What Is ACL (Access Control List) and How to Configure It?

Posted on August 28, 2018 by Admin

Though the robust network promotes the connectivity among people at every comer of the globe, we may not enjoy its convenience or gain the information we want as easily and casually as it thought to be. Due to the access control list, some paths to a certain server may have been blocked manually. Well, what is access control list? Why does it get in my way to the fantastic world?

What Is ACL (Access Control List)?

ACL stands for Access Control List. It is a list of a series of rules that are specified to permit or deny traffic flow. More precisely, ACL serves to filter data packet based on a given filtering criteria on a router or data switch interface, thereby controlling access to your network or to specific files or folders on your network. How does ACL work? As we all know, when a router receives a packet, it will routinely identify its destination address and find an entry in routing table that can match with it. If succeed, the packet can be forwarded, otherwise, discarded. We can run ACL conditions before or after the router makes forward decision. If deny condition matches, drop the packet immediately, otherwise, move on to the next step as normal.

There are mainly two types of ACL, namely standard ACL and extended ACL. The former one only specifies the source address while the latter can permit or deny traffic based on both the source and destination addresses as well as the ports (for TCP or UDP), or the IPCMP type (for ICMP).

Why Do We Need Access Control List?

First, it works as a security for your network by filtering the unwanted traffic and blocking specific hosts. In the above scenario, if we exclude the ACL, anyone who knows the right destination address can send his packet through the router with no security policy, and damage may ensue. Given this, you can customize ACL conditions to decide who has access to resources in the network.

Besides, ACLs are used for several other purposes such as prioritizing traffic for QoS (Quality of Services), triggering alert, restricting remote access, debugging and so on.

How to Configure Access Control List?

We’ve produced a video for your better understanding of ACL network and ACL configuration. FS S5800/S5850/S8050 series switches are used in this video. Here are the basic access control list commands.

This step helps enter the global configuration mode

In this step, we create an ACL, and its number is “123”. Then we can add rules to the ACL. Please note that ACL number for the standard ACLs has to be between 1—99 and 1300—1999, and extended access list numbers ranges from 100 to 199, and from 2000 to 2699.

Use the host keyword to specify the host you want to permit or deny. This means that deny tcp host 192.168.1.2 access to 192.168.1.1.

The command above permits all message.

Here create a class-map and name it “http”.

Match the access control list of “123”.

Create policy-map “web”.

Associate the class-map “http” with the policy-map.

Enter the eth-0-1 port on FS S5850-32S2Q 10gbe switch.

Invoke the policy table “web” in the inbound direction of the interface.

The series of operations ban successfully the address 192.168.1.1 from entering the switch now.

Conclusion

Having read this article, you may get acquainted with access control list and know how to configure it. The ACL network helps prevent others from entering into your private network space while keeping you out from where others don’t let you in. Everyone can adopt it to manage your own networking condition. In this way, FS provides you with good quality equipment like fiber switch and PoE network switch and best solutions.

SDN vs. OpenFlow vs. OpenStack: What’s the Difference?

Posted on August 18, 2018 by Admin

As the network grows, the network equipment producers flourish, bringing many different exclusive products into the market. How to manage or operate so many equipment as the different vendors own diversified CLI and web interface to debug and configure. It’s time to put forward some new technologies, SDN vs. OpenFlow vs. OpenStack to tackle this problem.

SDN VS OpenFlow vs. OpenStack: What Are They?

SDN-Software Defined Network

Software-defined networking (SDN) technology is a new way to cloud computing.To improve network monitoring and performance, SDN is designed to enhance network management and promote programmatically network configuration efficiently. It centralizes network intelligence in one network component by decoupling the forwarding process of network packets (data plane) and the routing process (control plane). SDN is mainly composed by application layer which provides application and service, control layer responsible for unified management and control, and forwarding layer that offers hardware equipment like fiber switches, Gigabit Ethernet switches and routers to forward data. The following table illustrates the advantage of SDN against traditional network.

Software-defined Network vs. Traditional Network

Software-defined Network	Traditional Network
Forwarding and control separation	Forwarding and control coupling
Centralized control	Decentralized control
Programmable	Non-programmable
Open interface	Closed interface

OpenFlow: the Enabler of SDN

To turn the concept of SND into practical implementation, we need to put into place some protocols, among which OpenFlow is the most desirable one. So what is OpenFlow?

OpenFlow is a communications protocol that empowers a network switch or router to access the forwarding plane over the network. Also it can serve as a specification of the logical structure of the network switch functions. We know that each switch vendors may have their own proprietary interfaces and scripting languages, and this protocol enables them to work coordinately while avoid exposing their technology secret inside switches to the public.

OpenStack

OpenStack is an open source cloud computing management platform project that combines several major components to accomplish specific tasks. Its existence confronts the AWS of Amazon, as it allows all participators to access the source code and share some ideas, if they want to. It is convenient and reliable with strong compatibility and adaptability, gaining support from many vendors.

SDN vs. OpenFlow vs. OpenStack: What’s the Difference?

SDN vs. OpenFlow

SDN and OpenFlow are prone to be confused and misunderstood. Take a look at SDN vs. OpenFlow, the two are indeed interconnected. First of all, as an open protocol, OpenFlow underpins the various SDN controller solutions. The complete SDN solution is taking SDN controller as the core, backed by OpenFlow switches and NFV to offer bountiful SDN app for a new smart, dynamic, open, custom network.

OpenFlow vs. OpenStack

OpenFlow, since its release, has gained achievements in hardware and software support. CISCO, Juniper, Toroki and pronto have all launched network equipment like 10gbe switch, router, and wireless access point which support OpenFlow. In contrast, OpenStack covers many aspects like network, virtualization, operation system, and server. It is an ongoing cloud computing platform.

SDN vs. OpenStack

Network orchestration OpenStack copes with the component organization of a particular group of assets, from open source or closed implementations, thus we can say that it can be considered how a software-defined network is deployed. While SDN control serves like the commander of organizers and deals with maintaining consistent (as far as is feasible) policy across multiple groups of assets, so we deem it much like the “why.”

Conclusion

SDN vs. OpenFlow vs. OpenStack, the three terms that are of far-reaching significance, attract more attention from the public. This article may provide you with some help to know them at the very first step. Till now, the networking technologies are still advancing, knowing what they are at present doesn’t mean the truly master of it. There is still plenty of room left to be explored.

1Gb Backbone vs 10Gb Backbone: Gigabit Switch or 10GbE Switch

Posted on June 29, 2018 by Admin

The modern world is developing in full speed, so is the telecommunication industry. Not long ago 10GbE switch had been a luxury, so was exclusively affordable to large enterprises. And many individuals and businesses used 10/100Mb switch and could only get to gigabit switch for 1Gb backbone. However, this situation is changing due to price dropping and proliferating market demand. Now more and more SMBs and individuals are using gigabit switch and attempt to access 10Gb switch. As thus questions like whether to deploy gigabit switch as 1Gb backbone or 10GbE switch as 10Gb backbone has stirred heated discussion on many forums. This article is to give some reference for 1Gb backbone vs 10Gb backbone selection guide.

What Is 1Gb Backbone Gigabit Switch?

Simply put, 1Gb backbone refers to the networking configuration that gigabit switch is used in the data center as core switch. A typical scenario in 1Gb backbone configuration is to run 10/100Mb access layer switches with 1Gb uplink back to a central gigabit switch. In this case the 1Gb uplink on the 100Mb switch receives the 1Gbps from the switch gigabit, then divides the 1Gb bandwidth to its terminal endpoints. Restricted by the normal port 10/100Mb, max. 100Mb is available for access points. As thus 100Mb switch has gradually been obsoleted by gigabit switch.

To achieve 1000Mbps and bring in PoE capability, modern operators often use gigabit PoE switch as access switch to cooperate 1Gb backbone gigabit switch. Here is a 1Gb backbone deployment scenario by FS.com: Employing S5800-48F4S 48 port gigabit SFP switch as 1Gb backbone in the data center. Linking two 24 port PoE switches in the office to connect and power IP phones, wireless APs, desktops and laptops. Then running two wires to link two 8 port PoE switches in the warehouse for IP surveillance.

Figure 1: Deploying FS 48 port gigabit switch with 10Gb uplink as core switch and FS 8/24 port gigabit PoE switches as access switches.

What Is 10Gb Backbone 10GbE Switch?

Similarly, 10Gb backbone refers to the configuration that 10GbE switch serves as core switch in the data center. Then running gigabit switches with 10Gb uplink back to the central 10Gb switch. To illustrate 10Gb backbone configuration, here is a deployment scenario. In this case, we deploy S5800-8TF12S 10Gb SFP+ switch as core 10GbE switch in the data center. Using S3910-48T4S 48 port switch and S1600-48T4S 48 port gigabit PoE switch as access switches, we run fiber patch cables to corresponding 10Gb SFP+ uplinks on these access switches. As thus the 10Gb uplink bandwidth can be divided to the access gigabit switch normal port.

Assumption on the case 10 same endpoints are connected to 10 ports on the gigabit Ethernet switch. Then each can obtain max. 1000Mb from the 10Gb uplink bandwidth. In this case, the gigabit speed is retained. If the upper layer switch is a gigabit switch, then each endpoint can only get 100Mb.

Figure 2: Deploying S5800-8TF12S 10Gb SFP+ switch as 10Gb backbone, while S3800-48T4S 48 port switch and S1600-48T4S 48 port gigabit PoE switch are for gigabit access switch.

1Gb Backbone vs 10Gb Backbone: Gigabit Switch or 10GbE Switch as Core Switch?

Virtualization Application

Generally speaking, deploying gigabit switch for a 1Gb backbone vs 10GbE switch for a 10Gb backbone depends heavily on virtualization application. Even in a small office with only several PCs, demanding applications for high bandwidth may require a backbone 10Gb switch. That is, if you or your employees must deal with high-load pictures and videos every day, 10GbE switch backbone is a must to ensure smooth operation and work efficiency. Or you may easily get stuck in network congestion. Say a regular video conference in a midsize enterprise can randomly drop, which wastes time and drag down schedule process.

Number of Users

Also, pay attention to number of users. Counting all the current endpoints: computers, wireless APs, IP phones, etc. And try to measure the load traffic by plotting utilization. Then take future expansion into consideration. If your backbone gigabit switch ports are already hot for using the most bandwidth provided, and you still need to add office devices, then your network is on the verge of severe congestion. In this case 10Gb switch backbone or higher is the choice to go.

Access Point Bandwidth

All in all, choosing between backbone gigabit switch vs backbone 10GbE switch, there is a bandwidth gap that access endpoints are available. If you deploy 10Gb switch as core switch and gigabit switch with 10Gb uplink as access switch, the normal port on the access switch can get max. 1000Mb bandwidth. However, if the backbone is 1Gb and your access switch is 100Mb, then only max. 100Mb bandwidth can be available in the access switch port. So for 1Gb backbone scenario where one use gigabit switch as core switch, deploying gigabit PoE switch instead of 100Mb switch as access switch is a solution to keep up with 1000Mbps speed.

Conclusion

In summary, 1 Gb backbone gigabit switch vs 10Gb backbone 10GbE switch selection depends on the bandwidth your virtualization applications require. In detail, 10Gb switch shall function as 10Gb backbone in the case mass data transfer is a regular task. Thus the gigabit switch normal ports can share max. 1Gb bandwidth. Otherwise you can remain your 1Gb backbone. But for 1Gb access, deploying gigabit PoE switch to replace your 100Mb access switch is a future-proofing and feasible solution to go. FS SFP switch is a good choice for 1Gb backbone core switch whereas SFP+ switch for 10Gb backbone core switch.

Attention: The products mentioned in this article may have unstable availability due to timing issues. For further information, please visit www.fs.com and consult our online customer service.

Buy Gigabit Switch: 2 x 24 Port Switch or 1 x 48 Port Switch

Posted on May 15, 2018 by Admin

As for the issue of network switch setups for more than 24 connections, we usually stick in the dilemma to buy Gigabit switch: deploying 2 x 24 port switch or 1 x 48 port switch, which one to take? We are here to weight the 2-24 port gigabit switch and 1-48 port gigabit switch pros and cons for your selection guide.

Buy Gigabit Switch: 2 x 24 Port Switch or 1 x 48 Port Switch Overview

Budget is always a big concern before touching other factors. It is somehow a common sense that 2- 24 port switch price is lower than 1- 48 port switch price. Thus many people go for 2 x 24 port switch. In fact, that’s not always the same case. For example, buying 1 48 port switch ($410.00) S3900-48T4S will save you over 100 dollars than 2 24 port switch ($280.00) S3900-24T4S from FS.COM. For people pursuing high performance but with tight budget, just go for FS S3900-48T4S 48 port managed switch, which best satisfies your dual demands. To help you buy gigabit switch: 2 x 24 port switch or 1 x 48 port switch, table below shows the model comparison of FS.COM 24 port gigabit switch and 48 port gigabit switch.

Buy Gigabit Switch: 2 x 24 Port Switch Solution Pros and Cons

For concerning about 2 24 port switch solution, one should know its pros and cons compared to 1 48 port switch.

First, having 2 x 24 port switch gives you more sense of security. If one 24 port gigabit switch goes down, users in another switch will still be running. However, the collapse of the sole 48 port switch will lead to the whole network’s breakdown.
Second, 2 x 24 port switch solution provides more flexibility for separate placing. If you need to connect different devices on different floors or offices, 2 x 24 port switch is the way to go.

However, it is noted that this solution has the cons of higher potential bottleneck, less available ports, extra uplink port demand, space consumption and management inconvenience.

Buy Gigabit Switch: 1 x 48 Port Switch Solution Pros and Cons

Apart from the cost-efficiency of 1 x 48 port switch offered by FS.COM, there are other cases 1 x 48 port switch is preferred over 2- 24 port switch.

First, 48 port gigabit switch is natural for high-performance network environments. In 2 x 24 port switch solution, due to one extra uplink port for connecting the 2 24 port gigabit switches, a potential bottleneck/congestion is created and only 46 ports are left available for devices. So in cases only one uplink is available, 48 port switch is the choice.
Second, 48 port gigabit switch managed has the pros of ease of management and rackspace saving even if 2 x 24 port switch are stacked.
Third, one 48 port switch costs less power than the 2 x 24 port switch strategy. However, this solution will lose the redundancy for network outages and separate placing flexibility.

Buy Gigabit Switch: 2 x 24 Port Switch or 1 x 48 Port Switch Selection Guide

After explaining the 24 port gigabit switch and 48 port gigabit switch respectively, we made the following conclusion. For most concerns about performance, one should go for 1 x 48 port switch instead of 2 x 24 port switch, which owns lower potential congestion at the uplink port and can travel at the wire speed. For concerns of space saving, management convenience and more port numbers, also go for the same way. But in terms of redundancy and separate placing, one should better take 2 x 24 port switch.

Table below lists the edges for selecting one solution over the other.

Solution	2 x 24 Port Switch	1 x 48 Port Switch
Edges over the other	Redundancy: one more backup switch in network outages	High performance: wire speed; power saving; less potential congestion
	Separate placing: different floors or offices	More available ports: saving extra uplink for connecting two switches
	Generally less cost	Rackspace saving; Ease of management

In some cases requiring special conditions, pay attention to their built-in features when you buy gigabit switch. For instance, in quiet places such as classrooms, take fanless 2 x 24 port switch because 1 x 48 port switch can be noisy due to equipped fan radiator.

Conclusion

For buy Gigabit switch: 2 x 24 port switch or 1 x 48 port switch, it’s extremism to simply say which one is superior or inferior. We decide 2 24 port gigabit switch or 1 48 port gigabit switch to buy by the factors we are most concerned about and the respective edges over the other in each case. No matter you need 24 port switch or 48 port switch, FS.COM would be a good place to go.

Patch Panel vs Switch: What’s the Difference?

Posted on May 9, 2018 by Admin

In network setups we see everything is plugged into a switch, but before that fiber cables are also connected to another supply – patch panel. Thus one question is often confusing: patch panel vs switch: What’s the difference and what’s the significant function of them respectively?

What Is Patch Panel?

Patch panel (fiber optic patch panel, fiber optic enclosure) is a terminate unit of network ports centralized together. It is a cable management solution component used to organize fiber cables and keep everything neat for a clean wiring closet. In data centers, a mass of cable wires scattering all over and mixed together can be bothersome, in this case a patch panel is indispensable and rather helpful. It not only offers ease of management, but also protect the terminations from being knocked. Besides the fiber optic patch panel, other cable management accessories including cable ties and cable labels are also used to keep cables tidy and easy for identification.

Figure 1: This photo shows the application of patch panel by FS.COM for cable management in a data center.

What Is Switch?

Switch, commonly known as network switch, is an appliance in a data center that connects all devices (such as PCs and servers) as a whole to achieve intercommunication and data sharing between different network devices. It channels the incoming data from multiple input ports to the specific output port so as to deliver the data toward its destination. In Ethernet LAN or WAN, modern network switch usually determines which output port to use by network address.

Figure 2: This photo shows the application of network switch by FS.COM in a data center.

Patch Panel vs Switch: What’s the Difference?

Table below shows the main difference of patch panel vs switch.

Name	Patch Panel	Switch
Price	Cheap	Expensive
Role playing	Cable management tool: Centralizing cable wires together; protecting fiber cables from damage.	Functional performance: connecting all devices together to receive and transmit exact messages to the target device end.
Form feature

·Role in Date Center

Comparing patch panel vs switch, we can make the following conclusion. Patch panel is nothing but an essential cable management tool, which exerts no functional influence to the performance of data transmission. However, a switch is an irreplaceable functional supply in network setups.

Why Patch Panel Is Commonly Set Up in Network Installation?

As mentioned above, patch panel has no effect on the data transmission process. Can it be omitted in fiber optic cabling? Or can wires just directly plugged to a switch? The answer is yes when you just deal with several fiber cables. However, Ethernet patch panel is a must in data centers where there are a large number of Ethernet drops. No doubt you don’t want to see all the things tangled together. A patch panel in place provide ease management of classification, maintenance, repair, installation and upgrades.

Conclusion

This article gave an brief introduction to patch panel and switch respectively and then discussed the differences between them. Patch panel vs switch : what’s the difference, and why is a patch panel commonly set up in network installation whereas a switch is already used? Can you answer these questions now? Simply put, patch panel is an essential cable management tool whereas network switch is a significant functional supply in data center. Both of them play important role in their respective positions.

Fiber Optic Components

Just for Fiber Optic Communication Networks

Category Archives: network switch

What Is ACL (Access Control List) and How to Configure It?