Data center top mounted box switch AP-T2850-32GH

High density 100G access switch, supporting RDMA, building a data center network with low latency and zero packet loss

Product characteristics:

Easy networking, supporting 32 100G QSFP28 ports, and supporting downward splitting of 50G, 40G, 25G, and 10G

Cross device link aggregation technology, achieving device level redundancy, flexible networking, and strong reliability

Hardware level redundancy protection, ensuring business continuity and uninterrupted network

Supports VXLAN tunneling technology, unlimited data transmission, and more flexible resource provisioning

Build a lossless Ethernet network to ensure no packet loss in the end-to-end communication process of RDMA

Telemetry network monitoring, automated operation and maintenance, making management simple and efficient

Product Overview

AP-T2850 series switches are a new generation of high-performance, high-density 25G/100G switches launched by Anpson for cloud data centers. Meet the design requirements of Spine-Leaf full three-layer network architecture.

Product characteristics

● Build a non blocking data center network with powerful caching capabilities

Switch products for next-generation data centers and cloud computing are all line speed products, which conform to the "east-west trend" of data center traffic and are suitable for next-generation data centers with large traffic. It can meet the design requirements of Spine-Leaf full three-layer network architecture;

The AP-T2850 series switch provides 48 25G ports, 8 100G ports, and 32 100G ports. All ports can be forwarded at line speed, and the 100G port can be downward compatible with 40G.

At the same time, aiming at the requirements of non blocking transmission of large traffic data in data centers, the AP-T2850 series can provide powerful caching capabilities, and support advanced cache scheduling mechanisms, which can ensure the full and effective utilization of device caching capabilities.

● Data center virtualization features

Support VSU 2.0 (Virtual Switch Unit) virtualization technology, virtualize multiple physical devices into one logical device, unify operation management, reduce network nodes, and increase network reliability. It can achieve rapid 50 to 200 ms link failover and ensure uninterrupted transmission of critical services. Support cross device link aggregation, facilitating access servers/switches to achieve dual live link uplink.

● Data Center Overlay Network

The AP-T2850 series switches support VxLAN, which can meet the construction requirements of data center overlay networks, and solve the problem of insufficient VLANs in traditional data center networks and difficulty in scaling.

The basic network built based on AP-T2850 series switches can be divided into new subnets based on Overlay without changing the physical topology, without considering the limitations of physical network IP addresses and broadcast domains.

● Data center two-layer network expansion

VxLAN technology provides the ability to build a logical Layer 2 network based on L3 networks by encapsulating Layer 2 messages in UDP tunnel messages. The AP-T2850 series switches support the EVPN protocol and provide VTEP (tunnel terminal) automatic discovery and authentication, which can reduce flooding of the VxLAN data plane and avoid the dependence of VxLAN on the underlying deployment multicast, simplify VxLAN deployment, improve the construction efficiency of the L2 network, and better meet the deployment requirements of the L2 network within the data center.

● RDMA lossless Ethernet

Realized lossless Ethernet low latency forwarding based on RDMA (Remote Direct Memory Access), optimized service forwarding performance, significantly reduced the single bit cost of the entire network in operation, and improved the competitiveness of business products.

● Hardware based traffic visualization

Combined with the hardware capabilities provided by the chip itself, end-to-end traffic visualization can be achieved in complex multi-path and multi-node networks, and the forwarding path and delay of each session can be centrally monitored, greatly improving the efficiency of fault location.

● Telecommunication level reliability protection

The AP-T2850 series supports power redundancy, built-in redundant power modules, and modular fan components. All power modules and fan modules can be hot swapped without affecting the normal operation of the device. In addition, the entire machine also supports power supply and fan fault detection and alarm, and can automatically adjust the fan speed based on temperature changes, better adapting to the environment of the data center. It also has multiple reliability protection at the device level and link level. Adopt overcurrent protection, overvoltage protection, and overheat protection technologies.

In addition to device level reliability, this series also supports a wealth of link reliability technologies, such as the unique REPP fast ring network protection mechanism of Anpson and the REUP link fast handover mechanism. Support mechanisms such as GR perfect restart and BFD fast forwarding detection. When carrying multiple services and large traffic on the network, it does not affect the convergence time of the network, ensuring the normal development of services.

● IPv4/IPv6 dual stack protocol multi-layer switching

The AP-T2850 series of hardware supports IPv4/IPv6 dual stack multi-layer wire speed switching. The hardware distinguishes and processes IPv4 and IPv6 protocol packets, and supports multiple Tunnel tunneling technologies (such as manually configured tunnels, automatic tunnels, ISATAP tunnels, and so on). It can provide flexible IPv6 inter network communication solutions based on the demand planning and network status of the IPv6 network.

Support a wide range of IPv4 routing protocols, including static routing, RIP, OSPF, IS-IS, BGP4, etc., to meet the needs of users in different network environments to choose appropriate routing protocols and flexibly establish networks.

Support a wide range of IPv6 routing protocols, including static routing, RIPng, OSPFv3, BGP4+, etc. Whether upgrading an existing network to an IPv6 network or creating a new IPv6 network, you can flexibly choose the appropriate routing protocol to form a network.

● Flexible and complete security strategy

The AP-T2850 series has a variety of internal mechanisms that can effectively prevent and control the spread of viruses and hacker attacks, such as preventing DoS attacks, anti hacker IP scanning mechanisms, port ARP message legality checks, and various hardware ACL policies. It also leaves the network green.

Support for hardware based IPv6 ACL, even if there are IPv6 users in an IPv4 network, it is easy to achieve access control for IPv6 users at the edge of the network. It can not only allow the coexistence of IPv4/IPv6 users in the network, but also control the access rights of IPv6 users, such as restricting access to network sensitive resources.

Industry leading hardware CPU protection mechanism: A unique CPU protection strategy (CPP technology) that performs flow differentiation and priority queue hierarchical processing for data flows sent to the CPLU, and implements bandwidth speed limits as needed, fully protecting the CPU from illegal traffic occupation, malicious attacks, and resource consumption, ensuring CPU security, and fully protecting the security of the switch. The hardware implements flexible binding between the port or switch machine and the user's IP address and MAC address, strictly limiting user access issues on the port or switch machine.

Telnet access control based on source IP address control avoids malicious attacks and controls on devices by illegal individuals and hackers, enhancing the security of device network management. SSH (Secure Shell) and SNMPv3 can encrypt management information in Telnet and SNMP processes to ensure the security of management device information, prevent hackers from attacking and controlling devices.

Control illegal users' use of the network and ensure legitimate users' rational use of the network, such as multi-element binding, port security, time ACL, bandwidth speed limit based on data flow, etc., to meet the needs of enterprise networks and campus networks to strengthen control over visitors and limit unauthorized user communication.

● Perfect management

Support rich management interfaces, such as Console, MGMT port, USB port, SNMPv1/v2/v3, and general network management platform. Supports CLI command line, Web network management, TELNET, and cluster management, making device management more convenient. It also supports encryption methods such as SSH 2.0 and SSL, making management more secure.

Support for SPAN/RSPAN images and multiple image observation ports. It can analyze network traffic output to take corresponding management and maintenance measures, making the originally invisible network business application traffic clear at a glance. It can provide users with multiple network traffic analysis reports, helping them optimize network structure and adjust resource deployment in a timely manner.