The FastIron LS 648 includes two 10-Gigabit Ethernet slots that are configurable with single-port 10-Gigabit Ethernet pluggable modules.

The FastIron LS switches include an integral, non-removable AC power supply.  An optional one rack unit high AC power supply unit can be used to provide redundant power operation for up to four FastIron LS switches.

There is a one-port 10 Gigabit Ethernet pluggable module currently available.  The module is the FLS-1XG and it supports an XFP port that can be configured with a range of XFP transceivers including SR, LR, ER, ZR and ZRD optics.  This port may also be configured with a pluggable CX4 XFP copper transceiver.

FastIron LS switches are powered by Foundry's IronWare operating software offering a rich set of layer 2 switching services and advanced suite of security for network access control and denial of service protection.  IronWare security features include protection against TCP and ICMP denial of service (DoS) attacks, spanning tree root guard and BPDU guard to protect network spanning tree operation, broadcast and multicast packet rate limiting.

Standards-based network access control (NAC) enables network operators to deploy best-of-breed NAC solutions for authenticating network users and validating the security posture of a connecting device.   Support for policy-based VLANs provides additional control of network access, allowing for policy-controlled assignment of devices to layer 2 VLANs.

To defend against network intrusions, FastIron LS series supports Foundry's IronShield 360 architecture for detecting and mitigating zero-day and signature-based network attacks.  IroShield 360 leverages hardware-based sFlow® packet sampling technology embedded in FastIron LS switches.  The combination of sFlow packet sampling, Foundry's IronView Network Manager (INM) and SNORT intrusion detection enables network operators to deploy a network-wide solution for protecting the enterprise from network attacks.

FastIron LS series can also be deployed in the metro area network with features that include Metro Ring Protocol for building resilient ring-based topologies, VLAN stacking and advanced multicast capabilities including IGMP and MLD v1/v2 snooping for controlling multicast traffic in high-bandwidth content distribution applications.

Target Applications

With its powerful set of layer 2 switching capabilities, extensive security features, bandwidth scalability and compact design the FastIron LS series is well-suited for broad range of applications including:

• Enterprise: High bandwidth network access for desktops, servers, workstations, mobile networks, and other Ethernet connected endpoints
• Education: Secure network access connectivity for K-12 and universities
• Data center: High-performance top of rack server switching
• Metro networks: Cost-effective, in-building MTU or CPE for unicast and multicast services delivery

Back to top

Features

Compact and High Performance

• 24- and 48-port 10/100/1000-Mbps models
• Upgradeable with 1-port 10-GE XFP module that support SR, LR, ER, ZR, and ZRD XFP optics
• Upgradeable with 1-port 10-GE CX4 module for low cost, high-bandwidth connectivity
• 1U height with a depth of 12.95"/ 32.84cm

IronShield Advanced Security Features

• Multilevel access security for console access
• IronShield 360 - System-wide, automated closed-loop threat detection and mitigation solution
• Secure web-based management interface preventing unauthorized users from accessing or changing the switch configuration
• Terminal Access Controller Access Control Systems (TACACS/TACACS+) and RADIUS operator authentication
• Secure Shell (SSHv2), SCP, and SNMPv3 restrict and encrypt communications to the management interface and system
• Layer 2/Layer 3/Layer 4 ACLs and binding the ACL to TELNET, web-management, and SNMP interfaces
• IEEE 802.1X authentication including multiple device authentication and dynamic VLAN, ACL, and MAC filter assignment for authenticated clients
• Private VLANs provide security and isolation between switch ports to help ensure that users cannot snoop on other users' traffic
• Denial of Service Protection - Monitoring, throttling, and locking out of ICMP and TCP SYN traffic both to the management address of the switch and for transit traffic

Advanced Quality of Service

• Packet classification, reclassification, policing, marking, and re-marking
• Identification, classification, and reclassification of traffic based on specific criteria such as port, source/destination MAC address, 802.1p priority bit, source/destination IP address, Type of Service (ToS), Differentiated Services Codepoints (DSCP), or TCP/UDP port
• Flexible queue servicing utilizing configurable Weighted Round Robin (WRR), Strict Priority (SP), or hybrid SP/WRR
• 8 hardware queues for flexible QoS management
• Ingress rate limiting – per port & using ACL control
• Support for up to 256 wire-speed ingress traffic policers with each policer supporting configurable metering with maximum and burst size settings, color aware and out-of- profile packet remarking or dropping
• Egress rate limiting per port, per queue

Highly Available System and Features

• Advanced Layer 2 redundancy features: Metro Ring Protocol, Virtual Switch Redundancy Protocol, Rapid Spanning Tree, Per VLAN Spanning Tree, Protected link groups, Link Fault Signaling (LFS), Remote Fault Notification (RFN)
• sFlow and port mirroring on the same port
• Efficient space-saving form factor and a built-in temperature monitor sensor

Back to top

Specifications

Standards Compliance

• 802.1D-1998 Bridging
• 802.1q/p VLAN Tagging and Priority
• 802.1w Rapid Spanning Tree
• 802.1X Port-based Authentication, Dynamic VLAN, ACL, and MAC Filter Group Assignment
• 802.3 10Base-T
• 802.3 Ethernet Like MIB
• 802.3ad Link Aggregation (Dynamic and Static) and Trunk Groups
• 802.3u 100Base-TX
• 802.3x Flow control
• 802.3z 1000Base-SX/LX/T
• 802.3ae 10 Gigabit Ethernet
• Auto MDI/MDIX

Layer 2 Features

• 4,096 VLANs
• 16,384 MAC Addresses
• Foundry's Protocol VLANs, subnet VLANs
• MAC based VLANs
• Port Security (MAC Address Locking)
• Port-based Access Control Lists
• Dual Mode VLANs
• Fast Port Span
• BPDU Guard, Root Guard
• GARP VLAN Registration Protocol
• MAC-Layer Filtering
• Mirror/Monitor Ports
• Per VLAN STP (PVST/PVST+/PVRST)
• VLAN Groups
• Single-instance Spanning Tree
• Uni-Directional Link Detection (UDLD)
• Port speed downshift and selective auto-negotiation
• Dynamic Voice VLAN Assignment
• Jumbo Frames up to 9,216 bytes
• IGMP Snooping (v1/v2/v3)
• MLD Snooping (v1/v2)
• PIM-SM Snooping
• Private VLANs & uplink-switch

Layer 2 Metro Features

• VLAN stacking or Q-in-Q
• Metro Ring Protocol
• Virtual Switch Redundancy Protocol
• Topology Groups

Quality of Service

• 802.1p Mapping to Priority Queue
• MAC Address Mapping to Priority Queue
• ACL Mapping to Priority Queue
• ACL Mapping to ToS/DSCP
• ACL Mapping and Marking of ToS/DSCP
• DiffServ Support
• QoS Queue Management Using Weighted Round Robin (WRR), Strict Priority (SP), and a combination of WRR and SP

Traffic Management

• Inbound Rate Limiting per port
• Outbound Rate Limiting per port, & per queue
• Broadcast, Multicast and Unknown Unicast Rate Limiting
• ACL-based traffic policies

Management and Control

• Virtual Cable Tester
• 802.3 MAU MIB (RFC 2239)
• Architecture for Describing SNMP Framework (RFC 2571)
• BootP (RFC 951 & RFC 1542)
• BootP/DHCP Relay (RFC 2131)
• Bridge MIB (RFC 1493)
• Configuration Logging
• Ethernet Interface MIB (RFC 1643)
• Ethernet MIB (RFC 1643)
• Foundry Discovery Protocol (FDP)
• Embedded HTTP (RFC 2068)
• Embedded HTTPS (RFC 2818)
• Industry Standard Command Line Interface (CLI)
• Integration with HP OpenView for Sun Solaris, HP-UX, IBM's AIX, and Windows NT Standalone Windows NT
• IronView Network Manager (INM) Web based graphical user interface
• Embedded Web Management
• sFlow (RFC 3176)
• MIB-II (RFC 1213)
• Repeater MIB (RFC 1516)
• RMON MIB (RFC 1757)
• SNMP Message Processing and Dispatching (RFC 2572)
• SNMP MIB II (RFC 1573)
• SNMP View-based Access Control Model SNMP (RFC 2575)
• SNMPv1/v2c (RFC 1157)
• SNMPv3 Applications (RFC 2573)
• SNMPv3 Intro to Framework (RFC 2570)
• SNMPv3 User-based Security Model (RFC 2574)
• SNTP Simple Network Time Protocol
• Support for Multiple syslog Servers
• TELNET Client and Server (RFC 854)
• TFTP (RFC 783)

Performance

FastIron LS 624 / FastIron LS 648

• Switching Capacity 108Gbps / 216 Gbps
• Forwarding Performance 161Mpps / 202Mpps

Element Security Options

• Authentication, Authorization, & Accounting (AAA)
• Bi-level Access Mode (Standard and EXEC Level)
• Protection for Denial of Service attacks
• RADIUS
• Secure Copy (SCP)
• Secure Shell (SSHv2)
• TACACS/TACACS+
• Username/Password

Physical Dimensions

All FastIron LS Models:

• 1.7" (H) x 17.3" (W) x 12.92" (D)
• 4.34cm (H) x 44cm (W) x 32.84cm (D)

Weight

FastIron LS 624 / 648:

• 10 lbs (4.52 Kg) / 10.9 lbs (4.93 Kg)

Environmental Ranges

• Operating Noise: < 43 dBA
• Operating temperature: 32° to 122°F (0° to 50°C)
• Relative Humidity: 5% to 95% @ 122°F (50°C), non-condensing
• Storage temperature: -40° to 158°F (-40° to 70°C)
• Maximum Watts: 100W (340 BTU/Hr)
• Storage altitude: 10,000ft (3,000m) maximum

MTBF (estimated)

• FLS624 162,484Hrs @ 25degC (76.9degF)
• FLS648 149,870Hrs @25degC (76.9degF)
• FLS-1XG – 6 years

Regulatory Compliance and Safety Approvals - Emissions

• ICES-003, Electromagnetic Emission
• FCC Part 15 Class A
• EN 55022/CISPR 22 Class A
• VCCI Class A
• EN 61000-3-2, Power Line Harmonic
• EN 61000-3-3, Voltage Fluctuation & Flicker
• EN 61000-6-3, Electromagnetic Compatibility, Generic Standard
• AS/NZS CISPR 22, Electromagnetic Compatibility

Regulatory Compliance and Safety Approvals - Immunity

• EN 61000-6-1, Electromagnetic Compatibility, Generic Standard
• EN 55024, Information Technology Equipment – Immunity Characteristics

Regulatory Compliance and Safety Approvals - RoHS

• RoHS Compliant (6 of 6)

Regulatory Compliance and Safety Approvals - Safety

• BI-NAT CSA 60950-1-90/UL 60850-1
• EN 60950-1:2001
• IEC 60950-1:2001

Warranty

• 5-Year Limited Lifetime Hardware Warranty
• 90-days Software

Back to top

System Options

Part Number	Description
FLS624	FastIron LS 624 comes with 24-port 10/100/1000 Mbps (RJ-45) that includes 4-port Combo to support 10/100/1000 Mbps (RJ-45) or 100/1000 SFP. Includes three configurable slots for optional 1-port 10 Gigabit Ethernet module (FLS-1XG)
FLS648	FastIron LS 648 comes with 48-port 10/100/1000 Mbps (RJ-45) that includes 4-port Combo to support 10/100/1000 Mbps (RJ-45) or 100/1000 SFP. Includes two configurable slots for optional 1-port 10 Gigabit Ethernet module (FLS-1XG)
FLS-1XG	Field Upgradeable 1-port XFP 10 Gigabit Ethernet Module
RPS2-EIF	Redundant power supply (W)

Back to top

Literature

Datasheets

• FastIron LS Series Datasheet (PDF 178K)
• Optics Family (PDF 171K)

White Papers

• Leveraging the Advantages of a Multi-vendor Network Strategy (PDF 181K)
• Multicast Deployment Guide (PDF 187K)

Back to top