New ABB Ethernet SolutionsABB FOX Switch (AFS) Familiy
Helmut Weber, Integrator Partner Seminar 2012
New ABB Ethernet SolutionsContent
June 12-14, 2012 | Slide 2
© ABB Group
ABB Ethernet Solutions
AFS – ABB FOX Family Overview
General and Extended Features AFS Family
AFF 650 – ABB FOX Firewall Overview
© ABB Group
June 26, 2012 | Slide 3
Application, Price,
Functionality,
10/100 Mbit optical
ABB Ethernet SolutionsSwitch Portfolio - Overview
560NUSxx
560NMSxx
AFS650/655
Ring and mashed NetworkLinear
2 wire copper
10/100 Mbit electrical
100/1000 Mbit optical
100/1000 Mbit electrical
560NMD01560NMD11
AFS670/675
AFS New Solutions
© ABB Group
June 26, 2012 | Slide 4
AFS FamilyOverview
ABB FOX Switch Family
Utility Grade Switches
IEC 61850 approved in SVC Baden
IEEE 1613 compliant EMI substations requirement
Fanless design
For switches & routers
Extended temperature range0°C up to 60°Coption -40°C to 85°C (70°C AFx677) option conformal coating (high humidity)
Redundant power supply
AC power supply (90 .. 265 VAC)and/orDC power supply (18 .. 60, 77 .. 300 VDC)
AFS650/655
AFS670/675
AFS677/AFR677
AFF650
AFSView
© ABB Group
June 26, 2012 | Slide 5
AFS670/ AFS675
19” managed Switch of utility grade
Metal housing, Ports on front or on rear
High port density, modular concept
Up to 28 FE ports (electrical, optical or SFP cages)
Huge variety on optical ports: SFP cages, SC, ST,.., MM and
SM
SFP’s in various versions available (MM, SM, single fibre)
Up to 4 GbE ports (optical, electrical or combo ports)
Up to 4 Ports PoE
24/36/48 VDC or 60/120/250 VDC, 110/230VAC Power supply,
Redundant Power supply possible
CRA (Configuration Recovery Adapter) port for easy exchange of
product
© ABB Group
June 26, 2012 | Slide 6
General Features AFS650, AFS670 Family
Full managed Ethernet Switch supporting
Protection features such as RSTP Rapid Spanning Tree Protocol (IEEE802.1w),MSTP Multiple Spanning Tree Protocol on AFS677 (IEEE802.1s)MRP Media Redundancy Protocol (IEC62439) E-MRP Enhanced Redundancy Protocol (Proprietary)
Protection Scheme in case of link failure
VLAN’s (IEEE802.1Q)
Separation different applications
Traffic prioritization (IEEE802.1D/p), 4 queues
Priorization for mission critical applications
Port Rate Limiting (Ingress & Egress) in steps of kbps
Avoids blocking of mission critical data's
Link Aggregation (IEEE802.3ad)
Bundling of several parallel links
© ABB Group
June 26, 2012 | Slide 7
General Features AFS650, AFS670 Family
Full managed Ethernet Switch supporting
PTP Timing (IEEE1588): Transparent Mode on AFS650/670, full hardware support on AFS677
Authentication (IEEE802.1x) / Port Security
Security of end user
Port mirroring
Packet sniffing for troubleshooting
Traffic Monitoring
Packet counters for troubleshooting
IGMP (Internet Group Management Protocol) snooping
Multicast traffic handling
SNMP V1, V2, V3, SSH (Secure Shell)
Network management
© ABB Group
June 26, 2012 | Slide 8
General Features AFS650, AFS670 Family
Configuration
Command Line Interface
Telnet
WEB Interface
Management System AFS-View
Configuration Recovery Adapter (CRA)
Configuration stored on a USB stick for easy product replacement
Watchdog & Rollback feature
Restores old configuration in case of cutting of the equipment
Diagnostic LEDs
2 x Alarm contacts
SFP Diagnostics
Local Logfile & Syslog Function
LLDP (Link Layer Discovery Protocol)
Automatic topology discovery of network
© ABB Group
June 26, 2012 | Slide 9
Extended Features AFS Family Configuration Recovery Adapter CRA)
CRA: rugged storage medium for configuration and ESW
Existing installation with fixed installed CRA
Defective switch can be replaced by
Disassembly of AFS Switch
Mounting of new switch
Connecting the CRA to the new switch
Configuration will automatically be downloaded(as long as there is no password mismatch)
© ABB Group
June 26, 2012 | Slide 10
Extended Features AFS Family Application: Watchdog & Rollback – config. failure
Switch Switch
PC
Switch
Remote configuration
Automatic Rollback
configuration
Configuration
Failure
© ABB Group
June 26, 2012 | Slide 11
AFF650: ABB FOX FirewallHardware
2 ports 100BASE-X
TX/TX
FX/FX
FX/TX including single mode fibre
1 RS232 port with RJ11 socket for
configuration of AFF
secure modem access to network for remote diagnosis
1 USB socket for CRA support
Temperature range:
Standard: 0°C to +60°C
On request: -40°C to +60°C
Voltage range:
9.6 to 60 VDC
18 to 30 VAC
Power consumption: 9.6 VA max. at 24 VDC
© ABB Group
June 26, 2012 | Slide 12
AFF650 - Main Functions
Operates in Routing or Bridging Mode
Router Functionality
Firewall Functionality (in routing or bridging mode)
Stateful Inspection
Packet filtering (IP address or protocol)
Packet filtering (MAC address)
Protection against DoS attacks
Network Address Translation - NAT (1:1, 1:n)
VPN Functionality (IPSec)
Router Redundancy
Dynamic DNS
© ABB Group
June 26, 2012 | Slide 13
Stateful Inspection
X
Request
Request
Response
Response
Insecure Secure