Advertisement
Features
10/100/1000 ports
GbE SFP ports
10Gbps XFP ports
Power-over-Ethernet
Resilient FAST
architecture
Stack capacity
Number of Switches
supported by an RPS 15
Module
Number of AC or DC
Modular Supplies
Typical deployments
Security for safeguarding
the network
Protecting the network against both
external and increasingly prevalent
internal attacks is a critical part of every
IT Manager's job.
The ability to do this requires simple-
to-manage, yet intelligent context-aware
security solutions that not only look
at the identity of the person logging
in, but also at the device connecting
into the network. This network access
control approach ensures that only
authorized individuals and properly
scanned/secured devices are allowed to
join the network.
Nortel's Secure Network Access
Secure Network Access (SNA) —
Nortel's endpoint security and policy
compliance solution — inspects,
assesses, ensures compliance to policy,
and remediates at the network endpoint
source, prior to network access.
Table 2. Nortel Ethernet Routing Switch 5000 Series model comparisons
ERS 5510
ERS 5520-PWR
24 / 48
24 / 48
2
4
—
—
—
24 / 48
Yes
Yes
640Gbps
640Gbps
Up to 4
1
—
—
Desktop
Desktop
Connectivity
Connectivity, PoE
and Server
for Convergence
Aggregation
Devices
Nortel's SNA dramatically simplifies the
complexity of Enterprise network access
architectures with a solution that assures
endpoint security compliance. Nortel
SNA provides this security through
seamless device quarantine and contain-
ment, remediation and repair for LAN
Users and remote Users, and both fixed
and mobile connectivity devices.
Network Access Control through
802.1X-based authentication
The Ethernet Routing Switch 5000
Series fully supports the IEEE 802.1X
Extensible Authentication Protocol
(EAP)-based security features, which
control access to the network based on
User credentials. A User is required to
'login' to the network using a username/
password, and a database is maintained
on a centralized Authentication Server,
for example RADIUS, which can itself
proxy to other directory services such as
LDAP and Active Directory.
ERS 5530
ERS 5650
24 (12 Combo)
48
12 Combo
—
2
2
48
—
(5650TD-PWR)
Yes
Yes
640Gbps
1.152Tbps
1
—
—
Up to 2
Desktop
Small Core
Connectivity
and Server
with optional
Aggregation
PoE and Server
Aggregation
The Ethernet Routing Switch 5000
Series also supports MAC Address-based
security, which allows authentication
of all access devices; network access is
granted or denied via specific MAC
Address identification. The ERS 5000
Series also supports a Guest VLAN
capability.
Additionally, for Voice-over-IP (VoIP)
deployments where the PC connects to
the network through a VoIP handset,
both the PC and the IP device are
authenticated individually.
Directed Attack protection
The ERS 5000 Series supports a set of
security features designed to protect
against directed attacks. These include
Dynamic Host Control Protocol
(DHCP) Snooping, Dynamic Address
Resolution Protocol Inspection, IP
Source Guard and IGMP Snooping.
Together, these protect against the most
common snooping and man-in-the
middle attacks that might otherwise
compromise the network.
ERS 5698
ERS 5632
96 (6 Combo)
—
6 Combo
24
2
8
96
—
(5698TFD-PWR)
Yes
Yes
1.152Tbps
1.152Tbps
—
—
Up to 3
Up to 2
Desktop
Small Core
Connectivity with
and Fiber
optional PoE
Aggregation
5
Advertisement
