product and technology overview

© 2005 Extreme Networks, Inc. All Rights Reserved

Extreme Networks, Inc. Company Confidential

This presentation may contain forward-looking statements, including statements about products, expenditures and resource allocation, customer development, and Company positioning, which reflect the Company’s current judgment on those issues. Because such statements deal with future

events, they are subject to risks and uncertainties that could cause the actual results to differ materially. Furthermore, this presentation contains information concerning historical performance and results, which cannot be taken as a guarantee or even indication of future performance or

results. In addition to the factors that may be discussed in this presentation, important factors which could cause actual results to differ materially are contained in the Company’s 10-Qs and 10-Ks which are on file with the Securities and Exchange Commission (<http://www.sec.gov>).

Product and TechnologyOverview

May/2006

© 2005 Extreme Networks, Inc. All Rights Reserved Extreme Networks, Inc. Company Confidential

Key Enterprise Trends

Infrastructure

• FE GE (with PoE) for connectivity

• 10 Gig as interconnect

Wired Wireless transition

Convergence: IP Telephony is the start

LAN Security

• Problem area is the “soft interior”

• Dealing with Day-Zero attacks

New Data Center Technologies

• Including Ethernet as interconnect for cluster computing

Managing Complexity


Convergence Network Upgrades

Biggest Deployment ConcernsInformationWeek VoIP Study, February 2004 (300 IT execs)

To address concerns about current network


Key Requirements

Lead to

New Platforms

New Technologies

Voice Quality Connections

Cost-Effective Security

Simple Management

Voice Class Availability



Products, Architecture, and Roadmap


Voice Convergence Applications

Wireless Mobility Switch

Voice Class Scalable Wireless

Security Appliance

Day-Zero attack mitigation @ 10Gig

The Extreme Portfolio

Ethernet Switching Platforms

Open Converged Network


Summit Edge

Summit X450

BlackDiamond

BD10K ： 10/100/1000, 10Gig, Large Table size, core applications

BD8800: 10/100/1000, 10Gig, High Capacity PoE, Edge and Aggregation

BD6800 ： High density 10/100, Gig, MPLS, Small Core and Aggregation applications

Switching Products

ExtremeWare

Performance and Features

Sca

lability

Alpine

Summit

10/100/1000 + Wireless AccessGig to 10Gig uplinks

Alpine

10/100/1000 + VDSL/ Wireless AccessT1/T3 WAN and Gig Uplinks, high density edge

and aggregation applications

BlackDiamond 6800

BlackDiamond 10K

BlackDiamond 8800

ExtremeWare XOSFeature Rich, High Performance ASICs

Q4 ‘03

Q1 ‘05

Q2 ‘05Q2 ‘05Q3 ‘04


ExtremeWare XOSModular OS Enhances Availability

With modularity ….• Self-healing process restart

• In service upgrades

• Load new applications in service

Without modularity ….• Reboot entire OS to recover from

process failure

• Reboot entire OS to add patches

• Reboot entire OS to add applications

XOS: shipping since Dec 03

Available on BD 10K, 8800, and the Summit X450


Alpine 3800

Summit48si

Summit 200

Summit 300

Summit 400

BlackDiamond 10K

BlackDiamond 6800

EPICenter

Building the Network

BlackDiamond8800

Summit X450

BlackDiamond 8800



The Summit Family


XOS platform

Summit “i” series

1Gbps Stacking *

10Gbps Stacking

Summit Family Portrait


Sca

lability

Fast Ethernet Fast Ethernet PoE Gigabit Gigabit PoE Gigabit + 10G

Summit 200-24/48

Summit48si

Summit 300-24/48

Summit 400-24t Summit 400-24p

Summit X450-24x/24t

Summit 400-48t

Edge Application

Aggregation and Sm

all Core

* Stacking not supported on 300-48


Summit 200/300 Series SwitchesFor Convergence-ready 10/100 Edge Connectivity

Summit 300: Powered plus Wireless

Summit 200: Edge Access with Full Security

PoE and Wireless Edge Switches

• 24 or 48 ports, 2 to 4 Gigabit uplinks, fiber or copper

• Summit 200 feature set (stacking only on 300-24)

• 802.3af Power over Ethernet and redundant PSUs

• Altitude 300 – dual-radio: concurrent 802.11a and 802.11b/g operation; integrated and detachable antenna versions and rated for plenum; Wi-Fi CERTIFIED™ for 802.11a/b/g and Wi-Fi Protected Access (WPA)

• SVP and IAPP protocol support

• Direct connect and remote connect (on 300-48 only)

Secure and Reliable Edge Switches

• 24 or 48 ports, 2 Gigabit uplinks, fiber or copper

• Line rate non-blocking fabric

• Complete security includes multiple supplicant user authentication, secure protocols,

• Convergence ready with voice-grade link redundancy support, low latency and jitter, 4 QoS queues

• Management simplicity with UniStack stacking

Q3 ‘04

Q3 ‘03


Summit 400 Series SwitchesFor Gigabit Access, Powered or Non-Powered LAN

Line Rate Gigabit Access

• 24 or 48 10/100/1000 ports with 4 fiber uplinks• Optional dual 10-Gigabit uplinks on Summit 400-48t

Convergence from the Ground Up

• 8 QoS queues, L2,3,4 traffic classification• Low latency and jitter stacked or standalone• Voice-grade link redundancy with EAPS

Summit 400-24t/48t: Gigabit to Desktop

Summit 400-24p: Universal Access Powered and Wireless

• Flexible Gigabit or legacy 10/100 connectivity• Non-Powered, or Powered with 15.4W per port• Wireless features in conjunction with A300

Summit 400-24p: Power over Gigabit

Management Simplicity

• UniStack stacking single point of management for up to 8 switches

• Integrated wired and wireless management

High performance UniStack Stacking; Summit 400-48t adds 10-Gigabit uplinks

Q2 ‘05

Q2 ‘05


Summit X450 Series SwitchesFor Gigabit Aggregation and Small Network Core

High Performance Multi-Gigabit Switch• 24 Gigabit ports, fiber or copper, including 4

convenient dual-personality copper/fiber ports• Optional dual 10-Gigabit uplinks

State of the Art Availability

• Modular ExtremeWare XOS operating system• ECC memory, redundant OS and config images• External redundant PSU

Comprehensive Security

• Multiple supplicant user authentication • sFlow continuous traffic monitoring• Trusted Computing Group host integrity checking

Advanced Protocols for Core Deployment

• Full routing support with OSPF, PIM, ESRP, VRRP, EAPS, BGP

• IPv6 software forwarding

External Redundant PSU connector

Redundant 10-Gigabit option

Copper Gigabit

Or Fiber Gigabit

Q2 ‘05

Q2 ‘05


Summit RoadmapSummit 200-100FX – November 2005 (for Fed Market)

Next generation Summit 400s with XOS

• Several options of Gigabit (with, without power) with 10 Gig uplinks

• New capabilities

XOS on all models (including on PoE edge switch)

Redundant AC or DC power options

IPv6 hardware support

Support for policy based routing, centralized ACLs, Universal Port Manager, and CLEAR-Flow

• Summer 2006



The BlackDiamond Family


BlackDiamond 10K

BlackDiamond 6800

Alpine 3800

BlackDiamond 8800

The Family Portrait


Sca

lability

Fast Ethernet + Gig Uplink High Density FE + Gig and 10Gig Gigabit + 10G

EdgeA

ggregationC

ore


BlackDiamond 8810

• Redundant System Design

• Non-stop Operating System

• Network Resiliency Protocols

• High density non-blocking Gigabit and 10 Gigabit ports

• High density PoE support using internal supplies

• Low latency and jitter for voice support

• Integrated wired and wireless networking

• User and Host Integrity

• Threat Detection and Response

• Hardened Infrastructure

• 48 port 10/100/1000BASE-T PoE – Universal jack for IP Telephones, WAPs, Gigabit PCs

• 48 port 10/100/1000BASE-T

• 24 port 1000BASE-X (mini GBIC)

• 4 port 10GBASE-X (XENPAK)

Available I/O Modules

Voice Class Availability

High Performance Connectivity

Comprehensive Security

• 432 ports 10/100/1000BASE-T

• Powered by only internal power supplies:

•Up to 432 class 1 or 2 devices

•Up to 333 class 3 devices

• 224 ports 1000BASE-X (mini GBIC) (208 ports with 2 MSMs)

• 36 ports 10GBASE-X (XENPAK) (32 ports with 2 MSMs)

3 BD8810 per standard 7’ rack

• Every Gig and 10 Gig port non-blocking

• 48 gig/slot backplane capacity

• 384 Gbps local switching per I/O module

• 570 Mpps switch throughput

• 8 Gig fiber uplink ports per MSM

Performance without compromise

Q1 ‘05

For high-density IP Telephony edge, medium core and server connectivity


BlackDiamond 8810 Roadmap

System

• 6 Slot Chassis – September 2005

• DC Power Option – November 2005

• Blades refresh in mid 2006

Ongoing cost reductions

New capabilities

New Capabilities

• IPv6 in hardware

• Centralized ACLs

• CLEAR-Flow

• Policy Based Routing

• Universal Port Manager



BlackDiamond 10K


Carrier Class Chassis Design8 slots with up to 60 Gbps I/O per slot

2 Systems/rack (42” or 24RU)

MSM Redundancy

• Fabric and control

6 Power Supplies in N+1 configuration

• 3 minimum for fully populated chassis

• Common supply across new Extreme platforms

Designed to NEBS Level 3

• Front to back Air cooling

• Passive backplane

Non-Stop Switching

In-Service Maintenance

Self-Healing ECC memory


MSM BladesTwo fully redundant MSM blades per system

MSM module hosts main CPU

• Dual core 750 MHz CPU on each MSM

Two MSM module types – MSM-1, MSM-1XL

MSM-1 for Enterprise

• Supports up to 128,000 entries for MAC, IP, ACL, and statistics

• Core license includes OSPF, PIM

MSM-1XL for Metro SP and Large Enterprise

• Supports up to 256,000 entries for MAC, IP, ACL, and statistics

• Advanced Core license includes IS-IS, BGP-4, MPLS

• Metro and Large Enterprise target


I/O Blades60 Port 10/100/1000 Ethernet Copper – Khatanga G60T

60 Port Ethernet Fiber: Mini-GBIC (SFP) – Rhine G60X

6 Port 10 Gigabit Ethernet (Xenpak) – Santiam 10G6X

2 ports of 10 Gigabit Ethernet (Xenpak), Santiam 10G2X

20 ports of Gigabit Ethernet Fiber – Rhine G20X


BlackDiamond 12KBD 10K features “and more” in a 10 U Chassis

Multi-level resiliency

• Redundant Hardware: 1+1 redundancy instead of load sharing

• Modular OS

• Network level protection – EAPS

BD 10K CLEAR-Flow and L3 Virtual Switching technology

Advanced Traffic Management

• Quality of Service and Hierarchical Queuing enable SLAs for E-Line and E-LAN services

• Line rate multicast supports IPTV

• Service and Quality mapping to VMANs/VLANS offers deployment flexibility

Global Scalability

• VMANs, Private VLANs, etc.

• MPLS – L2 and L3


BD12K Shelf Hardware

Fa

n T

ray

MSM (Slot A)

MSM (Slot B)

I/O Blade (Slot 3)

I/O Blade (Slot 4)

R J 4 5 R J 4 5R J 4 5 R J 4 5 R J 4 5 R J 4 5R J 4 5 R J 4 5 R J 4 5 R J 4 5R J 4 5 R J 4 5 R J 4 5 R J 4 5R J 4 5 R J 4 5 R J 4 5 R J 4 5R J 4 5 R J 4 5

MS M5 - X L

SFP SFP SFP SFP SFP SFP SFP SFPSFP SFP SFP SFPSFP SFP SFP SFPSFP SFP SFP SFP


MS M5 - X L

SFP SFP SFP SFP SFP SFP SFP SFPSFP SFP SFP SFPSFP SFP SFP SFPSFP SFP SFP SFP


Xenpak Xenpak

Fa

n T

ray

10 RU

1+1 Redundant MSMs (Hot/Standby)

Hitless Chassis Design

N + 3 SSI Redundant PSUs Same PSU as BD 10k & 8808

20G per I/O Slot Non-Blocking

4 I/O SlotsGbE Tributaries10GbE Trunks

4GNSS Fabric

ExtremeWare XOS

Passive Backplane


BD12K Line CardsSFP SFP SFP SFP SFP SFP SFP SFPSFP SFP SFP SFPSFP SFP SFP SFPSFP SFP SFP SFP

RJ 45 RJ 45RJ 45 RJ 45 RJ 45 RJ 45RJ 45 RJ 45 RJ 45 RJ 45RJ 45 RJ 45 RJ 45 RJ 45RJ 45 RJ 45 RJ 45 RJ 45RJ 45 RJ 45

MS M5 - X L


Xenpak Xenpak

• GM-20XTR: 20 port 1000BASE-X SFP / 1000T RJ-45 with rate limiting

• GM-20T: 20 port 10/100/1000BASE-T RJ-45

• XM-2XR: 2 port 10G XENPAK with rate limiting

• MSM-5R: Hierarchical rate limiting

• 1 MSM Supports full 80G capacity of the switch


10 Gig XENPAK10GBASE-SR

• 28m to 300m on new multimode fiber

10GBASE-LR

• Up to 10Km on single mode fiber

10GBASE-ER

• Up to 40Km on single mode fiber

10GBASE-ZR

• Up to 80Km on single mode fiber – Q2 ’05

10GBASE-LW

• 9.953Gbps (OC192) WAN PHY – Q4 ’05

10GBASE-LRM

• Up to 10Km single mode, 300m multimode – Q4 ’05?

10GBASE-CX4

• Up to 15m on Infiniband cable – no plans to productize

10GBASE-LX4

• Up to 10Km single mode, 300m multimode – can hit Q3 ’05


XFPState of the Industry:

• XENPAK shipments are about 30x to 50x that of XFP today.

• Most XFP today is shipping for OC192 or 10GFC application.

• Only SR and LR is shipping today. ER to ship in 3-6 months. ZR may be possible in mid-2006.

Extreme targeting first deployments in early 2006

GBICs100FX/1000X dual-speed SFP – Q3 ‘05

• 100FX 1310nm standard - Single Mode 10km, Multimode 2km

• 1000X Single Mode 10km, Multimode 500m

• May require multimode line conditioning patch cable for 1G



Security Appliance

Day-Zero Attack Mitigation @ 10G


Extreme Sentriant™

Rapid threat detection

• Creates decoys in unused IP space

Active Deception

• Mimics basic TCP, UDP and ICMP responses

Pin-point Defense

Deployment Modes:

• Stand-alone: On any network, based on broadcast traffic inspection

• Integrated: On BD10K network, based on CLEAR-Flow mirrored traffic inspection

4 x 10/100/1000 ports, 1Gbps aggregate throughput

32 concurrent VLANs

2RU, 19” W x 17” D, front-port network form factor

Q3 ‘05


Suspicious activityStart attacking

Signature updates completeFinish mitigation Mission complete

Virus spread

Day Zero Attack MitigationBehavior based anomaly detection

Automatic threat containment in seconds

Highly scalable threat mitigation with CLEAR-Flow integration

Clean-up the hosts

AttackTraffic

TimeMission complete

Anomaly detection, threat containment

Detect and Block the rapid propagation threat before spread

Act after Virus spread, Once infected, then time/$$$ consumed

Suspicious activity starts

Sign

atur

e Ba

sed

Beha

vior B

ased


Security @ 10Gig with CLEAR-FlowCLEAR-Flow integration enables

• Selective Mirroring by pre-processing the traffic in hardware

Scales up to 160Gbps of traffic pre-processing, faster anomaly detection

• Sentriant feeds back the result to Core Switch for

Further investigation, Throttling, Shutdown, or any scripted command in XOS

AC

L R

ule

s

CL

EA

R-F

low

Po

licy

Ru

les

Po

licy

trig

ger

ed ?

CLI

Syslog

Trap

Mirror

QoS

Deny

Permit

Mu

lti-

Gig

ab

it N

etw

ork

Sen

tria

nt

Ru

les

Ru

le t

rig

ger

ed ?

Non-Cloak

Cloak

Dynamic ACL

Trap

SyslogMu

lti-

Gig

abit

Co

re S

wit

ch

CLEAR-Flow

XML

Mirrored Data


Sentriant™ Testing & VerificationTest #1 - IOMetrix Testing Results

• BD10k, CLEAR-Flow, Sentriant™

• 10Gbps background traffic

• Detected & Throttled:

9 DoS attacks

• Detected & Cloaked:

1 “Live” virus – Sasser.

Test #2 - Internal Lab Testing Results

• BD10K, CLEAR-Flow, Sentriant™, universal1.pol (Also BD8810, S450).

• 20 Gbps UDP (Constant load).

• 5 Gbps TCP Http Get Sessions (Constant load).

• Detected & Cloaked:

Worms: Sasser, Welchia, Blaster, MyDoom

Hacks: IP Spoof, MAC Spoof, SYN Flood, Ping Flood, Ping Sweep

DoS’s: TCP Xmas, Null, Syn/Fin, All Flags

10 GbE

10 GbE

Extreme BlackDiamond 10K

Extreme BlackDiamond 10K

Sentriant

10 x 1 GbE

CLEAR-Flow inspects all traffic Agilent

NetworkTester ATTACKER

Agilent NetworkTester

TARGET

Agilent N2X Background Traffic

Generator



Summit WMWireless Mobility

Delivering the Voice Grade Wireless Network


Extreme Networks Wireless Solutions

Data-Grade Roaming

Small to Mid-sized Networks

Single Access SupportWireless-enabled

Summit and Alpine

Altitude 300 Access Point

Fu

nct

ion

alit

y

Voice-grade Roaming

Large Networks

Multiple Access TypesSummit WM100

Altitude 350-2 Summit WM1000

Q3 ‘05

Q3 ‘03


Key Features at a GlanceAutomatic RF Management End-to-End QoS over the Air and Wired

Voice Grade L3 Roaming Managing Access, not Access Points

product and technology overview

Documents