DATA SHEET ExtremeXOS Operating System, Version 15.6.1 ® HIGHLIGHTS ExtremeXOS has a robust set of Layer 2 and Layer 3 control protocols, provides a flexible architecture for highly resilient networks and has been designed to support the nextgeneration Internet Protocol, IPv6. ExtremeXOS is a highly available and extensible software foundation for converged networks. ExtremeXOS offers high availability for carrier- grade voice and video services over Extreme Networks has created the ExtremeXOS modular Operating System (OS) – for highly available, extensible, high-performance networks. ExtremeXOS business applications such as CRM. • Modular Operating System • High Availability Architecture high availability architecture with EAPS protocol helps reduce network downtime for business continuity and access to mission-critical applications such as CRM, data warehouses and VoIP for carrier and voice grade networks. Built-in security capabilities provide network access control integrated with endpoint integrity checking, identity management, and protection for the network • Rich set of Layer-2 and Layer-3 protocols and features control and management planes. • Secure Management With ExtremeXOS you can extend the capabilities of your network by integrating • Extensibility • Integrated Security with NetLogin, MAC Security, IP Security • User, location, and time-based dynamic security policies with Identity Management • Insight, control and automation for virtualized data centers with XNV (ExtremeXOS Network Virtualization) • Enhanced resiliency, synchronization, performance for 2G/3G/4G mobile backhaul • ExtremeXOS InSite SDK • Software Defined Networking Ready with OpenFlow and OpenStack support • Ethernet Audio Video Bridging (AVB) enabled specialized application appliances such as security devices into the network, providing insight and control at the network, application and user level. Architectural Highlights • Memory protection for processes • Self-healing process recovery via process restart or hitless failover • Dynamic loading of new functionality • Scriptable CLI for automation and event-triggered actions •  XML open APIs for integrating third-party applications • Dual-stack IPv4 and IPv6 support High Availability Architecture • Reduce network downtime using hitless failover and module-level software upgrade • Prevent system corruption using memory protection for processes • Avoid system reboots using self-healing process recovery • Extend high availability across switches with Multi-Switch Link Aggregation Groups ExtremeXOS – Data Sheet

Extensibility • Integrate best-of-breed applications to your network with Hitless Failover and Graceful Restart With dual management modules on BlackDiamond chassis an open, yet secure XML-based Application Programming systems and advanced stacking support with Summit fixed- configuration switches, ExtremeXOS is capable of preserving • Integrate Extreme Networks and third-party developed software applications using open standards-based POSIX interfaces • Scripting-based device management for incremental configuration deployment and ease of management Integrated Security • Guard access to the...

errors. Scripting capabilities, such as system-and user-defined environment variables, such as if/then and loops, allow automating regular management tasks in scripts and deploying configurations such as QoS, rate limiting and ACLs, for example, to multiple ports. Scripts can access CLI output, and a rich set Network Traffic Monitoring ExtremeXOS sFlow and IPFIX standards-based data monitoring support provides Layer 2-7 visibility into the network, including statistics on which applications are running over your network, of Python or Tcl functions that provide a utility library of string manipulation,...

Integrated Security Dynamic security policies can be deployed via RADIUS Vendor Specific Attributes (VSAs). As an example, the VLAN for a given user or device can be dynamically assigned. Network Login optionally will dynamically create the VLAN if it does not exist on the edge switch, dramatically reducing the burden of managing VLANs. In Extreme Networks implementation, leveraging the fully configurable ExtremeXOS Universal Port infrastructure, dynamic security policies including VLAN assignments (see Figure 4). Dynamic policies may also include rate limiting, QoS and Figure 2: VoIP Auto Configuration...

host computers from spoofing and man-in-the-middle attacks. It Ethernet Automatic Protection Switching (EAPS, RFC 3619), also provides network protection from statically configured and/ invented by Extreme Networks, is designed to prevent or spoofed IP addresses as well as building an external trusted loops in a ring topology running Layer 2 traffic. Its role is database of MAC/IP/port bindings so that you always know where similar to STP, however it is able to rapidly converge when traffic from a specific address comes from for immediate defense. a link breaks, transparently to VoIP calls, independent...

Designed for IPv6 IPv6 offers improved network intelligence and a considerable number of new capabilities over IPv4. However, there are specific challenges regarding whether to choose to actively participate in the transition to IPv6 or hold off to further evaluate. Extreme Networks has taken a ground-up approach to addressing these challenges by designing IPv6 intelligence into ExtremeXOS from the beginning. Extreme Networks has designed an architecture for the performance, flexibility and security requirements of IPv6 without compromising operational simplicity (see Figure 5). Features include...

Software Defined Networking Ready MPLS and H-VPLS are supported on multiple ExtremeXOS- ExtremeXOS based switches are SDN ready offering support based switches through licensable software modules. MPLS for industry standard OpenFlow and OpenStack. ExtremeXOS (MultiProtocol Label Switching) can support multiple service implementation of OpenFlow is based on OpenFlow 1.0 APIs offerings and models, and offers traffic engineering, traffic that allows an external OpenFlow based SDN controller to access management and out-of-band control. H-VPLS (Hierarchical and control the forwarding plane of the...