Category: Industry Trends

MAMMUTHUS Router – MTR3600-4C24T-4S

MAMMUTHUS enterprise router

Mammuthus Router(MTR) series use MIPS based multi-core processor

and separated forwarding / management hardware architecture.

The MTR series could handle all kinds of network situations and ensure

you are in control at all time.

Mammthus router supports multiple dynamic routing protocols, various

measurement, and Service Level Assurance (SLA) method, support MPLS

and EVPN. Through IPv4/IPv6 dual protocol stack, MTR series could work

in any single or dual protocol stack environments. It has also implements

a wide range of multicast protocols, can reliably transmit multicast data

in a large geographical span distributed factory environment, and can

protect non multicast recipients from the impact of multi cast traffic.

Last but not least, MTR series router has been integrated in the well-known

Hirshmann Industrial HiVision Management software.

User can manage all Hirshmann and Hirschmann IT products in NMS with

the same UI, icons, and control modes.

As always MTR has the same setup logical as MTS series, for those who

has experience with MTS switches can easily operate the device without

any additional support.

MTS8000 Series Switch – MAMMUTHUS Layer3 Modular Core Switch

Modular core switch

MTS8000 series switch has compact configuration and powerful extension capability.

The switch provides industry-leading SFP+/QSFP port density inside 6U/11U/15U

chassis. Besides, it provides lots of ports in various types and can support PoE/PoE+.

MTS8000. together with other switches in Mammuthus series, provides an end-to-end

total network solution.

MTS8000 series switches have dual redundant engines, up to 8 media module slots

and they are able to support GE, SFP, SFP+ and QSFP type of ports.

Besides, both MTS8006 and MTS8010 have 2 switch fabric slots.

Moreover, MTS8000 devices can be managed by SDN controller via OpenFlow 1.3. 

Thus, no matter serves as a spine node in spine-leaf topology or as a core node in

traditional topology, MTS8000 can play its best part.

MTS8000 has enhanced L2/L3 feature set and is able to support data center leve

network. The switch support router protocols such as OSPF/BGP/ISIS etc.

It also support core routing protocol such as MPBGP/MPLS.

The switch also supports stacking and MCLAG, which can provide a higher level

network redundancy and performance. Besides, MTS8000 support all switching/routing

feature sets of MTS2700 & MTS2800 and can offer continuous security strategy and

configuration logic.

MTS2900 Series Switch – MAMMUTHUS Layer3 10Gigabit Ethernet Core

Switch with 40G Uplink Ports

High capacity aggregation/core switch

MTS2900 series switch provides industry leading ports density and switching speed.

It not only serves as a core switch, combined with MTS2600/MTS2700/MTS2800 to

offer compact data network solutions, but also works as a aggregation switch,

with MTS8000 to offer large network solutions.

MTS2900 series switch offers 48 SFP+ slots, all these slots support 1G/10G SFP

modules and support multiple SFP application that varies from 550m multi-mode

SFP to 80km single-mode SFP+. The 40G QSFP in MTS2900 can offer high-speed

uplink/interconnection links. The switch can be used in deployment model basing

on spine-leaf and can support openflow 1.3 SDN controller.

MTS2900 series switch has enhanced L2/L3 feature set. It is able to support

database level network and offer amazing configuration flexibility in the meantime.

The switch support router protocols such as OSPF/BGP/ ISIS and so on,

it also support core routing protocol such as MPBGP/MPLS. In addition, MTS2900

support all switching/routing feature sets of MTS2700 & MTS2800 and can offer

continuous security strategy and configuration logic.

MTS2800 series switch – MAMMUTHUS Layer3 Gigabit Ethernet Switch

with 10G Uplink Ports

Access/aggregation switches that can offer comprehensive L2/L3 feature sets

MTS2800 series switches provide a whole set of access and aggregation solution.

All switches in this series are equipped with redundant PSUs.

The switches has compact mechanical design with low noise which can fit in with

600mm×600mm compact cabinet. In addition, the switches can work properly

under maximum temperature up to 55°C.

All the RJ45 ports in MTS2800 series switches support auto-negotiation and

MDI/MDI-X. The switches can be applied to various working situations such

as desktop, ELV room and data aggregation layer. The switches have 4 or 6

SFP+ slots and support stacking configuration, which can eliminate single

point of failure and provide MC LAG.

MTS2800 series switches have comprehensive L2/L3 feature sets and

furthermore can provide flexible, reliable and secure choice for network

planning. The general security and flow control technology such as DAI,

DHCP snooping, IGMP snooping and 802.1x that the switches have can

help administrator to deploy a secure & robust network infrastructure.

Access/aggregation switches that have comprehensive function with

PoE/PoE+ MTS2700 series switches provides a whole set of access

solution, which is able to support complex network design. 

The switches can prevent unauthorized network access or mitigate

the impact of network attacks via plenty of security features.

All RJ45 ports in MTS2700 series switches support PoE/PoE+ function,

which are able to provide up to 30W power supply for the PoE PD device,

such as webcam, IP telephone etc. What’s more, modular PSUs can

provide FRU and the device can work properly under maximum temperature

up to 55°C. MTS2700 switches have comprehensive L2/L3 feature set,

which can provide flexible, reliable and secure choice for network planning.

Network consultant can enhance network security via DAI/DHCP snooping

or can optimize multicast via IGMP snooping or can use broadcast control

to ensure the network stability when UMB flooding.

MTS2600 Series Switch – MAMMUTHUS Layer2 Gigabit Ethernet Switch

with 10G Uplink Ports

Entry-level access and port extension switch

MTS2600 series switch is the entry level access switch in Mammuthus series, providing sufficient performances

and flexible functions. 10 Gigabit port is available so uplink speed to core switch is assured.

All RJ45 ports in MTS2600 series switch support auto-negotiation and MDI/MDI-X, and all SFP+ slots can work

under 1/10G mode. All SFP+ slots support 1G and 10G MTS SFP modules, including fiber and UTP/STP*.

* detailed information please see SFP chapter in this brochure.

For higher port density and performance at access level, MTS2600 supports stacking and downlink-oversubscribe

design, in which 24 GE access ports couples with 4 10G SFP+ uplink ports. Since the MTS2600 series switch

supports ERPS and have hardware based broadcast control, the switch can be deployed in ring topology.

Technologies

Technology Topics on Network Security

RAVEN security products are designed to provide comprehensive and reliable cyber security functions in IT/

OT converged network. With Belden’s 10-year network security experience, below functions can directly benefit

customers and promote security strategy landing.

RAVEN EYE

RAVEN EYE is an intelligent analysis center which contains compressed behavior signature and

profile information database. It can get latest cyber security events from over 70 traffic flow

sampling centers around the world. By combining these collected data with RAVEN EYE security

analysis, tracking and modeling database, any new network attack and security events around

the world will be updated onto RAVEN EYE database within 6 hours. Through regular updates to

the information base, RAVEN NGFW and RAVEN IDS can identify the latest network attacks and

implicit risks.

L2/L3 Mode

RAVEN NGFW can work under Layer2 or Layer3 mode which provides flexibility during network

design. It can serve as the network gateway in L3 mode or as a network bridge in L2 mode.

According to the limitation in deployment environment, RAVEN NGFW can choose either L2 or

L3 mode on demand or combine both modes in one chassis.

IPv6 Ready

Network address is now moving from IPv4 to IPv6. All security functions on RAVEN NGFW

and IDS support IPv4/IPv6 dual stack, which ensures RAVEN products can fulfill the security

requirements no matter in current networking environment or in future security design.

vFW

vFW is a feature that enable RAVEN NGFW to divide into multiple isolated virtual firewalls

serving different security domains or security designs. RAVEN NGFW allows users to manage

the resource of each vFW, which avoid the over subscription of resource during heavy

traffic. vFW also balance the traffic between HA (High Availability) members under specific

configuration.

HA (High Availability)

To cope with the risk of chassis failure, all RAVEN products support HA function. In RAVEN

NGFW, HA function merge 2 firewalls into one cluster, and thus all traffic fingerprints, such

as TCP status, ICMP/UDP timer, ALG sessions and VPN cookies, will be synchronized in both

firewalls. Therefore, no new session is needed once a member of HA cluster failed. In RAVEN IDS,

HA function helps to remove duplicate session and to ensure no security events will be missed

during the failure of one chassis.

Virtualization and High Availability (HA)

RAVEN series products can build a reliable security solution to not only improve cyber protection but also avoid

introducing additional risk into the network system. RAVEN NGFW supports virtual firewall (vFW) technology

to provide flexibility in multi-context design. As for HA, this is the basic function included in all RAVEN security

products. HA function eliminates the risk of device failure in single box and thus fundamentally improves the

reliability when merging cyber security device into current network.

RAVEN EYE

RAVEN series products can get latest cyber security events from over 70 traffic flow sampling centers around

the world. Combining these data with Hirschmann IT’s security analysis, tracking and modeling database, any

new network attack and security accidents around the world will be updated onto RAVEN EYE database within

6 hours.

RAVEN EYE is an intelligent analysis center which contains compressed behavior signature and profile information

database. Through regular updates to RAVEN EYE, RAVEN NGFW and RAVEN IDS can identify the latest attacks

and implicit risks.

Comprehensive Inspection

From security design perspective, all security target need to be accomplished without being interfered

by previous network design. To achieve this expectation, RAVEN NGFW and RAVEN IDS support multiple

deployment modes to adapt to various network environment. RAVEN NGFW support L2/L3 deployment modes

and RAVEN IDS support centralized/distributed deployment modes. These multiple deployment modes help

RAVEN security products implement comprehensive inspections in all scenes.

Multi-Functional Report

Clear and clarified information visualization help network and security administrators understand what

happened in their network and how to take correct action to defense/mitigate network attack. RAVEN security

products provide advanced algorithms and dashboard to show security information in real time. Besides,

RAVEN security products provide analysis report based on time, address, event and other multiple parameters.

Combined with historical analysis data, it can clearly show the trend of security risks and help to evaluate the

result of network security construction.