Authentication and Access Control Agent Framework for Context-Aware Services

Raphael Druon,Sr. AI Solutions Engineer **************Maximizing At-Scale AI Training Efficiency:The Power of Data Caching•Turnkey appliance , fully-optimized for maximum AI application performance, proven at the largest scale.•Predictable performance, capacity, capability•Shared parallel architecture maximizes infrastructure performance, streamlines workflows, eliminates data management overhead, scales limitlessly.•Feature-rich data management and security: hot pools, hot nodes, encryption, multi-protocol data services.•Advanced capabilities ideal for multi node andhyperscale AI infrastructure deployments with analytics.DDN AI400X2 –THE AI DATA PLATFORM PROVEN AT-SCALEAll-NVMe or Hybrid 90 GB/s, 3M IOPS read65 GB/s write HDR200 and 200GbE2 RU, 2.2 KW, 7.5K BTU/hr© 2022 DDNWhat is EMF? EXAScaler Management FrameworkEMFEXAScaler related configurations (servers, utility nodes, clients)Simplified Command And ControlManage distributed components centrally using consistent commands (CLI,API,GUI)NVIDIA Partners with DDN to Fast Track HPC and AI in Enterprise Data Centers GloballyDDN powers the largest AI supercomputers in the worldNVIDIA SELENE SuperPOD–560 DGX A100s40 DDN AI400X, 2 TB/s read throughput, 15 PB NVME capacity, 1EB on HDD#5 on Top 500 and #2 on Green 500 ListsDDN Confidential -NDAProven, Predictable, Best AI Data PerformanceSimplicity of Scaling, Balanced Performance, Plug-And-Play Experience780 GB/sBALANCED WRITE PERFORMANCE900 GB/s READ THROUGHPUT OUT OF THE BOX1002003004005006007008009001234567891011121314151617181920T h r o u g h p u t (G B /s )DGX A100 Systems12 DDN AI400X2 with 20 NVIDIA DGX A100•Large models require distributed training with hundreds or thousands of GPUs •Data sets at least multiple petabytes and constantly growing•Often small random read is the primary IO pattern •MMAP POSIX function is very common for loading data •Containerized applications require new data path optimizations•Checkpoints are widely used to reduce impact of failures•GPU systems are getting more powerful and AI models are getting larger which equates to a steady increase in data volumes and IO performance over timeAt-Scale NLP Workloads Common IO FeaturesRegister, save, pause and resume AI applicationsResume at a particular step in the training process and recover from any failure, with all progress and energy used saved.Improve inference prediction accuracyIn continuous learning, intermediate models are deployed for inference, while online training continues with new data sets and parameters.Relocate AI processes to different systemsEasily migrate to another platform, ideal in case of infrastructure fault.Perform transfer learningIntermediate model states are used as seed to train for a different goal.Checkpointing Improves AI Model and Workflow PerformanceCheckpoints take a snapshot of a model and store it in a non-volatile memory. They’re an important part of training long running AI models efficiently, especially at-scale.“10% of jobs run for at least 13.5 hours before they fail, and 1% of jobs fail after executing for not less than 53.9 hours. Many of these jobs require 128 GPUs spanning many nodes, that are very expensive to purchase,maintain and run.”Meta AI Research TeamShared storage•Nowadays, most of the datasets doesn’t fit in worker memory•In this case, each workers need to read the dataset continuously from the shared storage•Storage is kept busy while it could be used for other IO intensive task (such as checkpoint, ingest or other cluster activities)Multi-nodal distributed trainingLimitationJob schedulerWorker1Memory•Achieve full AI application performance with data cached on local NVMe devices in client, without any manual and risky data management overhead.•Automated data movement from shared space to local node with intelligent policy-based cache management makes the process entirely transparent for users.•Delivers significant efficiencies and AI workload improvements with large number of nodes engaged simultaneously for training, especially for at-scale NLP.Next-Gen AI Data Caching with DDN Hot Nodes (Based on PCC)Leverage local flash to maximize benefits of unified, global shared namespace•Cache management tools •Fine control over cache behavior, policy-based cache managementAdditional features•Statistics reporting •Cache utilization •Hit/Miss•NVIDIA BC (Base Command) integration•Load data on preflight •Statistics visualization•GPT3 model training using 128 DGX A100s and DDN shared storage •13B parameters in model (2020). Today, models are 40-50X larger.•Read data set at beginning of every training job:•Up to 1 TB/s read from shared DDN storage during first iteration •Full data set is several TBs, each DGX assigned a different portion •Shared storage makes it easy access to entire data set without any copy•Hot Nodes makes distributed training process more efficient:•On first read, data is delivered to application and copied to local DGX storage •Subsequent reads delivered from local storage, transparent to application •Shared storage available for checkpoints, ingest and other cluster activitiesAt-Scale NLP with DDN: Megatron-LM on NVIDIA SELENETraining Large Language Models Requires Fast Read and Write Performance and Large Capacityfor AIHighest Density All Flash with DDN’s new NVMeoF Enclosure High Density Flash Up to 7PB QLC in 10RU EXAScaler Parallelism DDN Software extends outstanding performance across the network to your applicationsThe Fastest Controller to Drive Your QLC Real-Time, Many-Core RAID Engine Simple Scale up and Scale out No External Switching with DDN Storage Fusion NVMe FabricUnprecedented Resilience SFAOS Data Protection, Intelligent data placement and SuperFast Rebuilds No Single Point of Failure, Zero Midplane DesignDDN CSI Driver Security Features For Kubernetes Secure Containerized Applicationswith Full K8 Flexibility and Performance•Per tenant authentication and access controls •Central volume management (create/delete)•Fine-grained quotas administration •Dynamic publish & unpublish for volumes •No root access required for tenantsExtra layer of securityPoweredby EMFfilesystemfilesystem filesystemEXA CSI DriverCEMF enhancements simplify multi-tenant management and will introduce fine-grained authorization (RBAC)Further reading•“Accelerating AI at-scale with Selene DGXA100 SuperPOD and Lustre Parallel Filesystem Storage” by Prethvi Kashinkunti and Julie Bernauer from NVIDIA, LUG 2021, (slides) (video)•DDN Reference Architecture。

F5 User’s Group September 13th 2011 Agenda
TMOS version 11
New features and overview Demo vCMP Demo and discuss iApps
1
User discussion – iRules Survey and suggestions for next meeting
15
TCP Connection queuing
• • • • Operates at TCP level; HTTP not required Currently only engages when conn limit hit Specify queue length limit, time limit, or both Queues operate per-tmm (no state sharing)
•
• • •
Modules: Add-on Module support VE and 1600 (ASM, WA, APM, GTM, WOM)
Modules: Triplet support on 3600 and higher (Any combination excluding LC) VE Production (LTM, APM, ASM, WOM,GTM) *WA coming next release New VE Lab editions that include all products
© F5 Networks, Inc.
12
ScaleN : Device Service Clusters Dynamic Service Based Failover

Data Sheet Cisco Catalyst 3560-CX and 2960-CX Series Compact SwitchesThe Cisco® Catalyst® Compact Switches easily expand your Ethernet and Multigigabit Ethernet infrastructure outside the wiring closet to enable new workspaces, extend wireless LANs, and connect PoE devices. These fanless, small form-factor switches are ideal for space-constrained deployments where multiple cable runs would be challenging. With speeds that reach 10Gbps, the Cisco Catalyst 3560CX Multigigabit Ethernet Switches support current and next-generation wireless speeds and standards (including 802.11ac Wave 2) on existing cabling infrastructure.Cisco Catalyst 3560-CX and 2960-CX Switch Family.The Cisco Catalyst 3560-CX and 2960-CX Series Compact Switches help optimize network deployments. These Gigabit Ethernet (GbE) and Multigigabit Ethernet (mGig) managed switches are ideal for high-speed data connectivity, Wi-Fi backhaul, and Power over Ethernet (PoE+) connectivity in places where space is at a premium. With a single copper or fiber cable from the wiring closet, Cisco Catalyst compact switches enable IP connectivity for devices such as IP phones, wireless access points, surveillance cameras, PCs, and video endpoints.With their quiet, fanless design and compact footprint, these switches can come out of the data closet and beplaced closer to the users. This means shorter cable runs and greater flexibility as you grow your network.Cisco Catalyst 3560-CX and 2960-CX Series Compact Switch Highlights●8 or 12 Gigabit Ethernet ports with line rate forwarding performance● 6 Gigabit Ethernet plus 2 Multigigabit Ethernet (100 Mbps/1/2.5/5/10 Gbps) ports with line rate forwardingperformance (selected model)●Gigabit and Multigigabit (100 Mbps/1/2.5/5/10 Gbps) copper, small form-factor pluggable (SFP) or10G SFP+ uplinks●Power over Ethernet Plus (PoE+) support with up to 240W of PoE budget●Power over Ethernet (PoE) pass-through enables the compact switch to draw Cisco Universal PoE(Cisco UPOE™) power from the wiring closet and pass it to end devices (selected model) with the additional option to be powered by auxiliary AC-DC or DC-DC power adapter●Cisco Instant Access mode to enable single point of management and simplify operation (selected models)●Advanced Layer 2 (LAN Base) and Layer 3 (IP Base) support with an option to upgrade to IP services●Fanless design and silent operation●Enhanced Limited Lifetime Warranty (E-LLW)Features and BenefitsLike the larger Cisco Catalyst switches typically used in wiring closets, the Cisco Catalyst Compact switches are a managed option for consistency across your LAN switching network. Unlike unmanaged switches and hubs, they provide advanced networking features for flexibility, security, and scale.Table 1 lists many of the Cisco Catalyst 3560-CX and 2960-CX switch features and benefits.Table 1. Compact Switch Features and Benefits SummaryPoE pass-through PoE pass-through gives the ability to power PoE end devices through drawing Cisco UPOE from the wiring closet. The Cisco Catalyst WS-C3560CX-8PT-S has eight downlink ports with two Cisco UPOE input ports that allow it to bepowered by another switch. These switches do not need a power supply and receive power over the uplink from anupstream PoE or Cisco UPOE device, providing deployment flexibility and availability. These switches are ideal forwiring-constrained and space-constrained applications.Management and OperationsCisco Instant Access Mode Available on Cisco Catalyst 3560-CX switches with 10 G SFP+ uplinks, this optional mode enables a single point of management and operation for campus networks. Multiple Cisco Catalyst 3560-CX compact switches with 10 G SFP+ uplinks can be connected to Cisco Catalyst 6500 or 6800 core switches, and the entire configuration can then work as a single extended switch with a common management domain.In this mode, compact switches inherit all the features of the Cisco Catalyst 6500 or 6800. Advanced Cisco Catalyst 6500 and 6800 features like MPLS and EVN can be extended to the access layer, so the Cisco Catalyst Instant Access solution can be deployed on all or a subset of the campus network.Cisco Network Plug ‘n Play (PnP) Network Plug-n-Play (PnP) is a secure, scalable solution that accelerates network device deployments by automating the installation and configuration of Cisco IOS software. The Cisco Catalyst 3560-CX and 2960-CX switches are‘Network-PnP Ready’ and can be used as part of the APIC-EM solution for automated switch deployments. This feature helps improve productivity, cut costs, reduce downtime, and enhance the user experience.Cisco Catalyst Smart Operations This comprehensive set of Cisco Catalyst technologies and Cisco IOS Software features simplify LAN deployment, configuration, and troubleshooting.●Cisco Smart Install enables the configuration of the Cisco IOS Software image and switch without userintervention.●Cisco Auto Smartports provides automatic configuration as end devices connect to the switch port, allowingautodetection and plug-and-play of the device onto the network. Interface templates containing configurations or policies that can be applied to ports are also supported.●Cisco Smart Troubleshooting is an extensive array of debug diagnostic commands and system health checks,including Generic Online Diagnostics (GOLD) and Onboard Failure Logging (OBFL).●Embedded Event Manager (EEM), supported on the Cisco Catalyst 3560-CX, provides real-time network eventdetection and onboard automation. You can adapt the behavior of your network devices to align with business needs.Cloud and System Management ●Cisco Prime® Infrastructure provides comprehensive network lifecycle management with an extensive library of features that automate initial and day-to-day management. Cisco Prime integrates hardware and software platform expertise and operational experience into a powerful set of workflow-driven configuration, monitoring, troubleshooting, reporting, and administrative tools.●Cisco Network Assistant is a PC-based, centralized network management and configuration application for small and medium-sized business (SMB) with up to 250 users. An intuitive GUI lets you easily apply common services across Cisco switches, routers, and access points.●Cisco Active Advisor is a cloud-based service that provides essential lifecycle information about your network inventory. Available by itself or as a component of other Cisco network management applications, it helps you reduce your network’s overall risk by keeping you up-to-date on the status of your products.Operational Simplicity ●Link Aggregation Control Protocol (LACP) for creating Ethernet channeling with devices that conform to IEEE 802.3ad. Similar to Cisco EtherChannel technology and PAgP.●Dynamic Host Configuration Protocol (DHCP) autoconfiguration of multiple switches through a boot server.●Multicast VLAN Registration (MVR) continuously sends multicast streams in a multicast VLAN. Isolates streamsfrom subscriber VLANs for bandwidth and security reasons.●Voice VLAN keeps voice traffic on a separate VLAN for easier administration and troubleshooting.●Cisco VLAN Trunking Protocol (VTP) supports dynamic VLANs and dynamic trunk configuration across allswitches.●Remote Switch Port Analyzer (RSPAN) allows administrators to remotely monitor ports in a Layer 2 switchnetwork from any other switch in the same network.●For enhanced traffic management, monitoring, and analysis, the Embedded Remote Monitoring (RMON) softwareagent supports four RMON groups (history, statistics, alarms, and events).SecurityCisco TrustSec® A suite of components that secures networks, data, and resources with policy-based access control, identity, and role-aware networking with the following elements:●Cisco TrustSec SXP support to simplify security and policy enforcement throughout the network. For moreinformation about Cisco TrustSec security solutions, visit /go/TrustSec.●Hardware on the Cisco Catalyst 3560-CX for IEEE 802.1AE MACsec for Layer 2, line-rate Ethernet dataconfidentiality and integrity on host-facing ports. Protects against man-in-the-middle attacks (snooping, tampering,and replay).●Flexible authentication that supports multiple authentication mechanisms including 802.1X, MAC AuthenticationBypass, and web authentication using a single, consistent configuration.●Monitor mode that creates a user-friendly environment for 802.1X operations.●RADIUS change of authorization and downloadable ACLs for comprehensive policy management.●802.1X supplicant with Network Edge Access Transport (NEAT) for extended secure access; compact switchesin the conference rooms have the same level of security as switches inside a locked wiring closet.Product DetailsSwitch ModelsThe Cisco Catalyst Compact Switches are available in nine switch models. They vary by whether they support both Layer 2 and Layer 3 services or Layer 2 services only; whether they support Power over Ethernet Plus (PoE+); by the number of Gigabit Ethernet and Multigigabit Ethernet ports; the aggregate power provided, and the type of cabling connections they support.Tables 2, 3, and 4 compare the available switch models and list the software package that ships by default with each model and how much PoE power is available for the downlink ports.Table 2. Cisco Catalyst 3560-X Compact Switch Models and Default SoftwareTable 3. C3560CX-8PT-S Switch PoE and PoE+ Power CapacityTable 4. Cisco Catalyst 2960-X Compact Switch Models and Default SoftwareNote: All four uplink ports (two copper and two fiber) can be used simultaneously and also as downlinks.Switch SoftwareCisco Catalyst 3560-CX compact switches ship with the IP Base version of Cisco IOS® Software. The 3560-CX switches can be upgraded to use the IP Services version of IOS Software with a right-to-use (RTU) License. The IP Base and IP Services feature set on Cisco Catalyst 3560-CX switches provides baseline enterprise services in addition to all LAN Base features. They support Layer 3 networking features, including support for routed access, Cisco TrustSec, media access control security (MACsec), and other advanced network services. The IP Services feature set provides full Layer 3 routing capabilities with Open Shortest Path First (OSPF), Border Gateway Protocol (BGP), Enhanced Internal Gateway Routing Protocol (EIGRP), Policy-Based Routing (PBR), Multicast Routing, and Virtual Routing and Forwarding (VRF) Lite.Cisco Catalyst 2960-CX Series compact switches ship with the LAN Base version of Cisco IOS Software. These switches deliver advanced Layer 2 switching with intelligent Layer 2 through 4 services for the network edge, such as voice, video, and wireless LAN services.Licensing and Software PolicyCustomers with Cisco Catalyst LAN Base and IP Base software feature sets will receive updates and bug fixes designed to maintain the compliance of the software with published specifications, release notes, and industry standards compliance as long as the original end user continues to own or use the product or for up to one year from the end-of-sale date for this product, whichever occurs earlier. This policy supersedes any previous warranty or software statement and is subject to change without notice.Product SpecificationsTable 5 provides hardware specifications for the Cisco Catalyst 3560-CX and 2960-CX compact switches.Table 5. Cisco Catalyst 3560-CX and 2960-CX Series Compact Switch HardwareTable 6 describes the power specifications for Cisco Catalyst 3560-CX and 2960-CX switches. Table 6. Power Specifications for Cisco Catalyst 3560-C and 2960-C Series Compact SwitchesTable 7 shows switch management and standards support.Table 7. Management and Standards Support for Cisco Catalyst 3560-CX and 2960-CX Series Compact Switches Description SpecificationManagement ●BRIDGE-MIB●CISCO-CABLE-DIAG-MIB●CISCO-CDP-MIB●CISCO-CLUSTER-MIB●CISCO-CONFIG-COPY-MIB●CISCO-CONFIG-MAN-MIB●CISCO-DHCP-SNOOPING-MIB●CISCO-ENTITY-VENDORTYPE-OID-MIB●CISCO-ENVMON-MIB●CISCO-ERR-DISABLE-MIB●CISCO-FLASH-MIB●CISCO-FTP-CLIENT-MIB●CISCO-IGMP-FILTER-MIB●CISCO-IMAGE-MIB●CISCO-IP-STAT-MIB●CISCO-LAG-MIB●CISCO-MAC-NOTIFICATION-MIB●CISCO-MEMORY-POOL-MIB●CISCO-PAGP-MIB●CISCO-PING-MIB●CISCO-POE-EXTENSIONS-MIB●CISCO-PORT-QOS-MIB●CISCO-PORT-SECURITY-MIB●CISCO-PORT-STORM-CONTROL-MIB●CISCO-PRODUCTS-MIB●CISCO-PROCESS-MIB●CISCO-RTTMON-MIB ●CISCO-TC-MIB●CISCO-TCP-MIB●CISCO-UDLDP-MIB●CISCO-VLAN-IFTABLE●RELATIONSHIP-MIB●CISCO-VLAN-MEMBERSHIP-MIB ●CISCO-VTP-MIB●ENTITY-MIB●ETHERLIKE-MIB●IEEE8021-PAE-MIB●IEEE8023-LAG-MIB●IF-MIB●INET-ADDRESS-MIB●OLD-CISCO-CHASSIS-MIB●OLD-CISCO-FLASH-MIB●OLD-CISCO-INTERFACES-MIB ●OLD-CISCO-IP-MIB●OLD-CISCO-SYS-MIB●OLD-CISCO-TCP-MIB●OLD-CISCO-TS-MIB●RFC1213-MIB●RMON-MIB●RMON2-MIB●SNMP-FRAMEWORK-MIB●SNMP-MPD-MIB●SNMP-NOTIFICATION-MIB●SNMP-TARGET-MIB●CISCO-SMI-MIB●CISCO-STP-EXTENSIONS-MIB ●CISCO-SYSLOG-MIB ●SNMPv2-MIB ●TCP-MIB●UDP-MIB●ePM MIBStandards ●IEEE 802.1D Spanning Tree Protocol●IEEE 802.1p CoS Prioritization●IEEE 802.1Q VLAN●IEEE 802.1s●IEEE 802.1w●IEEE 802.1x●IEEE 802.1AB (LLDP)●IEEE 802.3ad●IEEE 802.3af●IEEE 802.3ah(100BASE-X single/multimode fiber only)●IEEE 802.3x full duplex on 10BASE-T, 100BASE-TX, and1000BASE-T ports●IEEE 802.3 10BASE-T specification●IEEE 802.3u 100BASE-TX specification●IEEE 802.3ab 1000BASE-T specification●IEEE 802.3z 1000BASE-X specification ●100BASE-BX (SFP)●100BASE-FX (SFP)●100BASE-LX (SFP)●1000BASE-BX (SFP)●1000BASE-SX (SFP)●1000BASE-LX/LH (SFP)●1000BASE-ZX (SFP)●1000BASE-CWDM SFP 1470 nm ●1000BASE-CWDM SFP 1490 nm ●1000BASE-CWDM SFP 1510 nm ●1000BASE-CWDM SFP 1530 nm ●1000BASE-CWDM SFP 1550 nm ●1000BASE-CWDM SFP 1570 nm ●1000BASE-CWDM SFP 1590 nm ●1000BASE-CWDM SFP 1610 nm ●RMON I and II standards●SNMPv1, SNMPv2c, and SNMPv3RFC compliance ●RFC 768: UDP●RFC 783: TFTP●RFC 791: IP●RFC 792: ICMP●RFC 793: TCP●RFC 826: ARP●RFC 854: Telnet●RFC 951: Bootstrap Protocol●RFC 1542: BOOTP Extensions●RFC 959: FTP●RFC 1058: RIP Routing●RFC 1112: IP Multicast and IGMP●RFC 1157: SNMPv1●RFC 1166: IP Addresses●RFC 1253: OSPF Routing●RFC 1256: ICMP Router Discovery●RFC 1305: NTP●RFC 1492: TACACS+●RFC 1493: Bridge MIB●RFC 1542: Bootstrap Protocol●RFC 1583: OSPFv2●RFC 1643: Ethernet Interface MIB●RFC 1723: RIPv2 Routing●RFC 1757: RMON ●RFC 1812: IP Routing●RFC 1901: SNMPv2C●RFC 1902-1907: SNMPv2●RFC 1981: MTU Path Discovery IPv6●FRC 2068: HTTP●RFC 2080: RIP for IPv6●RFC 2131: DHCP●RFC 2138: RADIUS●RFC 2233: IF MIB●RFC 2236: IP Multicast●RFC 2328: OSPFv2●RFC 2273-2275: SNMPv3●RFC 2373: IPv6 Aggregatable Addrs●RFC 2453: RIPv2 Routing●RFC 2460: IPv6 protocol●RFC 2461: IPv6 Neighbor Discovery●RFC 2462: IPv6 Autoconfiguration●RFC 2463: ICMP IPv6●RFC 2474: DiffServ Precedence●RFC 2597: Assured Forwarding●RFC 2598: Expedited Forwarding●RFC 2571: SNMP Management●RFC 2740: OSPF for IPv6●RFC 3046: DHCP Relay Agent Information Option●RFC 3101, 1587: NSSAs●RFC 3376: IGMPv3●RFC 3580: 802.1x RADIUSNote: RFC, MIB and Standards compliance is dependent on IOS Level.Table 8 shows safety and compliance information.Table 8. Safety and Compliance SupportOrdering InformationTo place an order, consult Table 9 for ordering information and visit Cisco Commerce Workspace. Table 9. Ordering Information for Cisco Catalyst 3560-CX and 2960-CX Series Compact SwitchesWarranty InformationCisco Catalyst 3560-CX and 2960-CX Series Switches come with an enhanced limited lifetime hardware warranty that includes 90 days of Cisco Technical Assistance Center (TAC) support and next-business-day hardware replacement free of change (see Table 10 for details).Table 10. Enhanced Limited Lifetime Hardware WarrantyYour formal warranty statement, including the warranty applicable to Cisco software, appears in the Cisco information packet that accompanies your Cisco product. We encourage you to review carefully the warranty statement shipped with your specific product before use. Cisco reserves the right to refund the purchase price as its exclusive warranty remedy.Adding a Cisco technical services contract to your device coverage provides access to the Cisco Technical Assistance Center (TAC) beyond the 90-day period allowed by the warranty. It also can provide a variety of hardware replacement options to meet critical business needs, as well as updates for licensed premium Cisco IOS Software, and registered access to the extensive knowledge base and support tools.For additional information about warranty terms, visit /go/warranty.Cisco and Partner ServicesEnable the innovative, secure, intelligent edge using personalized services from Cisco and our partners. Through a discovery process that begins with understanding your business objectives, we help you integrate the next-generation Cisco Catalyst fixed switches into your architecture and incorporate network services onto thoseplatforms. Sharing knowledge and leading practices, we support your success every step of the way as you deploy, absorb, manage, and scale new technology.Choose from a flexible suite of support services (Table 11), designed to meet your business needs and help you maintain high-quality network performance while controlling operational costs.Table 11.Technical Services Available for Cisco Catalyst 3560-CX and 2960-CX Series Compact SwitchesCisco CapitalFinancing to Help You Achieve Your ObjectivesCisco Capital can help you acquire the technology you need to achieve your objectives and stay competitive. We can help you reduce CapEx. Accelerate your growth. Optimize your investment dollars and ROI. Cisco Capital financing gives you flexibility in acquiring hardware, software, services, and complementary third-party equipment. And there’s just one predictable payment. Cisco Capital is a vailable in more than 100 countries. Learn more .Learn MoreFor more information, contact your Cisco sales account rep or visit /go/compactswitches .Printed in USAC78-733229-07 12/16。

Cisco MDS 9148S 16G Multilayer Fabric SwitchData sheet Cisco publicContentsProduct Overview 3 High Performance and Flexibility at Low Cost 3 High-Availability Platform for Mission-Critical Deployments 3 Simplified Storage Management with Sophisticated Diagnostics 3 Intelligent Network Services and Advanced Traffic Management 4 Comprehensive Network Security Framework 4 Platform Compatibility 5 Licensing 5 Product Specifications 5 System Requirements 9 Warranty Information 9 Ordering Information 10 Cisco Services 13 For More Information 13 Document history 14Product OverviewThe Cisco® MDS 9148S 16G Multilayer Fabric Switch (Figure 1) is the next generation of the highly reliable, flexible, and low-cost Cisco MDS 9100 Series switches. It combines high performance with exceptional flexibility and cost effectiveness. This powerful, compact one rack-unit (1RU) switch scales from 12 to 48 line-rate 16 Gbps Fibre Channel ports.The Cisco MDS 9148S is excellent for:● A standalone SAN in small departmental storage environments● A top-of-the-rack switch in medium-sized redundant fabrics●An edge switch in enterprise data center core-edge topologiesThe Cisco MDS 9148S is powered by Cisco NX-OS and Cisco Prime™ Data Center Network Manager (DCNM) software. It delivers advanced storage networking features and functions with ease of management and compatibility with the entire Cisco MDS 9000 Family portfolio for reliable end-to-end connectivity.Figure 1.Cisco MDS 9148S 16G Multilayer Fabric SwitchHigh Performance and Flexibility at Low CostUp to 48 autosensing Fibre Channel ports are capable of speeds of 2, 4, 8, and 16 Gbps, with 16 Gbps of dedicated bandwidth for each port. The base switch model comes with 12 ports enabled, and can be upgraded as needed with the 12-port Cisco MDS 9148S On-Demand Port Activation license to support configurations of 24, 36, or 48 enabled ports. Only the Cisco MDS 9148S scales from 12 to 48 high-performance Fibre Channel ports in a single 1RU form factor. The 16-Gbps MDS 9148S is the first generation of NVMe ready Fibre Channel 1RU switches1 When deployed as a N-Port virtualization (NPV) node or as an N-Port ID Virtualization (NPIV) core connecting legacy Fibre channel switches or multi-protocol Nexus NPV switches, it provides a flexible and scalable option for host connectivity.High-Availability Platform for Mission-Critical DeploymentsIn environments in which downtime is intolerable, the Cisco MDS 9148S offers In-Service Software Upgrades (ISSU). This means that Cisco NX-OS Software can be upgraded while the Fibre Channel ports carry traffic. The Cisco MDS 9148S includes dual redundant hot-swappable power supplies and fan trays, PortChannels for Inter-Switch Link (ISL) resiliency, and F-port channeling for resiliency on uplinks from a Cisco MDS 9148S operating in NPV mode. New hardware based slow port detection and recovery provide enhanced performance and monitoring capability.Simplified Storage Management with Sophisticated DiagnosticsThe Cisco MDS 9148S offers built-in storage network management and SAN plug-and-play capabilities. All features are available through a Command-Line Interface (CLI) or Cisco Prime DCNM for SAN EssentialsEdition, a centralized management tool. Cisco DCNM task-based wizards simplify management of single or multiple switches and fabrics. For virtual infrastructure, it manages the entire path: from the virtual machine and switch to the physical storage. The Cisco MDS 9148S also supports PowerOn Auto Provisioning (POAP) to automate software image upgrades and configuration file installation on newly deployed switches. Additionally, it provides intelligent diagnostics, protocol decoding, network analysis tools, and Cisco Call Home for added reliability, faster problem resolution, and reduced service costs.Intelligent Network Services and Advanced Traffic ManagementThe Cisco MDS 9148S uses virtual SAN (VSAN) technology for hardware-enforced, isolated environments within a physical fabric. It offers access control lists (ACLs) for hardware-based, intelligent frame processing. Advanced traffic management features, such as fabricwide Quality of Service (QoS) and Inter-VSAN Routing (IVR), are included in the optional Cisco MDS 9000 Family Enterprise Package. QoS prioritizes application data traffic for better and more predictable network service. Zone-based QoS simplifies configuration and administration by using the familiar zoning concept. IVR facilitates resource sharing across VSANs without compromising scalability, reliability, availability, and network security.Comprehensive Network Security FrameworkAn extensive set of innovative and powerful security features and functions is available with the optional Cisco MDS 9000 Family Enterprise Package. It offers fabricwide, per-VSAN role-based Authentication, Authorization, and Accounting (AAA) services using RADIUS, Lightweight Directory Access Protocol (LDAP), Microsoft Active Directory (AD), and TACACS+. It also deploys VSAN fabric isolation, intelligent, port-level packet inspection, Fibre Channel Security Protocol (FC-SP) host-to-switch and switch-to-switch authentication, Secure File Transfer Protocol (SFTP), Secure Shell Version 2 (SSHv2), and Simple Network Management Protocol Version 3 (SNMPv3) implementing Advanced Encryption Standard (AES). Other security features include control-plane security, hardware-enforced zoning, broadcast zones, and management access. The Cisco MDS 9148S is FIPS 140-2 compliant as mandated by the U.S. federal government.Table 1 summarizes the main features and benefits of the Cisco MDS 9148S.Table 1.Features and BenefitsPlatform CompatibilityFor detailed information about hardware and software compatibility as well as product interoperability, see https:///c/en/us/td/docs/switches/datacenter/mds9000/interoperability/matrix/intmatrx.pdf. LicensingTable 2 describes optional licenses that can be purchased to enable additional features and capabilities on the Cisco MDS 9148S.Table 2.Optional LicensesProduct SpecificationsTable 3 lists technical specifications for the Cisco MDS 9148S.Table 3.Product SpecificationsDescription●FC-FS-2, Amendment 1 (ANSI INCITS 424-2007/AM1-2007)●FC-FS-3, Revision 1.11 (ANSI INCITS 470-2011)●FC-LS, Revision 1.62 (ANSI INCITS 433-2007)●FC-LS-2, Revision 2.21 (ANSI INCITS 477-2011)●FC-SW-2, Revision 5.3 (ANSI INCITS 355-2001)●FC-SW-3, Revision 6.6 (ANSI INCITS 384-2004)●FC-SW-4, Revision 7.5 (ANSI INCITS 418-2006)●FC-SW-5, Revision 8.5 (ANSI INCITS 461-2010)●FC-GS-3, Revision 7.01 (ANSI INCITS 348-2001)●FC-GS-4, Revision 7.91 (ANSI INCITS 387-2004)●FC-GS-5, Revision 8.51 (ANSI INCITS 427-2007)●FC-GS-6, Revision 9.4 (ANSI INCITS 463-2010)●FCP, Revision 12 (ANSI INCITS 269-1996)●FCP-2, Revision 8 (ANSI INCITS 350-2003)●FCP-3, Revision 4 (ANSI INCITS 416-2006)●FCP-4, Revision 2b (ANSI INCITS 481-2011)●FC-SB-2, Revision 2.1 (ANSI INCITS 349-2001)●FC-SB-3, Revision 1.6 (ANSI INCITS 374-2003)●FC-SB-3, Amendment 1 (ANSI INCITS 374-2003/AM1-2007)●FC-SB-4, Revision 3.0 (ANSI INCITS 466-2011)●FC-SB-5, Revision 2.00 (ANSI INCITS 485-2014)●FC-BB-6, Revision 2.00 (ANSI INCITS 509-2014)●FC-BB-2, Revision 6.0 (ANSI INCITS 372-2003)●FC-BB-3, Revision 6.8 (ANSI INCITS 414-2006)●FC-BB-4, Revision 2.7 (ANSI INCITS 419-2008)●FC-BB-5, Revision 2.0 (ANSI INCITS 462-2010)●FC-VI, Revision 1.84 (ANSI INCITS 357-2002)●FC-SP, Revision 1.8 (ANSI INCITS 426-2007)●FC-SP-2, Revision 2.71 (ANSI INCITS 496-2012)●FAIS, Revision 1.03 (ANSI INCITS 432-2007)●FAIS-2, Revision 2.23 (ANSI INCITS 449-2008)●FC-IFR, Revision 1.06 (ANSI INCITS 475-2011)●FC-FLA, Revision 2.7 (INCITS TR-20-1998)●FC-PLDA, Revision 2.1 (INCITS TR-19-1998)●FC-Tape, Revision 1.17 (INCITS TR-24-1999)●FC-MI, Revision 1.92 (INCITS TR-30-2002)●FC-MI-2, Revision 2.6 (INCITS TR-39-2005)●FC-MI-3, Revision 1.03 (INCITS TR-48-2012)●FC-DA, Revision 3.1 (INCITS TR-36-2004)●FC-DA-2, Revision 1.06 (INCITS TR-49-2012)●FC-MSQS, Revision 3.2 (INCITS TR-46-2011)●Fibre Channel classes of service: Class 2, Class 3, and Class F●Fibre Channel standard port types: E, F and FL●Fibre Channel enhanced port types: SD, ST, and TE●FC-NVMe●In-band management using IP over Fibre Channel (RFC 2625)●IPv6, IPv4, and Address Resolution Protocol (ARP) over Fibre Channel (RFC 4338)●Extensive IETF-standards-based TCP/IP, SNMPv3, and remote monitoring (RMON) MIBsSystem RequirementsTable 4 lists system requirements for the Cisco MDS 9148S.Table 4.System RequirementsWarranty InformationFind warranty information on at the Product Warranties page.Ordering InformationTable 5 indicates all part numbers and associated configurable options for the Cisco MDS 9148S. To place an order, visit the Cisco Ordering Home Page. To download software, visit the Cisco Platform SuiteTable 5.Ordering InformationNote: Spare licenses are delivered uninstalled. A product authorization key (PAK) is sent (either physicallyor electronically) for customer license key file obtainment and installation. For more information on obtaining and installing licenses, seehttps:///en/US/docs/storage/san_switches/mds9000/sw/rel_2_x/san-os/configuration/guide/lic.html.Note: For detailed information about all supported transceivers, see Cisco MDS 9000 Family pluggable transceivers. Bundled and configure-to-order optical transceivers are shipped installed in the port cageson the unit. Spares ship separately.Note: For detailed information about the optional Cisco MDS Enterprise Package, seehttps:///c/en/us/products/collateral/storage-networking/mds-9000-software-licensing/product_data_sheet09186a00801ca6ac.html; for Cisco Prime DCNM, seehttps:///go/dcnm. Advanced Software Packages are delivered uninstalled. A PAK is sent (either physically or electronically) for customer license key file obtainment and installation.Cisco ServicesCisco Services make networks, applications, and the people who use them work better together. Today, the network is a strategic platform in a world that demands better integration between people, information, and ideas. The network works better when services, together with products, create solutions aligned with business needs and opportunities.The unique Cisco Lifecycle approach to services defines the requisite activities at each phase of the network lifecycle to help ensure service excellence. With a collaborative delivery methodology that joins the forces of Cisco, our skilled network of partners, and our customers, we achieve the best results.Cisco CapitalFinancing to help you achieve your objectivesCisco Capital can help you acquire the technology you need to achieve your objectives and stay competitive. We can help you reduce CapEx. Accelerate your growth. Optimize your investment dollars and ROI. Cisco Capital financing gives you flexibility in acquiring hardware, software, services, and complementary third-party equipment. And there’s just one predictable payment. Cisco Capital is available in more than 100 countries. Learn more.For More InformationFor more information about the Cisco MDS 9148S 16G Multilayer Fabric Switch, visithttps:///c/en/us/products/storage-networking/mds-9148s-16g-multilayer-fabric-switch/index.html or contact your local account representative.1 Requires NX-OS software version 8.2(1) or higher.Document historyPrinted in USA C78-731523-07 06/23。