MTS2800 series switch – MAMMUTHUS Layer3 Gigabit Ethernet Switch

with 10G Uplink Ports

Access/aggregation switches that can offer comprehensive L2/L3 feature sets

MTS2800 series switches provide a whole set of access and aggregation solution.

All switches in this series are equipped with redundant PSUs.

The switches has compact mechanical design with low noise which can fit in with

600mm×600mm compact cabinet. In addition, the switches can work properly

under maximum temperature up to 55°C.

All the RJ45 ports in MTS2800 series switches support auto-negotiation and

MDI/MDI-X. The switches can be applied to various working situations such

as desktop, ELV room and data aggregation layer. The switches have 4 or 6

SFP+ slots and support stacking configuration, which can eliminate single

point of failure and provide MC LAG.

MTS2800 series switches have comprehensive L2/L3 feature sets and

furthermore can provide flexible, reliable and secure choice for network

planning. The general security and flow control technology such as DAI,

DHCP snooping, IGMP snooping and 802.1x that the switches have can

help administrator to deploy a secure & robust network infrastructure.

Access/aggregation switches that have comprehensive function with

PoE/PoE+ MTS2700 series switches provides a whole set of access

solution, which is able to support complex network design. 

The switches can prevent unauthorized network access or mitigate

the impact of network attacks via plenty of security features.

All RJ45 ports in MTS2700 series switches support PoE/PoE+ function,

which are able to provide up to 30W power supply for the PoE PD device,

such as webcam, IP telephone etc. What’s more, modular PSUs can

provide FRU and the device can work properly under maximum temperature

up to 55°C. MTS2700 switches have comprehensive L2/L3 feature set,

which can provide flexible, reliable and secure choice for network planning.

Network consultant can enhance network security via DAI/DHCP snooping

or can optimize multicast via IGMP snooping or can use broadcast control

to ensure the network stability when UMB flooding.

MTS2600 Series Switch – MAMMUTHUS Layer2 Gigabit Ethernet Switch

with 10G Uplink Ports

Entry-level access and port extension switch

MTS2600 series switch is the entry level access switch in Mammuthus series, providing sufficient performances

and flexible functions. 10 Gigabit port is available so uplink speed to core switch is assured.

All RJ45 ports in MTS2600 series switch support auto-negotiation and MDI/MDI-X, and all SFP+ slots can work

under 1/10G mode. All SFP+ slots support 1G and 10G MTS SFP modules, including fiber and UTP/STP*.

* detailed information please see SFP chapter in this brochure.

For higher port density and performance at access level, MTS2600 supports stacking and downlink-oversubscribe

design, in which 24 GE access ports couples with 4 10G SFP+ uplink ports. Since the MTS2600 series switch

supports ERPS and have hardware based broadcast control, the switch can be deployed in ring topology.

Technologies

Technology Topics on Network Security

RAVEN security products are designed to provide comprehensive and reliable cyber security functions in IT/

OT converged network. With Belden’s 10-year network security experience, below functions can directly benefit

customers and promote security strategy landing.

RAVEN EYE

RAVEN EYE is an intelligent analysis center which contains compressed behavior signature and

profile information database. It can get latest cyber security events from over 70 traffic flow

sampling centers around the world. By combining these collected data with RAVEN EYE security

analysis, tracking and modeling database, any new network attack and security events around

the world will be updated onto RAVEN EYE database within 6 hours. Through regular updates to

the information base, RAVEN NGFW and RAVEN IDS can identify the latest network attacks and

implicit risks.

L2/L3 Mode

RAVEN NGFW can work under Layer2 or Layer3 mode which provides flexibility during network

design. It can serve as the network gateway in L3 mode or as a network bridge in L2 mode.

According to the limitation in deployment environment, RAVEN NGFW can choose either L2 or

L3 mode on demand or combine both modes in one chassis.

IPv6 Ready

Network address is now moving from IPv4 to IPv6. All security functions on RAVEN NGFW

and IDS support IPv4/IPv6 dual stack, which ensures RAVEN products can fulfill the security

requirements no matter in current networking environment or in future security design.

vFW

vFW is a feature that enable RAVEN NGFW to divide into multiple isolated virtual firewalls

serving different security domains or security designs. RAVEN NGFW allows users to manage

the resource of each vFW, which avoid the over subscription of resource during heavy

traffic. vFW also balance the traffic between HA (High Availability) members under specific

configuration.

HA (High Availability)

To cope with the risk of chassis failure, all RAVEN products support HA function. In RAVEN

NGFW, HA function merge 2 firewalls into one cluster, and thus all traffic fingerprints, such

as TCP status, ICMP/UDP timer, ALG sessions and VPN cookies, will be synchronized in both

firewalls. Therefore, no new session is needed once a member of HA cluster failed. In RAVEN IDS,

HA function helps to remove duplicate session and to ensure no security events will be missed

during the failure of one chassis.

Comprehensive Inspection

From security design perspective, all security target need to be accomplished without being interfered

by previous network design. To achieve this expectation, RAVEN NGFW and RAVEN IDS support multiple

deployment modes to adapt to various network environment. RAVEN NGFW support L2/L3 deployment modes

and RAVEN IDS support centralized/distributed deployment modes. These multiple deployment modes help

RAVEN security products implement comprehensive inspections in all scenes.

Multi-Functional Report

Clear and clarified information visualization help network and security administrators understand what

happened in their network and how to take correct action to defense/mitigate network attack. RAVEN security

products provide advanced algorithms and dashboard to show security information in real time. Besides,

RAVEN security products provide analysis report based on time, address, event and other multiple parameters.

Combined with historical analysis data, it can clearly show the trend of security risks and help to evaluate the

result of network security construction.

Hirschmann IT RAVEN Next Generation Fire Wall

Hirschmann IT RAVEN security products help Belden deliver total solution for compliance and

security requirements in IT/OT converged network design.

RAVEN Security Products Commit to Provide Customers with a Secure and Trusted Networking

Environment, Perfect Border Management Functions, and Predictable Behavior/Performance

RAVEN series products are important security solutions from Hirschmann IT product portfolio. They

can help customers benefit from the evolution of IT/OT convergence and avoid as more risks as

possible in this convergence trend.

Integration Protection

RAVEN series products (RAVEN Next Generation Firewalls and RAVEN Intrusion Detection Systems) are

designed as part of the total security solution of Belden. They can co-work with Hirschmann EAGLE firewall

products to offer a total cyber security solution in IT/OT convergence. Besides, by synchronizing with RAVEN

EYE, RAVEN series products shares the same security updates, which helps implement end-to-end security

strategy and also helps network administrators assess their security strategy with the same benchmark.

Hirschmann IT Dragonfly Enterprise Wi-Fi 6 Access Point

Hirschmann IT Dragonfly series Wi-Fi 6 certified access point is the last puzzle for the Hirschmann IT

enterprise network solution.

Dragonfly Wi-Fi 6 access point has indoor and outdoor version. All models  support 2.4GHz & 5GHz

dual GE uplink, OFDMA, MU-MIMO and all sort of Wi-Fi 6 features that can deliver more capacity for

bandwidth with less latency, which is ideal choice for your high-quality wireless requirement.

Featuring enhanced WLAN technology with RF Radio Dynamic Adjustment, a distributed control Wi-Fi

architecture with unified access secure network admission control, built in application intelligence and

analytics, making it ideal for enterprises wireless solution. All DAP models except DAP620 has integrated

with BLE5/Zigbee (802.15.4), making it ideal for broad scope of IoT endpoints and applications.

Plug-and-Play Deployment

The DAP  Series works in a fully redundant cluster architecture to provide simplified plug-and-play deployments.

One single access point (AP) cluster is an autonomous system that consists of a group of APs and a virtual

controller, which is performed by a selected access point for cluster management. One AP cluster supports up

to 255APs

The access point cluster architecture ensures simplified and quick deployment. Once the first AP is configured

using the configuration wizard, the remaining APs in the network will get online automatically with updated

configuration. This ensures that the whole network is up and operational within a few minutes.

Network Management Platform deployment

All Drgonfly APs can be managed by DAC (Dragonfly Access Point Virtual Controller). APs is managed as

one or more AP Groups (a logical grouping of one or more access points). The DAC is a visualized, user

friendly and hardware free management platform. It supports WLAN management together with integrated

authentication server which helps define authentication strategy and policy enforcement for Employees and

Guest devices. The network administrator can obtain a comprehensive overview of all running applications on

the network and apply adequate control to optimize the network performance for mission critical applications.

DAC Management platform provides advanced options for RF Management, as well as WIDS/WIPS for

intrusion detection and prevention.

Wi-Fi 6 (802.11ax) Features

Wi-Fi 6 (802.11ax) allows enterprises to deliver high performance wireless LAN services with increased

throughput, enabling more clients in dense environments. Furthermore, it provides high power efficiency for

Internet of Things (IoT) devices, while it remains fully backward compatible with existing 802.11 a/b/g/n/ac

deployments.  Some of the key features enabled on DAP series are:

Orthogonal frequency division multiple access (OFDMA) enables more clients to simultaneously operate

in the same channel, therefore improved efficiency, latency, and throughput. OFDMA can simultaneously

address multiple clients in both directions downlink (DL) and uplink (UL). OFDMA is extremely effective for

lower latency applications with mass clients such as voice and video transmission.

Multi-user multiple input, multiple output (MU-MIMO) allows more data to be transferred at once

and enables a single access point to handle a larger number of concurrent clients.

1024 quadrature amplitude modulation mode (1024-QAM)

boosting peak data-rates by as much as 25 %.

BSS Coloring improves spatial reuse in dense environments by providing a mechanism for color

coding different overlapping BSS’s, allowing more simultaneous transmissions.

Extended Range (ER) provides increased coverage in scenarios where receiving side encounters

high path loss and channel delay spread, especially in outdoor environments.

Target wake time (TWT) improves power efficiency for Wi-Fi 6 devices. This capability lets client

devices to sleep much longer, and wake up to less contention, extending the battery life of smart

phones, IoT sensors, and other devices.