Cisco switch selection query || need urgent help

imranul hoque · ‎09-16-2023

Hi,

I am working to deploy cisco switch in a DC to one of my project. Please help/suggest me to choose a model that meet below specification-

Minimum specification requirement as below-

The Switch should support non-blocking Layer 2 switching and Layer 3 routing

There switch should not have any single point of failure like power supplies and fans etc should have 1:1/N+1 level of redundancy

Switch should support the complete STACK of IPv4 and IPv6 services. Switch must have IPv6 phase 2 ready logo certification.

The Switch used have the capability to function in line rate for all ports

Switch should have the following interfaces:

Minimum 48 ports support 1/10/25 Gbps SFP ports for host connectivity and 6*40/100Gbps QSFP28 ports for Fabric connectivity.

1 RU fixed form factor

Switch should re-converge all dynamic routing protocol at the time of routing update changes i.e. Graceful restart for fast re-convergence of routing protocols ( OSPF, IS-IS, BGP)

Switch Should have multi-core Processor, System memory Minimum 4 GB and Storage Minimum 4 GB Flash Memory from Day One.

Switch should support minimum 1000 VRF instances with route leaking functionality

The switch should support Minimum 1,750,000 LPM routes

The Switch should support intelligent buffer management with a minimum buffer of 40MB.

The switch should have Maximum number of MAC address 512k.

The switch should support Minmum 125K multicast routes

Switch should support Minimu 4000 VLANs

Switch should support 64 nos of ECMP paths

Switch should support minimum 3.5 Tbps of switching Bandwidth and minimum 1.15 Billion packets per second (bpps).

Switch should support Network Virtualisation using Virtual Over Lay Network using VXLAN (RFC 7348)

Switch should support VXLAN (RFC7348) and EVPN symmetric IRB (RFC 7432) for supporting Spine - Leaf architecture to optimise the east - west traffic flow inside the data center

Spanning Tree Protocol (IEEE 802.1D, 802.1W, 802.1S)

Switch should support VLAN Trunking (802.1q)

Switch should support VLAN tagging (IEEE 802.1q)

Switch should support IEEE Link Aggregation and Ethernet Bonding functionality (IEEE 802.3ad) to group multiple ports for redundancy

Switch should support Link Layer Discovery Protocol as per IEEE 802.1AB for finding media level failures

Switch should support layer 2 extension over VXLAN (RFC7348) across all DataCenter to enable VM mobility & availability

The Switch should support DC Briding i.e. IEEE 802.1Qbb Priority Flow Control (PFC), Data Center Bridging Exchange (DCBX), IEEE 802.1Qaz Enhanced Transmission Selection (ETS), Explicit Congestion Notification (ECN).

Maximum number of port channels should be 500

Maximum no of ports in the port channel should be 32

The switch should support BGP EVPN (RFC 7432) Route Type 2, Type 4 and Route Type 5 for the overlay control plane

Switch should support static and dynamic routing

Switch should support segment routing and VRF route leaking functionality from day 1

Switch should support Segment Routing and Layer3 VPN over Segment Routing

Switch should support multi instance routing using VRF/ VRF Edge/ Virtual Router routing and should support VRF Route leaking functionality

Switch should provide multicast traffic reachable using:

a. PIM-SM (RFC 4601)

b. PIM-SSM (RFC 3569)

Support Multicast Source Discovery Protocol (MSDP) (RFC 3618)

Switch Should Support IGMP v1, v2 and v3

Switch system should support 802.1P classification and marking of packet using:

a. CoS (Class of Service)

b. DSCP (Differentiated Services Code Point)

Switch should support for different type of QoS features for reaL time traffic differential treatment using

a. Weighted Random Early Detection

b. Strict Priority Queuing

Switch should support Rate Limiting - Policing and/or Shaping

Switch should support to trust the QoS marking/priority settings of the end points as per the defined policy

Switch should have provisioning for connecting to 1:1/N+1 power supply for usage and redundancy

Switch should provide gateway level of redundancy Ip V.4 and IP V.6 using HSRP/VRRP

Switch should support for BFD For Fast Failure Detection as per RFC 5880

Switch should support control plane Protection from unnecessary or DoS traffic by control plane protection policy

Switch should support for external database for AAA using:

a. TACACS+

b. RADIUS

Switch should support to restrict end hosts in the network. Secures the access to an access or trunk port based on MAC address. It limits the number of learned MAC addresses to deny MAC address flooding

Switch platform should support MAC Sec (802.1AE) encryption in hardware

VXLAN and other tunnel encapsulation/decapsulation should be performed in single pass in Hardware

Switch should support for Role Based access control (RBAC) for restricting host level network access as per policy defined

Switch should support DHCP Snooping

Switch should support security settings to ensure host integrity by preventing malicious user

Switch should support IP Source Guard to prevents a malicious hosts from spoofing or taking over another host's IP address by creating a binding table between the client's IP and MAC address, port, and VLAN

Switch should support unicast and/or multicast blocking on a switch port to suppress the flooding of frames destined for an unknown unicast or multicast MAC address out of that port

Support for broadcast, multicast and unknown unicast storm control to prevent degradation of switch performance from storm due to network attacks and vulnerabilities

Thanks

Imran

Leo Laohoo · ‎09-16-2023

Get a reputable systems integrator.

https://community.cisco.com/t5/routing/cisco-router-selection-query-need-urgent-help/m-p/4924489

Base on the number of threads created, you are out of your depth. One wrong move and it will cost you a fortune to correct.

imranul hoque · ‎09-17-2023

?