10 Gigabit Ethernet LAN Services Module with MACSec - Ixia

10 Gigabit Ethernet LAN Services Module with MACSec10 Gigabit Ethernet LAN ServicesModule with MACSecThe Ixia 10 Gigabit Ethernet LAN Service Module (LSM10GMS) with MACSec (layer 2 security)offers unprecedented scalability, performance, and service testing flexibility along with MACSectesting capability at full line rate. The Ixia 10GE LSM is Ixia's third generation 10 GigabitEthernet LAN/WAN solution. It is the industry's highest density 10GE MACSec test platform,and enables a broad portfolio of edge/core testing solutions for the most demanding testenvironments, including performance, scalability, and conformance testing of Layer 2-3 routingprotocols and high performance Layer 4-7 testing. It supports wire-speed 10 Gbps IPv4/v6traffic generation and advanced analysis, as well as IPv4/v6 routing and bridging protocolemulation.The Ixia 10GE LSM MACSec supports a comprehensive portfolio of service testing solutions forthe next generation service provider networks, including Metro Ethernet E-LAN and E-LINEservices; and MPLS VPNs, such as Layer 2 VPNs, Layer 3 RFC 2547 VPNs, and VPLS.26601 W. Agoura Rd. Calabasas, CA 91302 Sales: 1.877.367.4942 / Int’l: 1.818.871.1800P/N: 915-0707-01 Rev A – October 2007 www.ixiacom.com Page 1 of 7

10 Gigabit Ethernet LAN Services Module with MACSecKey Features• IEEE 802.1AE MACSec (Layer2 Security) support at line rate (10Gbps) with AES/GCM (128-bitKey) encryption.• Industry's highest port density 10GE MACSec test solution, resulting in significant reduction inrack space, power consumption, and cooling requirements• Supports traffic generation of millions of unique flows, eliminating the need to aggregatemultiple 10GE test interfaces to perform high scalability tests• Tracks and analyzes up to 2 million flows for real-time latency, inter-arrival time, packet loss,data integrity, and sequence checking• Sophisticated multi-protocol encapsulation and label stacking, including IPv4/v6, GRE, MPLS, IPover IP, and QinQ (stacked VLANs)• Supported in the Optixia XM12, XM2, X16, 400T as well as the 1600T chassis.General Interface SpecificationsLoad ModuleLSM10GMS-01Number of Ports 1Number of Slots 1Maximum Ports per16ChassisPluggable InterfaceXFPFunctionalityLAN/WANMACSec SupportMACSec – IEEE802.1AEAES-GCM Encryption per RFC4106Capture Buffer (per port) 350 MBytes with configurable trigger and filter conditionsNumber of Trackable Up to 2 millionFlows (per port)Number of Streams256 in either Packet Stream (sequential) or AdvancedStream (interleaved) modesTransmit EngineBuilt-in FPGA logic for wire-speed packet generation withtimestamps, sequence numbers, data integrity signature,and packet group signaturesReceive EngineBuilt-in FPGA logic for wire-speed packet filtering,capturing, real-time latency and inter-arrival time for eachpacket group, data integrity, and sequence checkingUser Defined FieldFixed, increment or decrement by user-defined step, valueFeatureslists, range lists, cascade, random, and chainedTable UDF FeatureComprehensive packet editing function for emulating large26601 W. Agoura Rd. Calabasas, CA 91302 Sales: 1.877.367.4942 / Int’l: 1.818.871.1800P/N: 915-0707-01 Rev A – October 2007 www.ixiacom.com Page 2 of 7

10 Gigabit Ethernet LAN Services Module with MACSecFiltersData Field (per stream)Statistics and Rates:Counter Size: 64-BitsError GenerationPacket Flow StatisticsLatency MeasurementsIPv4, IPV6, UDP, TCPFrame Length ControlsApplicationsnumbers of sophisticated flows. Up to one million entries ofup to 256 bytes of lists of values can be specified to beplaced at designated offsets within a stream. Each listconsists of an offset, a size and a list of values in a tableformat48-bit source/destination address, 2x128-bit userdefinablepattern and offset, frame length range, CRCerror, data integrity error, sequence checking error (small,big, reverse)Fixed, increment (Byte/Word), decrement (Byte/Word),random, repeating, user-specified up to 13K bytesLink State, Line Speed, Frames Sent, Valid FramesReceived, Bytes Sent/Received, Fragments, Undersize,Oversize, CRC Errors, VLAN Tagged Frames, User-DefinedStat 1, User- Defined Stat 2, Capture Trigger (UDS 3),Capture filter (UDS 4), User-Defined Stat 5, User-DefinedStat 6, 8 QoS counters, Data Integrity Frames, DataIntegrity Errors, Sequence Checking Frames, SequenceChecking Errors, ARP, and Ping requests and repliesMACSec Statistics: Sent and Received MACSec ValidFrames and Bytes, Sent and Received MACSec ValidFrames with Unknown Key, and MACSec Frames with BadHash ReceivedCRC (Good/Bad/None), Undersize, Oversize,Byte-corruption at user-defined offset for MACSec negativetestingReal-time statistics to track up to 2 million packet flows20 ns resolutionHardware checksum generationFixed, random, weighted random, or increment by userdefinedstep, random, weighted randomIxExplorer: Layer 2-3 wire-speed traffic generation andanalysisTcl API: Custom user script development for Layer 2-7testing26601 W. Agoura Rd. Calabasas, CA 91302 Sales: 1.877.367.4942 / Int’l: 1.818.871.1800P/N: 915-0707-01 Rev A – October 2007 www.ixiacom.com Page 3 of 7

10 Gigabit Ethernet LAN Services Module with MACSecFlexible Packet GenerationTraffic is generated in real time by intelligent logic implemented in FPGAs on each Ixia port.Data is generated on each port by defining up to 256 streams. Within each stream, millions ofpackets or unique flows can be configured with completely customizable characteristics for everypacket header field. Customizable payload contents can also be defined. Frame size can befixed, varied according to a pattern, or be randomly assigned across a weighted range.Real-Time Latency and Jitter AnalysisPackets representing different traffic profiles can be associated with Packet Group Identifiers(PGIDs). The receive port measures the minimum, maximum, and average latency or packet interarrivaltime in real time for each packet belonging to different groups. Measurable latenciesinclude:• Instantaneous latency or inter-arrival time, where each packet is associated with one group ID• Latency bins, where PGIDs can be associated with a latency range• Latency over time, where multiple PGIDs can be placed in "Time Buckets" with fixed durations• First and Last Timestamps, where each PGID can store the timestamps of first and last receivedpacketsTransmit SchedulerThere are two modes of transmission available - Packet Streams and Advanced StreamScheduler:Packet StreamsThe packet streams transmit engine allows generation of up to 256 unique streams on each port.Multiple streams can be defined in sequence containing multiple packets with customcharacteristics. After transmission of all packets in the first stream, control is passed to the nextdefined stream in the sequence. After reaching the last stream in the sequence, transmission mayeither cease or control may be passed on to any other stream in the sequence. In this way,multiple streams are cycled through, each representing different traffic profiles to simulate realworldtraffic.Advanced Stream SchedulerUp to 256 unique streams can be interleaved per port, each having its own packetcharacteristics and rate. For example, assume that Port 1 is configured with three streams. IfStream 1 is defined with IP packets at 20% of line utilization, and Stream 2 is defined with TCPpackets at 50% of line utilization, and Stream 3 is defined with MPLS packets at 30% of line26601 W. Agoura Rd. Calabasas, CA 91302 Sales: 1.877.367.4942 / Int’l: 1.818.871.1800P/N: 915-0707-01 Rev A – October 2007 www.ixiacom.com Page 4 of 7

10 Gigabit Ethernet LAN Services Module with MACSecutilization, then data on Port 1 will be transmitted at an aggregate utilization of 100% withinterleaved IP, TCP, and MPLS packets.Extensive Statistics• Real-time 64-bit counts and frame rates• Spreadsheet format for convenient manipulation of statistics counters• Eight Quality of Service (QoS) counters (supporting 802.1p, DSCP, and IPv4 TOS)• Up to six user-defined statistics that use a trigger condition• Extended statistics for MACSec, ARP, ICMP, BGP, OSPF, IS-IS, RSVP-TE, and LDP• MACSec Statistics: Sent and Received MACSec Valid Frames and Bytes, Sent andReceived MACSec Valid Frames with Unknown Key, and MACSec Frames with Bad HashReceived• TX stream statistics for transmit frame count and rate• External file logging for statistics and alerts• Audible and visual alerts with user-definable thresholdsData CaptureEach 10 Gigabit Ethernet port is equipped with 350 MB of capture memory. The capture buffercan be configured to store packets based on user-defined trigger and filter conditions. Decodesfor IPv4, IPv6, UDP, ARP, BGP-4, IS-IS, OSPF, TCP, DHCP, IPX, RIP, IGMP, CISCO ISL, VLAN,and MPLS are provided.MACSecEach 10 Gigabit Ethernet MACSec port is capable of encrypting traffic at full line rate (10Gbps)with AES/GCM (with 128-bit Key) encryption. MACSec (IEEE 802.1AE) traffic can be encryptedusing null key or user-defined keys. Additional MACSec related statistics such as TX MACSecValid Packets, TX MACSec Valid Bytes, TX MACSec Unknown Key Errors, RX MACSec ValidPackets, RX MACSec Valid Bytes, RX MACSec Unknown Key Errors and RX MACSec Bad HashErrors are provided.Data IntegrityAs packets traverse through routers and the IP header contents are changed, the CRC value isrecalculated by the router. To validate router performance, the 10 Gigabit Ethernet data integrityfunction allows packet payload contents to be verified with a unique CRC that is independent ofthe packet CRC. This ensures that the payload is not disturbed as the router changes headerfields.26601 W. Agoura Rd. Calabasas, CA 91302 Sales: 1.877.367.4942 / Int’l: 1.818.871.1800P/N: 915-0707-01 Rev A – October 2007 www.ixiacom.com Page 5 of 7

10 Gigabit Ethernet LAN Services Module with MACSecSequence and Duplicate Packet CheckingSequence numbers can be inserted at a user-defined offset in the payload of each transmittedpacket. Upon receipt of the packets through the Device Under Test (DUT), out-of-sequence errors,or duplicated packets, are reported in real time while running at wire-speed rates. The user candefine a sequence error threshold to distinguish between small versus big errors, and the receiveport can measure the amount of small, big, reversed, and total errors. Alternatively, the user canuse the duplicate packet detection mode to observe that multiple packets with the same sequencenumber are received and analyzed.In-Line Network MonitoringThe 10 Gigabit LSM Load Modules with XFP transceiver can be configured to be used in-linewith the network and can passively monitor at full wire speed. This is a very useful feature fornetwork troubleshooting, and it eliminates the need for optical splitters.Tcl APIIxia's 10 GE LSMs are supported by a full Tcl Application Programming Interface (API). This APIallows users to develop custom scripts and integrate the modules into automated testenvironments.Product Ordering Information944-0034 LSM10GMS-0110 Gigabit Ethernet Load Module, 1-Port, LAN/WAN, 1GHz PowerPC processor with 512MB;Full Features, supports Routing and Linux-based Applications with MacSec L2 security capability.XFP-1550XFP 1550nm TransceiverXFP-1310XFP 1310nm Transceiver948-0003XFP-850XFP 850 nm Transceiver948-948-0011XFP-CX4XFP Transceiver, CX4 interface (10GBASE-CX4); for 944-0022 (LSM10G1) or 944-002426601 W. Agoura Rd. Calabasas, CA 91302 Sales: 1.877.367.4942 / Int’l: 1.818.871.1800P/N: 915-0707-01 Rev A – October 2007 www.ixiacom.com Page 6 of 7

10 Gigabit Ethernet LAN Services Module with MACSec(LSM10GL1) with 948-0001 (XFP-ADAP-01) or 948-0002 (XFP-ADAP-02), 944-0034(LSM10GMS), LSM10GXL6-01, 944-0012 (MSM10G1-02), 944-0003 (LSM10GXL6-02), 944-0004 (LSM10GXM3-01), and 944-0005 (LSM10GXMR3-01)This material is for informational purposes only and subject to change without notice. It describesIxia's present plans to develop and make available to its customers certain products, featuresand functionality. Ixia is only obligated to provide those deliverables specifically included in awritten agreement between Ixia and the customer.26601 W. Agoura Rd. Calabasas, CA 91302 Sales: 1.877.367.4942 / Int’l: 1.818.871.1800P/N: 915-0707-01 Rev A – October 2007 www.ixiacom.com Page 7 of 7