Security features in ethernet switches for access networks

Abstract

Service providers in the Asia Pacific region are increasingly using xDSL in access networks. In addition to cost advantage, thanks to technologies like PoVDSL0 and 10BaseS0, Ethernet is fast replacing ATM as the technology for last mile access, backplanes and metro area networks. Intelligent, wire-speed Ethernet switches plays a vital role to ensure that last mile xDSL technologies can be administered cost effectively. There has been an ever-increasing demand for new security features to be incorporated in Ethernet switches in access networks. Traditionally, the focus of security in Ethernet switches had been to protect the office LAN from the outside world. But with the advent of Ethernet in access networks, the switch has to police all users and applications, to ensure secure and risk-free access of services by genuine users. Infineon's PLB2800 not only incorporates some of the standard security features, but also allows customers to implement proprietary features essential for access networks. These include VLAN based security, port locking, address locking, port authentication, stacked VLAN support (similar to MPLS tunnel concept0), broadcast storm control and packet filtering/monitoring based on layer 2/3 or higher information.