Data Sheet

BROCADE
FASTIRON LS
SERIES

Enterprise Stackable, Secure, 10GBE

LAN switching Access Switches

HIGHLIGHTS The Brocade® FastIron® LS Series them to be installed in cabinets in which

• Compact 24-port and 48-port 10/100/1000 access switch family provides enterprise larger systems cannot be supported.
Mbps access switch models organizations with a flexible and feature-rich
Additionally, the FastIron LS Series may be
• Field upgradeable with 10 Gigabit Ethernet, solution for building a secure, high-value,
deployed in metro area networks connecting
and IronStack stacking for scalable and secure intelligent network edge. Upgradeable
branch offices with 10-GbE uplinks. In this
network access with 10-Gigabit Ethernet, and IronStack
environment, important features include the
stacking technology, the FastIron LS Series
• Advanced IronWare™ Layer 2 Ethernet switching Brocade Metro Ring Protocol (version I and
with robust suite of security capabilities gives enterprises the cost and operational
II) for building resilient ring-based topologies
benefits of a “pay-as-you-grow” architecture.
• Base Layer 3 capabilities enable routed VLAN stacking and advanced multicast
topologies to the network edge with RIP v1/v2 The FastIron LS Series delivers the scalability, capabilities including IGMPv1/v2/v3 and
route announcement, static routes, and VRRP QoS assurance, feature richness and MLD v1/v2 snooping for controlling multicast
• Enhanced security features in non-stacking advanced security needed to implement traffic for high-bandwidth content delivery.
deployments include DHCP snooping and an intelligent high-value solution that can
dynamic ARP inspection The FastIron LS switches are designed
scale to meet future growth at the network
for flexibility, offering upgrade options for
• Optional edge routing upgrade in non-stacking edge. An enterprise may initially deploy a
redundant power, 10-Gigabit Ethernet,
configuration adds OSPF and RIP dynamic standalone FastIron LS switch and later
stacking and dynamic routing. The FastIron
routing for routed edge topologies* upgrade to IronStack stacking to scale the
LS switches include an internal, non-removable
• Open and standards-based network access installation from one to eight stacked units
AC power supply. An optional one rack unit
control features multi-host 802.1x access to meet growing user requirements.
high AC power supply unit can be used to
control, multi-device MAC authentication,
The FastIron LS series is designed to conserve provide redundant power for up to four
and policy-controlled MAC-based VLANs
space and power. Their one rack unit height FastIron LS switches.
• Low packet latency and advanced Quality of
and shallow depth (~33 cm/13 inches) allow
Service (QoS) ensure dependable voice, video
and data delivery
• Embedded hardware-based sFlow for enhanced
traffic visibility, accounting and security
• IronShield™ 360 intrusion protection delivers
dynamic, real-time protection from network
and host-based attacks
• IronStack technology scaling up to eight
FastIron LS units in a logical chassis and 384
10/100/1000 Mbps ports, with automatic
healing in case of link or switch failures.

*Available only on the standalone FastIron LS. This feature is not available on the IronStack enabled FastIron LS.
The FastIron LS series is Primary Features and Benefits
available in stacking and non- Performance and Scalability
stacking model configurations. Today’s enterprise organizations require
Non-Stacking models (Standard and cost-effective, flexible, and secure solutions
Edge Premium): for delivering communication services
These models can be optionally pre- on a network architecture that can scale
configured with or upgraded to Edge and evolve to meet their ever-changing
Premium (EPREM) routing software (OSPF needs. The FastIron LS Series meets these
and RIP support). requirements with wire-speed architecture
that delivers high-throughput for a range of
• FastIron LS 624: 20 x 10/100/1000 Ethernet endpoints while assuring QoS for
Mbps ports plus 4 combination RJ45/SFP business critical applications.
Gigabit Ethernet (copper or fiber) ports.
The switch includes 3 slots for optional For cost-effective and rapid scaling at
1 port 10GbE modules the network edge, the FastIron LS can be
upgraded to support the Brocade IronStack
• FastIron LS 648: 44 x 10/100/1000
technology, which allows stacking up to
Mbps ports plus 4 combination RJ45/SFP
eight units that act as a logical chassis. The
Gigabit Ethernet (copper of fiber) ports.
FastIron LS IronStack system supports 40-
The switch includes 2 slots for optional
Gbps switching capacity between stacked
1 port 10GbE modules
units providing a high-capacity interconnect
across the stack. FastIron LS IronStack
Stacking models (Standard only): supports stacking over copper and fiber
• FastIron LS 624-STK: 20 x 10/100/1000 cables. This provides for flexible stack
Mbps ports plus 4 combination RJ45/ configurations in which stacked units can
SFP Gigabit Ethernet (copper or fiber) be separated by more than several hundred
ports plus 2 x 10GbE CX4 stacking ports meters of fiber. The FastIron LS Series
and one open slot for an optional 1 port makes it easy to deploy a cost-effective,
10GbE module high-performance solution today that can be
• FastIron LS 648-STK: 44 x 10/100/1000 upgraded to support 10-GbE and stacking as
Mbps ports plus 4 combination RJ45/SFP needed to scale the intelligent edge.
Gigabit Ethernet (copper or fiber) ports
The FastIron LS switches support two types
plus 2 x 10GbE CX4 stacking ports
of single port 10-Gigabit Ethernet pluggable
modules, the FLS-1XGC and the FLS-1XG.
Target Applications The FLS-1XGC supports a CX4 connector
Offering a powerful set of Layer 2 switching, providing a cost-effective, high performance
optional edge Layer 3 routing capabilities, 10-Gigabit Ethernet solution for inter-switch
extensive security features, expandability, or server-to-switch connectivity. The FLS-1XG
and compact design, the FastIron LS supports a small form factor pluggable XFP
Series can be used to provide high speed, transceiver. Supported XFP transceivers
secure network access in a broad range of include SR, LR, ER, ZR, and ZRD optics
environments including: supporting fiber lengths up to 80 Km.

• Enterprise: high performance

network access for desktops, servers,
workstations, mobile networks, and other
Ethernet connected endpoints
• Education: secure network access
connectivity for K-12 and universities
• Metro networks: cost-effective in-building
MTU or CPE for unicast and multicast
services delivery
The Brocade IronStack Solution Ease of Use: Plug and Play
The FastIron LS series may be ordered The FastIron LS Series supports the IEEE
pre-configured with the Brocade IronStack 802.1AB LLDP and ANSI TIA 1057 LLDP-
stacking technology or upgraded in the MED standards that enable organizations
field. IronStack is an advanced stacking to deploy interoperable multi-vendor
technology that supports stacked solutions. Configuring IP endpoints, such
configurations in which as many as eight as VoIP stations can be a complex task
FastIron GS and/or FastIron LS switches requiring manual and time-consuming
can be interconnected and maintain the configuration. LLDP and LLDP-MED address
operational simplicity of a single switch. these challenges, providing organizations
An IronStack can be a mix-and-match of with a standard and open method for
different FastIron GS and FastIron LS switch configuring, discovering, and managing their
models providing for very flexible stack network infrastructure, thereby simplifying
configurations. Each IronStack enabled and reducing the cost of operations. For
FastIron GS or LS model can support up example, LLDP-MED provides an open
to 40Gbps of stacking bandwidth per protocol for configuring QoS, security
unit. IronStack configurations can be policies, VLAN assignments, and service
built using 10-GbE CX4 copper or XFP- priorities. Additionally, LLDP-MED provides
based fiber connections. When XFP-based for the discovery of device location and
fiber connections are used, an IronStack asset identity, information that is used for
configuration can be extended between inventory management and by emergency
racks, floors, and buildings with fiber response services, such as Enhanced 911
lengths up to several hundred meters. (E911). These sophisticated features make
network services easier to deploy and operate
The FastIron LS STK models are pre-
while enabling new and critical services.
configured with two one-port 10-GbE
CX4 modules, expanded CPU memory, The FastIron LS Series supports DHCP
an IronStack license (IronStack PROM) client-based auto-configuration, simplifying
and software. The CX4 module in the STK customer deployment and configuration
models can be replaced in the field with any providing true Plug-and-Play. Enterprises
of the optional 10-GbE modules available can use this feature to automate the
for the FastIron LS. IP address and feature configuration of
FastIron LS switches without the presence
An IronStack system operates as a
of a highly-trained network engineer on-site.
single logical chassis (with a single IP
Technicians can simply power up a new
management address) and supports cross-
FastIron LS and the unit will automatically
member trunking, mirroring, switching,
receive an IP address and configuration
static routing, sFlow, multicast snooping and
from DHCP and TFTP servers. Auto-
other switch functions across the stack. An
configuration provides an intelligent solution
IronStack has a single configuration file and
to reduce operating expenses and simplify
supports remote console access from any
network management.
stack member. Support for active-standby
controller failover, stack link failover, and
hot insertion and removal of stack members
delivers the resilience that is typical of
higher end modular switches.
Comprehensive Traffic Monitoring and
Enterprise-Class Security Lawful Intercept
FastIron LS switches are powered by the In response to today’s heightened security
Brocade IronWare operating software, environment, organizations may be
which offers a rich set of Layer 2 switching required to set up traffic intercept (lawful
services and Layer 3 routing functionality, intercept). For example, in the United
an advanced security suite for network States, the Communications Assistance
access control (NAC) and denial of service for Law Enforcement Act (CALEA) requires
protection, and QoS. IronWare embedded that businesses be able to intercept and
security features include protection against replicate data traffic directed to a particular
Denial of Service (DOS) attacks via TCP user, subnet, port, etc. This capability
SYN, ICMP smurf attack prevention, and is particularly essential in networks
broadcast and multicast packet rate limiting. implementing IP telephony. The FastIron
The FastIron LS also supports key security LS provides the capability necessary to
features such as Spanning Tree Root support this requirement through ACL-based
Guard and BPDU Guard to protect network Mirroring, MAC Filter-based Mirroring, and
spanning tree operation. In non-stacking VLAN-based Mirroring. Network managers
configurations, the FastIron LS series offers can apply a “mirror ACL” on a port to mirror a
additional security features, including traffic stream based on IP source/destination
dynamic ARP inspection and DHCP snooping address, TCP/UDP source/destination ports,
to protect against address spoofing and man- and IP protocols such as ICMP, IGMP, TCP,
in-the middle attacks. and UDP. A MAC filter can be applied on a
port to mirror a traffic stream based on a
Network Access Control source/destination MAC address. VLAN-
Network managers can rely on features Based mirroring is another option for CALEA
such as multi-device and 802.1X compliance. Many enterprises have service-
authentication with dynamic policy specific VLANs, such as voice VLANs. With
assignment to control network access and VLAN mirroring, all traffic on an entire VLAN
perform targeted authorization on a per- within a switch can be mirrored, or specific
user level. FastIron LS switches also support VLANs can be transferred to a remote server.
enhanced MAC policies with the ability to
deny traffic to and from a MAC address on Threat Detection and Mitigation
a per-VLAN basis. This powerful tool allows Support for embedded, hardware-based
network administrators to control access sFlow traffic sampling extends the Brocade
policies for each endpoint device. IronShield 360 security shield to the
network edge. This unique and powerful
Standards-based NAC enables network
closed loop threat mitigation solution
operators to deploy best-of-breed NAC
uses best-of-breed intrusion detection
solutions for authenticating network users
systems to inspect sFlow traffic samples
and validating the security posture of a
for possible network attacks. In response
connecting device. Support for policy-
to a detected attack, IronView® Network
controlled MAC-based VLANs provides
Manager (INM) can apply a security policy
additional control of network access,
to the compromised port. This automated
allowing for policy-controlled assignments of
threat detection and mitigation stops
devices to Layer 2 VLANs.
network attacks in real time, without
human intervention. This advanced security
capability provides a network-wide security
umbrella without the added complexity and
cost of ancillary sensors.
Advanced Multicast Features such as IPv4 static routes, virtual interfaces
FastIron LS switches support a rich set (VE), routing between directly connected
of Layer 2 multicast snooping features subnets, RIPv1/v2 announce, VRRP, DHCP
that enable advanced multicast services Relay, and routed interfaces.
delivery. Internet Group Management
In non-stacking configurations, the FastIron
Protocol (IGMP) snooping for IGMP version
LS models support an optional Edge Layer
1, 2, and 3 is supported. IGMPv3 source-
3 feature set (EPREM)*. These edge Layer
based multicast snooping improves
3 features enable dynamic routing via
bandwidth utilization and security for
OSFPv1/v2 and RIPv1/v2 in addition to
multicast services.
the Base Layer 3 features. With FastIron
To enable multicast service delivery in LS Base Layer 3 and the optional EPREM
IPv6 networks, the FastIron LS supports upgrade, network managers can deploy
Multicast Listener Discovery (MLD) v1 and end-to-end Layer 3 networks and deploy the
v2 snooping - the multicast protocols used same routing policies from edge to core,
in IPv6 environments. simplifying network design and operations.

Building Resilient Networks with Unified and Secure Element

Advanced Layer 2 and Layer 3 Protocols Management
Software features such as Virtual Switch The Brocade INM provides unified network
Redundancy Protocol (VSRP), the Brocade management for the FastIron LS Series.
Metro Ring Protocol (MRP I and II), Rapid INM greatly simplifies network operations,
Spanning Tree Protocol (RSTP), protected provisioning, troubleshooting, and alarm
link groups, 802.3ad Link Aggregation, and reporting. INM offers multilevel access
trunk groups provide alternate paths for security on the console and a secure
traffic in the event of a link failure. Sub- Web management interface that prevents
second fault detection utilizing Link Fault unauthorized users from accessing or
Signaling and Remote Fault Notification changing the switch configuration.
ensures rapid fault detection and recovery.
INM employs a Java-based network
Enhanced Spanning Tree features such as configuration and management tool that
Root Guard and BPDU Guard prevent rogue displays, in graphical detail, network and
hijacking of spanning tree root and maintain application level traffic information. Network
a contention and loop-free environment, managers can accurately monitor overall
especially during dynamic network networking operation, zero in on hot spots,
deployments. Additionally, the FastIron LS and quickly diagnose and troubleshoot
supports Port Loop Detection on edge ports difficulties before they develop into
that do not have spanning tree enabled. widespread network problems.
This capability protects the network from
The FastIron LS Series includes Secure
broadcast storms and other anomalies that
Shell (SSHv2), Secure Copy, and SNMPv3
can result from Layer 1 or Layer 2 loopbacks
to restrict and encrypt management
on Ethernet cables or endpoints.
communications to the system. Additionally,
Base Layer 3 functionality enhances the support for Terminal Access Controller
capability of the FastIron LS IronStack and Access Control System (TACACS/TACACS+)
standalone models. Base Layer 3 allows and RADIUS authentication ensure secure
enterprises to use simple Layer 3 features operator access.

*Available only on the standalone FastIron LS. This feature is not available on the IronStack enabled FastIron LS.
Fault Detection FastIron LS switches support enhanced
FastIron LS switches support logical fault Digital Optical Monitoring of Brocade
detection through software features such XFP optics providing real time detection
as Link Fault Signaling (LFS), Remote Fault resulting in reduced down time. Network
Notification (RFN), Protected Link Groups, and managers can use the enhanced Digital
Unidirectional Link Detection (UDLD). Optical Monitoring capability to monitor the
health and strength of the transceivers. Key
• Link Fault Signaling (LFS) is a physical optic parameters that can be monitored
layer protocol that ensures bi-directional include TX/RX power, temperature, and bias
communication on a link between two current. The switch will generate alarms
10-GbE switches, thereby allowing switches when any of these parameters go beyond
on both sides to disable the link. the normal range.
• Remote Fault Notification (RFN) enabled
In addition, the FastIron LS switches
on 1 GB transmit ports notifies the
support stability features such as Port
remote port whenever the fiber cable
Flap Dampening, single link LACP, and
is either physically disconnected or has
Port Loop Detection. Port Flap Dampening
failed. When this occurs the devices on
increases the resilience and availability
both sides of the link disable the link and
of the network by limiting the number of
turn OFF the associated LEDs.
port state transitions on an interface. This
• Protected Link Groups minimize disruption reduces the protocol overhead and network
to the network by protecting critical inefficiencies caused by frequent state
links from loss of data and power. In a transitions occurring on misbehaving ports.
protected link group, one port in the group Single link LACP provides a fast detection
acts as the primary or active link, and the scheme for unidirectional or bi-directional
other ports act as secondary or standby faults. This standards-based solution
links. The active link carries the traffic. works with other switch vendors. The Port
If the active link goes down, one of the Loop Detection feature enables network
standby links takes over. managers to detect and prevent Layer 1 and
• UDLD monitors a link between two Layer 2 loops without using STP. Enterprises
FastIron LS switches and brings the ports that do not enable a Layer 2 Protocol, such
on both ends of the link down if the link as STP to detect physical loops at the edge
fails at any point between the two devices. can use Port Loop Detection.
Key Features Summary
Flexible and High-Capacity Architecture
• 20-port 10/100/1000 Mbps plus 4 combination RJ45/SFP Gigabit Ethernet ports, option
for up to three 10-GbE ports
• 44-port 10/100/1000 Mbps plus 4 combination RJ45/SFP Gigabit Ethernet ports, option
for up to two 10-GbE ports
• Field upgradeable to support IronStack technology
• Field upgradeable to support EPREM Layer 3 routing features (standalone operation only)
• Upgradeable with 1-port 10-GE XFP module that supports SR, LR, ER, ZR, CX4, and ZRD
XFP optics
• Upgradeable with 1-port 10-GE integrated CX4 transceiver module for low cost,
high-bandwidth connectivity
• 1RU height with a depth of 12.95”/32.84 cm
• MAC table size : 16000
• Max number of VLANs: 4096

IronStack Stacking Technology

• Up to 8 units in a single stack. Ability to mix and match FastIron LS and FastIron GS
models in a single stack
• Up to 40 Gbps of stacking bandwidth per unit
• Support for stacking on 10GbE CX4 and 10GbE XFP ports
• Logical chassis-like operations, supporting features such as static trunking, LACP,
mirroring, switching, static routing, sFlow, multicast snooping across stack-members
• Support for automatic failover of active controller and hot insertion and removal of
stack-members

Layer 3 Capabilities
• Base Layer 3 software supporting features such as static routes, routing between directly
connected subnets, RIPv1/v2 (announce only), virtual interfaces, VRRP and ECMP
• Optional Edge Layer 3 Premium (EPREM)* upgrade providing dynamic Layer 3 routing via
OSPF v2 and RIP v1/v2 in addition to features supported in base Layer 3 software.
• Up to 1000 IPv4 routes

IronShield Advanced Security

• Multilevel access security for console access
• IronShield 360—System-wide, automated closed-loop threat detection and mitigation solution
• Secure, Web-based management
• Secure Shell and SNMPv3 restrict and encrypt communications to the management
interface and system
• Terminal Access Controller Access Control Systems (TACACS/TACACS+) and RADIUS
operator authentication
• Secure Shell (SSHv2), SCP, and SNMPv3 secure remote management access and
communications
• MAC filters, Layer 3/Layer 4 ACLs and binding the ACL to TELNET, Web management and SNMP
interface for secure management access
• IEEE 802.1x authentication including multiple device authentication and dynamic VLAN, ACL,
and MAC filter assignment for authenticated clients
• Private VLANs provide security and isolation between switch ports to help ensure that users
cannot snoop on other users’ traffic

*Available only on the standalone FastIron LS. This feature is not available on the IronStack enabled FastIron LS.
Key Features Summary Continued
• Denial of Service Protection—Monitoring, throttling, and locking out of ICMP and TCP SYN
traffic both to the management address of the switch and for transit traffic
• Man-in-the-Middle prevention using Dynamic ARP Inspection and DHCP Snooping*
• Port Security and MAC Address Locking limits the number MAC addresses learned
on a port. Using Port Security network managers can allow specific MAC addresses
access to the network for specific time periods.
• MAC address authentication including multiple device authentication and dynamic
policy configuration
• Policy-controlled MAC-based VLANs provide additional control

Advanced Quality of Service

• Packet classification, reclassification, policing, marking, and re-marking
• Identification, classification, and reclassification of traffic based on specific criteria
such as port, source/destination MAC address, 802.1p priority bit, source/destination
IP address, Type of Service (ToS), Differentiated Services Codepoints (DSCP), or
TCP/UDP port
• Flexible queue servicing utilizing configurable Weighted Round Robin (WRR), Strict
Priority (SP), or hybrid SP/WRR
• 8 hardware queues for flexible QoS management
• Ingress rate limiting—standard and extended ACL control
• ACLs configured on a per-port per-VLAN basis
• Egress rate limiting—per-port, per-queue
• Support for up to 256 wire-speed ingress traffic policers with each policer supporting
configurable metering with maximum and burst size settings, color aware and out-of-
profile packet remarking or dropping sFlow and port mirroring on the same port

System and Network Resilience

• Advanced Layer 2 service protection features: Metro Ring Protocol (versions I and II),
Virtual Switch Redundancy Protocol, Rapid Spanning Tree, Multiple Spanning Tree, Per
VLAN Spanning Tree (PVST, PVST+), Protected Link groups, Link Fault Signaling (LFS),
Remote Fault Notification (RFN)
• Digital optical monitoring
• Port range with port speed downshift and selective auto negotiation
• Port loop detection to detect Layer 1/Layer 2 loops
• Image checksum verification
• Next boot information
• Port flap dampening
• Single link LACP as a standards-based bi-directional link detection protocol
• Auto-configuration

*Available only on the standalone FastIron LS. This feature is not available on the IronStack enabled FastIron LS.
BROCADE Fastiron Ls SPECIFICATIONS

IEEE Standards Compliance Layer 2 Metro Features

• 802.1D-2004 MAC Bridging • VLAN stacking (Q-in-Q)
• 802.1w Rapid Spanning Tree • Metro Ring Protocol (MRP I and II)
• 802.1s Multiple Spanning Tree • Virtual Switch Redundancy Protocol
• 802.1X Port-based Network Access Control • Topology Groups
• 802.3 10Base-T • Super Aggregated VLANs (SAV)
• 802.3ak CX4 Base Layer 3 Features
• 802.3ad Link Aggregation (Dynamic and Static)
• DHCP Relay
• 802.3u 100Base-TX
• ECMP*
• 802.3x Flow Control
• IP helper
• 802.3z 1000Base-SX/LX
• PIM Snooping
• 802.3ab 1000Base-T
• RIP v1/v2 announce
• 802.3ae 10 Gigabit Ethernet
• Routing for directly connected IP subnets
• 802.3 MAU MIB (RFC 2239)
• Static IP
• 802.3AB LLDP/LLDP-MED
• Up to 255 virtual interfaces
• 802.1p Mapping to Priority Queue
• VRRP
Layer 2 Features • VSRP and VSRP Aware
• 4,096 VLANs • Routed Interfaces
• 16,000 MAC Addresses • IPv4 Static Routes
• 802.1s Multiple Spanning Tree • Routing between directly connected subnets
• Per VLAN spanning tree (PVST/PVST+/PVRST) L3 EPREM Features*
• Private VLAN
• Host routes
• Protocol VLAN (802.1v), Subnet VLAN
• OSPF
• Policy controlled MAC-based VLANs
• RIP V1 , V2
• MAC Learning Disable
• Route-only support
• Port Security
• Routes in hardware maximum: 1000
• MAC Address Locking
• Port-based Access Control Lists Quality of Service
• Dual Mode VLANs • MAC Address Mapping to Priority Queue
• Fast Port Span • ACL Mapping to Priority Queue
• BPDU Guard, Root Guard • ACL Mapping to ToS/DSCP
• GARP VLAN Registration Protocol • Honoring DSCP and 802.1p
• MAC-Layer Filtering • ACL Mapping and Marking of ToS/DSCP
• Port-based, ACL-based, MAC filter-based, and VLAN-based Mirroring • DiffServ Support
• Single-instance Spanning Tree • Classifying and Limiting Flows based on TCP flags
• Trunk groups • DHCP Relay
• Trunk threshold • QoS Queue Management using Weighted Round Robin (WRR),
Strict Priority (SP), and a combination of WRR and SP
• Single link LACP
• Uni-Directional Link Detection (UDLD) Traffic Management
• Auto MDI/MDIX • Inbound rate limiting per port
• Port speed downshift and selective auto-negotiation • ACL-based inbound rate limiting and traffic policies
• Dynamic Voice VLAN Assignment • Outbound rate limiting per port and per queue
• Jumbo Frames up to 10,240 bytes for 10/100/1000 and 10GbE ports • Broadcast, multicast and unknown unicast rate limiting
• IGMP Snooping (v1/v2/v3)
• MLD Snooping (v1/v2)
• PIM–SM Snooping
• Private VLANs and uplink-switch
• Protected Link Groups
• Port Loop Detection
• VLAN based Static MAC Denial
• Flexible static multicast MAC address configuration

*Available only on the standalone FastIron LS. This feature is not available on the IronStack enabled FastIron LS.
BROCADE Fastiron Ls SPECIFICATIONS continued

Management and Control Dimensions

• RFC 2571 Architecture for Describing SNMP Framework All FastIron LS models 1.7” (H) x 17.3” (W) x 12.92” (D)
• RFC 2131 DHCP Relay 4.34 cm (H) x 44 cm (W) x 32.84 cm (D))
• RFC 1493 Bridge MIB Weight
• Configuration Logging
FastIron LS 624 10lbs (4.52kg)
• RFC 1643 Ethernet Interface MIB
FastIron LS 648 10.9lbs (4.94kg)
• RFC 1643 Ethernet MIB
• Brocade Discovery Protocol (BDP) FastIron LS 624-STK 10.4 lbs (4.72kg)
• RFC 2068 Embedded HTTP FastIron LS 648-STK 11.3 lbs (5.14kg)
• RFC 2818 Embedded HTTPS Environmental Ranges
• Industry Standard Command Line Interface (CLI) • Acoustic: < 43 dBA (ideal)
• IronView Network Manager (INM) Web-based graphical user interface
• Operating temperature: 32° to 122°F (0° to 50°C)
• Embedded Web Management
• RFC 3176 sFlow • Relative humidity: 5% to 95% @ 122°F (50°C) non-condensing
• RFC 1213 MIB-II • Storage temperature: -40° to 158°F (-40° to 70°C)
• RFC 1516 Repeater MIB • Storage altitude: 10,000ft (3,000m) maximum
• RFC 1724 RIP v1/v2 MIB MTBF
• RFC 1757 RMON MIB
• FastIron LS 624: 162,484 Hrs @ 76.9°F (25°C)
• RFC 2572 SNMP Message Processing and Dispatching
• RFC 1573 SNMP MIB II • FastIron LS 624-STK: 156,730 Hrs @ 76.9°F (25°C)
• RFC 2575 SNMP View-based Access Control Model SNMP • FastIron LS 648: 149,870 Hrs @ 76.9°F (25°C)
• RFC 1157 SNMPv1/v2c • FastIron LS 648-STK: 144,962 Hrs @ 76.9°F (25°C)
• RFC 2573 SNMPv3 Applications Safety Certifications
• RFC 2570 SNMPv3 Intro to Framework
• ICES-003, Electromagnetic Emission
• RFC 2574 SNMPv3 User-based Security Model
• FCC Part 15 Class A
• SNTP Simple Network Time Protocol
• EN 55022/CISPR 22 Class A
• Support for Multiple Syslog Servers
• VCCI Class A
• RFC 854 TELNET Client and Server
• EN 61000-3-2, Power Line Harmonic
• RFC 783 TFTP
• EN 61000-3-3, Voltage Fluctuation and Flicker
• MIB support for MRP, Port Security, MAC authentication and
MAC-based VLANs • EN 61000-6-3, Electromagnetic Compatibility,
• Display log messages on multiple terminals • Generic Standard
• Digital Optical Monitoring • AS/NZS CISPR 22, Electromagnetic
• Auto Configuration • Compatibility
• BI-NAT CSA 60950-1-90/UL 60850-1
Performance (Per Model)
• EN 60950-1:2001
FastIron LS 624/624-STK • Switching Capacity 108 Gbps • IEC 60950-1:2001
• Forwarding Performance 80 Mpps
Electromagnetic Emission Certifications
FastIron LS 648/648-STK • Switching Capacity 136 Gbps
• ICES-003, Electromagnetic Emission
• Forwarding Performance 101 Mpps
• FCC Part 15 Class A
Embedded Security • EN 55022/CISPR 22 Class A
• IEEE 802.1X username export in sFlow • VCCI Class A
• Bi-level Access Mode (Standard and EXEC Level) • EN 61000-3-2, Power Line Harmonic
• Protection against Denial of Service (DOS) attacks • EN 61000-3-3, Voltage Fluctuation and Flicker
• DHCP Snooping* • EN 61000-6-3, Electromagnetic Compatibility,
• Dynamic ARP Inspection* • Generic Standard
• EAP pass through support • AS/NZS CISPR 22, Electromagnetic
Secure Management • Compatibility
• RADIUS/TACACS/TACACS+ Immunity
• Secure Copy (SCP) • EN 61000-6-1, Electromagnetic Compatibility, Generic Standard
• Secure Shell (SSHv2) • EN 55024, Information Technology Equipment - Immunity Characteristics
• Username/Password
Environmental Regulatory Compliance
• Advanced Encryption Standard (AES) with SSHv2
• Authentication, Authorization, and Accounting (AAA) • RoHS Compliant (6 of 6)
• WEEE compliant

*Available only on the standalone FastIron LS. This feature is not available on the IronStack enabled FastIron LS.
system summary 1, 2, 3

Feature FLS624 FLS648

FLS624-STK FLS648-STK
Total Switching Performance 108 Gbps 136 Gbps
Full Duplex Forwarding Performancey 80 Mpps 101 Mpps
10/100/1000 Port Density 20 plus 4-port Combos 44 plus 4-port Combo
100/1000 Mbps SFP Density 4 Combo Ports 4 Combo Ports
10 Gigabit Ethernet 3 2
100 Mbps Optics 100Base-FX and 100Base-BX 100Base-FX and 100Base-BX
Gigabit Ethernet Optics SX, LX, LHA, LHB, 1000Base-BX, and CWDM
10 Gigabit Ethernet Optics CX4, SR, LR, ER, ZR, and ZRD
Power Supply AC (Internal)
Maximum Number of MAC addresses 16,000 16,000
Maximum Number of VLANs 4,096 4,096
Maximum Number of STP 253 253
IGMP Snooping v1, v2 and v3 v1, v2 and v3
PIM-SM Snooping Yes Yes
L3/L4 Extended Access Control List Yes Yes
Stability Features BPDU and Root Guard, Single Link LACP, Port Loop Detection, Port Flap Dampening, Trunk Threshold
Maximum Number of Ports per Trunk 8 8
Maximum Number of Trunk Groups 13 (Standalone) 25 (Standalone)
127 (with IronStack) 127 (with IronStack)
Multi-device Authentication and Dynamic VLAN Yes Yes
Assignment
802.1X Authentication and Dynamic VLAN Yes Yes
Assignment
MAC-based VLANs Yes Yes
Metro Features Metro Ring Protocol (version I and II), Virtual Switch Redundancy Protocol, VLAN Stacking (Q-in-Q) and
Topology Groups
1-Switching and forwarding performance specifications are provided for a single FastIron LS switch. 2-Port densities are provided for a single FastIron LS switch. 3-MAC address and STP
capacities apply to a single FastIron LS switch and to an IronStack configuration of up to eight units.

Power and Thermal Specifications

Max Current @ 100 Max Current @ 200 Max Total Power Max Thermal Output2 Energy Efficiency
VAC (Amps) VAC (Amps) Draw1 (Watts) (BTU/Hr) (Watts/Gbps FDX)
FastIron LS624 0.63 0.36 63 214.3 1.16
FastIron LS648 1.16 0.66 114 388.3 1.67
FastIron LS624-STK 0.70 0.38 70 237.9 1.29
FastIron LS648-STK 1.2 0.68 118 401.2 1.72
1-Total power drawn from the source and consumed by the switch. 2-Thermal output of the switch.

Warranty
• 5-year Limited Lifetime Hardware Warranty
• Brocade warrants that, excluding the power supply, fan, removable optics and LED, the
product hardware will be free from defects in material and workmanship that result in a
material deviation from the applicable published Brocade technical specifications.
• 90-days Limited Software Warranty
• Brocade warrants that software, when used in accordance with the terms of the Brocade
license, will operate substantially as set forth in the applicable Brocade Documentation
following delivery of the software to licensee.
Data Sheet

Corporate Headquarters European Headquarters Asia Pacific Headquarters

San Jose, CA USA Geneva, Switzerland Singapore
T: +1-408-333-8000 T: +41-22-799-56-40 T: +65-6538-4700
info@brocade.com emea-info@brocade.com apac-info@brocade.com

© 2009 Brocade Communications Systems, Inc. All Rights Reserved. 02/09 GA-DS-1297-00
Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron,
SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and
SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries.
All other brands, products, or service names are or may be trademarks or service marks of, and are used to identify,
products or services of their respective owners.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied,
concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the
right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This
informational document describes features that may not be currently available. Contact a Brocade sales office for
information on feature and product availability. Export of technical data contained in this document may require an
export license from the United States government.