Security And Redundancy; Data Plane Security - Avaya 8800 Planning And Engineering, Network Design

Network security

Security and redundancy

Redundancy in hardware and software is one of the key security features of the Avaya Ethernet
Routing Switch 8800/8600. High availability is achieved by eliminating single points of failure in the
network and by using the unique features of the Avaya Ethernet Routing Switch 8800/8600
including:
• a complete, redundant hardware architecture (switching fabrics in load sharing, CPU in
redundant mode or High Availability [HA] mode, redundant power supplies)
• hot swapping of all elements (I/O blades, switching fabrics/CPUs, power supplies)
• flash cards (PCMCIA) to save multiple config/image files
• a list of software features that allow high availability including:
- link aggregation (MLT, distributed MLT, and 802.3ad)
- dual-homing of edge switches to two core switches (SMLT and RSMLT)
- unicast dynamic routing protocols (RIPv1, RIPv2, OSPF, BGP-4)
- multicast dynamic routing protocols (DVMRP, PIM-SM, PIM-SSM)
- distribution of routing traffic along multiple paths (ECMP)
- router redundancy (VRRP)
For a review of various security attacks that could occur in a Layer 2 network, and solutions, see
Layer Security Solutions for ES and ERS Switches Technical Configuration Guide. This document is
available on the Avaya Technical Support Web site in the Ethernet Routing Switch 8800/8600
documentation.

Data plane security

Data plane security mechanisms include the Extended Authentication Protocol (EAP) 802.1x,
VLANs, filters, routing policies, and routing protocol protection. Each of these is described in the
sections that follow.
Data plane security navigation
• EAP on page 273
• VLANs and traffic isolation
• DHCP snooping
• Dynamic ARP Inspection (DAI)
• IP Source Guard
• Security at layer 2
June 2016
on page 274
on page 274
on page 275
on page 276
on page 276
Planning and Engineering — Network Design
Comments on this document? infodev@avaya.com
272